$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa File: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (raw, json) Hash identifier: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ= Subject key identifier: 1D:AD:B4:6C:FD:0B:D1:BA:65:31:BD:B5:99:3A:3E:D9:9E:61:FA:A8 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 5B1654B46CA00AC930680A98A7351BFD9669D684 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa Signing time: Mon 17 Mar 2025 18:56:44 +0000 ROA not before: Mon 17 Mar 2025 18:51:44 +0000 ROA not after: Mon 16 Mar 2026 18:56:44 +0000 asID: 215242 IP address blocks: 2a0f:85c1:700::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 22:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:16:54:b4:6c:a0:0a:c9:30:68:0a:98:a7:35:1b:fd:96:69:d6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Mar 17 18:51:44 2025 GMT Not After : Mar 16 18:56:44 2026 GMT Subject: CN=1DADB46CFD0BD1BA6531BDB5993A3ED99E61FAA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:55:3f:3f:66:c0:3c:6c:fc:af:70:1a:c1: e8:eb:10:fa:52:52:64:20:33:a2:01:fc:4e:3a:6d: 73:af:1e:8e:79:cb:a7:f4:1b:5a:fa:23:af:6c:83: 6d:f7:b1:ab:a4:c7:a2:de:6a:a8:8a:ee:ce:90:75: 6c:ae:96:71:32:82:0a:f3:81:f7:13:34:cf:3f:6c: aa:dc:9c:e5:0e:46:04:44:e7:f6:48:42:c5:53:a0: 7d:3f:96:94:4e:5c:5f:f8:26:b5:68:fb:ba:63:20: 76:06:5d:0b:3a:84:3f:40:af:e5:66:fe:11:a9:ca: ac:30:19:12:ac:08:69:00:e0:7b:2e:c7:ae:b9:ba: a4:65:10:7b:34:65:e1:3d:53:64:01:bc:cc:7f:0f: fb:65:a2:e2:64:97:cc:1f:21:08:e3:a1:43:c8:8b: a7:d0:4b:f0:d9:c2:14:78:3e:33:e2:32:fd:a4:95: 7b:4c:5d:29:b9:b8:c6:aa:1e:b9:cf:fd:dc:4f:5f: 38:f2:39:ae:77:15:40:bb:6f:d8:f5:36:bf:d4:db: 94:97:b8:f9:ae:b5:c7:87:9c:b9:9b:4e:a4:16:fe: ab:22:fb:3b:18:59:bf:b9:c9:ec:f2:3d:ce:9a:e4: 38:6e:71:0f:86:01:5d:28:b0:d1:9a:75:94:19:ad: 15:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AD:B4:6C:FD:0B:D1:BA:65:31:BD:B5:99:3A:3E:D9:9E:61:FA:A8 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:700::/40 Signature Algorithm: sha256WithRSAEncryption 1a:f4:c6:6f:4e:89:55:1d:47:cf:85:a2:59:5e:17:ae:9c:f1: cc:dd:79:81:63:cc:ea:0e:7a:4d:fd:25:e8:8f:2e:08:27:67: 17:40:e4:70:0a:22:27:80:83:81:48:be:29:6d:f1:97:b6:79: 9b:0a:3a:ca:bf:e4:52:c9:03:ea:46:c1:e9:e3:da:4d:4b:a8: 4f:b7:1c:30:cb:2f:f0:99:3a:78:91:1d:5d:a5:c9:9d:88:e2: 8c:2c:23:9e:58:27:c5:7c:5c:36:67:a2:44:62:8d:3b:89:ba: 98:54:d9:7d:73:ba:aa:db:01:a9:fe:3c:4f:ee:4d:d9:f0:be: 92:ba:8c:40:41:b5:94:f0:1c:5a:82:96:10:70:8a:c7:e6:d7: 90:82:d7:c0:de:5e:aa:13:6c:a6:af:8e:d4:62:38:18:00:5c: 92:96:5f:e0:e4:35:8a:c7:75:26:e1:fa:c3:ad:21:72:98:04: b7:7d:6c:c3:35:73:57:0a:df:1b:d6:24:29:b9:ec:98:22:7b: 6b:7a:af:0a:5c:1b:4e:f1:28:bc:9f:14:c2:70:d8:5c:ae:40: b7:f9:e3:40:bf:62:f3:ac:61:8c:ed:8b:94:80:e8:82:45:fb: c4:d3:6b:4e:9e:7b:88:f5:5f:0a:63:c3:c9:2d:1b:16:b3:3e: 26:33:58:79 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWxZUtGygCskwaAqYpzUb/ZZp1oQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTAzMTcxODUxNDRaFw0yNjAzMTYxODU2NDRaMDMxMTAvBgNV BAMTKDFEQURCNDZDRkQwQkQxQkE2NTMxQkRCNTk5M0EzRUQ5OUU2MUZBQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoaVU/P2bAPGz8r3AawejrEPpS UmQgM6IB/E46bXOvHo55y6f0G1r6I69sg233saukx6LeaqiK7s6QdWyulnEyggrz gfcTNM8/bKrcnOUORgRE5/ZIQsVToH0/lpROXF/4JrVo+7pjIHYGXQs6hD9Ar+Vm /hGpyqwwGRKsCGkA4Hsux665uqRlEHs0ZeE9U2QBvMx/D/tlouJkl8wfIQjjoUPI i6fQS/DZwhR4PjPiMv2klXtMXSm5uMaqHrnP/dxPXzjyOa53FUC7b9j1Nr/U25SX uPmutceHnLmbTqQW/qsi+zsYWb+5yezyPc6a5DhucQ+GAV0osNGadZQZrRX5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUHa20bP0L0bplMb21mTo+2Z5h+qgwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTM3MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEz NTMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoPhcEHMA0GCSqGSIb3DQEBCwUAA4IBAQAa9MZv TolVHUfPhaJZXheunPHM3XmBY8zqDnpN/SXojy4IJ2cXQORwCiIngIOBSL4pbfGX tnmbCjrKv+RSyQPqRsHp49pNS6hPtxwwyy/wmTp4kR1dpcmdiOKMLCOeWCfFfFw2 Z6JEYo07ibqYVNl9c7qq2wGp/jxP7k3Z8L6SuoxAQbWU8BxagpYQcIrH5teQgtfA 3l6qE2ymr47UYjgYAFySll/g5DWKx3Um4frDrSFymAS3fWzDNXNXCt8b1iQpueyY Intreq8KXBtO8Si8nxTCcNhcrkC3+eNAv2LzrGGM7YuUgOiCRfvE02tOnnuI9V8K Y8PJLRsWsz4mM1h5 -----END CERTIFICATE-----Generated at Mon Apr 28 14:55:13 2025 by rpki-client