$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566633a3a2f34372d3438203d3e20323134383138.roa File: 326131343a373538303a656566633a3a2f34372d3438203d3e20323134383138.roa (raw, json) Hash identifier: US56dZR1qg2QIsnKlWMaAYdRfGahXOn5eBs2iKqc1/Q= Subject key identifier: FE:1A:85:2B:C8:3F:F5:EB:17:FC:06:24:3A:19:D0:12:A1:62:72:20 Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 53EE002B02032BE5007254100D1139432A5A0ECE Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566633a3a2f34372d3438203d3e20323134383138.roa Signing time: Thu 13 Feb 2025 18:47:08 +0000 ROA not before: Thu 13 Feb 2025 18:42:08 +0000 ROA not after: Thu 12 Feb 2026 18:47:08 +0000 asID: 214818 IP address blocks: 2a14:7580:eefc::/47 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 08:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ee:00:2b:02:03:2b:e5:00:72:54:10:0d:11:39:43:2a:5a:0e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Feb 13 18:42:08 2025 GMT Not After : Feb 12 18:47:08 2026 GMT Subject: CN=FE1A852BC83FF5EB17FC06243A19D012A1627220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:12:78:d8:5a:dd:6f:03:d7:3b:b0:74:d4:ce: a3:a2:a7:d5:6d:f2:a1:da:a4:95:d6:03:89:f6:4f: 12:59:93:d0:38:9a:31:58:d5:75:2e:ba:06:f5:18: 6c:d7:14:d6:2d:4f:65:95:49:5d:ea:4a:93:9f:15: 64:33:42:e8:04:20:03:32:a0:77:38:69:2d:90:0b: ff:b9:41:21:62:3e:b4:0c:fc:6f:aa:1d:1b:ab:84: 79:ac:16:ba:c6:9e:86:39:6d:01:de:79:af:91:85: 4f:39:29:cc:a6:97:a4:66:d9:24:44:52:0b:ac:7d: 53:35:e3:ad:03:1d:a8:29:4a:5a:4c:d5:30:81:2d: 17:d1:53:6e:9b:32:f2:14:b5:fb:83:e7:c6:d9:54: e0:eb:f5:53:0f:ac:d3:44:33:82:de:c8:90:6a:c5: 3e:6e:57:d2:56:19:01:3a:ee:55:46:4e:4a:17:e7: c9:b7:fd:10:34:05:a6:a7:f3:30:d2:35:16:e4:90: 04:a8:24:34:24:85:ed:56:fa:86:a2:15:22:8e:ed: b1:5d:12:a9:1e:09:ac:d4:1a:1a:bf:d1:88:e7:bd: 91:18:96:6d:0e:ca:ef:9b:ce:26:88:0c:c3:70:5c: db:ab:90:99:b2:34:aa:de:ab:f8:1b:af:4c:11:a1: ad:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1A:85:2B:C8:3F:F5:EB:17:FC:06:24:3A:19:D0:12:A1:62:72:20 X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566633a3a2f34372d3438203d3e20323134383138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:eefc::/47 Signature Algorithm: sha256WithRSAEncryption 50:bc:80:bd:73:2f:41:2e:87:92:72:0c:ab:62:a9:12:83:87: a0:e9:3b:99:6c:de:e8:2b:91:73:f8:0f:34:46:16:dd:7f:ac: ac:6a:77:fc:f3:2a:80:b2:76:40:4c:64:1c:0c:3e:d5:5f:11: 6c:3a:76:aa:c8:e7:9e:0b:f6:90:d5:26:dd:8c:37:18:2a:5a: 21:59:81:c3:1c:d2:68:69:fd:38:f0:ca:04:2f:bb:31:04:c7: da:9b:b5:56:85:ac:3d:61:b0:c3:30:ce:0b:5f:e9:95:f0:c4: d3:db:aa:1b:71:d0:58:b7:61:fd:fc:b8:63:5b:83:43:44:4e: 06:f7:2c:4c:fe:7c:32:b9:d7:a3:21:57:a5:0d:bb:c9:30:2f: f4:3e:9f:91:07:2f:59:92:09:af:75:53:b1:7e:2a:8f:5d:8e: 42:91:3b:8a:46:41:e1:17:b3:f3:62:b7:7c:cd:66:fe:cc:67: b9:83:50:9f:2e:a1:27:67:3f:f4:af:c7:54:53:88:8a:74:a6: c6:61:40:06:af:be:dc:a4:4a:8a:98:5f:87:43:1a:06:5f:50: 6b:4f:0e:f2:c8:77:1a:eb:98:9c:d9:d2:b5:8a:69:31:07:9f: 02:d9:7d:7e:89:b5:b1:d0:c9:14:9b:fb:0d:6b:b9:8e:10:d7: 5c:ed:d5:a3 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUU+4AKwIDK+UAclQQDRE5QypaDs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAyMTMxODQyMDhaFw0yNjAyMTIxODQ3MDhaMDMxMTAvBgNV BAMTKEZFMUE4NTJCQzgzRkY1RUIxN0ZDMDYyNDNBMTlEMDEyQTE2MjcyMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcEnjYWt1vA9c7sHTUzqOip9Vt 8qHapJXWA4n2TxJZk9A4mjFY1XUuugb1GGzXFNYtT2WVSV3qSpOfFWQzQugEIAMy oHc4aS2QC/+5QSFiPrQM/G+qHRurhHmsFrrGnoY5bQHeea+RhU85Kcyml6Rm2SRE UgusfVM1460DHagpSlpM1TCBLRfRU26bMvIUtfuD58bZVODr9VMPrNNEM4LeyJBq xT5uV9JWGQE67lVGTkoX58m3/RA0Baan8zDSNRbkkASoJDQkhe1W+oaiFSKO7bFd EqkeCazUGhq/0YjnvZEYlm0Oyu+bziaIDMNwXNurkJmyNKreq/gbr0wRoa01AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU/hqFK8g/9esX/AYkOhnQEqFiciAwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjU2NjYzM2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIz MTM0MzgzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcBKhR1gO78MA0GCSqGSIb3DQEBCwUAA4IBAQBQ vIC9cy9BLoeScgyrYqkSg4eg6TuZbN7oK5Fz+A80Rhbdf6ysanf88yqAsnZATGQc DD7VXxFsOnaqyOeeC/aQ1SbdjDcYKlohWYHDHNJoaf048MoEL7sxBMfam7VWhaw9 YbDDMM4LX+mV8MTT26obcdBYt2H9/LhjW4NDRE4G9yxM/nwyudejIVelDbvJMC/0 Pp+RBy9ZkgmvdVOxfiqPXY5CkTuKRkHhF7PzYrd8zWb+zGe5g1CfLqEnZz/0r8dU U4iKdKbGYUAGr77cpEqKmF+HQxoGX1BrTw7yyHca65ic2dK1imkxB58C2X1+ibWx 0MkUm/sNa7mOENdc7dWj -----END CERTIFICATE-----Generated at Mon Jun 16 00:14:02 2025 by rpki-client