$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa File: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (raw, json) Hash identifier: te+8Q1RQF+/El0aKCot2iG7DWX0UbXJkKUaUr9PfYwE= Subject key identifier: DF:29:88:01:40:7B:F1:05:00:C9:7C:05:F5:58:CE:72:B3:9D:57:39 Certificate issuer: /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC Certificate serial: 1E9B97B5358840F0C1186783ADC126BC0F171F Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa Signing time: Fri 11 Apr 2025 01:21:12 +0000 ROA not before: Fri 11 Apr 2025 01:16:12 +0000 ROA not after: Fri 10 Apr 2026 01:21:12 +0000 asID: 215605 IP address blocks: 2a0a:6044:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 12:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9b:97:b5:35:88:40:f0:c1:18:67:83:ad:c1:26:bc:0f:17:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC Validity Not Before: Apr 11 01:16:12 2025 GMT Not After : Apr 10 01:21:12 2026 GMT Subject: CN=DF298801407BF10500C97C05F558CE72B39D5739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ac:f4:a4:18:2c:29:a5:42:97:e2:e9:72:ef: 69:7f:b0:c0:40:88:4d:36:41:91:38:ba:16:31:8a: 22:cf:fd:95:3a:a8:cf:83:f7:ee:03:ac:57:ad:bd: aa:4c:de:4b:2f:e6:36:21:c6:a1:88:d9:39:e6:16: d1:04:eb:73:83:b9:3f:5d:a2:e2:8e:50:b0:98:eb: 64:2f:9d:ec:54:7a:17:20:e9:b3:92:6e:84:e5:6d: fd:a5:c2:88:3d:31:e0:23:39:52:fe:fc:3b:55:27: a2:f8:e7:da:63:8a:cb:35:7a:27:18:70:70:06:57: 62:ec:5c:4f:61:bc:a9:37:60:d5:51:a2:79:d1:c6: dd:f3:70:be:4d:d8:80:7f:0f:b1:12:bb:bd:d1:35: 01:7e:da:b0:ea:cf:a6:58:2f:7c:53:ec:68:46:25: 23:32:de:d9:c7:20:4d:17:bb:9e:cf:16:75:7a:26: a3:1b:0a:6f:40:c9:36:f6:e3:3c:bc:cd:f1:9b:a4: 34:e7:05:de:0a:4e:c0:ad:06:7c:88:36:4d:0c:2d: 76:3e:56:91:54:ad:83:8b:b1:00:7a:a8:96:0d:fa: 90:55:96:9f:a8:b4:b0:2a:aa:27:f8:49:96:11:ed: 68:4a:6d:39:13:5d:ad:c4:06:50:48:cd:ee:2b:15: 44:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:29:88:01:40:7B:F1:05:00:C9:7C:05:F5:58:CE:72:B3:9D:57:39 X509v3 Authority Key Identifier: keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:8000::/36 Signature Algorithm: sha256WithRSAEncryption 83:86:56:1d:64:65:a9:71:de:e8:c0:a7:69:04:d2:70:dd:69: 64:80:be:e1:a8:08:a0:47:b4:0a:3f:f8:ad:c5:b4:f9:f1:90: a0:9c:88:b9:9f:42:ed:a3:3a:b8:46:3e:67:cc:72:f9:fc:9a: 15:d6:88:08:d5:a4:18:5c:73:13:fb:2c:fb:ba:93:c3:ea:04: cd:b4:0d:76:0d:5f:b0:80:c3:f3:d4:e0:78:9b:cf:a0:69:8b: 94:16:d1:24:de:6e:65:c2:05:89:ee:e5:a1:1d:00:09:b8:cc: 54:30:c7:ee:bf:8e:49:d3:ed:55:6e:1f:08:d9:55:1c:e4:59: 18:c0:4b:3e:eb:db:9b:7a:c0:5a:f6:5e:53:30:4b:a6:47:ca: 5d:7f:9d:81:7e:4a:fe:30:07:46:27:1a:1e:da:ee:f9:3a:9c: b9:92:e9:03:b5:3d:36:1c:61:2a:fc:19:98:93:38:d4:62:3f: db:de:9f:61:19:5d:18:60:00:95:53:d7:db:43:1c:1d:bf:5a: 89:8e:d8:a5:15:2b:31:0e:59:13:43:2c:05:c8:6d:a5:fc:3e: 37:bc:0b:bc:9a:56:ff:a5:44:8f:e0:e5:18:5b:43:e8:2e:e0: 1b:d8:86:57:d2:42:1a:4b:45:a8:a9:9e:b5:88:dc:cf:96:96: f6:1a:f7:99 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgITHpuXtTWIQPDBGGeDrcEmvA8XHzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg0Mzg4QUY2MjlDNzAyRERBODhGQTZCQjJBOTU1REI4RjI0 RUQyQkJDMB4XDTI1MDQxMTAxMTYxMloXDTI2MDQxMDAxMjExMlowMzExMC8GA1UE AxMoREYyOTg4MDE0MDdCRjEwNTAwQzk3QzA1RjU1OENFNzJCMzlENTczOTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKas9KQYLCmlQpfi6XLvaX+wwECI TTZBkTi6FjGKIs/9lTqoz4P37gOsV629qkzeSy/mNiHGoYjZOeYW0QTrc4O5P12i 4o5QsJjrZC+d7FR6FyDps5JuhOVt/aXCiD0x4CM5Uv78O1Unovjn2mOKyzV6Jxhw cAZXYuxcT2G8qTdg1VGiedHG3fNwvk3YgH8PsRK7vdE1AX7asOrPplgvfFPsaEYl IzLe2ccgTRe7ns8WdXomoxsKb0DJNvbjPLzN8ZukNOcF3gpOwK0GfIg2TQwtdj5W kVStg4uxAHqolg36kFWWn6i0sCqqJ/hJlhHtaEptORNdrcQGUEjN7isVRIkCAwEA AaOCAoQwggKAMB0GA1UdDgQWBBTfKYgBQHvxBQDJfAX1WM5ys51XOTAfBgNVHSME GDAWgBRDiK9inHAt2oj6a7KpVduPJO0rvDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYy Y2IvNC80Mzg4QUY2MjlDNzAyRERBODhGQTZCQjJBOTU1REI4RjI0RUQyQkJDLmNy bDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlm OS05YjZjLTljOWYzODk4OTk1ZC8zLzQzODhBRjYyOUM3MDJEREE4OEZBNkJCMkE5 NTVEQjhGMjRFRDJCQkMuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi80LzMyNjEzMDYx M2EzNjMwMzQzNDNhMzgzMDMwMzAzYTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMjMx MzUzNjMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqCmBEgDANBgkqhkiG9w0BAQsFAAOCAQEAg4ZW HWRlqXHe6MCnaQTScN1pZIC+4agIoEe0Cj/4rcW0+fGQoJyIuZ9C7aM6uEY+Z8xy +fyaFdaICNWkGFxzE/ss+7qTw+oEzbQNdg1fsIDD89TgeJvPoGmLlBbRJN5uZcIF ie7loR0ACbjMVDDH7r+OSdPtVW4fCNlVHORZGMBLPuvbm3rAWvZeUzBLpkfKXX+d gX5K/jAHRicaHtru+TqcuZLpA7U9NhxhKvwZmJM41GI/296fYRldGGAAlVPX20Mc Hb9aiY7YpRUrMQ5ZE0MsBchtpfw+N7wLvJpW/6VEj+DlGFtD6C7gG9iGV9JCGktF qKmetYjcz5aW9hr3mQ== -----END CERTIFICATE-----Generated at Mon Apr 28 04:26:22 2025 by rpki-client