$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa File: 326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (raw, json) Hash identifier: MnToG5/hHH9Scp/i63sn6+7U3FU6WhprF2dCg9QmzZ4= Subject key identifier: 3C:38:AB:EC:A6:2C:12:E7:2F:6E:3A:05:9A:FF:EA:80:18:60:86:77 Certificate issuer: /CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Certificate serial: 75DC970E6D1ACFE2287509D75252B0A15584EE5B Authority key identifier: 94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa Signing time: Sat 05 Apr 2025 06:49:21 +0000 ROA not before: Sat 05 Apr 2025 06:44:21 +0000 ROA not after: Sat 04 Apr 2026 06:49:21 +0000 asID: 152368 IP address blocks: 2a14:7584:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 13:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:dc:97:0e:6d:1a:cf:e2:28:75:09:d7:52:52:b0:a1:55:84:ee:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Validity Not Before: Apr 5 06:44:21 2025 GMT Not After : Apr 4 06:49:21 2026 GMT Subject: CN=3C38ABECA62C12E72F6E3A059AFFEA8018608677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b4:09:33:0d:fd:3c:ab:1c:11:02:75:f0:12: 42:c6:2d:ea:9e:d2:4b:2a:5d:c7:b1:4a:1e:43:df: b7:a2:22:df:e9:3e:b8:42:67:2d:11:94:6f:ef:b4: 51:bf:d4:8c:61:25:9b:f6:15:46:e2:ae:bd:ea:96: ee:dc:f4:bb:04:15:c7:bd:15:19:44:7e:8e:d5:bd: 17:0a:e4:af:0f:37:fc:44:84:d7:77:cb:8c:a8:5e: ca:9d:ad:b0:22:d3:00:15:48:7f:e3:62:02:b2:61: fa:5c:50:d2:02:fd:28:ed:a6:bb:45:4c:8e:e0:fc: 2e:b5:0c:7a:bb:f4:82:6a:c5:f2:23:d6:58:53:b1: 2f:75:bb:8b:bc:91:cb:8f:f0:bc:1f:f8:01:7a:77: af:5b:28:46:cb:3d:32:f5:f5:9e:39:1c:c6:4b:72: 0a:0c:c7:60:f4:a2:a0:77:37:1a:20:06:76:88:b4: 44:da:7f:37:1f:39:c0:2d:32:95:aa:fa:b8:59:35: 43:75:5b:bf:1c:be:04:1f:60:d4:07:a4:3a:cc:a3: ab:6a:81:7b:d5:8a:cb:2b:d1:27:2d:34:43:69:e0: 97:c9:66:e6:f5:0c:f6:a4:2e:39:97:94:7a:9e:2e: 86:fa:34:58:25:f2:1a:17:b5:89:08:fa:9d:59:c1: 12:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:38:AB:EC:A6:2C:12:E7:2F:6E:3A:05:9A:FF:EA:80:18:60:86:77 X509v3 Authority Key Identifier: keyid:94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:3000::/48 Signature Algorithm: sha256WithRSAEncryption 34:72:3c:97:f8:5f:d2:6d:d0:4c:82:ba:79:f9:6a:c1:a2:16: 4c:24:0c:05:e4:1b:da:5a:65:77:04:c6:d0:90:15:3c:85:b5: 91:04:af:f8:e3:6d:20:89:16:a2:41:46:41:83:93:ed:8c:89: 5c:41:f0:e4:a5:0e:d4:64:28:4c:b1:c6:8e:ce:3a:55:1d:0e: 1c:17:9c:7b:f2:51:19:38:78:51:a4:d1:d7:2d:0f:39:8e:00: 7a:55:54:7a:c3:7e:2b:00:4d:63:67:91:8d:0b:43:c5:c9:96: d0:03:29:e7:68:dd:4c:5d:d1:de:93:b0:d6:84:2c:42:89:57: d4:e0:51:15:8d:d3:ba:61:4f:be:50:71:5a:1c:60:eb:44:1f: 8e:af:9b:3e:d2:db:d4:3d:5f:62:19:1e:9e:09:48:98:d1:ce: 59:ff:16:63:ba:5a:7d:4a:13:d6:6a:2d:4a:73:c4:76:79:ec: 68:03:37:80:84:22:c0:e7:f5:31:1e:91:6b:2b:6e:4e:45:f6: f2:5d:be:99:36:b3:02:3d:2e:c0:b7:1a:13:f1:1c:3e:ba:04: 05:0e:62:21:c3:52:8f:5d:9e:3b:4a:23:5d:1b:52:65:cd:2f: 30:d5:3c:1b:8e:7c:a5:ea:91:2d:8b:61:d6:02:ee:ef:30:10: f4:30:aa:cb -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUddyXDm0az+IodQnXUlKwoVWE7lswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkx QjI3QUQ5QzAeFw0yNTA0MDUwNjQ0MjFaFw0yNjA0MDQwNjQ5MjFaMDMxMTAvBgNV BAMTKDNDMzhBQkVDQTYyQzEyRTcyRjZFM0EwNTlBRkZFQTgwMTg2MDg2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEtAkzDf08qxwRAnXwEkLGLeqe 0ksqXcexSh5D37eiIt/pPrhCZy0RlG/vtFG/1IxhJZv2FUbirr3qlu7c9LsEFce9 FRlEfo7VvRcK5K8PN/xEhNd3y4yoXsqdrbAi0wAVSH/jYgKyYfpcUNIC/SjtprtF TI7g/C61DHq79IJqxfIj1lhTsS91u4u8kcuP8Lwf+AF6d69bKEbLPTL19Z45HMZL cgoMx2D0oqB3NxogBnaItETafzcfOcAtMpWq+rhZNUN1W78cvgQfYNQHpDrMo6tq gXvVissr0SctNENp4JfJZub1DPakLjmXlHqeLob6NFgl8hoXtYkI+p1ZwRIfAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUPDir7KYsEucvbjoFmv/qgBhghncwHwYDVR0j BBgwFoAUlG3hXTS+riTinqFqP+HmWRsnrZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzcvOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkxQjI3QUQ5Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85NDZERTE1RDM0QkVBRTI0RTI5RUExNkEz RkUxRTY1OTFCMjdBRDlDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xYmQzMDZiNC1lNWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvNy8zMjYxMzEz NDNhMzczNTM4MzQzYTMzMzAzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz NTMyMzMzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hDAAMA0GCSqGSIb3DQEBCwUAA4IBAQA0 cjyX+F/SbdBMgrp5+WrBohZMJAwF5BvaWmV3BMbQkBU8hbWRBK/4420giRaiQUZB g5PtjIlcQfDkpQ7UZChMscaOzjpVHQ4cF5x78lEZOHhRpNHXLQ85jgB6VVR6w34r AE1jZ5GNC0PFyZbQAynnaN1MXdHek7DWhCxCiVfU4FEVjdO6YU++UHFaHGDrRB+O r5s+0tvUPV9iGR6eCUiY0c5Z/xZjulp9ShPWai1Kc8R2eexoAzeAhCLA5/UxHpFr K25ORfbyXb6ZNrMCPS7AtxoT8Rw+ugQFDmIhw1KPXZ47SiNdG1JlzS8w1Twbjnyl 6pEti2HWAu7vMBD0MKrL -----END CERTIFICATE-----Generated at Sun Apr 27 23:53:06 2025 by rpki-client