$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666630303a3a2f34302d3438203d3e20323134323033.roa File: 326130353a646663333a666630303a3a2f34302d3438203d3e20323134323033.roa (raw, json) Hash identifier: Y5pId2ER6qlKiwrrQ7fQK486+3svNDLOnTUfu6jzO70= Subject key identifier: F0:2F:55:36:E7:A5:D3:46:66:A6:5E:A2:EF:F6:5B:BD:DF:B9:46:E3 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 0C546422B0E288344DEAC023F03F7577C02D13C7 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666630303a3a2f34302d3438203d3e20323134323033.roa Signing time: Thu 10 Apr 2025 17:21:50 +0000 ROA not before: Thu 10 Apr 2025 17:16:50 +0000 ROA not after: Thu 09 Apr 2026 17:21:50 +0000 asID: 214203 IP address blocks: 2a05:dfc3:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 May 2025 02:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:54:64:22:b0:e2:88:34:4d:ea:c0:23:f0:3f:75:77:c0:2d:13:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Apr 10 17:16:50 2025 GMT Not After : Apr 9 17:21:50 2026 GMT Subject: CN=F02F5536E7A5D34666A65EA2EFF65BBDDFB946E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:43:7d:ed:3f:20:db:ad:ff:be:9e:15:d3: 02:99:db:ee:fd:5f:ff:38:de:dc:f2:4c:66:77:d7: 72:3f:ff:36:05:17:93:c8:05:56:47:bc:d1:a6:4a: 54:aa:00:96:e1:fb:0a:48:66:a8:de:eb:28:70:e2: 56:d6:a8:9b:7a:a6:9e:ea:50:8f:83:56:9c:37:c9: 79:b8:3d:86:92:f1:0e:4f:f1:c9:a2:c9:3d:89:bf: 24:63:db:70:31:44:98:59:15:04:83:e6:68:45:de: 25:36:99:00:c2:20:59:ae:9f:ad:20:86:d6:1d:72: 9d:99:05:f1:a0:c9:04:ad:04:d5:df:1b:12:82:2d: d8:ef:92:71:58:91:81:82:5a:24:4c:fa:f9:08:48: a0:19:aa:e7:3b:c9:41:14:0f:b3:b3:54:1f:ac:e5: a3:98:99:9f:43:6e:f4:3d:10:6d:24:27:2a:bc:d2: e7:01:8d:67:91:7b:9f:c5:a6:fc:7d:af:eb:41:02: 86:3b:36:c0:5b:20:1c:c5:ba:ca:6c:3d:fe:7c:79: 1f:75:10:f5:15:4d:88:9c:65:9f:9b:cb:dc:eb:9f: c2:7a:66:49:82:80:18:52:d7:a2:8b:8c:56:11:c0: 5a:4e:ad:a2:60:2a:40:8a:9a:e1:5e:71:02:62:6e: 1d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2F:55:36:E7:A5:D3:46:66:A6:5E:A2:EF:F6:5B:BD:DF:B9:46:E3 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666630303a3a2f34302d3438203d3e20323134323033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 11:b5:d3:be:63:54:d5:98:2e:18:62:ef:22:82:2a:ce:57:07: 96:95:64:6a:f8:73:19:0c:c8:8d:54:69:d2:ff:9d:74:4f:dc: f4:cd:40:6e:81:60:f0:d3:70:81:a1:f3:c1:f1:ea:b4:87:ef: 36:8e:5d:06:7e:71:9f:d0:07:ee:9f:48:87:34:a9:9c:22:5f: 78:5e:9f:7f:fd:e6:91:fc:bb:ad:f2:a2:92:07:74:de:3c:77: b6:b4:46:33:94:b0:57:11:f5:ee:1f:44:36:40:d0:d1:7a:d4: b4:9e:08:20:63:86:c8:d9:60:6b:ef:8a:7b:ea:a3:94:c8:cb: 4a:df:0e:a9:8f:87:7e:d0:74:3c:eb:57:2c:32:15:bc:4b:be: 20:40:f8:e6:ff:a2:46:51:3e:21:b2:ca:82:60:d7:b1:d9:87: f8:28:21:bf:b0:ba:54:51:35:2d:32:b0:18:54:1f:7e:b7:e4: 74:0b:fe:f1:de:01:00:24:90:7e:fa:ad:79:5e:28:a9:b1:c2: e5:62:cd:09:8f:44:f1:9b:a6:93:8a:b2:b9:07:51:66:65:d1: 8e:38:89:6d:4a:c7:2e:a2:3a:72:33:59:be:03:9d:d0:eb:e6: ce:2b:02:a3:f5:98:06:3b:18:cb:35:07:78:5f:d0:cc:39:25: 29:f5:08:e3 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUDFRkIrDiiDRN6sAj8D91d8AtE8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA0MTAxNzE2NTBaFw0yNjA0MDkxNzIxNTBaMDMxMTAvBgNV BAMTKEYwMkY1NTM2RTdBNUQzNDY2NkE2NUVBMkVGRjY1QkJEREZCOTQ2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxIEN97T8g263/vp4V0wKZ2+79 X/843tzyTGZ313I//zYFF5PIBVZHvNGmSlSqAJbh+wpIZqje6yhw4lbWqJt6pp7q UI+DVpw3yXm4PYaS8Q5P8cmiyT2JvyRj23AxRJhZFQSD5mhF3iU2mQDCIFmun60g htYdcp2ZBfGgyQStBNXfGxKCLdjvknFYkYGCWiRM+vkISKAZquc7yUEUD7OzVB+s 5aOYmZ9DbvQ9EG0kJyq80ucBjWeRe5/Fpvx9r+tBAoY7NsBbIBzFuspsPf58eR91 EPUVTYicZZ+by9zrn8J6ZkmCgBhS16KLjFYRwFpOraJgKkCKmuFecQJibh1nAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQU8C9VNuel00Zmpl6i7/Zbvd+5RuMwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzUzYTY0NjY2MzMz M2E2NjY2MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNDMyMzAzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoF38P/MA0GCSqGSIb3DQEBCwUAA4IBAQARtdO+Y1TVmC4YYu8i girOVweWlWRq+HMZDMiNVGnS/510T9z0zUBugWDw03CBofPB8eq0h+82jl0GfnGf 0Afun0iHNKmcIl94Xp9//eaR/Lut8qKSB3TePHe2tEYzlLBXEfXuH0Q2QNDRetS0 ngggY4bI2WBr74p76qOUyMtK3w6pj4d+0HQ861csMhW8S74gQPjm/6JGUT4hssqC YNex2Yf4KCG/sLpUUTUtMrAYVB9+t+R0C/7x3gEAJJB++q15XiipscLlYs0Jj0Tx m6aTirK5B1FmZdGOOIltSscuojpyM1m+A53Q6+bOKwKj9ZgGOxjLNQd4X9DMOSUp 9Qjj -----END CERTIFICATE-----Generated at Thu May 1 11:12:20 2025 by rpki-client