$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a613030303a3a2f33362d3434203d3e20323133383634.roa File: 326130363a313238313a613030303a3a2f33362d3434203d3e20323133383634.roa (raw, json) Hash identifier: n9a/8RTZwT0YKbrePp7CWKic/4pP/ubIlN9Uj0QTd8c= Subject key identifier: A0:15:68:AA:92:79:D6:6D:3F:11:25:28:D7:A1:1E:10:0E:4A:A4:BC Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 0723141629C1E1CD73D0789FAE55009264EB36FB Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a613030303a3a2f33362d3434203d3e20323133383634.roa Signing time: Tue 01 Apr 2025 18:49:35 +0000 ROA not before: Tue 01 Apr 2025 18:44:35 +0000 ROA not after: Tue 31 Mar 2026 18:49:35 +0000 asID: 213864 IP address blocks: 2a06:1281:a000::/36 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 02:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:23:14:16:29:c1:e1:cd:73:d0:78:9f:ae:55:00:92:64:eb:36:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Apr 1 18:44:35 2025 GMT Not After : Mar 31 18:49:35 2026 GMT Subject: CN=A01568AA9279D66D3F112528D7A11E100E4AA4BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:01:cf:32:95:c2:72:03:17:43:57:cb:c9:37: d3:30:46:e5:73:d9:47:e3:ac:88:52:5e:90:20:13: 68:14:52:e2:06:15:2b:0b:0b:91:50:56:aa:c9:5f: 64:0c:d8:73:f4:a1:c5:42:59:b9:ed:f2:e6:5b:7b: 06:cf:01:b8:c5:bd:c0:b5:44:6d:c0:31:5f:31:6a: 97:6f:2e:8c:01:b7:e1:ef:9a:1f:de:14:32:1a:c9: 45:76:31:75:43:b5:38:b0:11:8b:8d:e5:ea:49:12: f5:f9:20:8f:24:84:69:06:2b:fb:22:5d:38:6e:0b: 74:0b:7d:c5:fe:cd:63:42:90:d7:00:3e:fe:4a:c4: 07:0a:32:ee:41:f7:ae:38:8a:37:40:7b:a2:e1:d9: 21:dd:39:37:03:a7:80:a1:f7:21:b8:07:cc:04:f4: 91:40:94:cf:c0:a6:4a:4c:2f:28:0b:2b:a3:7e:d2: 6c:f4:05:f9:34:7b:96:b9:5b:06:1c:54:80:cf:23: d3:4e:fa:5c:9b:4c:99:b1:19:97:5e:af:1b:aa:7f: 95:1f:16:0b:9f:ef:4c:9c:b6:15:7e:e3:b3:6d:1f: 19:41:be:d0:c8:b6:63:7e:00:8e:01:0f:ec:17:88: c6:79:6f:09:1a:38:c2:d4:ed:d2:6f:18:40:9c:76: 2d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:15:68:AA:92:79:D6:6D:3F:11:25:28:D7:A1:1E:10:0E:4A:A4:BC X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a613030303a3a2f33362d3434203d3e20323133383634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:a000::/36 Signature Algorithm: sha256WithRSAEncryption 83:4a:b6:6c:11:0b:ff:48:91:d1:28:99:ea:43:02:cb:f5:50: f6:41:f4:44:4b:83:8b:3c:2e:bb:85:71:b2:7d:be:06:fd:05: ec:c4:80:66:01:85:69:03:09:a4:0d:4b:d3:a4:7d:fd:a6:e0: da:df:c7:0b:19:be:00:25:f7:a7:b6:79:20:2a:a1:70:3b:98: 2a:c7:39:18:30:e2:b4:4c:cc:07:41:99:73:14:14:26:f4:57: cc:41:90:b6:8c:07:c3:a1:2e:04:84:50:93:92:7b:3a:8c:41: b0:16:25:3d:19:85:05:ea:b3:91:8c:5e:62:58:1b:d3:15:0d: 2f:e7:23:72:85:13:4f:d4:5b:5e:e1:e6:09:c8:81:ec:50:65: 6f:ab:75:58:bb:16:e9:1e:1c:60:87:0e:6c:67:c0:ff:ad:15: 2a:d7:26:d2:80:d4:84:32:75:ee:62:90:c2:9e:7e:76:5a:29: 79:69:f4:9e:59:ee:7a:9b:cd:17:d1:9a:2b:c8:6b:bf:77:0a: e9:00:e3:16:45:18:f8:44:fb:53:90:03:9a:19:d7:e5:6c:08: 77:a7:75:ce:ac:b7:97:0a:74:a7:83:3e:d9:45:b4:cb:64:ba: fd:94:a5:19:a7:ca:ca:c8:ec:68:0a:f8:56:cd:49:60:5a:c4: 98:c3:6b:9b -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUByMUFinB4c1z0HifrlUAkmTrNvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA0MDExODQ0MzVaFw0yNjAzMzExODQ5MzVaMDMxMTAvBgNV BAMTKEEwMTU2OEFBOTI3OUQ2NkQzRjExMjUyOEQ3QTExRTEwMEU0QUE0QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOAc8ylcJyAxdDV8vJN9MwRuVz 2UfjrIhSXpAgE2gUUuIGFSsLC5FQVqrJX2QM2HP0ocVCWbnt8uZbewbPAbjFvcC1 RG3AMV8xapdvLowBt+Hvmh/eFDIayUV2MXVDtTiwEYuN5epJEvX5II8khGkGK/si XThuC3QLfcX+zWNCkNcAPv5KxAcKMu5B9644ijdAe6Lh2SHdOTcDp4Ch9yG4B8wE 9JFAlM/ApkpMLygLK6N+0mz0Bfk0e5a5WwYcVIDPI9NO+lybTJmxGZderxuqf5Uf Fguf70ycthV+47NtHxlBvtDItmN+AI4BD+wXiMZ5bwkaOMLU7dJvGECcdi0DAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUoBVoqpJ51m0/ESUo16EeEA5KpLwwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzYzYTMxMzIzODMx M2E2MTMwMzAzMDNhM2EyZjMzMzYyZDM0MzQyMDNkM2UyMDMyMzEzMzM4MzYzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGBCoGEoGgMA0GCSqGSIb3DQEBCwUAA4IBAQCDSrZsEQv/SJHRKJnq QwLL9VD2QfRES4OLPC67hXGyfb4G/QXsxIBmAYVpAwmkDUvTpH39puDa38cLGb4A JfentnkgKqFwO5gqxzkYMOK0TMwHQZlzFBQm9FfMQZC2jAfDoS4EhFCTkns6jEGw FiU9GYUF6rORjF5iWBvTFQ0v5yNyhRNP1Fte4eYJyIHsUGVvq3VYuxbpHhxghw5s Z8D/rRUq1ybSgNSEMnXuYpDCnn52Wil5afSeWe56m80X0ZoryGu/dwrpAOMWRRj4 RPtTkAOaGdflbAh3p3XOrLeXCnSngz7ZRbTLZLr9lKUZp8rKyOxoCvhWzUlgWsSY w2ub -----END CERTIFICATE-----Generated at Mon Apr 28 17:13:26 2025 by rpki-client