$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566653a3a2f34372d3438203d3e20323134383138.roa File: 326131343a373538303a656566653a3a2f34372d3438203d3e20323134383138.roa (raw, json) Hash identifier: or3U3p+naZTN1+AtddZ98ojKl4BAXyP/qX22IanYkN0= Subject key identifier: D8:DB:61:56:F6:B5:47:78:7D:8B:8B:0B:35:99:AD:CE:3A:4C:E1:83 Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 5C7CF369FB2C8420E9921FE0D4B101F366211FAD Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566653a3a2f34372d3438203d3e20323134383138.roa Signing time: Thu 13 Feb 2025 18:47:29 +0000 ROA not before: Thu 13 Feb 2025 18:42:29 +0000 ROA not after: Thu 12 Feb 2026 18:47:29 +0000 asID: 214818 IP address blocks: 2a14:7580:eefe::/47 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 08:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:7c:f3:69:fb:2c:84:20:e9:92:1f:e0:d4:b1:01:f3:66:21:1f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Feb 13 18:42:29 2025 GMT Not After : Feb 12 18:47:29 2026 GMT Subject: CN=D8DB6156F6B547787D8B8B0B3599ADCE3A4CE183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:bc:f1:f0:a4:46:8c:95:97:a9:a4:c9:c4: c6:14:cc:2a:d3:ef:c4:15:43:fa:cd:0d:1f:6b:cf: 9f:36:26:d1:85:08:f2:b6:33:a6:03:9a:e9:ea:b7: b5:02:5f:20:1d:2b:0b:ed:39:46:67:9e:c0:92:2b: c1:d4:e0:62:38:fe:ef:cd:9f:64:59:e9:a9:a9:64: 14:c8:cd:e8:21:38:19:8a:67:b2:ac:34:f4:cf:99: 3f:86:f8:da:3b:db:70:27:a1:74:89:a0:07:38:f8: b3:4a:40:48:fd:25:80:41:6d:4c:c1:30:c1:cb:e0: 94:1c:45:e6:77:7b:7f:50:c1:8e:38:2e:05:bd:3f: 40:b7:00:14:c5:dd:84:44:f0:30:04:1a:c2:33:71: 70:bd:31:b9:b5:3a:a4:c8:10:ad:8f:02:23:30:b0: e4:d5:0c:fd:fe:39:00:df:5c:ee:1f:95:81:8b:e2: 04:7c:1f:fa:d1:1d:03:8d:6e:75:c1:2a:aa:95:88: 9b:1e:20:20:62:e9:e9:7c:35:bc:f8:07:39:61:32: 55:f0:35:a7:ee:fb:af:b8:3b:11:2b:d1:6a:47:11: 7d:f1:ef:c8:82:f3:2f:65:24:b3:f0:2e:0b:50:e2: 66:c4:18:7a:cf:65:91:95:80:d3:7b:15:e3:8a:af: 82:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DB:61:56:F6:B5:47:78:7D:8B:8B:0B:35:99:AD:CE:3A:4C:E1:83 X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656566653a3a2f34372d3438203d3e20323134383138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:eefe::/47 Signature Algorithm: sha256WithRSAEncryption ae:1f:b0:ed:43:89:7d:65:0e:26:3e:34:e9:41:7b:bd:27:0a: 75:5e:72:c0:95:90:17:9f:c0:77:08:cb:6f:43:f3:b6:91:96: bf:02:ed:5c:11:ff:64:a8:0f:3f:9d:1c:89:f5:4d:1a:96:89: 91:0c:e7:a5:bb:a1:ec:17:2b:36:1c:17:4a:60:10:06:64:df: 24:d0:1d:38:0a:28:4a:85:4a:89:1b:64:3e:b5:4a:0d:4a:91: 06:e6:07:e7:b7:52:06:84:6d:00:8a:25:7b:01:31:7f:f2:b0: c4:1e:df:41:e5:f8:ec:ee:23:26:80:7f:af:21:4a:dc:40:44: 3f:2a:89:3a:1c:4b:99:9e:09:23:d2:96:46:81:69:ab:3e:88: b3:9c:33:54:19:fc:5d:d6:fc:41:ed:7c:b4:68:4f:b6:c9:ba: 76:f5:e5:a8:d2:9d:dd:c4:0e:13:9c:ee:c5:9e:70:45:a1:18: 82:88:41:2a:59:e2:0a:a8:c4:b7:6d:c8:83:2b:7d:4f:0b:4b: fa:30:ef:dd:27:3c:d0:bf:70:ee:e0:c3:eb:71:db:0f:5a:d0: b9:fb:0f:4b:bd:61:33:e9:32:37:f5:10:bd:57:76:c2:15:2c: ef:11:2d:49:4b:2b:1b:7b:ef:83:36:b7:38:11:6c:a8:2a:bc: 30:93:f2:a3 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUXHzzafsshCDpkh/g1LEB82YhH60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAyMTMxODQyMjlaFw0yNjAyMTIxODQ3MjlaMDMxMTAvBgNV BAMTKEQ4REI2MTU2RjZCNTQ3Nzg3RDhCOEIwQjM1OTlBRENFM0E0Q0UxODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9dLzx8KRGjJWXqaTJxMYUzCrT 78QVQ/rNDR9rz582JtGFCPK2M6YDmunqt7UCXyAdKwvtOUZnnsCSK8HU4GI4/u/N n2RZ6ampZBTIzeghOBmKZ7KsNPTPmT+G+No723AnoXSJoAc4+LNKQEj9JYBBbUzB MMHL4JQcReZ3e39QwY44LgW9P0C3ABTF3YRE8DAEGsIzcXC9Mbm1OqTIEK2PAiMw sOTVDP3+OQDfXO4flYGL4gR8H/rRHQONbnXBKqqViJseICBi6el8Nbz4BzlhMlXw Nafu+6+4OxEr0WpHEX3x78iC8y9lJLPwLgtQ4mbEGHrPZZGVgNN7FeOKr4L5AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU2NthVva1R3h9i4sLNZmtzjpM4YMwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjU2NjY1M2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIz MTM0MzgzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcBKhR1gO7+MA0GCSqGSIb3DQEBCwUAA4IBAQCu H7DtQ4l9ZQ4mPjTpQXu9Jwp1XnLAlZAXn8B3CMtvQ/O2kZa/Au1cEf9kqA8/nRyJ 9U0alomRDOelu6HsFys2HBdKYBAGZN8k0B04CihKhUqJG2Q+tUoNSpEG5gfnt1IG hG0AiiV7ATF/8rDEHt9B5fjs7iMmgH+vIUrcQEQ/Kok6HEuZngkj0pZGgWmrPoiz nDNUGfxd1vxB7Xy0aE+2ybp29eWo0p3dxA4TnO7FnnBFoRiCiEEqWeIKqMS3bciD K31PC0v6MO/dJzzQv3Du4MPrcdsPWtC5+w9LvWEz6TI39RC9V3bCFSzvES1JSysb e++DNrc4EWyoKrwwk/Kj -----END CERTIFICATE-----Generated at Wed Apr 30 00:10:41 2025 by rpki-client