$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa File: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (raw, json) Hash identifier: WILaErOtYEwaER07cW7IGwEP87dFlbxnPw+ZhGtPeTA= Subject key identifier: E2:12:C1:A0:42:7B:F7:BE:EC:08:0E:04:28:E4:1C:8A:A9:92:26:E9 Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 389118F426633077EE1B482325F7D63209ADD483 Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa Signing time: Tue 25 Jun 2024 14:12:59 +0000 ROA not before: Tue 25 Jun 2024 14:07:59 +0000 ROA not after: Tue 24 Jun 2025 14:12:59 +0000 asID: 37988 IP address blocks: 2a14:7581:d000::/41 maxlen: 41 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 13:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:91:18:f4:26:63:30:77:ee:1b:48:23:25:f7:d6:32:09:ad:d4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Jun 25 14:07:59 2024 GMT Not After : Jun 24 14:12:59 2025 GMT Subject: CN=E212C1A0427BF7BEEC080E0428E41C8AA99226E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:46:cc:ad:f3:0f:31:2a:3f:a1:37:42:20:41: 08:6f:24:53:6a:4b:60:10:43:cc:9e:54:06:b6:8e: a2:9b:76:5c:67:dd:37:d8:97:71:bc:ad:99:48:32: 9f:ab:0e:dd:e8:cf:34:1c:7a:cd:fa:6d:a8:db:23: c3:37:11:21:ff:59:27:bc:ae:5a:1a:e4:dd:96:be: 59:c6:a2:a1:d0:74:97:74:f6:26:8e:af:93:8f:38: 40:30:7b:3c:1f:88:dd:3b:6a:76:0b:1e:76:75:fa: 4b:23:17:46:42:10:04:1e:b6:f0:15:e9:81:5c:3a: 45:9d:60:5e:6e:01:b3:1c:b1:33:f7:7a:be:ee:94: 1d:7f:46:72:15:32:68:e4:11:96:92:2b:ed:46:1d: a0:d5:48:dc:0b:2a:ea:15:7b:24:9e:e6:a2:fc:1a: f4:9a:a8:4d:ea:03:76:6c:52:53:35:d9:76:17:87: 24:05:f1:e3:dd:35:1f:75:53:df:98:cc:cc:af:89: 1f:86:00:57:a9:ea:fe:65:95:1b:80:ff:5b:d5:30: 7e:c4:78:f3:21:dc:42:36:52:fb:c3:66:ab:f7:b1: cb:6d:c6:66:2d:02:bf:4a:35:98:99:9e:d0:8e:43: 71:e9:78:1a:86:a3:b0:e9:dd:61:12:58:a1:26:09: d1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:12:C1:A0:42:7B:F7:BE:EC:08:0E:04:28:E4:1C:8A:A9:92:26:E9 X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:d000::/41 Signature Algorithm: sha256WithRSAEncryption 9d:71:27:9e:24:c7:04:61:1d:d7:49:b3:37:87:e1:be:f9:d3: d4:92:f7:b4:b8:ef:0d:4c:a1:4b:98:b9:37:83:d9:2a:2e:0e: 9e:bd:93:2a:3a:9b:a4:64:c8:34:c5:9e:c1:15:58:d0:2b:ab: f7:a0:99:0e:cd:d9:9c:da:43:32:dd:42:a3:ce:ee:6b:e8:c2: 9e:c3:81:81:7c:22:d8:c0:16:18:36:00:1b:a2:75:7f:a4:30: df:bc:df:8b:c9:55:0b:6d:ac:28:12:64:ec:6c:b7:d2:94:7b: d4:eb:96:34:13:0a:3b:3b:b2:04:54:fe:f5:54:eb:af:94:d2: e3:68:cf:42:7b:f7:08:41:93:7b:9a:a9:87:46:cd:3d:ea:3c: 02:78:03:17:09:11:cd:a5:ab:a3:3e:d6:cd:8a:48:2e:f2:e6: fa:8d:68:39:fc:fe:6b:19:79:13:96:16:ae:7e:d3:14:27:b5: 7f:df:07:6f:d3:98:2d:c9:f9:0c:e1:ee:5e:7d:ef:4b:df:8d: e8:e6:a6:4c:cc:63:6b:b2:94:80:54:a5:62:48:b0:8a:3a:0b: 0b:f2:e0:c0:84:c5:42:2d:a6:b4:4d:c6:ab:64:dd:9c:ba:64: 0f:32:19:80:61:7c:79:a8:60:af:65:fc:40:74:07:ce:99:90: 9f:12:96:f6 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUOJEY9CZjMHfuG0gjJffWMgmt1IMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNDA2MjUxNDA3NTlaFw0yNTA2MjQxNDEyNTlaMDMxMTAvBgNV BAMTKEUyMTJDMUEwNDI3QkY3QkVFQzA4MEUwNDI4RTQxQzhBQTk5MjI2RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Rsyt8w8xKj+hN0IgQQhvJFNq S2AQQ8yeVAa2jqKbdlxn3TfYl3G8rZlIMp+rDt3ozzQces36bajbI8M3ESH/WSe8 rloa5N2WvlnGoqHQdJd09iaOr5OPOEAwezwfiN07anYLHnZ1+ksjF0ZCEAQetvAV 6YFcOkWdYF5uAbMcsTP3er7ulB1/RnIVMmjkEZaSK+1GHaDVSNwLKuoVeySe5qL8 GvSaqE3qA3ZsUlM12XYXhyQF8ePdNR91U9+YzMyviR+GAFep6v5llRuA/1vVMH7E ePMh3EI2UvvDZqv3scttxmYtAr9KNZiZntCOQ3HpeBqGo7Dp3WESWKEmCdFbAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQU4hLBoEJ7977sCA4EKOQciqmSJukwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iNTljMTA2Yy01M2I0LTRlOTItOWZiYS1kNjA4MjdiNWJkYjgvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTY0MzAzMDMwM2EzYTJmMzQzMTJkMzQzMTIwM2QzZTIwMzMz NzM5MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHByoUdYHQADANBgkqhkiG9w0BAQsFAAOCAQEAnXEn niTHBGEd10mzN4fhvvnT1JL3tLjvDUyhS5i5N4PZKi4Onr2TKjqbpGTINMWewRVY 0Cur96CZDs3ZnNpDMt1Co87ua+jCnsOBgXwi2MAWGDYAG6J1f6Qw37zfi8lVC22s KBJk7Gy30pR71OuWNBMKOzuyBFT+9VTrr5TS42jPQnv3CEGTe5qph0bNPeo8AngD FwkRzaWroz7WzYpILvLm+o1oOfz+axl5E5YWrn7TFCe1f98Hb9OYLcn5DOHuXn3v S9+N6OamTMxja7KUgFSlYkiwijoLC/LgwITFQi2mtE3Gq2TdnLpkDzIZgGF8eahg r2X8QHQHzpmQnxKW9g== -----END CERTIFICATE-----Generated at Tue Apr 29 22:05:12 2025 by rpki-client