$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa File: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (raw, json) Hash identifier: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc= Subject key identifier: B4:87:3F:F1:7F:C5:F9:D2:16:85:1B:46:04:3B:1B:6B:7B:FF:73:D5 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 444D737D1A79DC7A991F9242A679D3DDD8A43FD8 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa Signing time: Wed 23 Apr 2025 18:33:57 +0000 ROA not before: Wed 23 Apr 2025 18:28:57 +0000 ROA not after: Wed 22 Apr 2026 18:33:57 +0000 asID: 205463 IP address blocks: 2a0f:85c1:7f3::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 22:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:4d:73:7d:1a:79:dc:7a:99:1f:92:42:a6:79:d3:dd:d8:a4:3f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Apr 23 18:28:57 2025 GMT Not After : Apr 22 18:33:57 2026 GMT Subject: CN=B4873FF17FC5F9D216851B46043B1B6B7BFF73D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:83:cc:fc:9c:a6:27:a9:7a:29:4c:b5:a7:dc: 82:42:3c:6c:70:6b:f5:29:b3:f4:47:77:87:55:3d: b9:70:32:9a:10:8a:cf:f8:48:60:bd:9c:c6:42:4e: d1:b4:4d:9c:3a:c5:07:b6:64:bc:94:8c:be:04:a9: 27:78:b0:27:f1:0c:d1:d9:16:3b:18:5b:44:49:85: e5:7e:f9:3a:ff:af:72:bd:eb:4b:53:eb:1b:97:7e: 87:cc:1c:16:d6:99:c2:b0:2a:96:46:12:00:18:5c: e0:08:95:cf:39:cc:be:0d:bc:df:2a:fb:27:33:bd: 46:fd:93:9c:00:52:1d:84:50:dc:c4:2d:35:d6:11: f2:69:50:47:63:77:96:3c:ab:fd:35:2b:08:40:50: 21:c2:6b:a9:97:86:6d:33:8f:bd:dd:60:f9:dd:45: 33:44:bf:b2:2c:23:60:f6:a5:35:96:3b:7b:55:c3: a0:95:b9:fa:3d:82:ad:25:e1:88:ea:30:b3:c3:e2: 2d:fd:b2:75:f9:7d:0d:6a:8c:59:38:e9:7b:98:45: b2:de:0c:60:1b:e1:6d:be:7b:3e:8f:4b:96:25:58: 4e:64:3e:47:09:22:41:7c:f3:3d:78:07:3a:c5:42: cd:4f:4a:70:34:8c:c8:a9:dc:6f:db:92:8e:ce:73: 0e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:87:3F:F1:7F:C5:F9:D2:16:85:1B:46:04:3B:1B:6B:7B:FF:73:D5 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:7f3::/48 Signature Algorithm: sha256WithRSAEncryption ab:54:23:8b:d7:4d:82:28:73:d3:b7:bc:80:64:a7:bf:00:3e: 7b:42:3f:ae:a5:d4:cf:2c:ba:78:92:4c:a5:08:83:5a:57:00: 09:f7:aa:d9:e5:a5:90:f8:dd:42:9b:8e:8c:77:a4:18:76:83: da:e0:e3:0c:4b:be:75:5a:09:11:d8:85:70:b7:a9:de:0d:d8: d1:44:6a:42:3c:6a:18:b4:ce:9b:b6:fc:04:93:b6:2c:65:13: 9b:1f:5a:c6:4b:50:3f:98:f2:3e:a3:29:22:45:46:88:9a:14: 98:27:30:63:b0:39:0c:fc:bb:18:2c:38:b1:35:ea:0b:cf:7c: 81:b8:f4:61:98:9e:4e:69:fb:e5:18:c9:dc:71:ab:a8:ad:54: ca:b4:cb:e0:81:1d:dc:d9:e5:90:9a:1f:74:27:64:a5:35:98: fc:bc:40:92:3e:8b:28:46:47:65:9b:13:31:4d:51:bc:43:e5: 03:5a:bc:99:6f:24:46:a2:32:75:3c:42:47:27:aa:b2:40:0a: a1:47:03:4c:8b:d9:ea:65:26:5c:1e:59:69:91:77:43:e1:3c: 2d:3f:aa:f4:b4:8d:51:79:8b:90:6c:95:46:1d:39:62:64:5a: 95:25:c8:a9:87:3e:e0:ec:03:5e:20:b6:0f:54:95:f4:0e:70: 7c:5d:2e:0c -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIURE1zfRp53HqZH5JCpnnT3dikP9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTA0MjMxODI4NTdaFw0yNjA0MjIxODMzNTdaMDMxMTAvBgNV BAMTKEI0ODczRkYxN0ZDNUY5RDIxNjg1MUI0NjA0M0IxQjZCN0JGRjczRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCog8z8nKYnqXopTLWn3IJCPGxw a/Ups/RHd4dVPblwMpoQis/4SGC9nMZCTtG0TZw6xQe2ZLyUjL4EqSd4sCfxDNHZ FjsYW0RJheV++Tr/r3K960tT6xuXfofMHBbWmcKwKpZGEgAYXOAIlc85zL4NvN8q +yczvUb9k5wAUh2EUNzELTXWEfJpUEdjd5Y8q/01KwhAUCHCa6mXhm0zj73dYPnd RTNEv7IsI2D2pTWWO3tVw6CVufo9gq0l4YjqMLPD4i39snX5fQ1qjFk46XuYRbLe DGAb4W2+ez6PS5YlWE5kPkcJIkF88z14BzrFQs1PSnA0jMip3G/bko7Ocw6tAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUtIc/8X/F+dIWhRtGBDsba3v/c9UwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTM3NjYzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAz NTM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEH8zANBgkqhkiG9w0BAQsFAAOCAQEAq1Qj i9dNgihz07e8gGSnvwA+e0I/rqXUzyy6eJJMpQiDWlcACfeq2eWlkPjdQpuOjHek GHaD2uDjDEu+dVoJEdiFcLep3g3Y0URqQjxqGLTOm7b8BJO2LGUTmx9axktQP5jy PqMpIkVGiJoUmCcwY7A5DPy7GCw4sTXqC898gbj0YZieTmn75RjJ3HGrqK1UyrTL 4IEd3NnlkJofdCdkpTWY/LxAkj6LKEZHZZsTMU1RvEPlA1q8mW8kRqIydTxCRyeq skAKoUcDTIvZ6mUmXB5ZaZF3Q+E8LT+q9LSNUXmLkGyVRh05YmRalSXIqYc+4OwD XiC2D1SV9A5wfF0uDA== -----END CERTIFICATE-----Generated at Mon Apr 28 09:23:00 2025 by rpki-client