$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393630303a3a2f34302d3438203d3e20313533333736.roa File: 326131343a373538303a393630303a3a2f34302d3438203d3e20313533333736.roa (raw, json) Hash identifier: a3qLcUPi+RQppEqo978zrfnO/2oaV9TKnigMH0wuHZQ= Subject key identifier: EE:DF:AC:E0:7D:4E:AD:D7:C6:92:6E:CF:F2:95:69:75:34:A1:90:99 Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 08FC4585A053FB0228A571E543F94D11F79D0D35 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393630303a3a2f34302d3438203d3e20313533333736.roa Signing time: Wed 15 Jan 2025 13:08:56 +0000 ROA not before: Wed 15 Jan 2025 13:03:56 +0000 ROA not after: Wed 14 Jan 2026 13:08:56 +0000 asID: 153376 IP address blocks: 2a14:7580:9600::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 10:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:fc:45:85:a0:53:fb:02:28:a5:71:e5:43:f9:4d:11:f7:9d:0d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jan 15 13:03:56 2025 GMT Not After : Jan 14 13:08:56 2026 GMT Subject: CN=EEDFACE07D4EADD7C6926ECFF295697534A19099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:57:ff:c1:94:e6:32:fe:e4:df:88:56:06:46: 1a:f4:b2:82:de:31:9d:94:5b:ff:75:3c:ee:ec:e6: 04:9e:db:80:b1:ef:eb:04:90:f8:70:86:5d:79:2e: 7c:1d:de:b7:14:22:51:22:5d:ae:92:96:d7:95:a1: 8d:3a:cd:00:00:1e:fc:c3:7f:e0:8c:af:da:9b:f7: 12:15:98:ae:0d:d7:4d:38:f4:76:2d:85:ec:d3:64: 0a:bd:16:27:03:c1:6c:a7:ca:4f:b3:18:05:74:73: 55:9d:82:10:90:c8:cb:c4:c5:ef:89:71:58:58:fc: ac:11:41:8c:e0:46:fa:12:22:5d:f5:4f:6f:35:24: ad:ae:b8:ad:31:00:ba:77:78:6c:94:b2:7d:29:5f: 03:b6:02:e5:0b:2c:67:98:bd:0a:16:4c:cb:2e:35: 1f:25:16:c2:f5:ce:16:57:51:fe:97:71:b9:ab:a0: 07:e2:eb:ab:0c:17:c7:fe:82:25:2a:8d:e4:32:bc: 69:68:34:be:71:c7:e7:32:5e:c8:24:63:33:5d:17: ae:b3:8d:d7:0e:52:80:f9:8a:78:d9:a3:53:21:36: d2:01:27:1e:a9:83:50:28:0a:a0:e6:c9:31:18:80: 4e:82:8e:a4:05:5b:93:bb:0c:06:66:de:a3:f4:a1: 5c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DF:AC:E0:7D:4E:AD:D7:C6:92:6E:CF:F2:95:69:75:34:A1:90:99 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393630303a3a2f34302d3438203d3e20313533333736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:9600::/40 Signature Algorithm: sha256WithRSAEncryption 73:ec:9d:af:cd:79:ea:d6:98:b8:29:b7:ee:98:1c:58:99:87: 6d:e2:8d:27:6a:ca:0b:cb:87:06:60:20:33:9c:0f:21:b7:27: e4:47:3e:01:27:04:98:42:89:bb:93:06:f2:30:66:77:16:fc: 30:41:12:c2:b0:fc:43:aa:5b:41:43:41:f4:73:a7:09:4c:17: 45:15:08:6a:e9:34:7b:64:87:ba:54:ba:94:91:6b:aa:e7:14: af:88:1a:85:80:41:77:1f:c2:e5:ef:cc:1b:2c:fe:4c:4d:56: 0a:06:d3:6b:2d:e1:f4:48:a2:a4:52:d1:82:c1:33:dd:71:c6: 90:9b:91:01:6d:88:3d:f0:1e:d9:0f:83:47:79:2a:bc:81:77: ec:ae:ff:df:c0:6e:eb:be:9c:9c:2b:2c:68:6a:ea:d1:04:ba: 3a:ec:30:72:60:6c:9c:fc:90:09:94:1d:0a:0e:dd:53:42:96: 86:5b:d9:32:83:60:98:18:db:f7:f6:7c:63:ce:0a:3d:b6:e3: 31:96:90:2d:8e:6d:fc:e8:8a:63:53:6d:d3:fa:68:25:d6:4b: 2a:b1:26:8e:55:00:b4:d3:98:57:ca:d3:6c:98:5b:4b:25:90: 5c:89:44:be:95:71:34:0e:9d:65:ce:df:e8:0e:a2:ae:69:19: 7c:87:59:d6 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUCPxFhaBT+wIopXHlQ/lNEfedDTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNTAxMTUxMzAzNTZaFw0yNjAxMTQxMzA4NTZaMDMxMTAvBgNV BAMTKEVFREZBQ0UwN0Q0RUFERDdDNjkyNkVDRkYyOTU2OTc1MzRBMTkwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5V//BlOYy/uTfiFYGRhr0soLe MZ2UW/91PO7s5gSe24Cx7+sEkPhwhl15Lnwd3rcUIlEiXa6SlteVoY06zQAAHvzD f+CMr9qb9xIVmK4N10049HYthezTZAq9FicDwWynyk+zGAV0c1WdghCQyMvExe+J cVhY/KwRQYzgRvoSIl31T281JK2uuK0xALp3eGyUsn0pXwO2AuULLGeYvQoWTMsu NR8lFsL1zhZXUf6XcbmroAfi66sMF8f+giUqjeQyvGloNL5xx+cyXsgkYzNdF66z jdcOUoD5injZo1MhNtIBJx6pg1AoCqDmyTEYgE6CjqQFW5O7DAZm3qP0oVwJAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQU7t+s4H1OrdfGkm7P8pVpdTShkJkwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTM5MzYzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzEz NTMzMzMzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gJYwDQYJKoZIhvcNAQELBQADggEBAHPs na/NeerWmLgpt+6YHFiZh23ijSdqygvLhwZgIDOcDyG3J+RHPgEnBJhCibuTBvIw ZncW/DBBEsKw/EOqW0FDQfRzpwlMF0UVCGrpNHtkh7pUupSRa6rnFK+IGoWAQXcf wuXvzBss/kxNVgoG02st4fRIoqRS0YLBM91xxpCbkQFtiD3wHtkPg0d5KryBd+yu /9/Abuu+nJwrLGhq6tEEujrsMHJgbJz8kAmUHQoO3VNCloZb2TKDYJgY2/f2fGPO Cj224zGWkC2ObfzoimNTbdP6aCXWSyqxJo5VALTTmFfK02yYW0slkFyJRL6VcTQO nWXO3+gOoq5pGXyHWdY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:21:37 2025 by rpki-client