$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa File: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (raw, json) Hash identifier: 3qXl5FbKnzkRN6THBxhJGfWR/NW3B6cW7HVh5EatIt4= Subject key identifier: 47:65:82:B7:5F:CA:58:28:EC:7A:12:DD:34:5F:D9:BD:6F:F9:D9:13 Certificate issuer: /CN=6EC74C12BEB63E6D47484ACE255EC241A80F5486 Certificate serial: 690D58C9F58BED1668F28DE6FC9B9C01F6524E42 Authority key identifier: 6E:C7:4C:12:BE:B6:3E:6D:47:48:4A:CE:25:5E:C2:41:A8:0F:54:86 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/6EC74C12BEB63E6D47484ACE255EC241A80F5486.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa Signing time: Thu 27 Feb 2025 04:51:49 +0000 ROA not before: Thu 27 Feb 2025 04:46:49 +0000 ROA not after: Thu 26 Feb 2026 04:51:49 +0000 asID: 152368 IP address blocks: 2a06:a005:d2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/6EC74C12BEB63E6D47484ACE255EC241A80F5486.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 19:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0d:58:c9:f5:8b:ed:16:68:f2:8d:e6:fc:9b:9c:01:f6:52:4e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EC74C12BEB63E6D47484ACE255EC241A80F5486 Validity Not Before: Feb 27 04:46:49 2025 GMT Not After : Feb 26 04:51:49 2026 GMT Subject: CN=476582B75FCA5828EC7A12DD345FD9BD6FF9D913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b2:9d:92:df:cf:4e:32:87:5e:bf:a1:a1:36: 1a:55:c1:8b:af:fd:39:9a:f3:77:3e:0f:be:6a:c3: 9c:ed:32:0b:a5:be:2f:d3:42:2d:d3:87:60:c5:85: b8:43:39:ab:04:44:71:dd:65:fe:de:f6:87:d7:f4: a7:bb:d0:c2:e5:cf:51:aa:9e:82:a6:11:5c:b6:12: ef:4e:06:93:59:47:32:81:be:1f:78:1d:e0:0b:55: 21:d6:82:02:df:00:b4:8c:e4:c5:31:9f:7b:4b:ee: 91:ae:14:e9:db:9e:dc:8f:2f:f8:cf:23:93:8b:5b: cf:f6:04:18:9f:36:3c:5b:d4:df:11:c3:ec:26:35: 39:75:28:12:09:fe:56:9e:34:fa:3d:94:cc:34:f7: 26:45:d0:86:4a:54:56:62:9d:19:58:45:1f:6c:a5: 39:31:80:f1:a1:22:11:7a:fc:c8:f4:a3:a1:2d:b8: 0a:69:18:3b:8a:1f:56:c0:91:4d:0b:7c:ee:e6:49: c8:15:8f:68:bf:a9:f9:1e:f8:11:28:96:d2:d3:fe: c2:28:a9:ab:82:26:b6:ef:b2:a6:3c:1d:71:88:05: 91:f9:64:52:d8:19:91:aa:02:13:75:c0:e6:60:bc: bd:58:7c:45:b7:ca:be:9f:ca:fc:f8:ba:d8:a6:1a: 01:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:65:82:B7:5F:CA:58:28:EC:7A:12:DD:34:5F:D9:BD:6F:F9:D9:13 X509v3 Authority Key Identifier: keyid:6E:C7:4C:12:BE:B6:3E:6D:47:48:4A:CE:25:5E:C2:41:A8:0F:54:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/6EC74C12BEB63E6D47484ACE255EC241A80F5486.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a005:d2d::/48 Signature Algorithm: sha256WithRSAEncryption a7:23:67:28:d7:e1:23:27:bf:0a:02:1e:c7:16:d0:ad:f1:9b: 14:14:63:42:70:de:d2:b0:5d:22:74:c7:be:49:78:b1:c0:8b: 71:c4:25:bf:ab:60:27:75:54:2f:a5:dc:0e:03:d4:22:0b:83: 95:2c:da:a8:6e:b6:ca:ad:54:41:7c:e5:7c:37:78:21:19:5e: 96:29:3d:a5:50:7b:c9:39:8b:f2:28:1d:1f:75:0d:58:76:1d: 1e:9d:30:88:fb:63:00:ef:02:ce:58:a1:82:d0:3a:2f:37:84: d9:16:4c:d3:7b:7c:eb:a6:51:02:5a:1a:75:41:cd:fb:d5:30: 02:7a:bf:ce:bd:e1:96:5e:f7:65:42:b5:2c:75:b1:f5:ba:2c: 02:50:56:b1:8d:0b:bf:cd:bb:cb:bc:be:ed:8d:2e:34:c4:ef: a2:6c:7b:ad:b0:65:a1:ef:da:27:c4:ae:b0:15:5c:61:67:2f: f0:fe:d4:41:3b:66:bb:7a:88:8f:f6:fe:d3:75:40:29:9f:2c: 88:fd:2c:b5:c8:7f:9e:5b:f9:28:e7:e5:47:25:5e:0d:36:38: 1f:95:46:49:90:0a:f4:c5:36:1c:88:52:b5:41:90:c5:a7:80: 6a:fb:5a:e0:99:1d:f3:b9:27:59:5b:f4:31:e9:69:2c:45:ff: 17:5c:c6:c9 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUaQ1YyfWL7RZo8o3m/JucAfZSTkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVDNzRDMTJCRUI2M0U2RDQ3NDg0QUNFMjU1RUMyNDFB ODBGNTQ4NjAeFw0yNTAyMjcwNDQ2NDlaFw0yNjAyMjYwNDUxNDlaMDMxMTAvBgNV BAMTKDQ3NjU4MkI3NUZDQTU4MjhFQzdBMTJERDM0NUZEOUJENkZGOUQ5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLsp2S389OModev6GhNhpVwYuv /Tma83c+D75qw5ztMgulvi/TQi3Th2DFhbhDOasERHHdZf7e9ofX9Ke70MLlz1Gq noKmEVy2Eu9OBpNZRzKBvh94HeALVSHWggLfALSM5MUxn3tL7pGuFOnbntyPL/jP I5OLW8/2BBifNjxb1N8Rw+wmNTl1KBIJ/laeNPo9lMw09yZF0IZKVFZinRlYRR9s pTkxgPGhIhF6/Mj0o6EtuAppGDuKH1bAkU0LfO7mScgVj2i/qfke+BEoltLT/sIo qauCJrbvsqY8HXGIBZH5ZFLYGZGqAhN1wOZgvL1YfEW3yr6fyvz4utimGgGrAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUR2WCt1/KWCjsehLdNF/ZvW/52RMwHwYDVR0j BBgwFoAUbsdMEr62Pm1HSErOJV7CQagPVIYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzUvNkVDNzRDMTJCRUI2M0U2RDQ3NDg0QUNFMjU1RUMyNDFBODBGNTQ4Ni5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNkVDNzRDMTJCRUI2M0U2RDQ3NDg0QUNFMjU1RUMyNDFBODBG NTQ4Ni5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQt ZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0LzUvMzI2MTMwMzYzYTYxMzAzMDM1 M2E2NDMyNjQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzIzMzM2Mzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqBqAFDS0wDQYJKoZIhvcNAQELBQADggEBAKcjZyjX4SMnvwoCHscW 0K3xmxQUY0Jw3tKwXSJ0x75JeLHAi3HEJb+rYCd1VC+l3A4D1CILg5Us2qhutsqt VEF85Xw3eCEZXpYpPaVQe8k5i/IoHR91DVh2HR6dMIj7YwDvAs5YoYLQOi83hNkW TNN7fOumUQJaGnVBzfvVMAJ6v8694ZZe92VCtSx1sfW6LAJQVrGNC7/Nu8u8vu2N LjTE76Jse62wZaHv2ifErrAVXGFnL/D+1EE7Zrt6iI/2/tN1QCmfLIj9LLXIf55b +Sjn5UclXg02OB+VRkmQCvTFNhyIUrVBkMWngGr7WuCZHfO5J1lb9DHpaSxF/xdc xsk= -----END CERTIFICATE-----Generated at Mon Apr 28 12:32:50 2025 by rpki-client