$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663334303a3a2f34342d3438203d3e20323133343238.roa File: 326131343a373538303a663334303a3a2f34342d3438203d3e20323133343238.roa (raw, json) Hash identifier: Z7InVHvKI4/fqGkdwdL0zl1WS4Iyc09xlEsVxaD8p5A= Subject key identifier: 64:27:5F:1B:13:BB:53:E0:73:21:2E:55:80:54:9A:E8:59:AB:11:6A Certificate issuer: /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Certificate serial: 5B17F5F19AB56BC8D47281520F2CA5F6A6D4B151 Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663334303a3a2f34342d3438203d3e20323133343238.roa Signing time: Thu 27 Feb 2025 02:55:30 +0000 ROA not before: Thu 27 Feb 2025 02:50:30 +0000 ROA not after: Thu 26 Feb 2026 02:55:30 +0000 asID: 213428 IP address blocks: 2a14:7580:f340::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 13:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:17:f5:f1:9a:b5:6b:c8:d4:72:81:52:0f:2c:a5:f6:a6:d4:b1:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Validity Not Before: Feb 27 02:50:30 2025 GMT Not After : Feb 26 02:55:30 2026 GMT Subject: CN=64275F1B13BB53E073212E5580549AE859AB116A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:73:16:2b:c0:0d:b8:79:1a:8e:95:82:47: b2:92:84:39:44:e7:28:06:01:43:29:df:f9:0f:01: e6:86:e7:c5:47:0f:c7:e6:60:29:7f:08:3a:f5:85: ed:d5:d2:55:49:8d:0b:ba:79:91:9b:4d:6a:10:4a: a6:22:ed:d4:15:78:f8:0f:1e:bd:4c:e8:21:5b:ed: 02:26:48:4e:e6:40:40:f8:ea:84:a2:02:a1:e3:45: 47:5d:9f:03:ff:dc:1e:a0:db:72:f0:95:05:2c:b6: b5:ea:31:50:60:02:8a:d8:3d:e5:b6:9e:14:b1:af: 2f:1b:af:ca:30:fc:4b:49:60:2a:7a:1e:ec:41:8e: e7:9a:2d:1c:fa:81:ea:ea:de:ff:73:9d:5c:96:07: 01:70:ff:da:b8:91:05:43:fa:cc:2a:d8:5d:da:89: ec:f3:17:8a:19:99:eb:8c:06:7e:1c:05:8a:a5:1c: 85:fc:2c:42:4c:e5:fc:54:5c:e6:92:1e:77:52:58: 02:68:72:c0:fe:20:46:43:8f:5c:b7:1b:21:70:96: 5b:d9:27:69:cd:3b:33:a1:94:aa:9f:7e:60:da:42: bb:f4:ba:e3:10:b4:ee:7a:95:5a:6d:d7:4d:c7:74: fd:27:01:59:cf:eb:b7:9b:3e:bb:0e:d9:a9:ed:2e: bc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:27:5F:1B:13:BB:53:E0:73:21:2E:55:80:54:9A:E8:59:AB:11:6A X509v3 Authority Key Identifier: keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663334303a3a2f34342d3438203d3e20323133343238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:f340::/44 Signature Algorithm: sha256WithRSAEncryption 68:5e:06:72:2b:85:30:d4:6e:2a:84:28:1b:54:07:b6:07:6d: 53:bc:eb:89:ef:5d:0a:d6:3e:9a:24:2d:cd:6e:1d:d4:11:07: 1b:ed:91:1c:4e:3c:d1:b3:ad:2e:0f:2f:3d:44:38:3f:7c:51: de:db:37:33:d2:76:77:09:01:f3:57:f3:e3:d5:b1:90:24:0c: 50:0a:52:ca:c1:86:a3:12:a6:92:8f:12:0f:fd:56:53:52:9f: 05:dc:5c:b8:e0:f4:43:5b:24:47:b1:c0:7a:f0:3a:19:5b:e5: b5:ff:dd:b5:30:a9:ac:3d:54:de:10:10:ab:18:db:eb:63:f4: 36:f9:56:28:0e:1d:8d:b5:29:e9:cc:93:e3:97:8c:fa:52:ad: 41:ea:02:f3:23:ea:1d:87:7e:f6:98:f3:f8:d2:b2:7e:67:37: 05:22:59:aa:11:8d:c0:87:85:85:58:98:4f:26:c0:01:03:7a: cc:8e:8f:2d:ba:60:f4:7e:9f:66:fb:ea:e9:64:c9:e6:51:fc: 20:4a:5a:41:e4:8d:60:67:10:bb:bf:c5:d1:97:17:bd:ef:89: ca:40:60:12:15:00:2b:22:e6:c6:32:f0:5d:e3:77:62:2d:5b: 99:a3:2a:6f:20:e6:9e:4e:0e:59:8e:6a:2b:6d:b6:3b:e4:4d: 22:29:ad:e3 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUWxf18Zq1a8jUcoFSDyyl9qbUsVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENG OTM5RjRGNDAeFw0yNTAyMjcwMjUwMzBaFw0yNjAyMjYwMjU1MzBaMDMxMTAvBgNV BAMTKDY0Mjc1RjFCMTNCQjUzRTA3MzIxMkU1NTgwNTQ5QUU4NTlBQjExNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GnMWK8ANuHkajpWCR7KShDlE 5ygGAUMp3/kPAeaG58VHD8fmYCl/CDr1he3V0lVJjQu6eZGbTWoQSqYi7dQVePgP Hr1M6CFb7QImSE7mQED46oSiAqHjRUddnwP/3B6g23LwlQUstrXqMVBgAorYPeW2 nhSxry8br8ow/EtJYCp6HuxBjueaLRz6gerq3v9znVyWBwFw/9q4kQVD+swq2F3a iezzF4oZmeuMBn4cBYqlHIX8LEJM5fxUXOaSHndSWAJocsD+IEZDj1y3GyFwllvZ J2nNOzOhlKqffmDaQrv0uuMQtO56lVpt103HdP0nAVnP67ebPrsO2antLryVAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUZCdfGxO7U+BzIS5VgFSa6FmrEWowHwYDVR0j BBgwFoAU9ABy/9wPGxWmnlvHmi9YjPk59PQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzAvRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNDAwNzJGRkRDMEYxQjE1QTY5RTVCQzc5 QTJGNTg4Q0Y5MzlGNEY0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xOWFhOWRhNy1mMWU0LTRkOTgtYmY5NS05ZmRmY2Y0NDhmNzcvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2MzMzNDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTMzMzQzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gPNAMA0GCSqGSIb3DQEBCwUAA4IBAQBo XgZyK4Uw1G4qhCgbVAe2B21TvOuJ710K1j6aJC3Nbh3UEQcb7ZEcTjzRs60uDy89 RDg/fFHe2zcz0nZ3CQHzV/Pj1bGQJAxQClLKwYajEqaSjxIP/VZTUp8F3Fy44PRD WyRHscB68DoZW+W1/921MKmsPVTeEBCrGNvrY/Q2+VYoDh2NtSnpzJPjl4z6Uq1B 6gLzI+odh372mPP40rJ+ZzcFIlmqEY3Ah4WFWJhPJsABA3rMjo8tumD0fp9m++rp ZMnmUfwgSlpB5I1gZxC7v8XRlxe974nKQGASFQArIubGMvBd43diLVuZoypvIOae Tg5ZjmorbbY75E0iKa3j -----END CERTIFICATE-----Generated at Mon Apr 28 06:12:57 2025 by rpki-client