$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a373030303a3a2f33362d3434203d3e20323133383634.roa File: 326130363a313238313a373030303a3a2f33362d3434203d3e20323133383634.roa (raw, json) Hash identifier: 66j9DqBEXVlBoeUS8fnf0qQDqnhODTiSfReSxvKeiI8= Subject key identifier: C7:A6:70:AD:8A:BA:1B:75:B8:26:B6:5F:6B:D0:B4:63:96:7B:18:E8 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 2877741992DBC2F4312B199A99D249D121916E0F Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a373030303a3a2f33362d3434203d3e20323133383634.roa Signing time: Tue 01 Apr 2025 18:50:29 +0000 ROA not before: Tue 01 Apr 2025 18:45:29 +0000 ROA not after: Tue 31 Mar 2026 18:50:29 +0000 asID: 213864 IP address blocks: 2a06:1281:7000::/36 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 12:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:77:74:19:92:db:c2:f4:31:2b:19:9a:99:d2:49:d1:21:91:6e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Apr 1 18:45:29 2025 GMT Not After : Mar 31 18:50:29 2026 GMT Subject: CN=C7A670AD8ABA1B75B826B65F6BD0B463967B18E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:3b:b5:d2:12:e5:ed:3d:6a:4f:8d:49:d9: 0d:9a:fd:e8:7a:42:ed:d7:86:0c:2d:2c:cb:a6:83: c4:72:27:f8:a7:d0:4f:99:27:5c:b5:52:94:63:7c: d2:b9:a0:f8:ce:55:4b:2b:3f:72:59:28:79:90:94: dd:d2:31:e9:e5:c1:5c:0c:f4:5b:ff:50:b3:e7:9c: 53:75:71:11:7b:99:2a:67:51:b9:6a:2d:33:a0:21: 9d:40:26:5a:3d:8a:02:1c:73:a0:6a:56:17:b9:61: a1:06:d7:2a:70:95:e5:68:26:dc:9a:b6:59:cb:b6: 85:c6:ab:40:a5:4c:33:9e:f3:19:40:b2:f4:64:54: ed:f7:64:ff:82:bc:77:57:51:54:6c:86:ad:c1:29: df:df:a5:e2:e4:cd:39:65:63:5d:bd:0d:19:9c:73: 19:2f:ac:d7:61:1e:5c:fb:5d:2a:e0:17:16:03:8b: f5:d7:9d:b7:a8:0d:69:d7:86:e5:90:d6:84:26:62: c1:c7:e0:64:70:aa:57:de:91:8e:cc:25:31:1e:64: 57:89:1f:15:83:96:e3:b7:c7:ce:24:58:9e:ea:b6: 9c:91:9b:03:f8:73:8a:27:da:92:da:4a:71:48:dd: 14:6b:b3:5f:88:7b:df:bb:8c:e9:fe:5b:ac:74:93: 55:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A6:70:AD:8A:BA:1B:75:B8:26:B6:5F:6B:D0:B4:63:96:7B:18:E8 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a373030303a3a2f33362d3434203d3e20323133383634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:7000::/36 Signature Algorithm: sha256WithRSAEncryption 58:9a:a5:5d:77:50:53:01:0d:5e:c5:c3:c9:e5:bb:a7:a8:0b: 6a:1f:c8:d7:49:0f:1f:4d:72:cc:58:49:74:5b:e2:95:6f:ee: 86:ce:f2:54:37:04:66:0c:d2:07:cf:db:a7:3a:d1:a7:1d:64: a3:8e:c5:3a:71:f3:b2:3c:44:fb:ef:3c:4d:e2:bf:0e:8f:8b: 18:5b:e2:1c:32:54:57:e4:c8:4f:6c:db:02:bd:92:a7:54:38: f8:07:a8:71:87:2b:60:86:fb:d7:a6:6a:74:82:0a:1f:51:82: b9:22:e8:c2:58:d7:46:59:60:b3:76:42:04:41:41:59:d4:09: 05:38:df:54:5d:af:80:0b:f1:0f:c2:ec:a4:cc:48:44:eb:1f: fb:f2:4f:e8:04:05:75:fa:0b:63:ec:d0:98:9c:bf:93:07:12: ab:36:f1:05:b5:fa:d1:46:96:a2:e6:5c:f9:80:f6:54:7b:d0: 44:f8:fb:d0:04:e3:72:8e:da:14:20:36:31:03:a5:f0:fd:21: 05:af:0d:42:3e:f1:b6:82:80:19:a8:e1:83:a2:e3:22:43:84: df:74:c3:89:2b:c2:d6:a1:c6:4d:b4:25:0b:4d:16:e4:91:c3: d3:5b:b3:81:5a:04:39:ba:15:15:ef:19:1b:92:a2:16:2f:c4: 3f:29:ee:ee -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUKHd0GZLbwvQxKxmamdJJ0SGRbg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA0MDExODQ1MjlaFw0yNjAzMzExODUwMjlaMDMxMTAvBgNV BAMTKEM3QTY3MEFEOEFCQTFCNzVCODI2QjY1RjZCRDBCNDYzOTY3QjE4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9nzu10hLl7T1qT41J2Q2a/eh6 Qu3XhgwtLMumg8RyJ/in0E+ZJ1y1UpRjfNK5oPjOVUsrP3JZKHmQlN3SMenlwVwM 9Fv/ULPnnFN1cRF7mSpnUblqLTOgIZ1AJlo9igIcc6BqVhe5YaEG1ypwleVoJtya tlnLtoXGq0ClTDOe8xlAsvRkVO33ZP+CvHdXUVRshq3BKd/fpeLkzTllY129DRmc cxkvrNdhHlz7XSrgFxYDi/XXnbeoDWnXhuWQ1oQmYsHH4GRwqlfekY7MJTEeZFeJ HxWDluO3x84kWJ7qtpyRmwP4c4on2pLaSnFI3RRrs1+Ie9+7jOn+W6x0k1VJAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUx6ZwrYq6G3W4JrZfa9C0Y5Z7GOgwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzYzYTMxMzIzODMx M2EzNzMwMzAzMDNhM2EyZjMzMzYyZDM0MzQyMDNkM2UyMDMyMzEzMzM4MzYzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGBCoGEoFwMA0GCSqGSIb3DQEBCwUAA4IBAQBYmqVdd1BTAQ1excPJ 5bunqAtqH8jXSQ8fTXLMWEl0W+KVb+6GzvJUNwRmDNIHz9unOtGnHWSjjsU6cfOy PET77zxN4r8Oj4sYW+IcMlRX5MhPbNsCvZKnVDj4B6hxhytghvvXpmp0ggofUYK5 IujCWNdGWWCzdkIEQUFZ1AkFON9UXa+AC/EPwuykzEhE6x/78k/oBAV1+gtj7NCY nL+TBxKrNvEFtfrRRpai5lz5gPZUe9BE+PvQBONyjtoUIDYxA6Xw/SEFrw1CPvG2 goAZqOGDouMiQ4TfdMOJK8LWocZNtCULTRbkkcPTW7OBWgQ5uhUV7xkbkqIWL8Q/ Ke7u -----END CERTIFICATE-----Generated at Mon Apr 28 19:53:07 2025 by rpki-client