$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666432333a3a2f34382d3438203d3e20323039373337.roa File: 326130353a646663333a666432333a3a2f34382d3438203d3e20323039373337.roa (raw, json) Hash identifier: yUS4036hairXxCktXYvzlavzVs1vEzxchwcgETnL9xU= Subject key identifier: 1A:45:43:F4:67:A8:8B:72:20:41:B7:06:13:14:E4:A9:17:24:97:5E Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 6EB09A0D210A35CB0B53175BA3740C6499000EC7 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666432333a3a2f34382d3438203d3e20323039373337.roa Signing time: Wed 11 Jun 2025 10:05:15 +0000 ROA not before: Wed 11 Jun 2025 10:00:15 +0000 ROA not after: Wed 10 Jun 2026 10:05:15 +0000 asID: 209737 IP address blocks: 2a05:dfc3:fd23::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 08:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b0:9a:0d:21:0a:35:cb:0b:53:17:5b:a3:74:0c:64:99:00:0e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Jun 11 10:00:15 2025 GMT Not After : Jun 10 10:05:15 2026 GMT Subject: CN=1A4543F467A88B722041B7061314E4A91724975E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:72:91:7d:78:e5:2a:7a:07:2c:9b:a8:92:5d: a2:9b:44:9d:12:32:54:7b:f8:0c:d4:f4:1a:9b:8d: 6b:72:d4:db:55:d3:31:8b:fd:d7:45:2b:42:b0:66: a6:46:6e:4d:44:bb:db:bd:da:d7:bc:3a:ff:80:d0: 19:db:0e:fc:3e:a6:36:f8:4d:d7:f9:e5:a8:99:a1: d3:9a:e8:f6:27:07:6d:57:df:d6:2f:49:09:ca:93: c6:84:e6:b4:c5:a2:b0:d3:1e:23:42:e5:d3:4a:bb: 8e:db:8b:4e:98:ca:db:4a:50:f0:d3:1a:6b:b8:4d: 30:fa:73:42:78:9b:8e:19:e0:de:a3:da:fe:c9:69: 55:10:68:61:be:68:ef:4e:2f:93:1a:98:42:3d:dc: 4b:03:4e:2e:9c:b7:1c:c2:87:c1:a8:e3:81:5d:08: 54:39:e4:e7:72:40:9e:8b:fa:00:69:25:f1:c1:81: 8d:1a:af:13:83:28:7e:aa:65:39:14:a6:d7:f4:a7: 39:58:94:40:63:f6:34:aa:d6:a8:69:67:fa:01:86: 05:49:3a:c2:c6:f3:5f:ed:ca:44:65:9a:b6:f6:2d: c5:5a:6d:00:b0:9d:23:a2:79:18:4d:61:23:cc:44: dd:bb:f2:79:ee:75:33:a4:43:66:4e:f5:8f:59:b7: d7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:45:43:F4:67:A8:8B:72:20:41:B7:06:13:14:E4:A9:17:24:97:5E X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666432333a3a2f34382d3438203d3e20323039373337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd23::/48 Signature Algorithm: sha256WithRSAEncryption b9:f4:e5:73:15:df:f8:91:19:85:5f:86:09:0a:10:7e:50:87: 25:f5:66:8f:d3:0e:d1:50:79:8c:89:a6:3b:b3:08:9c:0d:09: 39:65:37:27:57:13:c7:fc:f0:e2:4e:87:4d:9f:c4:ac:3f:97: f8:47:21:71:8d:82:aa:45:9b:fd:b8:5a:53:34:2e:9a:76:2c: eb:81:a0:0e:e6:b0:c7:82:2f:8c:4f:c7:fd:7c:56:aa:ff:8f: 5b:ba:a2:73:7e:6e:5f:19:a8:93:93:bd:f5:4e:c2:06:ca:0a: 96:55:24:b9:51:18:89:05:14:26:71:9f:fb:24:c9:bd:2a:34: 88:cf:ae:63:b8:8e:2e:9e:15:96:0d:02:9e:c7:08:40:02:c9: e6:c7:c6:2c:69:59:c2:e3:00:c8:fc:03:9a:90:54:2a:f8:94: 0d:78:20:87:70:ee:24:39:9e:0d:17:5c:9f:62:c2:33:8a:4c: f9:6d:00:0a:23:ec:06:41:72:96:9e:bb:fa:d9:03:2d:35:21: 83:7f:dd:3e:83:c5:9d:d7:08:88:7e:51:ff:ff:7c:67:28:7a: 52:07:d2:b7:f3:ba:a3:c8:85:d7:95:ed:c7:3b:ef:01:60:ea: a6:44:1f:9c:8d:7f:7e:5a:92:b7:18:4d:ba:ec:13:c7:6b:f6: 36:e8:39:08 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUbrCaDSEKNcsLUxdbo3QMZJkADscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA2MTExMDAwMTVaFw0yNjA2MTAxMDA1MTVaMDMxMTAvBgNV BAMTKDFBNDU0M0Y0NjdBODhCNzIyMDQxQjcwNjEzMTRFNEE5MTcyNDk3NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcpF9eOUqegcsm6iSXaKbRJ0S MlR7+AzU9BqbjWty1NtV0zGL/ddFK0KwZqZGbk1Eu9u92te8Ov+A0BnbDvw+pjb4 Tdf55aiZodOa6PYnB21X39YvSQnKk8aE5rTForDTHiNC5dNKu47bi06YyttKUPDT Gmu4TTD6c0J4m44Z4N6j2v7JaVUQaGG+aO9OL5MamEI93EsDTi6ctxzCh8Go44Fd CFQ55OdyQJ6L+gBpJfHBgY0arxODKH6qZTkUptf0pzlYlEBj9jSq1qhpZ/oBhgVJ OsLG81/tykRlmrb2LcVabQCwnSOieRhNYSPMRN278nnudTOkQ2ZO9Y9Zt9ddAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUGkVD9Geoi3IgQbcGExTkqRckl14wHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzUzYTY0NjY2MzMz M2E2NjY0MzIzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzOTM3MzMzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoF38P9IzANBgkqhkiG9w0BAQsFAAOCAQEAufTlcxXf+JEZhV+G CQoQflCHJfVmj9MO0VB5jImmO7MInA0JOWU3J1cTx/zw4k6HTZ/ErD+X+EchcY2C qkWb/bhaUzQumnYs64GgDuawx4IvjE/H/XxWqv+PW7qic35uXxmok5O99U7CBsoK llUkuVEYiQUUJnGf+yTJvSo0iM+uY7iOLp4Vlg0CnscIQALJ5sfGLGlZwuMAyPwD mpBUKviUDXggh3DuJDmeDRdcn2LCM4pM+W0ACiPsBkFylp67+tkDLTUhg3/dPoPF ndcIiH5R//98Zyh6UgfSt/O6o8iF15XtxzvvAWDqpkQfnI1/flqStxhNuuwTx2v2 Nug5CA== -----END CERTIFICATE-----Generated at Sun Jun 15 23:15:06 2025 by rpki-client