$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa File: 326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa (raw, json) Hash identifier: bkcmt94VX2qT5AatBWPB20wqy19gXukXDxeJ3DXH2P8= Subject key identifier: 0B:68:69:3E:E0:06:49:40:52:89:A9:F4:96:C4:5A:4B:A9:7B:DA:D4 Certificate issuer: /CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Certificate serial: 464B8C8C78CA3E45CCC298682BA957BD8190979B Authority key identifier: 89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa Signing time: Sat 12 Apr 2025 16:45:51 +0000 ROA not before: Sat 12 Apr 2025 16:40:51 +0000 ROA not after: Sat 11 Apr 2026 16:45:51 +0000 asID: 214841 IP address blocks: 2a14:7581:6fe0::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 11:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:4b:8c:8c:78:ca:3e:45:cc:c2:98:68:2b:a9:57:bd:81:90:97:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Validity Not Before: Apr 12 16:40:51 2025 GMT Not After : Apr 11 16:45:51 2026 GMT Subject: CN=0B68693EE00649405289A9F496C45A4BA97BDAD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:ea:f4:dc:b9:10:26:88:dd:d3:09:80:b4: 5f:8c:d4:54:87:94:39:29:46:f1:72:65:6f:ed:c7: 22:c8:f0:34:87:48:73:36:8d:75:f5:e3:d7:1b:80: 74:21:78:09:17:67:9f:3a:d1:68:8e:96:bd:5f:5f: 22:15:9b:84:15:a8:90:1e:08:83:e1:cc:09:11:0a: 3d:2b:4a:3a:a0:c6:dd:2e:7e:68:2f:0e:5c:70:31: 04:b6:2f:ec:68:01:51:49:90:a1:f4:4a:c9:08:4c: ed:7a:cf:e5:24:bc:ae:dc:e5:f5:66:88:38:3e:18: 0d:de:58:71:df:55:e1:80:7a:da:60:8d:94:b9:65: d1:6d:03:b0:e6:3b:bf:aa:4b:04:ad:64:34:b1:af: 90:e7:71:68:7d:d1:f7:bf:c1:23:ba:f9:ba:3b:77: cd:3c:f8:e1:09:4e:20:16:12:c0:73:d0:0f:02:29: 43:0a:3a:f7:45:c1:5f:55:b9:46:53:16:d9:5b:c7: 7e:b9:18:8c:da:1a:07:1c:55:0d:93:a0:ad:d1:5f: 43:02:c1:50:e3:b5:d8:de:83:82:7e:2b:d0:ea:d3: 09:7c:31:0d:4e:c9:21:14:04:9b:39:65:64:8b:d4: 77:b6:f6:bc:7a:9d:03:c9:f0:e7:aa:3e:99:36:a1: b4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:68:69:3E:E0:06:49:40:52:89:A9:F4:96:C4:5A:4B:A9:7B:DA:D4 X509v3 Authority Key Identifier: keyid:89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:6fe0::/44 Signature Algorithm: sha256WithRSAEncryption 48:70:49:56:4c:e0:3d:7e:ca:a3:1d:23:f2:13:f3:4a:45:c0: 0b:ed:7c:ed:b4:e1:7f:33:ba:ed:bb:b6:be:8d:14:74:b4:8c: cd:4e:91:db:07:16:cf:df:bc:03:c4:c4:75:1e:e3:13:3d:97: ca:d0:3b:b1:5d:ef:a0:44:2f:01:41:59:75:b8:7d:41:9c:24: d3:7c:a0:92:d3:25:ea:8a:99:74:e3:ed:45:f1:f5:f8:9b:6a: 3d:3c:de:2e:c8:5c:44:09:ea:66:72:d1:2f:c6:61:bd:e6:09: bf:28:3d:02:d7:31:40:1f:20:1e:68:e9:93:23:eb:4d:aa:51: c7:ec:30:35:2a:37:b6:98:e5:be:2c:3a:a7:81:c9:47:4b:34: 64:5a:02:92:cd:88:c6:75:c6:b6:9d:4d:8e:08:01:2d:26:b1: 7b:41:80:7d:4e:c0:c9:21:bc:29:d2:62:a1:f2:de:49:bb:9c: e8:86:b2:38:9b:d8:3b:32:68:e0:b6:55:ab:07:b6:1d:ef:2b: 27:c1:54:41:24:ec:96:38:ac:da:8d:f0:ca:c6:a6:a2:73:38: ac:ca:a0:45:ff:4e:cc:82:8a:da:f5:fa:36:40:a6:3c:c1:fc: 7d:9f:86:8c:6c:38:2c:13:80:7c:45:c1:04:6e:53:54:21:3d: 84:d0:a9:dc -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIURkuMjHjKPkXMwphoK6lXvYGQl5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBC OEYxMjA2QjAeFw0yNTA0MTIxNjQwNTFaFw0yNjA0MTExNjQ1NTFaMDMxMTAvBgNV BAMTKDBCNjg2OTNFRTAwNjQ5NDA1Mjg5QTlGNDk2QzQ1QTRCQTk3QkRBRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+vOr03LkQJojd0wmAtF+M1FSH lDkpRvFyZW/txyLI8DSHSHM2jXX149cbgHQheAkXZ5860WiOlr1fXyIVm4QVqJAe CIPhzAkRCj0rSjqgxt0ufmgvDlxwMQS2L+xoAVFJkKH0SskITO16z+UkvK7c5fVm iDg+GA3eWHHfVeGAetpgjZS5ZdFtA7DmO7+qSwStZDSxr5DncWh90fe/wSO6+bo7 d808+OEJTiAWEsBz0A8CKUMKOvdFwV9VuUZTFtlbx365GIzaGgccVQ2ToK3RX0MC wVDjtdjeg4J+K9Dq0wl8MQ1OySEUBJs5ZWSL1He29rx6nQPJ8OeqPpk2obQhAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUC2hpPuAGSUBSian0lsRaS6l72tQwHwYDVR0j BBgwFoAUiT/UG94ibFTyrSs92hnBoLjxIGswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFjZmEzMTgtMmE1Yy00MjQxLWFmYmItMzg3ZDcxZThj NTk2LzEvODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBCOEYxMjA2Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTNGRDQxQkRFMjI2QzU0RjJBRDJCM0RE QTE5QzFBMEI4RjEyMDZCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS84YWNmYTMxOC0yYTVjLTQyNDEtYWZiYi0zODdkNzFlOGM1OTYvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM2NjY2NTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MTM0MzgzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gW/gMA0GCSqGSIb3DQEBCwUAA4IBAQBI cElWTOA9fsqjHSPyE/NKRcAL7XzttOF/M7rtu7a+jRR0tIzNTpHbBxbP37wDxMR1 HuMTPZfK0DuxXe+gRC8BQVl1uH1BnCTTfKCS0yXqipl04+1F8fX4m2o9PN4uyFxE CepmctEvxmG95gm/KD0C1zFAHyAeaOmTI+tNqlHH7DA1Kje2mOW+LDqngclHSzRk WgKSzYjGdca2nU2OCAEtJrF7QYB9TsDJIbwp0mKh8t5Ju5zohrI4m9g7MmjgtlWr B7Yd7ysnwVRBJOyWOKzajfDKxqaiczisyqBF/07Mgora9fo2QKY8wfx9n4aMbDgs E4B8RcEEblNUIT2E0Knc -----END CERTIFICATE-----Generated at Tue Apr 29 20:33:00 2025 by rpki-client