$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a3a2f33332d3334203d3e20313937343737.roa File: 326130363a313238333a3a2f33332d3334203d3e20313937343737.roa (raw, json) Hash identifier: qySEHWSqGyB/2ZvC2CCIWl3xnjFAJ4Mo1CqpJIA7Q3g= Subject key identifier: 7F:7B:53:0E:BC:AB:90:37:23:1E:F7:C0:77:C4:C1:A4:64:04:A8:6E Certificate issuer: /CN=20595BDBAD09C7D604202305854D1DF14F190959 Certificate serial: 6A0EF522C99444CC3C2B611C00CF5F8635CA0E72 Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a3a2f33332d3334203d3e20313937343737.roa Signing time: Fri 14 Mar 2025 20:14:41 +0000 ROA not before: Fri 14 Mar 2025 20:09:41 +0000 ROA not after: Fri 13 Mar 2026 20:14:41 +0000 asID: 197477 IP address blocks: 2a06:1283::/33 maxlen: 34 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 03:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:0e:f5:22:c9:94:44:cc:3c:2b:61:1c:00:cf:5f:86:35:ca:0e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959 Validity Not Before: Mar 14 20:09:41 2025 GMT Not After : Mar 13 20:14:41 2026 GMT Subject: CN=7F7B530EBCAB9037231EF7C077C4C1A46404A86E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:e2:b7:29:75:03:42:ac:3d:fd:b7:1d:7e: 1d:0a:6e:57:2c:2f:49:57:57:17:b1:2f:50:f9:79: ce:78:ba:f5:2a:fd:a1:b8:47:7a:9a:e6:f8:83:24: 08:e2:f4:8f:98:2e:da:95:13:70:4b:b5:5c:5c:92: ed:f0:3a:11:dc:89:67:7f:d2:c6:cf:91:c6:80:5b: d5:21:b2:1d:fc:ec:61:ee:6a:5e:f7:af:21:e8:4d: 97:b5:e6:43:fb:27:07:6a:98:1d:24:ec:4a:f9:25: dd:47:25:12:dd:d4:2d:fc:ff:81:33:13:5a:f0:08: ca:9c:c0:92:bf:88:38:78:af:bd:be:56:01:8f:55: fc:91:bf:8b:3b:88:d8:e1:01:b7:a9:1e:ca:8f:cb: 13:a0:ae:8c:d3:02:36:d0:71:9f:c1:ce:04:19:9a: 78:cd:eb:85:15:51:be:56:52:55:38:7d:dd:ce:88: ec:1d:0c:ea:cb:11:1a:dd:52:4c:5f:56:77:3f:b5: 49:9e:99:d5:6a:2c:3e:c9:66:c2:76:a4:fb:dd:e2: ac:ae:df:c5:ed:da:51:fb:f0:a1:32:c0:36:5d:0a: 06:c5:16:3e:68:03:f6:18:72:d4:46:b8:af:ba:78: ae:c0:e8:e8:a7:49:e4:60:c2:7c:53:ed:a4:5e:eb: 58:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7B:53:0E:BC:AB:90:37:23:1E:F7:C0:77:C4:C1:A4:64:04:A8:6E X509v3 Authority Key Identifier: keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a3a2f33332d3334203d3e20313937343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283::/33 Signature Algorithm: sha256WithRSAEncryption b7:d1:08:d0:1b:ca:66:89:fa:9d:b0:d4:03:0a:25:17:11:79: 76:d8:3e:b8:88:11:bf:50:c3:d1:22:9c:ff:2f:54:b0:9a:08: e0:90:84:5f:b9:29:00:98:f8:af:5f:6c:dc:23:09:18:f0:e7: c7:9f:31:46:63:10:85:ca:8d:c0:a3:7f:d1:f8:4a:41:01:ba: 2e:eb:91:14:2e:cc:5f:f9:21:5c:d5:0b:49:f2:f9:9d:90:71: 33:05:0c:8e:9d:e9:b6:24:db:df:d9:4e:5f:f9:79:f0:00:68: fc:c8:12:6a:02:3c:59:51:71:3f:2f:c8:b1:12:0e:1f:29:e9: d8:ea:33:b4:52:24:6a:44:09:dc:06:6b:d8:d3:97:68:c2:e5: a2:39:63:a0:0e:4a:c8:db:57:e4:5f:8f:ae:e0:15:c0:a9:ec: 63:06:ef:50:a2:08:28:e7:0c:89:03:27:a0:f7:59:7b:24:27: f0:2a:99:a8:72:ef:ae:62:fc:ce:a1:58:16:c8:8e:47:d8:60: 1e:70:fa:a9:93:2d:47:d7:f8:42:7a:cd:6d:82:bc:70:d4:f8: 2c:bf:f5:4d:88:ec:39:c8:9f:c2:fd:d4:fd:ad:02:33:51:b5: de:8a:d7:9f:2a:18:b0:01:71:89:41:ab:b7:ce:ae:2e:0d:bf: e3:69:b3:bc -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUag71IsmURMw8K2EcAM9fhjXKDnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0 RjE5MDk1OTAeFw0yNTAzMTQyMDA5NDFaFw0yNjAzMTMyMDE0NDFaMDMxMTAvBgNV BAMTKDdGN0I1MzBFQkNBQjkwMzcyMzFFRjdDMDc3QzRDMUE0NjQwNEE4NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1S+K3KXUDQqw9/bcdfh0Kblcs L0lXVxexL1D5ec54uvUq/aG4R3qa5viDJAji9I+YLtqVE3BLtVxcku3wOhHciWd/ 0sbPkcaAW9Uhsh387GHual73ryHoTZe15kP7JwdqmB0k7Er5Jd1HJRLd1C38/4Ez E1rwCMqcwJK/iDh4r72+VgGPVfyRv4s7iNjhAbepHsqPyxOgrozTAjbQcZ/BzgQZ mnjN64UVUb5WUlU4fd3OiOwdDOrLERrdUkxfVnc/tUmemdVqLD7JZsJ2pPvd4qyu 38Xt2lH78KEywDZdCgbFFj5oA/YYctRGuK+6eK7A6OinSeRgwnxT7aRe61iTAgMB AAGjggJvMIICazAdBgNVHQ4EFgQUf3tTDryrkDcjHvfAd8TBpGQEqG4wHwYDVR0j BBgwFoAUIFlb260Jx9YEICMFhU0d8U8ZCVkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzEvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5MDk1OS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5 MDk1OS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzEvMzI2MTMwMzYzYTMxMzIzODMz M2EzYTJmMzMzMzJkMzMzNDIwM2QzZTIwMzEzOTM3MzQzNzM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYH KgYSgwAwDQYJKoZIhvcNAQELBQADggEBALfRCNAbymaJ+p2w1AMKJRcReXbYPriI Eb9Qw9EinP8vVLCaCOCQhF+5KQCY+K9fbNwjCRjw58efMUZjEIXKjcCjf9H4SkEB ui7rkRQuzF/5IVzVC0ny+Z2QcTMFDI6d6bYk29/ZTl/5efAAaPzIEmoCPFlRcT8v yLESDh8p6djqM7RSJGpECdwGa9jTl2jC5aI5Y6AOSsjbV+Rfj67gFcCp7GMG71Ci CCjnDIkDJ6D3WXskJ/Aqmahy765i/M6hWBbIjkfYYB5w+qmTLUfX+EJ6zW2CvHDU +Cy/9U2I7DnIn8L91P2tAjNRtd6K158qGLABcYlBq7fOri4Nv+Nps7w= -----END CERTIFICATE-----Generated at Mon Apr 28 14:19:03 2025 by rpki-client