$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa File: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (raw, json) Hash identifier: 3t/0qmEuc7HUJ6jbuOuPnmd3ve4/XpcLhj4VdVBS4pk= Subject key identifier: 0D:E8:47:F5:6E:CA:5F:4A:26:08:41:6B:FA:A5:4E:64:73:81:77:27 Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 3AB63E962BDA679A2C2874405D240844EE9A4F4B Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa Signing time: Mon 27 Jan 2025 12:32:22 +0000 ROA not before: Mon 27 Jan 2025 12:27:22 +0000 ROA not after: Mon 26 Jan 2026 12:32:22 +0000 asID: 135659 IP address blocks: 2a14:7581:4650::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 05:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b6:3e:96:2b:da:67:9a:2c:28:74:40:5d:24:08:44:ee:9a:4f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Jan 27 12:27:22 2025 GMT Not After : Jan 26 12:32:22 2026 GMT Subject: CN=0DE847F56ECA5F4A2608416BFAA54E6473817727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:45:54:0a:52:73:8c:ee:18:b8:49:79:16:a2: 55:8a:b7:f9:cb:5c:c8:57:d9:0f:59:89:41:be:d1: 40:d1:cc:84:7d:36:34:3c:d2:7f:8d:bf:a3:7e:c2: b0:ce:d3:b2:74:ae:c5:bd:e7:31:f4:cc:92:4a:70: de:07:70:02:1c:20:17:c4:e8:cc:d3:d8:b0:8e:46: f9:bb:87:1f:7e:c1:d3:2d:93:18:d2:ae:89:0f:fe: 41:72:56:b7:9e:93:84:85:cb:9d:d4:1f:bf:a4:e6: 33:c7:f1:3d:90:bf:3d:4e:2b:f6:74:bc:c9:e3:ec: 60:8c:d9:0a:6e:a0:2c:2a:16:a9:2a:38:75:a5:7e: 2a:8c:76:03:56:26:cc:76:56:be:6f:23:5f:88:b5: ab:1b:66:93:16:4a:c2:53:af:08:c4:16:70:e2:b1: 50:e4:31:f4:7e:70:ce:06:f5:23:95:07:93:77:4e: b3:20:9a:d1:c5:e5:21:e7:e0:2f:24:6e:f3:0c:3b: f5:8a:81:11:c9:b5:cd:4b:2e:6c:8b:5e:ac:92:a1: fd:70:37:fe:f3:bb:cd:c9:7c:d4:98:6e:d6:aa:3c: 21:14:09:f4:a7:cb:a6:a7:68:f3:35:c8:70:3c:5f: 11:12:60:9b:95:84:25:b2:3f:59:51:fd:88:6e:9c: f3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E8:47:F5:6E:CA:5F:4A:26:08:41:6B:FA:A5:4E:64:73:81:77:27 X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:4650::/44 Signature Algorithm: sha256WithRSAEncryption 18:c3:9d:40:5f:67:ef:2d:b2:ab:32:81:1d:7b:ce:77:03:bc: 56:12:6e:25:3d:91:76:f5:7a:e2:f9:1d:c7:33:bc:0d:04:3e: da:41:78:98:e8:42:6e:89:26:30:66:8e:2b:11:09:13:53:63: c8:90:a7:1e:74:5c:82:98:c9:bc:b3:e0:25:c1:c6:99:39:f3: 86:a4:d6:fb:59:b1:ef:1e:59:b0:c6:f7:a9:5c:ba:a3:a7:60: 3f:2c:83:9e:4f:ba:30:1c:4a:8b:1c:03:e7:b0:32:b0:bb:fc: fd:8c:9b:fd:48:61:35:90:01:9d:ee:c0:bc:dc:fc:86:96:83: 64:f8:ee:79:c7:7a:54:80:bd:f7:e5:7f:61:32:fb:ca:4e:bd: 8d:40:1e:e2:82:75:11:dd:7e:21:20:30:a6:c7:ec:fd:ad:2b: 9e:69:19:5e:a6:b2:69:03:37:bf:01:f9:d0:9d:e0:1f:82:fe: a8:2e:99:4c:5c:bf:0c:53:93:e1:4d:d4:a4:4f:ee:78:ab:fb: 97:c2:47:a4:46:fe:29:57:da:a7:81:b3:39:2e:74:1f:bd:ec: 61:7d:61:e7:69:c7:8e:f1:70:46:83:ce:d6:4d:40:0e:e2:5c: ec:27:ed:e0:4a:54:83:e0:a4:bd:7f:d6:ca:cb:45:f2:ac:77: 57:5f:3e:97 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUOrY+livaZ5osKHRAXSQIRO6aT0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNTAxMjcxMjI3MjJaFw0yNjAxMjYxMjMyMjJaMDMxMTAvBgNV BAMTKDBERTg0N0Y1NkVDQTVGNEEyNjA4NDE2QkZBQTU0RTY0NzM4MTc3MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJRVQKUnOM7hi4SXkWolWKt/nL XMhX2Q9ZiUG+0UDRzIR9NjQ80n+Nv6N+wrDO07J0rsW95zH0zJJKcN4HcAIcIBfE 6MzT2LCORvm7hx9+wdMtkxjSrokP/kFyVreek4SFy53UH7+k5jPH8T2Qvz1OK/Z0 vMnj7GCM2QpuoCwqFqkqOHWlfiqMdgNWJsx2Vr5vI1+ItasbZpMWSsJTrwjEFnDi sVDkMfR+cM4G9SOVB5N3TrMgmtHF5SHn4C8kbvMMO/WKgRHJtc1LLmyLXqySof1w N/7zu83JfNSYbtaqPCEUCfSny6anaPM1yHA8XxESYJuVhCWyP1lR/YhunPOlAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUDehH9W7KX0omCEFr+qVOZHOBdycwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz NDNhMzczNTM4MzEzYTM0MzYzNTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEz MzM1MzYzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gUZQMA0GCSqGSIb3DQEBCwUAA4IBAQAY w51AX2fvLbKrMoEde853A7xWEm4lPZF29Xri+R3HM7wNBD7aQXiY6EJuiSYwZo4r EQkTU2PIkKcedFyCmMm8s+AlwcaZOfOGpNb7WbHvHlmwxvepXLqjp2A/LIOeT7ow HEqLHAPnsDKwu/z9jJv9SGE1kAGd7sC83PyGloNk+O55x3pUgL335X9hMvvKTr2N QB7ignUR3X4hIDCmx+z9rSueaRleprJpAze/AfnQneAfgv6oLplMXL8MU5PhTdSk T+54q/uXwkekRv4pV9qngbM5LnQfvexhfWHnaceO8XBGg87WTUAO4lzsJ+3gSlSD 4KS9f9bKy0XyrHdXXz6X -----END CERTIFICATE-----Generated at Mon Apr 28 12:34:53 2025 by rpki-client