$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a353030303a3a2f33362d3434203d3e20323133383634.roa File: 326130393a353463363a353030303a3a2f33362d3434203d3e20323133383634.roa (raw, json) Hash identifier: Trt7zvWLHzygkO7V1exp6mHZFw4lMGhCWx8KbRzve4Y= Subject key identifier: 13:61:4A:5F:AF:EC:51:4F:66:D8:4B:AF:B8:D1:2E:A4:65:DB:E0:39 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 15B097E77E4EA4DDF53E52D4DEA1308FA2DF6EA9 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a353030303a3a2f33362d3434203d3e20323133383634.roa Signing time: Thu 06 Mar 2025 18:13:42 +0000 ROA not before: Thu 06 Mar 2025 18:08:42 +0000 ROA not after: Thu 05 Mar 2026 18:13:42 +0000 asID: 213864 IP address blocks: 2a09:54c6:5000::/36 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 19:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b0:97:e7:7e:4e:a4:dd:f5:3e:52:d4:de:a1:30:8f:a2:df:6e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Mar 6 18:08:42 2025 GMT Not After : Mar 5 18:13:42 2026 GMT Subject: CN=13614A5FAFEC514F66D84BAFB8D12EA465DBE039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:ce:d8:0e:2e:37:c8:12:62:f6:8e:9d:75: a7:28:14:97:27:f8:db:ae:dd:c7:7b:28:40:f2:e1: 81:39:98:7a:1f:2d:81:16:75:13:91:1d:00:ec:cf: f9:dc:df:76:9c:24:32:0f:1b:9e:f7:dd:6c:1f:d8: 70:22:53:a1:6e:24:a8:73:f1:b2:6b:60:42:75:8a: 5d:a5:0c:45:21:c6:d8:2f:89:77:38:4b:f4:c3:98: 14:a3:7a:b4:43:ff:18:dc:ff:0b:a9:66:c1:3c:83: 64:b8:f0:d7:73:94:5c:21:6a:2a:6d:0a:02:4f:b1: d1:46:88:f3:17:8b:f0:fb:32:b1:ad:87:d7:f6:dc: 36:51:fe:a7:fa:7d:1a:a6:08:12:78:82:2d:9d:d3: bc:dd:00:d0:c9:a9:48:86:77:42:13:12:ed:8a:0d: d9:55:5c:a8:db:04:07:0e:82:7c:45:0f:4d:3a:d6: 6e:e1:9a:bc:93:14:fb:18:69:83:73:33:5a:47:a2: 73:69:b3:bc:9f:46:bd:eb:58:b2:f9:cd:44:52:09: 04:ba:5a:ce:e3:74:0f:ee:c4:a2:2b:d2:b2:be:68: b9:00:b9:0d:6c:75:ae:09:2d:11:4b:da:5b:24:51: 75:98:f7:e1:c8:80:4b:2d:1b:90:31:c0:00:72:e4: 5a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:61:4A:5F:AF:EC:51:4F:66:D8:4B:AF:B8:D1:2E:A4:65:DB:E0:39 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a353030303a3a2f33362d3434203d3e20323133383634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:5000::/36 Signature Algorithm: sha256WithRSAEncryption 69:1d:ea:ee:02:d1:10:2c:93:04:58:d2:0b:90:6f:b6:a5:08: ec:89:c2:49:36:c9:1c:30:c3:be:34:71:fc:85:36:90:d1:a8: 5c:8e:e4:ef:21:21:81:03:e4:2c:18:54:57:38:92:e1:1e:17: a4:a9:1e:ae:0b:d3:93:a0:b5:13:0b:44:f6:a5:6d:4d:0a:da: be:51:e3:4d:07:86:68:ce:28:3a:a7:0a:58:a4:5f:45:59:10: 9a:fd:f3:a8:d4:f6:fe:4e:91:a9:ba:3f:9e:34:84:c6:f0:1e: eb:f8:37:4b:91:c4:04:dc:83:d2:fd:08:1d:84:0e:91:df:dd: 35:5f:30:20:b1:21:02:92:ba:df:54:83:52:8b:16:30:bb:82: 5e:24:b2:ef:bd:c2:b0:44:1c:aa:f0:8d:c1:8b:f1:5b:5e:e6: b3:9f:26:f9:ae:a4:00:c4:3e:7e:df:74:a6:78:d1:1f:00:9d: 5a:90:5c:94:22:45:84:ee:b4:9e:bd:0d:13:43:a6:07:4b:6c: 2b:fe:cd:d5:88:3d:0a:18:01:4c:c7:3d:aa:ff:c0:e3:51:e8: 82:04:41:c6:9e:55:db:4c:95:d9:67:c7:8f:c1:1c:6c:a5:32: 27:ec:ad:d3:31:aa:10:da:0b:ca:52:fa:63:03:b9:6d:4e:4e: 2b:b2:24:c2 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUFbCX535OpN31PlLU3qEwj6LfbqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAzMDYxODA4NDJaFw0yNjAzMDUxODEzNDJaMDMxMTAvBgNV BAMTKDEzNjE0QTVGQUZFQzUxNEY2NkQ4NEJBRkI4RDEyRUE0NjVEQkUwMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp7c7YDi43yBJi9o6ddacoFJcn +Nuu3cd7KEDy4YE5mHofLYEWdRORHQDsz/nc33acJDIPG5733Wwf2HAiU6FuJKhz 8bJrYEJ1il2lDEUhxtgviXc4S/TDmBSjerRD/xjc/wupZsE8g2S48NdzlFwhaipt CgJPsdFGiPMXi/D7MrGth9f23DZR/qf6fRqmCBJ4gi2d07zdANDJqUiGd0ITEu2K DdlVXKjbBAcOgnxFD0061m7hmryTFPsYaYNzM1pHonNps7yfRr3rWLL5zURSCQS6 Ws7jdA/uxKIr0rK+aLkAuQ1sda4JLRFL2lskUXWY9+HIgEstG5AxwABy5FovAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUE2FKX6/sUU9m2EuvuNEupGXb4DkwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzkzYTM1MzQ2MzM2 M2EzNTMwMzAzMDNhM2EyZjMzMzYyZDM0MzQyMDNkM2UyMDMyMzEzMzM4MzYzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGBCoJVMZQMA0GCSqGSIb3DQEBCwUAA4IBAQBpHeruAtEQLJMEWNIL kG+2pQjsicJJNskcMMO+NHH8hTaQ0ahcjuTvISGBA+QsGFRXOJLhHhekqR6uC9OT oLUTC0T2pW1NCtq+UeNNB4Zozig6pwpYpF9FWRCa/fOo1Pb+TpGpuj+eNITG8B7r +DdLkcQE3IPS/QgdhA6R3901XzAgsSECkrrfVINSixYwu4JeJLLvvcKwRByq8I3B i/FbXuaznyb5rqQAxD5+33SmeNEfAJ1akFyUIkWE7rSevQ0TQ6YHS2wr/s3ViD0K GAFMxz2q/8DjUeiCBEHGnlXbTJXZZ8ePwRxspTIn7K3TMaoQ2gvKUvpjA7ltTk4r siTC -----END CERTIFICATE-----Generated at Wed Apr 30 05:43:37 2025 by rpki-client