$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a363030303a3a2f33362d3438203d3e20323039353534.roa File: 326131343a373538303a363030303a3a2f33362d3438203d3e20323039353534.roa (raw, json) Hash identifier: 7bwiHUB+0vEKFxOfRTRz/zFRAxgK1WxBsECd2SJxocI= Subject key identifier: EF:9D:81:2B:38:B4:CD:EF:84:BA:30:33:E2:DF:85:61:AA:31:CD:51 Certificate issuer: /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Certificate serial: 018521CB6F2CDE9AFA93D7596BCDCC068E724B9C Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a363030303a3a2f33362d3438203d3e20323039353534.roa Signing time: Tue 01 Apr 2025 09:13:56 +0000 ROA not before: Tue 01 Apr 2025 09:08:56 +0000 ROA not after: Tue 31 Mar 2026 09:13:56 +0000 asID: 209554 IP address blocks: 2a14:7580:6000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 10:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:21:cb:6f:2c:de:9a:fa:93:d7:59:6b:cd:cc:06:8e:72:4b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Validity Not Before: Apr 1 09:08:56 2025 GMT Not After : Mar 31 09:13:56 2026 GMT Subject: CN=EF9D812B38B4CDEF84BA3033E2DF8561AA31CD51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f7:07:d1:f3:46:ea:47:97:36:59:c8:b3:72: c9:31:c2:a2:1c:a8:2a:70:53:8d:38:9e:6f:ef:00: e6:70:98:45:f8:50:16:a9:82:cb:59:e8:97:45:44: dd:f5:bc:62:4c:f8:d9:5d:d3:4a:51:cf:b1:11:7d: 1e:3e:f6:51:e6:61:e9:c1:97:74:8b:8d:ae:38:1b: 7b:ee:57:c2:16:da:a5:c0:63:d7:85:bd:ce:74:14: 8f:50:c3:ba:b7:68:99:01:5c:ca:b8:b3:ee:3f:91: 55:fd:e1:0a:75:d4:ad:9c:79:5c:51:b0:9b:5a:98: 83:06:6c:b0:e3:40:76:0d:b2:7c:de:c3:da:76:ef: 7e:39:0a:f1:c6:10:f8:35:c2:2e:9f:9f:6b:a7:b3: 66:7c:bb:d6:26:1d:fb:53:f2:a8:6b:c4:35:8f:0e: 06:70:ff:ee:74:5d:b2:c6:78:9d:65:f5:eb:df:b3: 83:b6:c7:26:d0:b9:15:aa:62:7a:c5:c9:41:88:b9: 79:26:4c:22:33:08:61:e8:79:d5:96:5e:c6:84:a2: b7:09:d1:03:73:24:20:99:1e:63:ac:28:50:e4:58: db:34:f1:4a:08:3b:dc:be:9a:c0:e3:a6:cd:df:27: 8a:32:80:77:02:ce:92:29:37:03:6a:0b:43:9c:85: 3d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9D:81:2B:38:B4:CD:EF:84:BA:30:33:E2:DF:85:61:AA:31:CD:51 X509v3 Authority Key Identifier: keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a363030303a3a2f33362d3438203d3e20323039353534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:6000::/36 Signature Algorithm: sha256WithRSAEncryption 74:b7:f3:ca:9b:7b:80:9c:46:67:87:85:cb:b5:15:3b:a3:4a: 61:0a:ae:42:1a:f0:fd:73:79:f9:f2:9d:1b:e0:3a:ba:cc:6a: 9d:0b:0c:4f:8f:97:1d:16:03:3a:eb:ea:6a:87:2b:e0:5b:70: 08:4f:5e:25:fa:91:1a:9e:d0:57:5c:17:f7:9e:e3:c4:12:79: 30:c1:d1:49:17:73:26:91:45:61:5b:54:23:27:7d:f2:b9:78: 0c:38:74:c8:21:be:d2:b5:2d:e2:ee:2f:82:09:a8:c4:0a:28: f9:c8:bb:38:a0:1a:7f:2f:1b:ad:9e:09:6d:8d:f1:55:67:5a: 36:39:70:fe:e3:61:70:78:3d:8d:30:e1:ed:4d:db:c7:d6:4e: b1:2a:17:a5:99:15:d7:99:ef:42:16:b9:21:72:02:a7:35:93: 91:66:6d:aa:2a:c2:1c:1f:d3:5b:d1:5f:df:3b:07:73:72:a0: fb:66:88:05:fd:5f:6c:60:3a:ea:3e:f3:68:7e:b0:58:f7:ee: 04:1f:80:09:8c:2d:00:35:b4:83:a8:7f:84:99:bb:4f:5e:34: 95:45:bc:50:22:ae:bf:14:37:d5:cf:7c:5a:13:84:fc:6b:a0: b5:62:13:64:7d:cc:93:4c:60:d4:9c:e1:21:0f:e8:34:7f:2d: ef:ab:eb:2a -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUAYUhy28s3pr6k9dZa83MBo5yS5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENG OTM5RjRGNDAeFw0yNTA0MDEwOTA4NTZaFw0yNjAzMzEwOTEzNTZaMDMxMTAvBgNV BAMTKEVGOUQ4MTJCMzhCNENERUY4NEJBMzAzM0UyREY4NTYxQUEzMUNENTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ9wfR80bqR5c2WcizcskxwqIc qCpwU404nm/vAOZwmEX4UBapgstZ6JdFRN31vGJM+Nld00pRz7ERfR4+9lHmYenB l3SLja44G3vuV8IW2qXAY9eFvc50FI9Qw7q3aJkBXMq4s+4/kVX94Qp11K2ceVxR sJtamIMGbLDjQHYNsnzew9p27345CvHGEPg1wi6fn2uns2Z8u9YmHftT8qhrxDWP DgZw/+50XbLGeJ1l9evfs4O2xybQuRWqYnrFyUGIuXkmTCIzCGHoedWWXsaEorcJ 0QNzJCCZHmOsKFDkWNs08UoIO9y+msDjps3fJ4oygHcCzpIpNwNqC0OchT1jAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQU752BKzi0ze+EujAz4t+FYaoxzVEwHwYDVR0j BBgwFoAU9ABy/9wPGxWmnlvHmi9YjPk59PQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzAvRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNDAwNzJGRkRDMEYxQjE1QTY5RTVCQzc5 QTJGNTg4Q0Y5MzlGNEY0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xOWFhOWRhNy1mMWU0LTRkOTgtYmY5NS05ZmRmY2Y0NDhmNzcvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTM2MzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIz MDM5MzUzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1gGAwDQYJKoZIhvcNAQELBQADggEBAHS3 88qbe4CcRmeHhcu1FTujSmEKrkIa8P1zefnynRvgOrrMap0LDE+Plx0WAzrr6mqH K+BbcAhPXiX6kRqe0FdcF/ee48QSeTDB0UkXcyaRRWFbVCMnffK5eAw4dMghvtK1 LeLuL4IJqMQKKPnIuzigGn8vG62eCW2N8VVnWjY5cP7jYXB4PY0w4e1N28fWTrEq F6WZFdeZ70IWuSFyAqc1k5Fmbaoqwhwf01vRX987B3NyoPtmiAX9X2xgOuo+82h+ sFj37gQfgAmMLQA1tIOof4SZu09eNJVFvFAirr8UN9XPfFoThPxroLViE2R9zJNM YNSc4SEP6DR/Le+r6yo= -----END CERTIFICATE-----Generated at Sat Apr 26 18:35:19 2025 by rpki-client