$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030353a3a2f34382d3438203d3e20323135333634.roa File: 326131343a373538313a313030353a3a2f34382d3438203d3e20323135333634.roa (raw, json) Hash identifier: O/hfz0aM2Fu4UMny04wjJ5FgsNZdjywDf4gCRUTA6do= Subject key identifier: 5D:97:AB:CD:8E:BC:D7:E8:6A:39:74:CB:DD:B5:70:1A:A1:24:67:B8 Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 1EE29BAC86C848457E1599986D7184EEEEFDE705 Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030353a3a2f34382d3438203d3e20323135333634.roa Signing time: Wed 05 Mar 2025 16:02:18 +0000 ROA not before: Wed 05 Mar 2025 15:57:18 +0000 ROA not after: Wed 04 Mar 2026 16:02:18 +0000 asID: 215364 IP address blocks: 2a14:7581:1005::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 17:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e2:9b:ac:86:c8:48:45:7e:15:99:98:6d:71:84:ee:ee:fd:e7:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Mar 5 15:57:18 2025 GMT Not After : Mar 4 16:02:18 2026 GMT Subject: CN=5D97ABCD8EBCD7E86A3974CBDDB5701AA12467B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3d:ac:55:6c:39:7e:2c:58:dc:2a:35:ae:8a: 96:71:04:2d:c5:ce:18:0d:34:9c:47:04:de:b1:19: f7:28:4e:ac:6c:29:a4:f7:ec:f1:5a:13:1d:f1:12: d8:5f:ac:f9:9f:63:59:19:bd:37:c9:4e:37:af:49: 63:fa:3b:3e:d1:1d:8c:13:74:7e:bd:1d:ba:0e:15: 0d:c7:03:13:7b:20:eb:eb:2f:5f:08:bc:c7:69:08: 2b:c3:f5:be:2d:0f:0f:5c:c8:51:f4:4b:9e:9d:0d: c2:d0:32:19:eb:51:24:0e:6c:03:94:53:0c:d8:4e: 09:4b:dd:09:b1:90:f0:b7:3f:f7:f6:28:d8:db:33: e7:f9:15:0e:a3:99:87:e7:98:52:7e:bf:8e:9a:32: 0a:c9:15:dc:eb:98:dd:6a:f3:a4:0d:3b:b4:54:30: 29:85:ad:e8:78:54:9c:d7:90:e4:fc:81:0f:10:c5: 82:55:ab:21:cc:2b:85:4d:ca:05:13:29:93:78:0f: 50:d1:0e:ef:cc:e6:58:e7:94:5c:00:59:e6:c3:db: b3:23:3f:13:97:f7:d8:30:9a:f6:5f:10:b9:6b:72: 7a:df:4d:37:20:bc:b1:21:d7:19:54:38:6d:0b:12: a4:99:bb:96:45:09:6d:c4:24:56:e8:c7:1f:9b:a5: 20:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:97:AB:CD:8E:BC:D7:E8:6A:39:74:CB:DD:B5:70:1A:A1:24:67:B8 X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030353a3a2f34382d3438203d3e20323135333634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:1005::/48 Signature Algorithm: sha256WithRSAEncryption 8e:4c:35:89:4b:92:fe:90:ec:0c:e8:d6:10:d1:89:f0:fe:ac: 6e:41:dc:a2:d0:7d:19:b5:76:a2:6d:9f:a0:60:c0:e3:3c:bd: 02:95:7e:b8:15:ba:41:4f:f3:32:3f:5b:65:bb:c7:dc:fc:54: 7c:45:e0:fe:1e:1e:e7:a7:bb:c8:dc:2b:3f:bb:e7:f0:64:77: bd:10:99:03:5c:4a:da:ca:05:ee:cd:e4:4e:66:05:6e:65:99: 4a:36:05:97:ca:82:ea:5c:b3:1c:2a:05:30:7e:63:d1:5c:30: 9a:67:ac:cb:78:9f:78:b0:f3:b2:65:8d:ae:a7:b1:06:b4:58: b6:be:ea:e8:65:30:60:55:ba:1a:3e:b2:7c:56:a0:f5:1f:3c: e6:30:6e:d9:a5:93:48:32:0c:22:c7:3b:fc:02:07:5d:73:6d: 4d:c2:37:97:d3:eb:90:43:18:de:04:e9:4f:7c:20:d5:5d:fd: 3f:15:54:51:0b:ba:fd:d8:5a:4a:62:72:85:c0:b3:e8:42:dc: 96:88:3e:85:bb:5f:8d:06:b2:65:1e:f9:06:51:f1:c0:78:d1: 3f:03:88:8d:81:9e:ef:0b:3c:5c:93:e3:0b:36:2c:d1:8e:48: dd:97:76:59:93:e4:26:50:14:48:f5:f4:61:fe:15:58:d8:d9: f2:f6:0d:1b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUHuKbrIbISEV+FZmYbXGE7u795wUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNTAzMDUxNTU3MThaFw0yNjAzMDQxNjAyMThaMDMxMTAvBgNV BAMTKDVEOTdBQkNEOEVCQ0Q3RTg2QTM5NzRDQkREQjU3MDFBQTEyNDY3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPaxVbDl+LFjcKjWuipZxBC3F zhgNNJxHBN6xGfcoTqxsKaT37PFaEx3xEthfrPmfY1kZvTfJTjevSWP6Oz7RHYwT dH69HboOFQ3HAxN7IOvrL18IvMdpCCvD9b4tDw9cyFH0S56dDcLQMhnrUSQObAOU UwzYTglL3QmxkPC3P/f2KNjbM+f5FQ6jmYfnmFJ+v46aMgrJFdzrmN1q86QNO7RU MCmFreh4VJzXkOT8gQ8QxYJVqyHMK4VNygUTKZN4D1DRDu/M5ljnlFwAWebD27Mj PxOX99gwmvZfELlrcnrfTTcgvLEh1xlUOG0LEqSZu5ZFCW3EJFboxx+bpSCZAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUXZerzY681+hqOXTL3bVwGqEkZ7gwHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMxMzAzMDM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzMzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gRAFMA0GCSqGSIb3DQEBCwUAA4IBAQCO TDWJS5L+kOwM6NYQ0Ynw/qxuQdyi0H0ZtXaibZ+gYMDjPL0ClX64FbpBT/MyP1tl u8fc/FR8ReD+Hh7np7vI3Cs/u+fwZHe9EJkDXEraygXuzeROZgVuZZlKNgWXyoLq XLMcKgUwfmPRXDCaZ6zLeJ94sPOyZY2up7EGtFi2vuroZTBgVboaPrJ8VqD1Hzzm MG7ZpZNIMgwixzv8Agddc21NwjeX0+uQQxjeBOlPfCDVXf0/FVRRC7r92FpKYnKF wLPoQtyWiD6Fu1+NBrJlHvkGUfHAeNE/A4iNgZ7vCzxck+MLNizRjkjdl3ZZk+Qm UBRI9fRh/hVY2Nny9g0b -----END CERTIFICATE-----Generated at Sun Apr 27 09:17:45 2025 by rpki-client