$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666432333a3a2f34382d3438203d3e203438363738.roa File: 326130353a646663333a666432333a3a2f34382d3438203d3e203438363738.roa (raw, json) Hash identifier: 05pabgZpVn4VWkqUSG7kO1cKKOT1itIELCEyd4idYUo= Subject key identifier: F8:1B:AC:9A:93:5B:97:4E:F9:D3:44:1E:27:EC:29:1F:AD:AF:A8:26 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 3D1CDC8187DC4BCEE99867003D1D61A90A1D973F Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666432333a3a2f34382d3438203d3e203438363738.roa Signing time: Wed 11 Jun 2025 10:05:32 +0000 ROA not before: Wed 11 Jun 2025 10:00:32 +0000 ROA not after: Wed 10 Jun 2026 10:05:32 +0000 asID: 48678 IP address blocks: 2a05:dfc3:fd23::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:1c:dc:81:87:dc:4b:ce:e9:98:67:00:3d:1d:61:a9:0a:1d:97:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Jun 11 10:00:32 2025 GMT Not After : Jun 10 10:05:32 2026 GMT Subject: CN=F81BAC9A935B974EF9D3441E27EC291FADAFA826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:44:de:94:05:32:2d:36:6f:e9:2a:dd:b8:7f: 58:d6:49:aa:ce:ee:74:f1:d9:9e:ca:37:96:58:47: 45:ac:a7:3c:5d:59:89:23:c8:75:e9:6e:fc:87:4b: b7:63:c4:a7:d0:e3:0b:e0:fd:e6:fc:91:f2:0a:4a: a8:c8:ba:1d:b8:38:f4:f0:dc:3d:71:e2:5b:7d:45: 23:75:62:92:10:49:c5:d2:b1:94:bc:bf:d3:ba:5d: 95:09:2e:be:db:ab:02:ba:40:a3:ef:a4:cf:d6:b4: f0:57:f5:a6:68:1e:d6:0f:05:54:2a:9b:95:3f:d1: 8a:23:1d:62:a2:d0:8b:4a:b1:b4:30:f8:fd:96:a1: 45:86:2b:dc:8d:c5:45:d4:d2:dc:96:ea:31:0b:a5: be:a8:da:2e:72:49:0d:78:b9:3e:8f:2c:7b:09:44: 70:c3:a3:c0:e1:2b:10:d5:40:6f:15:a1:60:70:23: 0e:b5:f7:8f:08:40:1e:c4:67:2c:74:3e:1e:3b:d8: 71:1a:37:20:dc:89:cf:d6:c5:9e:64:e2:60:e4:87: 0d:6b:9b:c8:26:66:0a:b7:b2:05:59:0a:1a:1f:3b: 1d:b5:4c:74:3b:cf:bf:0e:8b:51:56:9a:5b:6a:2a: c7:73:c0:56:c0:e6:7a:ff:24:5f:01:2f:1f:ee:45: ec:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1B:AC:9A:93:5B:97:4E:F9:D3:44:1E:27:EC:29:1F:AD:AF:A8:26 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666432333a3a2f34382d3438203d3e203438363738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd23::/48 Signature Algorithm: sha256WithRSAEncryption 73:a7:37:02:b7:c3:6e:40:fe:01:4b:73:c4:ef:b5:e4:20:ad: 3f:c3:d8:13:08:96:dc:cf:78:a8:0a:5a:e2:e0:64:ff:f4:a0: 7c:b4:8b:68:4e:0e:b1:05:fa:68:50:6a:35:86:bb:64:2e:9a: 74:42:f3:5b:9f:0e:96:50:5a:7f:a6:45:8a:5a:8a:73:c4:91: 79:a9:91:df:9f:42:76:bb:75:8b:1f:e5:7d:81:ff:38:c0:55: a3:e3:5a:18:e8:c9:32:ee:8b:07:89:a7:4c:ab:13:85:ee:8c: 0c:a3:b3:d5:51:77:ac:be:12:b8:fb:d9:12:80:04:df:f2:86: ae:d8:6e:bf:22:e1:6f:d4:f6:fc:87:1e:ee:8e:76:80:98:fe: 12:24:b5:ae:4d:a8:2f:5e:93:a0:1c:4b:28:58:70:a4:a4:cb: 7e:55:7c:f9:78:c5:49:c0:9d:cf:2e:bb:61:97:75:6b:9e:79: 27:1e:98:d8:cf:b7:45:3b:37:8c:5a:f0:0e:ab:bc:e7:8f:9b: b2:1b:63:6b:5b:fb:26:7e:1b:14:4d:13:21:eb:69:b6:16:f9: 7d:d2:81:16:2e:84:2c:13:b0:9e:4f:b5:4c:a5:83:e2:52:37: 1f:33:9f:54:9f:8d:2a:db:83:d3:d3:e3:c1:4b:89:13:80:58: 12:78:3b:d6 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPRzcgYfcS87pmGcAPR1hqQodlz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA2MTExMDAwMzJaFw0yNjA2MTAxMDA1MzJaMDMxMTAvBgNV BAMTKEY4MUJBQzlBOTM1Qjk3NEVGOUQzNDQxRTI3RUMyOTFGQURBRkE4MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpRN6UBTItNm/pKt24f1jWSarO 7nTx2Z7KN5ZYR0WspzxdWYkjyHXpbvyHS7djxKfQ4wvg/eb8kfIKSqjIuh24OPTw 3D1x4lt9RSN1YpIQScXSsZS8v9O6XZUJLr7bqwK6QKPvpM/WtPBX9aZoHtYPBVQq m5U/0YojHWKi0ItKsbQw+P2WoUWGK9yNxUXU0tyW6jELpb6o2i5ySQ14uT6PLHsJ RHDDo8DhKxDVQG8VoWBwIw61948IQB7EZyx0Ph472HEaNyDcic/WxZ5k4mDkhw1r m8gmZgq3sgVZChofOx21THQ7z78Oi1FWmltqKsdzwFbA5nr/JF8BLx/uRexHAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU+BusmpNbl07500QeJ+wpH62vqCYwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzUzYTY0NjY2MzMz M2E2NjY0MzIzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzgzNjM3Mzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqBd/D/SMwDQYJKoZIhvcNAQELBQADggEBAHOnNwK3w25A/gFLc8Tv teQgrT/D2BMIltzPeKgKWuLgZP/0oHy0i2hODrEF+mhQajWGu2QumnRC81ufDpZQ Wn+mRYpainPEkXmpkd+fQna7dYsf5X2B/zjAVaPjWhjoyTLuiweJp0yrE4XujAyj s9VRd6y+Erj72RKABN/yhq7Ybr8i4W/U9vyHHu6OdoCY/hIkta5NqC9ek6AcSyhY cKSky35VfPl4xUnAnc8uu2GXdWueeScemNjPt0U7N4xa8A6rvOePm7IbY2tb+yZ+ GxRNEyHrabYW+X3SgRYuhCwTsJ5PtUylg+JSNx8zn1SfjSrbg9PT48FLiROAWBJ4 O9Y= -----END CERTIFICATE-----Generated at Sun Jun 15 15:48:29 2025 by rpki-client