$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393430303a3a2f33392d3438203d3e20313430393135.roa File: 326131343a373538303a393430303a3a2f33392d3438203d3e20313430393135.roa (raw, json) Hash identifier: mVqYPHXZFgCW00Y2ej0uNLFZlmcciaFr8mPxKhhXZIs= Subject key identifier: 84:5E:79:0F:A1:29:93:C8:44:81:2E:FF:13:20:A5:6E:92:67:48:99 Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 7103C1213740F2FC8CB2F7150462D6B643270EE8 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393430303a3a2f33392d3438203d3e20313430393135.roa Signing time: Fri 10 Jan 2025 16:15:03 +0000 ROA not before: Fri 10 Jan 2025 16:10:03 +0000 ROA not after: Fri 09 Jan 2026 16:15:03 +0000 asID: 140915 IP address blocks: 2a14:7580:9400::/39 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 10:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:03:c1:21:37:40:f2:fc:8c:b2:f7:15:04:62:d6:b6:43:27:0e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jan 10 16:10:03 2025 GMT Not After : Jan 9 16:15:03 2026 GMT Subject: CN=845E790FA12993C844812EFF1320A56E92674899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:51:ee:43:3d:42:db:44:b6:9b:93:ee:05:16: 71:ab:6b:8e:b3:3e:36:63:30:46:95:98:e6:ab:d9: b3:61:bf:ea:f5:ed:87:89:58:79:db:4a:58:f9:f2: 1d:f2:d8:5b:23:2f:b2:de:19:3b:0d:11:9f:e0:25: e7:f2:d8:a0:a7:e4:13:86:1c:46:1b:4a:c9:63:d8: 1c:74:9d:c5:d4:2f:98:99:24:3e:0e:2a:b8:0a:f2: d3:8b:56:c8:c4:e2:4f:fd:39:4b:a6:f6:ef:e7:03: 56:94:4f:05:ae:c3:20:c5:7e:d5:43:7d:47:c0:1c: ae:b8:89:1d:ab:50:be:ee:b7:34:9f:51:5d:d5:bb: 39:50:6f:31:34:5b:52:ee:2f:12:de:de:5a:6e:3e: 0e:89:8a:0d:64:6b:bb:51:0a:6f:12:83:00:c2:f6: 66:45:b3:38:87:17:ca:77:cb:8e:ab:41:29:fe:89: 35:e4:08:df:2c:5e:95:82:36:7b:48:bd:c9:89:70: 2e:fc:f9:fd:3c:e5:3a:e7:92:32:99:60:aa:64:3b: a3:74:43:68:5d:28:55:89:63:df:a2:9f:67:48:d7: 6f:ec:2c:19:0d:51:c3:2f:8e:37:bb:be:50:6a:db: 08:a5:31:34:08:97:79:6b:fe:a6:db:37:06:bf:3b: cb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5E:79:0F:A1:29:93:C8:44:81:2E:FF:13:20:A5:6E:92:67:48:99 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393430303a3a2f33392d3438203d3e20313430393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:9400::/39 Signature Algorithm: sha256WithRSAEncryption 66:d9:5d:20:b5:76:c2:a3:c4:3e:d5:d7:03:27:64:78:83:06: 32:9e:29:50:ec:f2:11:d1:7e:fb:cd:17:ef:83:d2:1b:a4:df: 95:15:8b:8c:3b:da:82:71:7a:ea:a3:ab:63:8b:e1:77:fd:b8: 23:a1:50:e6:22:36:9a:ca:5e:7f:ce:73:c5:bc:b6:77:e3:2e: 09:de:13:28:2a:a8:36:d2:1c:07:36:d0:4b:91:e8:a1:05:10: 7f:e0:7c:d3:a8:37:14:47:b1:30:98:93:e7:98:59:c0:e7:41: 1c:ed:d4:7c:4f:f9:49:ce:01:8d:cd:e9:c9:4a:30:35:bc:39: aa:47:e9:6d:e9:ec:ad:c1:66:99:68:2c:f4:ef:e4:d2:46:72: c3:df:83:a0:12:ac:9c:12:13:81:de:70:d8:3d:f2:59:ac:48: 3a:db:bd:ef:b6:f6:70:e4:ab:17:cd:4b:2a:58:9d:5a:db:13: 2f:62:5b:6f:21:04:b9:ef:dc:5e:22:14:d1:39:fb:f6:ea:50: 78:9b:20:8a:c5:61:22:23:7b:ed:af:0d:7b:24:81:95:28:c0: 61:ba:8a:ca:65:7a:84:eb:10:63:cb:b0:5c:01:b0:72:82:68: 5d:b9:74:b1:97:79:34:4c:6e:d0:e3:e2:fa:69:97:fe:1a:2a: 0c:4b:97:6d -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUcQPBITdA8vyMsvcVBGLWtkMnDugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNTAxMTAxNjEwMDNaFw0yNjAxMDkxNjE1MDNaMDMxMTAvBgNV BAMTKDg0NUU3OTBGQTEyOTkzQzg0NDgxMkVGRjEzMjBBNTZFOTI2NzQ4OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDUe5DPULbRLabk+4FFnGra46z PjZjMEaVmOar2bNhv+r17YeJWHnbSlj58h3y2FsjL7LeGTsNEZ/gJefy2KCn5BOG HEYbSslj2Bx0ncXUL5iZJD4OKrgK8tOLVsjE4k/9OUum9u/nA1aUTwWuwyDFftVD fUfAHK64iR2rUL7utzSfUV3VuzlQbzE0W1LuLxLe3lpuPg6Jig1ka7tRCm8SgwDC 9mZFsziHF8p3y46rQSn+iTXkCN8sXpWCNntIvcmJcC78+f085TrnkjKZYKpkO6N0 Q2hdKFWJY9+in2dI12/sLBkNUcMvjje7vlBq2wilMTQIl3lr/qbbNwa/O8vjAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUhF55D6Epk8hEgS7/EyClbpJnSJkwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTM5MzQzMDMwM2EzYTJmMzMzOTJkMzQzODIwM2QzZTIwMzEz NDMwMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYBKhR1gJQwDQYJKoZIhvcNAQELBQADggEBAGbZ XSC1dsKjxD7V1wMnZHiDBjKeKVDs8hHRfvvNF++D0huk35UVi4w72oJxeuqjq2OL 4Xf9uCOhUOYiNprKXn/Oc8W8tnfjLgneEygqqDbSHAc20EuR6KEFEH/gfNOoNxRH sTCYk+eYWcDnQRzt1HxP+UnOAY3N6clKMDW8OapH6W3p7K3BZploLPTv5NJGcsPf g6ASrJwSE4HecNg98lmsSDrbve+29nDkqxfNSypYnVrbEy9iW28hBLnv3F4iFNE5 +/bqUHibIIrFYSIje+2vDXskgZUowGG6ispleoTrEGPLsFwBsHKCaF25dLGXeTRM btDj4vppl/4aKgxLl20= -----END CERTIFICATE-----Generated at Sat Apr 26 16:21:55 2025 by rpki-client