$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa File: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (raw, json) Hash identifier: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg= Subject key identifier: 3B:9A:5C:AC:46:6B:9D:9F:A5:A9:6D:7C:3F:AD:0F:FC:A5:5B:F7:88 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 6038550A3A21F73D7371F32229120FE91AA55E56 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa Signing time: Sat 08 Feb 2025 01:38:44 +0000 ROA not before: Sat 08 Feb 2025 01:33:44 +0000 ROA not after: Sat 07 Feb 2026 01:38:44 +0000 asID: 215242 IP address blocks: 2a0f:85c1:7fa::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:38:55:0a:3a:21:f7:3d:73:71:f3:22:29:12:0f:e9:1a:a5:5e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Feb 8 01:33:44 2025 GMT Not After : Feb 7 01:38:44 2026 GMT Subject: CN=3B9A5CAC466B9D9FA5A96D7C3FAD0FFCA55BF788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:64:9b:3b:e8:f1:19:6a:d6:80:52:b8:98: 52:bd:9d:f8:fe:db:91:01:67:a7:e8:a2:5f:4a:39: 18:37:da:2f:89:d1:58:40:17:32:5e:01:73:fe:aa: 2f:4c:f4:ce:3d:6d:0f:39:ef:85:48:b5:64:83:18: 94:5b:d9:41:b6:c9:27:e5:cf:1e:69:3e:80:d2:19: d9:4c:72:0c:c5:b8:b8:0f:79:66:ab:6c:74:33:b8: 54:b9:73:5c:d6:b9:e9:3b:53:68:63:87:8a:91:7b: d4:1d:a9:b2:ed:7b:07:2f:6e:7a:ca:10:86:a8:a6: 70:1b:6e:18:be:fc:b9:1f:ba:3e:ad:7f:f6:5f:58: a4:31:08:2f:c3:ef:45:ff:72:21:d0:61:5b:ea:19: ba:18:4c:31:06:bc:de:32:56:a3:2b:f5:e6:ce:19: c5:bd:4f:6a:69:43:47:de:51:14:26:bc:36:e9:eb: 35:ab:53:b4:e3:9d:e7:21:ef:53:1d:bd:05:9d:0b: 36:59:dd:a7:88:65:13:1b:8d:d2:d4:cc:2c:21:ce: 31:24:6a:5a:73:e7:97:2c:e7:29:6d:ef:c3:4a:08: 1f:19:81:3c:ca:49:67:57:48:48:87:19:15:4e:bb: 33:60:2e:ff:41:8f:de:1d:9e:78:08:c5:54:37:16: 6b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9A:5C:AC:46:6B:9D:9F:A5:A9:6D:7C:3F:AD:0F:FC:A5:5B:F7:88 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:7fa::/48 Signature Algorithm: sha256WithRSAEncryption 14:3a:bd:8c:ea:5d:b1:3c:e4:0f:ce:fe:5c:76:1d:e4:06:04: 7f:5d:ef:77:dc:5a:df:b2:bb:ea:1d:40:a3:6e:31:d8:6c:c7: 4b:9a:07:2c:64:ef:99:26:4d:4b:fd:fe:11:79:a2:21:94:93: 2d:d7:d2:02:34:b3:ce:06:d2:d9:b1:88:52:75:7d:e5:6d:8e: 15:fb:47:70:92:26:8c:bc:11:94:1a:83:bc:4e:98:e2:a2:7f: d5:60:57:b5:7d:81:dc:db:68:d1:73:40:ab:71:63:47:79:af: 1d:68:38:27:1f:7a:ae:cf:b4:84:44:6a:d5:ce:bc:dc:a7:74: a9:b5:ef:7a:7d:7c:82:40:49:0a:dd:a1:2f:e1:ed:87:fb:8b: 97:e2:3f:cc:15:e1:3a:10:df:c9:47:55:06:05:81:a7:39:4d: 86:48:af:d1:02:1c:63:55:2a:15:a5:25:3f:19:2d:39:77:63: c0:d8:65:ad:80:37:cc:bf:64:94:d1:44:73:54:81:8f:a1:b7: 72:a5:70:c3:0b:97:f7:d7:04:f0:45:14:4f:fe:14:c9:3e:16: 92:d9:ac:0e:39:fe:70:48:86:b0:3c:9f:d9:92:08:ee:e4:7c: 8f:15:c9:04:b1:6a:e7:3c:bd:38:76:d8:5d:98:ce:fd:56:24: 3f:0a:5e:a7 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUYDhVCjoh9z1zcfMiKRIP6RqlXlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTAyMDgwMTMzNDRaFw0yNjAyMDcwMTM4NDRaMDMxMTAvBgNV BAMTKDNCOUE1Q0FDNDY2QjlEOUZBNUE5NkQ3QzNGQUQwRkZDQTU1QkY3ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBWSbO+jxGWrWgFK4mFK9nfj+ 25EBZ6fool9KORg32i+J0VhAFzJeAXP+qi9M9M49bQ8574VItWSDGJRb2UG2ySfl zx5pPoDSGdlMcgzFuLgPeWarbHQzuFS5c1zWuek7U2hjh4qRe9QdqbLtewcvbnrK EIaopnAbbhi+/Lkfuj6tf/ZfWKQxCC/D70X/ciHQYVvqGboYTDEGvN4yVqMr9ebO GcW9T2ppQ0feURQmvDbp6zWrU7Tjnech71MdvQWdCzZZ3aeIZRMbjdLUzCwhzjEk alpz55cs5ylt78NKCB8ZgTzKSWdXSEiHGRVOuzNgLv9Bj94dnngIxVQ3FmtfAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUO5pcrEZrnZ+lqW18P60P/KVb94gwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTM3NjY2MTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEH+jANBgkqhkiG9w0BAQsFAAOCAQEAFDq9 jOpdsTzkD87+XHYd5AYEf13vd9xa37K76h1Ao24x2GzHS5oHLGTvmSZNS/3+EXmi IZSTLdfSAjSzzgbS2bGIUnV95W2OFftHcJImjLwRlBqDvE6Y4qJ/1WBXtX2B3Nto 0XNAq3FjR3mvHWg4Jx96rs+0hERq1c683Kd0qbXven18gkBJCt2hL+Hth/uLl+I/ zBXhOhDfyUdVBgWBpzlNhkiv0QIcY1UqFaUlPxktOXdjwNhlrYA3zL9klNFEc1SB j6G3cqVwwwuX99cE8EUUT/4UyT4WktmsDjn+cEiGsDyf2ZII7uR8jxXJBLFq5zy9 OHbYXZjO/VYkPwpepw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:09:43 2025 by rpki-client