$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393030303a3a2f34302d3438203d3e20323134363433.roa File: 326131343a373538303a393030303a3a2f34302d3438203d3e20323134363433.roa (raw, json) Hash identifier: TpBOht4fHdBbgzn8V6oN1sv1lzMWI2nPHKIFH/SJnHk= Subject key identifier: 8C:66:32:B6:D4:36:A3:45:19:BC:63:D5:03:02:F0:2C:33:D6:C1:82 Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 77AD21E68AF4F5584A2365814CBFBBB2FA8E6EC3 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393030303a3a2f34302d3438203d3e20323134363433.roa Signing time: Tue 17 Dec 2024 03:25:47 +0000 ROA not before: Tue 17 Dec 2024 03:20:47 +0000 ROA not after: Tue 16 Dec 2025 03:25:47 +0000 asID: 214643 IP address blocks: 2a14:7580:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 08:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ad:21:e6:8a:f4:f5:58:4a:23:65:81:4c:bf:bb:b2:fa:8e:6e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Dec 17 03:20:47 2024 GMT Not After : Dec 16 03:25:47 2025 GMT Subject: CN=8C6632B6D436A34519BC63D50302F02C33D6C182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a1:52:92:be:52:2b:1a:d6:0a:98:81:3f:39: db:38:91:7e:30:04:76:c3:d2:79:85:6a:b1:d1:eb: 3f:70:b2:a5:24:09:3a:d8:92:a4:a6:ab:f3:a9:24: ae:13:7b:67:b7:35:60:75:49:d3:53:7f:bb:ca:0f: 97:3d:0b:05:ba:96:19:b1:4a:6a:23:7b:9d:0c:50: 08:d7:3a:ac:5e:f4:8e:48:7d:f6:83:d4:89:cc:fd: 17:d0:bb:9d:46:59:d8:d5:40:e5:c5:43:a7:de:99: 46:ab:7d:77:f9:ad:74:4b:62:78:e6:60:8c:20:de: ce:e3:66:41:1d:b9:4e:91:e2:5b:e7:62:3a:60:be: 76:1d:bb:d6:c0:27:a6:3f:a3:f0:b8:16:d3:7c:6a: 31:37:36:b4:06:b4:85:0f:5a:a8:71:20:21:c0:79: ce:e5:c3:ab:84:62:35:d1:de:b4:0b:fd:62:7e:e4: 87:b9:e7:99:98:66:cf:ae:9f:f5:1f:f8:fe:0d:dc: f0:67:37:75:fa:e9:5b:3a:12:a2:75:a3:f2:e4:9a: 61:4a:c8:3e:9b:38:53:82:1e:99:50:76:f3:30:bb: ad:b1:1e:0b:d2:95:ce:cc:6e:fd:6a:37:6b:cd:3d: bc:b9:a2:f1:71:e9:3e:0f:cb:7f:6a:6d:fa:75:91: e7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:66:32:B6:D4:36:A3:45:19:BC:63:D5:03:02:F0:2C:33:D6:C1:82 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393030303a3a2f34302d3438203d3e20323134363433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:9000::/40 Signature Algorithm: sha256WithRSAEncryption 57:22:0f:e5:6a:b8:32:2e:d4:2c:c9:52:49:a9:a9:c9:ca:8b: a6:a1:95:13:5b:28:83:6d:cc:fb:7a:5d:fb:c6:8c:dd:e3:8c: 4d:dc:e8:9b:eb:41:eb:db:cc:8d:c4:cf:af:f7:f0:f0:0c:a2: b9:d2:ae:34:1d:af:5a:ec:c5:a3:1a:36:bb:99:2c:74:d5:d9: 97:36:2b:da:57:7d:50:79:b9:5a:81:a0:57:42:51:a6:93:8f: 0f:04:96:69:6a:be:c9:25:05:49:5e:0a:f6:7a:01:76:73:a6: 41:b1:1a:49:66:eb:41:47:47:f2:f9:01:e9:b6:fb:b9:eb:e9: 5a:02:81:87:38:0e:cf:87:2f:ae:f1:c5:35:47:ea:c4:92:64: 9d:19:a0:0d:d1:9b:ee:bb:3e:4b:3a:db:65:1f:06:b0:8c:a3: 2d:e1:e4:24:03:ac:48:3b:4c:ff:9b:69:29:ca:68:b0:5c:ab: 2b:bf:6a:9b:a3:bf:ed:eb:b1:47:2b:04:87:ac:5f:6d:e9:a9: b8:e8:13:b8:98:2b:f7:a2:e1:9b:5f:b8:ee:51:29:ae:4d:ac: a9:d8:23:a5:e9:62:15:94:df:ab:25:ed:82:c0:aa:3f:a7:da: e3:a2:ec:72:da:7e:c3:a6:e1:3e:25:a2:0f:90:05:50:bb:56: 00:98:a9:f2 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUd60h5or09VhKI2WBTL+7svqObsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNDEyMTcwMzIwNDdaFw0yNTEyMTYwMzI1NDdaMDMxMTAvBgNV BAMTKDhDNjYzMkI2RDQzNkEzNDUxOUJDNjNENTAzMDJGMDJDMzNENkMxODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7oVKSvlIrGtYKmIE/Ods4kX4w BHbD0nmFarHR6z9wsqUkCTrYkqSmq/OpJK4Te2e3NWB1SdNTf7vKD5c9CwW6lhmx Smoje50MUAjXOqxe9I5IffaD1InM/RfQu51GWdjVQOXFQ6femUarfXf5rXRLYnjm YIwg3s7jZkEduU6R4lvnYjpgvnYdu9bAJ6Y/o/C4FtN8ajE3NrQGtIUPWqhxICHA ec7lw6uEYjXR3rQL/WJ+5Ie555mYZs+un/Uf+P4N3PBnN3X66Vs6EqJ1o/LkmmFK yD6bOFOCHplQdvMwu62xHgvSlc7Mbv1qN2vNPby5ovFx6T4Py39qbfp1kedvAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUjGYyttQ2o0UZvGPVAwLwLDPWwYIwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTM5MzAzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MTM0MzYzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gJAwDQYJKoZIhvcNAQELBQADggEBAFci D+VquDIu1CzJUkmpqcnKi6ahlRNbKINtzPt6XfvGjN3jjE3c6JvrQevbzI3Ez6/3 8PAMornSrjQdr1rsxaMaNruZLHTV2Zc2K9pXfVB5uVqBoFdCUaaTjw8Elmlqvskl BUleCvZ6AXZzpkGxGklm60FHR/L5Aem2+7nr6VoCgYc4Ds+HL67xxTVH6sSSZJ0Z oA3Rm+67Pks622UfBrCMoy3h5CQDrEg7TP+baSnKaLBcqyu/apujv+3rsUcrBIes X23pqbjoE7iYK/ei4ZtfuO5RKa5NrKnYI6XpYhWU36sl7YLAqj+n2uOi7HLafsOm 4T4log+QBVC7VgCYqfI= -----END CERTIFICATE-----Generated at Sun Apr 27 23:49:45 2025 by rpki-client