$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a323030303a3a2f33362d3336203d3e20323135313038.roa File: 326130393a353463363a323030303a3a2f33362d3336203d3e20323135313038.roa (raw, json) Hash identifier: H1uYygw1N6SEcrNj383Tk1UQde9lzkUYcmdsqwLJGA4= Subject key identifier: C9:1E:17:5B:87:A2:37:8A:42:96:CF:A1:8E:02:AC:3E:9E:11:D6:32 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 454D41FABA17186ED3E16357268440ED9FEA0734 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a323030303a3a2f33362d3336203d3e20323135313038.roa Signing time: Mon 17 Mar 2025 14:48:30 +0000 ROA not before: Mon 17 Mar 2025 14:43:30 +0000 ROA not after: Mon 16 Mar 2026 14:48:30 +0000 asID: 215108 IP address blocks: 2a09:54c6:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 09:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:4d:41:fa:ba:17:18:6e:d3:e1:63:57:26:84:40:ed:9f:ea:07:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Mar 17 14:43:30 2025 GMT Not After : Mar 16 14:48:30 2026 GMT Subject: CN=C91E175B87A2378A4296CFA18E02AC3E9E11D632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a2:0a:1e:56:10:69:f7:9f:09:ca:de:90:a4: 74:91:fe:4e:9e:ef:ef:19:4e:f4:39:1e:56:f2:fb: cb:46:ec:33:6f:0a:7d:5c:3e:da:ec:70:76:6b:31: 6d:48:36:19:fd:3a:97:bb:c0:74:28:fb:69:e6:02: c2:7c:a8:22:cb:db:fe:c6:bc:5a:2b:91:f8:47:08: cf:a9:4f:59:75:d6:ab:b2:a6:31:06:21:2f:98:39: e8:d6:89:52:ec:86:d1:91:75:af:f0:7c:07:99:2f: be:1b:b4:60:c3:4e:56:a3:5b:97:bd:9f:47:d2:82: 31:98:ef:db:eb:6c:f9:03:32:10:f3:ff:30:4c:bb: bc:14:7d:0b:d5:54:b5:4f:0d:4f:b0:c9:32:f3:0c: 1f:8c:8c:c8:c7:b1:fb:a1:9d:ba:53:5f:7b:9c:ab: 92:0a:46:de:4d:2f:54:67:87:88:4e:09:09:2b:b4: c4:7c:bf:61:20:0d:e6:76:54:59:4a:dc:22:6f:62: c8:0a:0b:a4:2d:48:3b:3f:36:3a:02:38:63:10:9b: 1d:b1:d1:3f:88:a5:07:05:df:08:bf:1d:35:d3:d0: 7e:e0:ab:74:2c:b3:c7:bf:f0:cd:af:94:b6:d7:c8: 9d:42:2a:0c:c2:6d:b8:3c:b6:f8:81:5d:ed:af:ab: 4f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1E:17:5B:87:A2:37:8A:42:96:CF:A1:8E:02:AC:3E:9E:11:D6:32 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a323030303a3a2f33362d3336203d3e20323135313038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:2000::/36 Signature Algorithm: sha256WithRSAEncryption 28:95:5a:12:c9:4b:64:29:8d:b4:f3:24:fe:f9:7e:35:e6:88: a5:38:8a:c0:de:78:88:37:f8:9f:62:30:47:81:c5:6c:2d:d0: f1:4f:49:3a:88:6d:0c:a4:06:9b:9a:36:60:fa:2b:48:76:e0: 6f:81:d1:43:01:33:fe:63:e6:02:44:47:01:1a:57:c9:f2:b8: 54:85:d6:1e:b8:f3:3f:e7:c1:90:71:20:0e:24:6d:94:79:6b: 1d:5a:3e:e3:83:1f:1a:bb:2d:48:87:71:00:08:c4:15:96:42: cb:70:bd:ba:5d:1f:77:02:fb:4f:48:9a:a3:f9:ce:1c:7e:e3: af:5e:fd:f8:b6:f7:c5:8d:1d:d0:ef:5e:e3:fc:14:d9:3c:63: 85:b3:2d:4b:c5:96:57:e3:af:00:2b:5c:cd:53:07:d3:07:77: e7:d9:09:b2:10:53:12:ce:6a:37:e5:dd:df:a8:a2:76:c7:b1: e6:7b:86:97:6f:7d:ea:b1:f0:36:b3:62:89:02:4d:bd:1d:58: 9e:1a:6d:30:6c:3c:f4:e4:05:92:03:2e:4f:fe:3a:f4:86:04: 7c:f4:57:83:42:f2:32:7f:39:e3:ef:18:10:9a:af:82:be:55: f5:18:41:29:89:be:cc:73:97:22:d0:38:bd:23:56:28:3a:ef: 98:ab:63:e4 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIURU1B+roXGG7T4WNXJoRA7Z/qBzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAzMTcxNDQzMzBaFw0yNjAzMTYxNDQ4MzBaMDMxMTAvBgNV BAMTKEM5MUUxNzVCODdBMjM3OEE0Mjk2Q0ZBMThFMDJBQzNFOUUxMUQ2MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmogoeVhBp958Jyt6QpHSR/k6e 7+8ZTvQ5Hlby+8tG7DNvCn1cPtrscHZrMW1INhn9Ope7wHQo+2nmAsJ8qCLL2/7G vForkfhHCM+pT1l11quypjEGIS+YOejWiVLshtGRda/wfAeZL74btGDDTlajW5e9 n0fSgjGY79vrbPkDMhDz/zBMu7wUfQvVVLVPDU+wyTLzDB+MjMjHsfuhnbpTX3uc q5IKRt5NL1Rnh4hOCQkrtMR8v2EgDeZ2VFlK3CJvYsgKC6QtSDs/NjoCOGMQmx2x 0T+IpQcF3wi/HTXT0H7gq3Qss8e/8M2vlLbXyJ1CKgzCbbg8tviBXe2vq0/NAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUyR4XW4eiN4pCls+hjgKsPp4R1jIwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzkzYTM1MzQ2MzM2 M2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzEzNTMxMzAzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGBCoJVMYgMA0GCSqGSIb3DQEBCwUAA4IBAQAolVoSyUtkKY208yT+ +X415oilOIrA3niIN/ifYjBHgcVsLdDxT0k6iG0MpAabmjZg+itIduBvgdFDATP+ Y+YCREcBGlfJ8rhUhdYeuPM/58GQcSAOJG2UeWsdWj7jgx8auy1Ih3EACMQVlkLL cL26XR93AvtPSJqj+c4cfuOvXv34tvfFjR3Q717j/BTZPGOFsy1LxZZX468AK1zN UwfTB3fn2QmyEFMSzmo35d3fqKJ2x7Hme4aXb33qsfA2s2KJAk29HVieGm0wbDz0 5AWSAy5P/jr0hgR89FeDQvIyfznj7xgQmq+CvlX1GEEpib7Mc5ci0Di9I1YoOu+Y q2Pk -----END CERTIFICATE-----Generated at Tue Apr 29 17:21:22 2025 by rpki-client