$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/326131343a313463313a3130303a3a2f34382d3438203d3e203531303139.roa File: 326131343a313463313a3130303a3a2f34382d3438203d3e203531303139.roa (raw, json) Hash identifier: 69RcUidZnQ+LqgABsH+Kh3UWsC9vqAhVCCjeesgrVBw= Subject key identifier: D6:C8:94:F0:6B:CF:A5:0D:53:A8:11:A3:BF:87:DA:89:B9:0D:5C:7E Certificate issuer: /CN=58E92F2C3859C2D0EF322A871688CB22928E2F3E Certificate serial: 78E941248D4BF7D5C71A80DCAB872CBD315D48D2 Authority key identifier: 58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/326131343a313463313a3130303a3a2f34382d3438203d3e203531303139.roa Signing time: Fri 04 Apr 2025 01:06:26 +0000 ROA not before: Fri 04 Apr 2025 01:01:26 +0000 ROA not after: Fri 03 Apr 2026 01:06:26 +0000 asID: 51019 IP address blocks: 2a14:14c1:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 13:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e9:41:24:8d:4b:f7:d5:c7:1a:80:dc:ab:87:2c:bd:31:5d:48:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58E92F2C3859C2D0EF322A871688CB22928E2F3E Validity Not Before: Apr 4 01:01:26 2025 GMT Not After : Apr 3 01:06:26 2026 GMT Subject: CN=D6C894F06BCFA50D53A811A3BF87DA89B90D5C7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ee:7d:65:a4:3a:5d:d7:fa:2e:59:52:eb:f0: 29:14:14:be:1c:4b:58:ef:49:30:f4:52:42:50:21: 09:55:1a:1d:66:80:d9:af:94:9a:2a:ef:43:b0:df: e6:55:3b:b8:57:59:c3:50:6a:f9:d3:b3:ad:03:95: 00:ba:09:9a:b6:2c:3c:30:24:c1:dc:ad:d9:2e:ab: b0:ce:93:1c:e4:6d:42:7a:90:5a:f0:ed:80:6f:65: 8f:3d:05:14:79:6e:2b:47:e4:91:f1:bd:54:53:eb: 93:7b:5b:23:fe:63:7a:f3:02:c2:c5:21:f3:27:25: 67:4b:f8:08:ed:4d:10:13:52:b7:c7:12:18:e5:d4: 74:3f:0a:19:63:6b:44:13:b8:64:b6:b7:56:c9:64: be:5e:8a:df:1f:76:3c:37:8d:bf:49:bd:ab:80:c3: 9a:68:45:43:6c:b1:91:e5:04:b4:62:b5:0c:4b:3a: e1:48:78:93:1d:bf:f8:13:03:9d:64:ee:72:b5:f8: 37:c9:81:9d:a6:f3:0b:1c:07:4c:7a:bd:b0:47:e3: 8b:50:96:0e:83:ed:2e:d6:1c:08:57:73:7c:36:a8: 6c:f8:6b:04:25:87:4e:73:4d:66:68:2b:42:06:ec: 72:3d:ae:c5:de:f9:ab:1e:ad:0a:60:c2:1d:94:56: 3f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C8:94:F0:6B:CF:A5:0D:53:A8:11:A3:BF:87:DA:89:B9:0D:5C:7E X509v3 Authority Key Identifier: keyid:58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/326131343a313463313a3130303a3a2f34382d3438203d3e203531303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:14c1:100::/48 Signature Algorithm: sha256WithRSAEncryption a5:89:38:2f:86:b8:0d:cb:24:cb:32:1b:d9:da:c1:29:b7:12: b4:21:9b:ad:0e:73:d2:1c:fc:e1:35:3c:b1:bd:a0:68:2b:38: ff:3d:8d:37:39:cd:36:ed:b3:98:ed:73:a5:45:ac:5a:be:77: 75:c8:3f:36:ee:4a:f2:55:92:fd:49:cb:4d:10:e8:dc:2f:e4: 7f:af:04:e2:fc:39:ff:1a:56:4f:1a:ab:f3:e7:50:9c:56:39: c9:25:a5:69:dc:51:bb:19:49:a8:ae:07:c9:7b:45:ea:86:43: d1:8f:4b:16:ae:41:01:f8:26:87:15:60:3e:fa:11:1b:e6:e2: 10:ad:d1:55:9d:a2:5f:f4:c1:8d:e3:50:e4:4d:e1:62:bc:8a: cc:b9:c5:7d:88:24:45:85:ad:9b:53:4b:3c:95:07:ef:ad:d6: e5:9b:0a:ce:c8:33:7a:bc:1a:44:a4:9c:e2:01:ac:fd:9b:1e: 97:5c:db:84:c8:c0:18:f9:de:49:70:4f:b7:b4:a1:7b:c3:ea: 7f:1a:af:62:2e:d8:f0:d0:74:a9:87:cb:34:32:a4:67:d8:59: c7:e1:ad:ca:7a:4b:6d:57:6d:96:ca:69:60:4b:0c:5a:d7:3a: 97:3c:48:ed:6a:5e:9d:d5:1b:aa:b3:f0:80:06:6b:d1:51:63: 9b:64:0f:ce -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUeOlBJI1L99XHGoDcq4csvTFdSNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThFOTJGMkMzODU5QzJEMEVGMzIyQTg3MTY4OENCMjI5 MjhFMkYzRTAeFw0yNTA0MDQwMTAxMjZaFw0yNjA0MDMwMTA2MjZaMDMxMTAvBgNV BAMTKEQ2Qzg5NEYwNkJDRkE1MEQ1M0E4MTFBM0JGODdEQTg5QjkwRDVDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ7n1lpDpd1/ouWVLr8CkUFL4c S1jvSTD0UkJQIQlVGh1mgNmvlJoq70Ow3+ZVO7hXWcNQavnTs60DlQC6CZq2LDww JMHcrdkuq7DOkxzkbUJ6kFrw7YBvZY89BRR5bitH5JHxvVRT65N7WyP+Y3rzAsLF IfMnJWdL+AjtTRATUrfHEhjl1HQ/Chlja0QTuGS2t1bJZL5eit8fdjw3jb9JvauA w5poRUNssZHlBLRitQxLOuFIeJMdv/gTA51k7nK1+DfJgZ2m8wscB0x6vbBH44tQ lg6D7S7WHAhXc3w2qGz4awQlh05zTWZoK0IG7HI9rsXe+aserQpgwh2UVj+lAgMB AAGjggKBMIICfTAdBgNVHQ4EFgQU1siU8GvPpQ1TqBGjv4faibkNXH4wHwYDVR0j BBgwFoAUWOkvLDhZwtDvMiqHFojLIpKOLz4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzMvNThFOTJGMkMzODU5QzJEMEVGMzIyQTg3MTY4OENCMjI5MjhFMkYzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0zNWNkLTQ1 MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC81OEU5MkYyQzM4NTlDMkQwRUYzMjJBODcx Njg4Q0IyMjkyOEUyRjNFLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hYTAwNGJhMS00MTliLTRkYjUtYmJkMy01Y2NhNjMzY2FlM2YvMy8zMjYxMzEz NDNhMzEzNDYzMzEzYTMxMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzEz MDMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAqFBTBAQAwDQYJKoZIhvcNAQELBQADggEBAKWJOC+G uA3LJMsyG9nawSm3ErQhm60Oc9Ic/OE1PLG9oGgrOP89jTc5zTbts5jtc6VFrFq+ d3XIPzbuSvJVkv1Jy00Q6Nwv5H+vBOL8Of8aVk8aq/PnUJxWOcklpWncUbsZSaiu B8l7ReqGQ9GPSxauQQH4JocVYD76ERvm4hCt0VWdol/0wY3jUORN4WK8isy5xX2I JEWFrZtTSzyVB++t1uWbCs7IM3q8GkSknOIBrP2bHpdc24TIwBj53klwT7e0oXvD 6n8ar2Iu2PDQdKmHyzQypGfYWcfhrcp6S21XbZbKaWBLDFrXOpc8SO1qXp3VG6qz 8IAGa9FRY5tkD84= -----END CERTIFICATE-----Generated at Sun Apr 27 21:48:38 2025 by rpki-client