$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa File: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (raw, json) Hash identifier: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo= Subject key identifier: E7:1A:91:78:52:20:06:24:31:38:3B:7D:9F:C9:BC:A4:24:EC:E3:C5 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 6E7D42BBD9C5CB9ACF344934745A9407312A969A Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa Signing time: Sat 08 Feb 2025 03:47:35 +0000 ROA not before: Sat 08 Feb 2025 03:42:35 +0000 ROA not after: Sat 07 Feb 2026 03:47:35 +0000 asID: 215242 IP address blocks: 2a0f:85c1:7fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:7d:42:bb:d9:c5:cb:9a:cf:34:49:34:74:5a:94:07:31:2a:96:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Feb 8 03:42:35 2025 GMT Not After : Feb 7 03:47:35 2026 GMT Subject: CN=E71A91785220062431383B7D9FC9BCA424ECE3C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:96:d3:0f:5e:53:c5:6b:47:a8:e1:cd:e2: 57:8b:4e:01:18:b6:f8:82:7c:2d:90:46:f2:a3:12: d4:31:9c:40:45:98:12:1a:9d:0e:b4:1d:0d:95:6a: 86:a4:cf:ae:0b:9f:67:be:52:7e:07:fd:67:fd:db: 62:90:8d:6e:68:b8:67:ad:06:b7:36:39:73:b2:53: 54:ad:86:a4:42:dc:ba:00:d9:ff:8e:07:4d:1c:79: d0:8b:03:1a:51:72:9e:34:66:96:e8:e9:7f:59:24: a5:d7:44:74:46:dc:b8:84:6d:ca:21:c7:51:28:e9: 48:cf:ff:77:b2:a5:2f:fc:a0:90:62:8b:1e:5f:96: 7d:4a:0c:d5:8b:d7:2b:61:e6:22:aa:e5:79:68:ce: d1:f5:76:39:6a:98:bf:55:8c:b3:23:12:ec:b8:be: 31:dd:f2:53:5f:af:d4:7d:de:40:9c:0d:45:3f:f8: 5f:e5:88:0c:b2:d7:51:13:18:11:ed:e8:c3:06:59: c9:95:78:83:84:b2:4f:94:87:b9:8f:85:fe:b3:59: 26:56:a1:c1:67:a0:3d:39:71:9e:45:a2:c5:46:65: d7:80:7b:e6:b3:af:b1:1f:52:e3:e7:95:4b:25:df: 38:62:68:b4:fd:cd:c1:98:3d:85:a6:2a:a6:83:fc: d9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1A:91:78:52:20:06:24:31:38:3B:7D:9F:C9:BC:A4:24:EC:E3:C5 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:7fb::/48 Signature Algorithm: sha256WithRSAEncryption 76:bd:5e:75:a7:84:11:e8:1d:c7:2d:91:7e:fa:93:3b:d2:ef: 00:b2:cd:3d:56:0b:14:7e:18:04:88:18:88:34:33:9e:01:63: 47:2e:2c:d3:a3:01:2e:ca:f9:e4:ef:52:38:98:00:81:d0:73: b6:df:ba:c8:e3:8d:30:36:47:49:af:c4:e7:98:30:fc:a5:40: 0a:58:2f:c7:67:16:8f:3b:3b:4a:81:e2:e7:aa:31:45:be:57: 1b:b6:0b:62:3f:dc:a6:26:7f:cc:63:a5:0f:5d:a5:c7:85:12: 3d:98:ba:85:75:ca:d1:ca:4d:89:61:94:95:0f:e8:7c:ec:87: a6:40:b6:1d:8d:67:eb:d9:7d:ad:c9:99:5b:04:50:83:11:7f: 7d:3b:4a:03:c4:7a:ca:12:ff:e5:5d:3f:c5:d7:f1:d5:1e:ed: cf:de:73:b3:92:3a:52:da:63:e4:b7:e9:77:9d:8c:08:8c:6c: ab:40:cd:23:ec:ae:70:79:d7:6b:99:6a:77:66:62:58:94:c1: 39:37:20:7c:f8:73:3c:ee:be:98:b3:b5:5e:43:20:cf:68:8e: 5e:a6:98:c4:ce:33:36:28:29:bc:76:bc:ad:0b:3c:ea:22:53: af:bc:89:75:7a:c3:c1:5f:f8:6d:83:4c:f3:b1:27:36:95:cf: db:fd:44:28 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUbn1Cu9nFy5rPNEk0dFqUBzEqlpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTAyMDgwMzQyMzVaFw0yNjAyMDcwMzQ3MzVaMDMxMTAvBgNV BAMTKEU3MUE5MTc4NTIyMDA2MjQzMTM4M0I3RDlGQzlCQ0E0MjRFQ0UzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJh5bTD15TxWtHqOHN4leLTgEY tviCfC2QRvKjEtQxnEBFmBIanQ60HQ2Vaoakz64Ln2e+Un4H/Wf922KQjW5ouGet Brc2OXOyU1SthqRC3LoA2f+OB00cedCLAxpRcp40Zpbo6X9ZJKXXRHRG3LiEbcoh x1Eo6UjP/3eypS/8oJBiix5fln1KDNWL1yth5iKq5XloztH1djlqmL9VjLMjEuy4 vjHd8lNfr9R93kCcDUU/+F/liAyy11ETGBHt6MMGWcmVeIOEsk+Uh7mPhf6zWSZW ocFnoD05cZ5FosVGZdeAe+azr7EfUuPnlUsl3zhiaLT9zcGYPYWmKqaD/NnHAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQU5xqReFIgBiQxODt9n8m8pCTs48UwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTM3NjY2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEH+zANBgkqhkiG9w0BAQsFAAOCAQEAdr1e daeEEegdxy2RfvqTO9LvALLNPVYLFH4YBIgYiDQzngFjRy4s06MBLsr55O9SOJgA gdBztt+6yOONMDZHSa/E55gw/KVAClgvx2cWjzs7SoHi56oxRb5XG7YLYj/cpiZ/ zGOlD12lx4USPZi6hXXK0cpNiWGUlQ/ofOyHpkC2HY1n69l9rcmZWwRQgxF/fTtK A8R6yhL/5V0/xdfx1R7tz95zs5I6Utpj5Lfpd52MCIxsq0DNI+yucHnXa5lqd2Zi WJTBOTcgfPhzPO6+mLO1XkMgz2iOXqaYxM4zNigpvHa8rQs86iJTr7yJdXrDwV/4 bYNM87EnNpXP2/1EKA== -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:24 2025 by rpki-client