$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa File: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (raw, json) Hash identifier: QHn6tZLY5zwuhSPqOA8QQMb0D6GsyTP/mqBIqGqENAM= Subject key identifier: 5B:BA:6E:6D:BC:E8:9A:07:A5:C1:30:19:FC:D8:8F:DB:12:0A:52:B1 Certificate issuer: /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC Certificate serial: 172EFDDF80350466C7A19C8E226CFC95327B633B Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa Signing time: Fri 11 Apr 2025 01:21:11 +0000 ROA not before: Fri 11 Apr 2025 01:16:11 +0000 ROA not after: Fri 10 Apr 2026 01:21:11 +0000 asID: 214393 IP address blocks: 2a0a:6044:8ff0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 00:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:2e:fd:df:80:35:04:66:c7:a1:9c:8e:22:6c:fc:95:32:7b:63:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC Validity Not Before: Apr 11 01:16:11 2025 GMT Not After : Apr 10 01:21:11 2026 GMT Subject: CN=5BBA6E6DBCE89A07A5C13019FCD88FDB120A52B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a9:76:6b:b9:fd:cf:99:8e:53:11:90:9a:43: 10:b5:01:b3:df:03:9f:6b:a6:e4:09:5d:ee:3d:bf: 96:40:b6:bb:2e:f3:f3:87:9a:dc:93:82:1f:b6:c5: 7d:c4:8d:39:58:ab:80:30:70:c8:68:72:ca:52:1f: ed:c6:9b:a1:63:a9:52:80:0f:52:8b:3e:91:a7:88: 97:cb:4b:ee:61:79:a6:84:8d:03:92:b9:54:92:e3: 44:37:81:f7:8a:b3:d7:90:2f:78:3f:5d:2b:71:f8: 82:15:09:54:bb:40:fe:a7:b5:69:59:12:9a:a0:13: b4:7e:ca:54:b2:ee:98:5a:c4:1d:ef:56:de:58:c9: 7d:1f:d7:03:76:a9:52:86:95:39:42:1c:b6:f6:37: d9:81:17:4f:5f:40:57:7d:e6:77:ed:dd:14:1a:3b: 9c:c4:b2:c1:b3:aa:b4:1c:68:de:20:23:59:c6:bf: 77:ad:b8:54:bc:ab:4f:39:12:0d:d6:e6:47:5d:c3: 17:27:8a:22:c2:23:2f:60:06:87:45:51:46:33:1a: eb:71:58:26:e0:1e:b0:02:3e:7e:eb:52:d5:77:d7: 6b:23:04:03:54:f3:a8:33:67:cc:55:77:8e:33:f5: f1:c8:eb:05:8e:4e:16:47:71:6d:47:56:8b:29:29: 83:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BA:6E:6D:BC:E8:9A:07:A5:C1:30:19:FC:D8:8F:DB:12:0A:52:B1 X509v3 Authority Key Identifier: keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:8ff0::/44 Signature Algorithm: sha256WithRSAEncryption 3c:2d:48:bd:a3:65:fa:fd:28:e8:c9:7f:71:75:43:6b:c6:da: 9d:09:72:29:9b:18:4d:d4:36:9e:5d:e0:e0:34:82:be:ba:bb: 9a:a2:6d:ad:98:bc:e9:5f:f2:8e:4c:6f:92:68:56:3b:ee:aa: 6b:4d:7e:46:62:81:aa:33:b8:55:c9:af:17:01:68:68:a4:e0: 82:44:d3:55:63:e0:c4:f8:b3:bd:8a:c8:50:01:60:a8:ba:af: 97:fe:e5:2a:07:8c:30:3f:73:d7:3f:37:56:fb:87:13:29:f0: 98:e7:33:ad:13:8f:5d:e2:d8:9f:17:cb:5c:37:85:e8:ca:c2: ec:4d:a7:05:95:3d:72:49:ee:48:97:80:59:ae:05:f8:73:d0: 5f:47:d7:6b:cc:92:9c:32:7a:8f:78:33:a0:f0:5b:97:29:e2: 2e:51:b1:1a:0a:37:5e:94:e1:7e:8f:eb:f6:03:fb:69:fc:32: 94:b6:df:54:8a:d3:ea:df:60:8b:5c:10:9f:aa:cf:4a:44:ed: 7b:fd:3e:8a:2a:cd:0d:12:d5:6f:34:fe:f0:92:15:14:ae:65: d7:02:df:66:95:b2:88:c6:f9:5a:56:37:b5:34:6f:0e:d7:51: 74:e5:df:e7:74:2c:7d:22:91:9d:6f:4a:73:d7:b8:53:fb:aa: fa:61:59:30 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUFy7934A1BGbHoZyOImz8lTJ7YzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM4OEFGNjI5QzcwMkREQTg4RkE2QkIyQTk1NURCOEYy NEVEMkJCQzAeFw0yNTA0MTEwMTE2MTFaFw0yNjA0MTAwMTIxMTFaMDMxMTAvBgNV BAMTKDVCQkE2RTZEQkNFODlBMDdBNUMxMzAxOUZDRDg4RkRCMTIwQTUyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8qXZruf3PmY5TEZCaQxC1AbPf A59rpuQJXe49v5ZAtrsu8/OHmtyTgh+2xX3EjTlYq4AwcMhocspSH+3Gm6FjqVKA D1KLPpGniJfLS+5heaaEjQOSuVSS40Q3gfeKs9eQL3g/XStx+IIVCVS7QP6ntWlZ EpqgE7R+ylSy7phaxB3vVt5YyX0f1wN2qVKGlTlCHLb2N9mBF09fQFd95nft3RQa O5zEssGzqrQcaN4gI1nGv3etuFS8q085Eg3W5kddwxcniiLCIy9gBodFUUYzGutx WCbgHrACPn7rUtV312sjBANU86gzZ8xVd44z9fHI6wWOThZHcW1HVospKYM/AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUW7pubbzomgelwTAZ/NiP2xIKUrEwHwYDVR0j BBgwFoAUQ4ivYpxwLdqI+muyqVXbjyTtK7wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzQvNDM4OEFGNjI5QzcwMkREQTg4RkE2QkIyQTk1NURCOEYyNEVEMkJCQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy80Mzg4QUY2MjlDNzAyRERBODhGQTZCQjJB OTU1REI4RjI0RUQyQkJDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2IvNC8zMjYxMzA2 MTNhMzYzMDM0MzQzYTM4NjY2NjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM0MzMzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKgpgRI/wMA0GCSqGSIb3DQEBCwUAA4IBAQA8 LUi9o2X6/SjoyX9xdUNrxtqdCXIpmxhN1DaeXeDgNIK+uruaom2tmLzpX/KOTG+S aFY77qprTX5GYoGqM7hVya8XAWhopOCCRNNVY+DE+LO9ishQAWCouq+X/uUqB4ww P3PXPzdW+4cTKfCY5zOtE49d4tifF8tcN4XoysLsTacFlT1ySe5Il4BZrgX4c9Bf R9drzJKcMnqPeDOg8FuXKeIuUbEaCjdelOF+j+v2A/tp/DKUtt9UitPq32CLXBCf qs9KRO17/T6KKs0NEtVvNP7wkhUUrmXXAt9mlbKIxvlaVje1NG8O11F05d/ndCx9 IpGdb0pz17hT+6r6YVkw -----END CERTIFICATE-----Generated at Tue Apr 29 16:59:28 2025 by rpki-client