$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161323a3a2f34382d3438203d3e20323135363137.roa File: 326131343a373538313a3161323a3a2f34382d3438203d3e20323135363137.roa (raw, json) Hash identifier: jAzASY0zBba/69XbyHEKI96Xc4QI5rYdEmElleWGPrQ= Subject key identifier: 4E:F3:9E:F3:A3:41:56:5E:12:A5:58:99:F0:99:D7:9C:5F:AC:E9:1A Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 0AE8C699835F4FAE33C942F3B8E6DF1D72947122 Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161323a3a2f34382d3438203d3e20323135363137.roa Signing time: Mon 09 Dec 2024 13:20:08 +0000 ROA not before: Mon 09 Dec 2024 13:15:08 +0000 ROA not after: Mon 08 Dec 2025 13:20:08 +0000 asID: 215617 IP address blocks: 2a14:7581:1a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 13:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e8:c6:99:83:5f:4f:ae:33:c9:42:f3:b8:e6:df:1d:72:94:71:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Dec 9 13:15:08 2024 GMT Not After : Dec 8 13:20:08 2025 GMT Subject: CN=4EF39EF3A341565E12A55899F099D79C5FACE91A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e7:b2:62:b2:42:23:9d:44:58:78:6a:c6:c5: 18:be:9f:92:e6:be:69:35:64:15:02:56:92:cc:2a: c1:96:a9:78:d7:3a:07:1e:f9:de:62:74:5f:ac:5f: 81:cb:b8:b3:db:7a:16:5e:3f:88:9b:fa:f8:17:56: 1d:1a:d3:cd:99:4d:fe:05:6b:ec:2d:fa:f2:d2:9d: 45:fb:1a:b0:07:2c:67:44:76:da:75:22:81:13:21: c4:01:c3:5f:b8:ea:85:ef:25:11:c9:69:27:d7:08: 8f:de:55:d1:c1:5a:9e:30:10:41:85:47:cf:2a:87: 13:bc:51:17:3b:eb:37:42:80:88:1a:70:ee:8d:d0: 09:94:17:75:d9:ef:a0:11:c5:32:c7:d8:98:03:ad: 6e:11:ac:ed:cd:f8:60:d8:b4:8e:34:de:0f:d5:0b: d8:9a:67:0f:81:24:c0:63:73:16:01:d3:8b:66:33: 0e:9c:1a:4d:f6:26:ba:65:1d:2f:37:ce:8b:a6:82: d7:27:10:8a:7b:b4:ba:57:f8:1f:ea:99:35:3b:93: 91:71:66:06:47:14:e5:d1:64:bf:0c:9c:52:f5:29: 41:29:dc:25:68:ee:7c:78:d8:14:62:4a:f1:e7:75: a0:6e:a3:7e:17:d5:6f:23:92:9e:e9:4c:3c:f8:56: 8f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F3:9E:F3:A3:41:56:5E:12:A5:58:99:F0:99:D7:9C:5F:AC:E9:1A X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161323a3a2f34382d3438203d3e20323135363137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:1a2::/48 Signature Algorithm: sha256WithRSAEncryption 38:d0:a8:29:53:bd:d5:87:5e:54:9a:a0:3d:21:1d:9e:64:44: d0:ab:97:85:58:6d:49:7e:f6:2e:38:c8:3d:5a:df:e1:fc:f5: 36:59:0c:61:16:ba:66:ad:49:31:4d:cc:c1:a9:b5:19:27:e4: 85:e1:51:de:a9:c4:2e:25:4b:15:5f:c7:d6:51:3d:bc:37:fe: a8:2a:06:ff:e5:cf:95:10:05:ec:ce:af:ef:18:25:4e:04:ff: 36:ef:09:84:ed:71:a2:87:6c:5a:80:88:9c:f0:7c:ab:d9:cd: 2d:c4:e9:1e:49:97:0e:26:12:8e:b4:a0:4b:98:0d:c3:dd:84: 09:1a:d2:11:f9:c0:9d:6a:3d:e3:51:29:be:82:60:a6:12:d0: fc:00:70:dc:d8:f4:5a:f6:3a:77:a7:0b:9d:3f:78:3c:2d:ea: 43:5d:cb:37:78:9c:4b:a8:42:28:09:63:86:96:a2:f5:c6:f6: 17:57:c9:9c:ec:cd:48:6f:c0:0a:a0:ff:a0:70:ef:b1:96:8f: 69:d5:c2:a8:17:97:88:05:e8:e2:ae:69:c2:00:77:e3:af:37: 9d:b5:9c:22:3f:7e:15:0d:d7:7d:4a:3f:13:6a:2c:f6:3d:85: 71:7c:1d:94:cc:eb:60:ec:f9:b3:67:29:85:aa:f2:3b:d6:50: 89:f5:2a:01 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUCujGmYNfT64zyULzuObfHXKUcSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNDEyMDkxMzE1MDhaFw0yNTEyMDgxMzIwMDhaMDMxMTAvBgNV BAMTKDRFRjM5RUYzQTM0MTU2NUUxMkE1NTg5OUYwOTlENzlDNUZBQ0U5MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV57JiskIjnURYeGrGxRi+n5Lm vmk1ZBUCVpLMKsGWqXjXOgce+d5idF+sX4HLuLPbehZeP4ib+vgXVh0a082ZTf4F a+wt+vLSnUX7GrAHLGdEdtp1IoETIcQBw1+46oXvJRHJaSfXCI/eVdHBWp4wEEGF R88qhxO8URc76zdCgIgacO6N0AmUF3XZ76ARxTLH2JgDrW4RrO3N+GDYtI403g/V C9iaZw+BJMBjcxYB04tmMw6cGk32JrplHS83zoumgtcnEIp7tLpX+B/qmTU7k5Fx ZgZHFOXRZL8MnFL1KUEp3CVo7nx42BRiSvHndaBuo34X1W8jkp7pTDz4Vo/DAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUTvOe86NBVl4SpViZ8JnXnF+s6RowHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMxNjEzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTM2MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYEBojANBgkqhkiG9w0BAQsFAAOCAQEAONCo KVO91YdeVJqgPSEdnmRE0KuXhVhtSX72LjjIPVrf4fz1NlkMYRa6Zq1JMU3Mwam1 GSfkheFR3qnELiVLFV/H1lE9vDf+qCoG/+XPlRAF7M6v7xglTgT/Nu8JhO1xoods WoCInPB8q9nNLcTpHkmXDiYSjrSgS5gNw92ECRrSEfnAnWo941EpvoJgphLQ/ABw 3Nj0WvY6d6cLnT94PC3qQ13LN3icS6hCKAljhpai9cb2F1fJnOzNSG/ACqD/oHDv sZaPadXCqBeXiAXo4q5pwgB34683nbWcIj9+FQ3XfUo/E2os9j2FcXwdlMzrYOz5 s2cpharyO9ZQifUqAQ== -----END CERTIFICATE-----Generated at Sun Apr 27 23:49:50 2025 by rpki-client