$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a363430303a3a2f34302d3438203d3e20323134323233.roa File: 326130613a363034343a363430303a3a2f34302d3438203d3e20323134323233.roa (raw, json) Hash identifier: pXOm4rd0R8Ae/EK1NYwWSZYxQfjqlYK+FvwSaRNqqYM= Subject key identifier: C8:1F:64:02:11:F0:0F:11:E7:52:32:58:80:30:CB:42:28:E7:63:EB Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 1B4DAA95BE8FFD040277B332552D583831777393 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a363430303a3a2f34302d3438203d3e20323134323233.roa Signing time: Thu 26 Jun 2025 21:05:12 +0000 ROA not before: Thu 26 Jun 2025 21:00:12 +0000 ROA not after: Thu 25 Jun 2026 21:05:12 +0000 asID: 214223 IP address blocks: 2a0a:6044:6400::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 08:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:4d:aa:95:be:8f:fd:04:02:77:b3:32:55:2d:58:38:31:77:73:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Jun 26 21:00:12 2025 GMT Not After : Jun 25 21:05:12 2026 GMT Subject: CN=C81F640211F00F11E75232588030CB4228E763EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e6:5a:8c:15:33:69:93:cd:c1:03:01:4c:88: f4:4f:9f:77:54:0f:0d:9b:ea:57:31:1e:b2:8b:f7: 78:ec:76:c3:92:5a:dc:7a:16:d2:12:07:93:4e:34: 8f:d8:1d:0d:78:92:21:86:00:b8:f3:e2:d0:37:e6: 48:e6:df:84:5c:22:b4:9c:09:c6:ff:51:43:c0:5d: 57:0f:11:a2:f6:63:b7:ae:9b:7b:2b:6e:6c:73:6e: bb:23:54:f4:4c:f3:4c:a0:dd:26:be:9b:18:63:7b: 3e:a5:16:39:4d:e7:b3:5d:df:91:d3:8a:f1:ba:c1: 3c:96:d1:7a:bc:b2:32:78:a2:56:77:2a:8b:b4:7f: 1c:2a:fe:8f:4e:08:d0:2b:30:bc:a6:19:f7:e7:a9: da:62:61:4c:4a:b0:51:a7:51:6b:f4:7e:77:54:64: c3:f4:7e:ba:27:63:70:41:f4:26:9b:80:ad:c0:b1: b7:1b:d1:6f:79:e0:a0:11:2f:c1:71:7f:e4:d8:27: e1:9f:fc:28:4e:37:39:0c:24:15:7b:ab:89:24:ad: 86:9e:38:75:df:3b:98:8a:93:7b:31:d5:7a:ab:09: 0d:5e:87:69:38:1e:51:b0:c8:a0:7a:f0:b8:31:2c: 66:f1:59:42:57:dc:18:43:72:55:70:dd:13:b8:d3: 1d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1F:64:02:11:F0:0F:11:E7:52:32:58:80:30:CB:42:28:E7:63:EB X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a363430303a3a2f34302d3438203d3e20323134323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6400::/40 Signature Algorithm: sha256WithRSAEncryption 64:78:73:80:48:e0:23:a6:94:1d:2a:91:40:ff:6d:8e:cc:e9: f8:16:69:26:4c:96:82:fa:c1:e1:6c:e6:39:6a:fd:3d:6e:b4: 75:d7:1c:25:26:96:f6:ec:43:49:d1:11:a5:bc:a9:cc:44:fc: 47:02:30:a2:d8:50:ee:c9:9e:81:29:5b:d2:e3:88:4c:8d:1d: 76:91:9a:2b:0e:54:55:67:a5:fd:d2:3c:67:86:16:06:fd:74: 89:d2:2d:4f:0b:ff:70:5a:9a:e8:37:50:b6:7c:0f:10:4e:ec: d1:33:d4:35:37:e3:cd:d4:ad:eb:f2:03:50:95:20:66:81:d7: 03:ff:82:db:0e:52:df:51:9d:f9:e5:4b:9e:4e:77:ae:9a:ec: 23:d7:03:a2:b6:11:e1:6b:87:08:e1:e1:f7:59:ff:65:0d:e3: 57:3a:f0:3f:f1:71:9c:25:e0:62:da:d2:8e:b6:ff:11:af:21: 92:1a:e9:ef:61:27:f0:2b:9e:90:c7:78:e6:56:d0:d5:d3:5c: aa:a3:a7:45:62:ff:85:61:aa:8c:50:30:b3:59:f3:e1:a5:ff: ac:20:cc:0a:e2:78:37:1f:7c:d9:41:a3:64:26:d2:a8:60:04: 39:b8:30:8b:6c:d4:2a:34:ef:52:11:19:36:49:a3:41:79:63: ea:8e:1e:48 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUG02qlb6P/QQCd7MyVS1YODF3c5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA2MjYyMTAwMTJaFw0yNjA2MjUyMTA1MTJaMDMxMTAvBgNV BAMTKEM4MUY2NDAyMTFGMDBGMTFFNzUyMzI1ODgwMzBDQjQyMjhFNzYzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc5lqMFTNpk83BAwFMiPRPn3dU Dw2b6lcxHrKL93jsdsOSWtx6FtISB5NONI/YHQ14kiGGALjz4tA35kjm34RcIrSc Ccb/UUPAXVcPEaL2Y7eum3srbmxzbrsjVPRM80yg3Sa+mxhjez6lFjlN57Nd35HT ivG6wTyW0Xq8sjJ4olZ3Kou0fxwq/o9OCNArMLymGffnqdpiYUxKsFGnUWv0fndU ZMP0fronY3BB9CabgK3Asbcb0W954KARL8Fxf+TYJ+Gf/ChONzkMJBV7q4kkrYae OHXfO5iKk3sx1XqrCQ1eh2k4HlGwyKB68LgxLGbxWUJX3BhDclVw3RO40x13AgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUyB9kAhHwDxHnUjJYgDDLQijnY+swHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2EzNjM0MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNDMyMzIzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoKYERkMA0GCSqGSIb3DQEBCwUAA4IBAQBkeHOASOAjppQdKpFA /22OzOn4FmkmTJaC+sHhbOY5av09brR11xwlJpb27ENJ0RGlvKnMRPxHAjCi2FDu yZ6BKVvS44hMjR12kZorDlRVZ6X90jxnhhYG/XSJ0i1PC/9wWproN1C2fA8QTuzR M9Q1N+PN1K3r8gNQlSBmgdcD/4LbDlLfUZ355UueTneumuwj1wOithHha4cI4eH3 Wf9lDeNXOvA/8XGcJeBi2tKOtv8RryGSGunvYSfwK56Qx3jmVtDV01yqo6dFYv+F YaqMUDCzWfPhpf+sIMwK4ng3H3zZQaNkJtKoYAQ5uDCLbNQqNO9SERk2SaNBeWPq jh5I -----END CERTIFICATE-----Generated at Sun Jun 29 19:40:24 2025 by rpki-client