$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS210965.roa File: AS210965.roa (raw, json) Hash identifier: Llknzdjc82crIrVnQkmypI1VCbDsFGkgBbER9yO6dxY= Subject key identifier: 4A:2F:B4:AA:AD:23:CE:78:68:A6:2E:4E:52:AB:18:4C:E3:5D:FE:AC Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 551D737DFCD0CCD044B12EBEEC31FFBD28B83453 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS210965.roa Signing time: Thu 05 Dec 2024 17:30:34 +0000 ROA not before: Thu 05 Dec 2024 17:25:34 +0000 ROA not after: Thu 04 Dec 2025 17:30:34 +0000 asID: 210965 IP address blocks: 2a07:54c4:1764::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 18:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:1d:73:7d:fc:d0:cc:d0:44:b1:2e:be:ec:31:ff:bd:28:b8:34:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Dec 5 17:25:34 2024 GMT Not After : Dec 4 17:30:34 2025 GMT Subject: CN=4A2FB4AAAD23CE7868A62E4E52AB184CE35DFEAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cb:c3:eb:a7:e0:34:9f:98:e1:4b:de:39:ac: a4:3f:38:da:25:fc:b8:f8:62:2a:4b:df:83:aa:81: 88:23:92:36:a8:de:69:46:ca:1b:fc:87:4f:e8:75: 4b:b8:4d:11:f2:f7:e6:03:49:de:57:6e:36:ba:dd: d4:2a:a6:8d:8b:97:d7:bf:1e:92:dd:a2:eb:de:78: 82:c4:4c:13:74:44:2d:29:8a:70:e9:59:91:72:38: c1:f6:c2:2a:28:c8:d9:f3:37:c5:3f:0c:fd:ba:57: 00:00:7a:f3:fb:1f:1d:e3:c1:af:8e:0b:9b:74:98: 6c:cb:63:9b:1c:9e:2c:37:ee:ef:5e:5f:17:f7:25: 47:d8:61:80:5a:7c:69:ae:15:fc:17:60:37:c7:3c: 22:a3:f7:3b:39:85:73:04:ef:21:55:a1:3d:f0:93: 23:98:3f:18:0c:5c:2b:b8:14:84:b5:14:ae:b9:9a: 78:ac:b0:ec:c6:3c:e0:bf:2d:89:30:70:85:ea:79: 51:b8:df:2a:de:44:f7:71:3b:a7:67:9a:c2:9a:e3: 4a:dc:8a:3f:7b:3e:b5:a2:f8:eb:49:8f:b1:89:a8: 38:3f:4b:1c:46:bc:0b:ac:a5:39:b6:55:b4:73:2b: cf:2a:7b:fa:be:3b:79:21:93:4c:ef:1b:ca:89:23: 97:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2F:B4:AA:AD:23:CE:78:68:A6:2E:4E:52:AB:18:4C:E3:5D:FE:AC X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS210965.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:1764::/48 Signature Algorithm: sha256WithRSAEncryption 21:f8:26:e3:ad:94:7f:d0:a7:0a:12:05:32:a1:62:99:d8:35: 1c:4c:48:8b:3d:94:86:d4:17:27:85:e7:e8:26:e5:24:db:18: 28:dd:98:8e:01:48:c3:d2:cb:f5:20:93:a5:16:a3:22:3f:dd: a6:34:1e:f2:aa:c6:5c:f4:a8:4b:57:85:17:4d:8b:55:20:b1: cf:ca:6c:f6:79:d8:86:87:45:3c:7d:82:b7:f8:d0:4d:b5:13: 8f:23:7e:8f:3f:bc:2a:77:e3:e7:de:71:cf:7f:0c:90:bd:33: fd:77:50:93:a3:c8:1c:16:8d:09:0d:fc:6b:6a:27:4e:c4:57: 49:0f:93:45:20:49:a4:fc:3a:9a:05:e2:3c:84:97:80:0f:78: fe:8d:17:03:ac:6c:0a:21:60:63:87:2c:18:12:63:04:4c:51: 6f:76:a0:cb:0b:5c:5e:ea:63:85:a2:0e:da:18:b4:94:1e:d8: 3f:df:3f:14:3a:df:58:db:1a:d4:6a:1f:4a:1d:0e:de:55:7a: 8a:bc:e8:49:54:5b:7b:99:8c:e6:70:58:c2:2d:03:25:bc:a3: 95:c4:0d:3a:2c:2c:bd:4a:1f:54:27:5f:51:5d:08:48:97:ac: d0:df:92:d5:0d:8e:61:12:40:34:0d:92:e7:49:6a:70:54:cc: f5:12:c2:55 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUVR1zffzQzNBEsS6+7DH/vSi4NFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDEyMDUxNzI1MzRaFw0yNTEyMDQxNzMwMzRaMDMxMTAvBgNV BAMTKDRBMkZCNEFBQUQyM0NFNzg2OEE2MkU0RTUyQUIxODRDRTM1REZFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgy8Prp+A0n5jhS945rKQ/ONol /Lj4YipL34OqgYgjkjao3mlGyhv8h0/odUu4TRHy9+YDSd5Xbja63dQqpo2Ll9e/ HpLdouveeILETBN0RC0pinDpWZFyOMH2wiooyNnzN8U/DP26VwAAevP7Hx3jwa+O C5t0mGzLY5scniw37u9eXxf3JUfYYYBafGmuFfwXYDfHPCKj9zs5hXME7yFVoT3w kyOYPxgMXCu4FIS1FK65mnissOzGPOC/LYkwcIXqeVG43yreRPdxO6dnmsKa40rc ij97PrWi+OtJj7GJqDg/SxxGvAuspTm2VbRzK88qe/q+O3khk0zvG8qJI5fzAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUSi+0qq0jznhopi5OUqsYTONd/qwwHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTMjEwOTY1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU xBdkMA0GCSqGSIb3DQEBCwUAA4IBAQAh+CbjrZR/0KcKEgUyoWKZ2DUcTEiLPZSG 1BcnhefoJuUk2xgo3ZiOAUjD0sv1IJOlFqMiP92mNB7yqsZc9KhLV4UXTYtVILHP ymz2ediGh0U8fYK3+NBNtROPI36PP7wqd+Pn3nHPfwyQvTP9d1CTo8gcFo0JDfxr aidOxFdJD5NFIEmk/DqaBeI8hJeAD3j+jRcDrGwKIWBjhywYEmMETFFvdqDLC1xe 6mOFog7aGLSUHtg/3z8UOt9Y2xrUah9KHQ7eVXqKvOhJVFt7mYzmcFjCLQMlvKOV xA06LCy9Sh9UJ19RXQhIl6zQ35LVDY5hEkA0DZLnSWpwVMz1EsJV -----END CERTIFICATE-----Generated at Wed Apr 30 05:24:22 2025 by rpki-client