$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666530303a3a2f34302d3438203d3e20323133353736.roa File: 326130353a646663333a666530303a3a2f34302d3438203d3e20323133353736.roa (raw, json) Hash identifier: YpJRZSl9hXYawuYeAciv3gBEu4PSgJGIAQ8r3HP9Xg4= Subject key identifier: F4:86:01:6A:42:E8:1F:C8:55:99:C7:64:A9:6E:2D:13:37:1E:E7:99 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 6F82D1D0F4DDC9BB49A77CEA37F955F923989018 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666530303a3a2f34302d3438203d3e20323133353736.roa Signing time: Fri 07 Feb 2025 20:19:42 +0000 ROA not before: Fri 07 Feb 2025 20:14:42 +0000 ROA not after: Fri 06 Feb 2026 20:19:42 +0000 asID: 213576 IP address blocks: 2a05:dfc3:fe00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 02:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:82:d1:d0:f4:dd:c9:bb:49:a7:7c:ea:37:f9:55:f9:23:98:90:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 7 20:14:42 2025 GMT Not After : Feb 6 20:19:42 2026 GMT Subject: CN=F486016A42E81FC85599C764A96E2D13371EE799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:25:98:9b:29:d4:f8:1c:db:f7:9e:66:e0:db: 84:f6:53:62:87:5d:2c:1f:89:ef:5e:d7:19:3b:da: 3c:2e:eb:2c:c1:e8:c1:98:af:35:2d:06:b4:2d:29: 11:7b:a1:4a:90:89:4f:bc:43:66:04:00:6a:fd:bd: b6:c2:e4:59:0c:00:1f:31:67:ad:73:8b:3e:3a:df: 16:5d:ee:c8:54:7d:80:e1:46:bc:5c:3d:a6:25:ae: 15:62:9a:66:a5:ce:06:50:91:ee:78:50:c3:13:87: c3:e3:bb:51:61:cc:d4:f7:c3:fc:7d:f8:4e:25:ca: 74:b2:d2:a5:6b:2e:e8:69:99:a1:1a:37:0b:25:33: f8:54:cd:94:0d:53:9e:87:17:9b:f5:fc:f8:0c:f1: f4:d3:53:78:29:74:7e:5c:ac:81:06:ad:42:49:4b: 73:a7:d2:b3:88:c4:a2:9b:d7:a5:97:3a:5c:9b:0e: ed:fe:d4:62:af:7e:6f:ae:e3:b3:58:63:b7:3e:a5: 29:07:29:62:18:77:f3:2c:a7:00:8a:27:57:79:2a: b9:70:f4:6a:90:d1:be:c3:e2:d3:53:94:e1:ae:c3: 95:67:4d:96:01:f3:47:45:0d:b6:27:75:f8:c6:a2: 8e:de:c1:a0:a0:8e:07:a4:28:a1:bb:4b:cf:0d:6f: 15:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:86:01:6A:42:E8:1F:C8:55:99:C7:64:A9:6E:2D:13:37:1E:E7:99 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666530303a3a2f34302d3438203d3e20323133353736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fe00::/40 Signature Algorithm: sha256WithRSAEncryption 54:30:bb:a4:eb:99:c9:4b:e9:cf:8d:8d:11:6d:8e:fc:ea:a1: 07:26:3a:46:a0:a7:7f:0d:84:6e:e5:f0:85:13:41:12:2c:6c: aa:c7:4e:22:17:d9:f4:0b:63:3f:6c:f6:03:2a:0a:ad:77:49: 34:4c:73:35:9f:54:b6:37:3e:be:18:e9:29:43:94:1c:52:5e: 62:6e:6a:a4:b9:9c:68:93:a6:ec:88:c2:4b:06:2d:2a:38:0d: 4c:b7:40:87:60:c3:c0:5b:b2:6d:59:5d:98:76:e4:62:56:5d: 83:ab:a1:b2:26:e6:e5:20:c2:1d:55:08:0a:31:01:85:c3:dd: 2c:c8:ca:e5:5c:e7:13:4b:56:87:f6:36:14:17:41:34:88:a7: b0:1e:31:03:f9:32:5d:4e:28:41:1b:60:0c:59:cb:52:b5:20: 01:53:e7:b7:bf:61:fd:d9:7d:86:72:86:ff:b2:4e:06:46:33: 11:47:72:1a:8c:3d:33:72:3a:1b:95:45:b2:cc:2d:b1:43:ae: 56:54:f9:43:fb:1f:07:39:6d:74:fb:92:e4:ac:6f:f4:88:b3: fc:1c:7c:ff:a7:4f:15:68:09:e8:61:a3:1a:4e:a7:0c:be:87: db:a4:00:f1:96:7d:29:97:73:6a:23:16:95:b7:71:f1:0d:fe: 2c:ef:67:e8 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUb4LR0PTdybtJp3zqN/lV+SOYkBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMDcyMDE0NDJaFw0yNjAyMDYyMDE5NDJaMDMxMTAvBgNV BAMTKEY0ODYwMTZBNDJFODFGQzg1NTk5Qzc2NEE5NkUyRDEzMzcxRUU3OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJZibKdT4HNv3nmbg24T2U2KH XSwfie9e1xk72jwu6yzB6MGYrzUtBrQtKRF7oUqQiU+8Q2YEAGr9vbbC5FkMAB8x Z61ziz463xZd7shUfYDhRrxcPaYlrhVimmalzgZQke54UMMTh8Pju1FhzNT3w/x9 +E4lynSy0qVrLuhpmaEaNwslM/hUzZQNU56HF5v1/PgM8fTTU3gpdH5crIEGrUJJ S3On0rOIxKKb16WXOlybDu3+1GKvfm+u47NYY7c+pSkHKWIYd/MspwCKJ1d5Krlw 9GqQ0b7D4tNTlOGuw5VnTZYB80dFDbYndfjGoo7ewaCgjgekKKG7S88NbxU5AgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQU9IYBakLoH8hVmcdkqW4tEzce55kwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzUzYTY0NjY2MzMz M2E2NjY1MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzMzM1MzczNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoF38P+MA0GCSqGSIb3DQEBCwUAA4IBAQBUMLuk65nJS+nPjY0R bY786qEHJjpGoKd/DYRu5fCFE0ESLGyqx04iF9n0C2M/bPYDKgqtd0k0THM1n1S2 Nz6+GOkpQ5QcUl5ibmqkuZxok6bsiMJLBi0qOA1Mt0CHYMPAW7JtWV2YduRiVl2D q6GyJublIMIdVQgKMQGFw90syMrlXOcTS1aH9jYUF0E0iKewHjED+TJdTihBG2AM WctStSABU+e3v2H92X2Gcob/sk4GRjMRR3IajD0zcjoblUWyzC2xQ65WVPlD+x8H OW10+5LkrG/0iLP8HHz/p08VaAnoYaMaTqcMvofbpADxln0pl3NqIxaVt3HxDf4s 72fo -----END CERTIFICATE-----Generated at Mon Apr 28 15:18:24 2025 by rpki-client