$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a633030303a3a2f33362d3438203d3e20323134393131.roa File: 326130393a353463363a633030303a3a2f33362d3438203d3e20323134393131.roa (raw, json) Hash identifier: IG8IDESdm8KDeOlwg5Lyc9rcsYaNShmJKl6WLbt+v/Q= Subject key identifier: 3C:AC:49:5C:45:D7:CD:B8:CD:3F:68:DC:44:A4:F8:C3:FF:F7:B5:69 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 774DA6EF0499A69E226A82A2E0089F22CAB87F7A Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a633030303a3a2f33362d3438203d3e20323134393131.roa Signing time: Tue 18 Feb 2025 07:11:58 +0000 ROA not before: Tue 18 Feb 2025 07:06:58 +0000 ROA not after: Tue 17 Feb 2026 07:11:58 +0000 asID: 214911 IP address blocks: 2a09:54c6:c000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 02:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:4d:a6:ef:04:99:a6:9e:22:6a:82:a2:e0:08:9f:22:ca:b8:7f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 18 07:06:58 2025 GMT Not After : Feb 17 07:11:58 2026 GMT Subject: CN=3CAC495C45D7CDB8CD3F68DC44A4F8C3FFF7B569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4f:5d:0a:3d:ca:93:b6:37:72:6e:42:7d:25: af:9b:d7:9f:d9:2d:53:5d:85:c3:44:54:ac:78:94: c0:60:ef:c1:6d:c5:30:cb:32:34:cb:1a:46:50:be: b0:b1:69:57:eb:a2:0d:23:aa:d1:cf:c9:82:22:3e: 7b:1a:1e:92:08:8a:0c:48:cf:43:02:28:bb:d5:cb: 39:70:97:2d:2f:52:58:08:11:8b:9d:6b:a3:8d:99: 18:43:f3:4a:3f:4b:cc:79:e1:c5:9d:f4:2e:e0:f8: 77:d6:0b:30:d9:46:04:33:b3:b5:86:c0:15:54:b6: 42:da:a8:7a:c8:9c:a7:ad:d3:fb:23:41:68:ed:35: a8:03:92:6c:70:5f:2e:4a:af:5b:87:29:7c:05:4a: 59:fb:1b:60:3d:db:6c:7e:ac:64:32:39:dc:2b:d7: 69:e4:43:31:87:d6:ab:72:9a:e5:22:ec:75:1a:36: ff:37:80:16:52:c3:a5:d0:80:e9:1a:b7:0a:3f:87: d8:f5:c0:15:49:a8:2e:1f:67:a8:6d:b3:ee:ae:80: 7c:97:8c:46:44:e2:4d:c8:7b:89:d7:36:8e:44:95: 9f:34:a3:12:b1:a3:99:37:6e:75:9d:a0:7d:fa:be: 19:6c:39:d6:fe:30:0a:6e:e7:14:52:d3:8b:f9:6b: 27:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AC:49:5C:45:D7:CD:B8:CD:3F:68:DC:44:A4:F8:C3:FF:F7:B5:69 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a633030303a3a2f33362d3438203d3e20323134393131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:c000::/36 Signature Algorithm: sha256WithRSAEncryption 96:4f:bc:47:1f:9b:1d:a2:22:0d:61:a0:0d:4f:a0:68:82:f8: 73:76:e0:62:63:f6:72:be:99:87:d8:c7:64:c2:9e:8b:6b:c8: 07:12:2c:38:95:a8:4f:f1:a3:78:57:7d:fc:21:d7:63:6f:18: e9:c7:1f:c2:1c:b0:f1:89:df:e2:42:99:79:1e:e3:43:62:2b: 75:2c:c7:80:24:62:59:92:a0:45:7e:82:36:37:2c:73:bb:3f: 2b:39:dc:cf:86:9d:f8:f8:e9:c0:8b:0d:b1:61:68:af:c2:37: a7:9a:78:1f:1a:04:e5:d7:2a:96:85:33:7d:e0:1f:64:54:67: 3b:7e:00:3b:e6:7a:26:a8:d4:75:60:20:ae:f0:71:e9:34:f6: 3f:e3:8e:05:86:fe:8a:aa:c9:cd:de:bf:29:6b:0c:65:a8:c7: b5:90:b4:3d:ac:54:9f:13:ac:e9:40:10:92:ce:5a:25:db:a9: 48:84:3e:23:ab:71:c7:37:6b:4d:50:df:be:08:b7:81:a1:bc: c7:09:9a:f1:ef:55:76:67:30:f1:d3:24:e4:65:ef:13:dd:4c: 95:1f:d1:7e:66:cf:62:76:9a:1f:39:08:6d:e5:7d:cc:8d:47: ff:14:26:ac:8f:2c:61:dc:97:c7:5b:85:f7:ab:63:ea:cf:cf: d7:39:49:ce -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUd02m7wSZpp4iaoKi4AifIsq4f3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMTgwNzA2NThaFw0yNjAyMTcwNzExNThaMDMxMTAvBgNV BAMTKDNDQUM0OTVDNDVEN0NEQjhDRDNGNjhEQzQ0QTRGOEMzRkZGN0I1NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0T10KPcqTtjdybkJ9Ja+b15/Z LVNdhcNEVKx4lMBg78FtxTDLMjTLGkZQvrCxaVfrog0jqtHPyYIiPnsaHpIIigxI z0MCKLvVyzlwly0vUlgIEYuda6ONmRhD80o/S8x54cWd9C7g+HfWCzDZRgQzs7WG wBVUtkLaqHrInKet0/sjQWjtNagDkmxwXy5Kr1uHKXwFSln7G2A922x+rGQyOdwr 12nkQzGH1qtymuUi7HUaNv83gBZSw6XQgOkatwo/h9j1wBVJqC4fZ6hts+6ugHyX jEZE4k3Ie4nXNo5ElZ80oxKxo5k3bnWdoH36vhlsOdb+MApu5xRS04v5ayerAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUPKxJXEXXzbjNP2jcRKT4w//3tWkwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzkzYTM1MzQ2MzM2 M2E2MzMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNkM2UyMDMyMzEzNDM5MzEzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGBCoJVMbAMA0GCSqGSIb3DQEBCwUAA4IBAQCWT7xHH5sdoiINYaAN T6BogvhzduBiY/ZyvpmH2Mdkwp6La8gHEiw4lahP8aN4V338Iddjbxjpxx/CHLDx id/iQpl5HuNDYit1LMeAJGJZkqBFfoI2Nyxzuz8rOdzPhp34+OnAiw2xYWivwjen mngfGgTl1yqWhTN94B9kVGc7fgA75nomqNR1YCCu8HHpNPY/444Fhv6KqsnN3r8p awxlqMe1kLQ9rFSfE6zpQBCSzlol26lIhD4jq3HHN2tNUN++CLeBobzHCZrx71V2 ZzDx0yTkZe8T3UyVH9F+Zs9idpofOQht5X3MjUf/FCasjyxh3JfHW4X3q2Pqz8/X OUnO -----END CERTIFICATE-----Generated at Mon Apr 28 17:29:22 2025 by rpki-client