$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a313a3a2f34382d3438203d3e203437323732.roa File: 326130613a363034343a313a3a2f34382d3438203d3e203437323732.roa (raw, json) Hash identifier: GFZ2LSJ6o9vRy1oggRHpCKY7nB6hZuL4IsphMjzC5Sw= Subject key identifier: 1C:CF:87:BB:12:60:36:28:74:9C:D2:1B:10:53:EF:2C:BB:F4:EA:53 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 2A15F58091AAD4F16030CDBD98745B67BF85B1AE Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a313a3a2f34382d3438203d3e203437323732.roa Signing time: Fri 07 Feb 2025 19:13:21 +0000 ROA not before: Fri 07 Feb 2025 19:08:21 +0000 ROA not after: Fri 06 Feb 2026 19:13:21 +0000 asID: 47272 IP address blocks: 2a0a:6044:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 02:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:15:f5:80:91:aa:d4:f1:60:30:cd:bd:98:74:5b:67:bf:85:b1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 7 19:08:21 2025 GMT Not After : Feb 6 19:13:21 2026 GMT Subject: CN=1CCF87BB12603628749CD21B1053EF2CBBF4EA53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:82:69:a9:a6:a8:de:1d:c7:32:77:c3:86:88: 15:da:5b:14:23:2e:7b:df:0d:a9:06:7a:34:a2:a5: 90:c4:ac:7c:01:c4:99:25:85:8b:db:37:81:98:0d: 7e:e7:2d:6c:08:65:cb:88:c3:d7:5c:0a:6f:73:f0: 20:56:59:a4:63:9a:a7:81:68:d1:f6:5d:65:e3:17: 7c:2d:c7:cd:6e:b1:47:8c:d4:f3:08:47:26:95:5a: 07:39:76:58:50:fa:f5:20:58:e4:ab:15:ba:07:1e: 45:92:2b:2e:67:a9:01:b5:24:6f:42:2a:05:d8:df: 7f:48:ff:d0:6f:a1:1f:76:24:9e:58:ae:b4:10:be: 32:5d:2f:47:70:c2:b2:d9:1a:44:e2:72:66:73:aa: 9f:35:c0:2f:7e:74:ab:51:86:bd:e2:a3:c2:52:59: cb:43:b2:0a:e1:0b:b2:68:d0:9c:64:50:fe:fb:0f: ba:6f:6b:4f:d5:1d:06:17:37:62:73:cb:23:2b:b9: 7e:b1:15:70:d2:a6:79:98:34:d9:d5:81:72:fa:a6: 15:d7:70:3f:3b:9d:dc:b7:6c:9a:f7:a7:cb:59:f5: af:f9:04:c6:03:06:ac:d2:81:20:3a:d8:97:51:e5: 97:6e:d6:c5:c6:2c:f4:41:30:85:2d:ea:a2:4a:a0: c1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CF:87:BB:12:60:36:28:74:9C:D2:1B:10:53:EF:2C:BB:F4:EA:53 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a313a3a2f34382d3438203d3e203437323732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:1::/48 Signature Algorithm: sha256WithRSAEncryption af:9c:3b:8e:1f:22:21:af:64:8a:88:7a:ae:f1:5c:7e:1d:63: 11:f0:c1:4f:e3:74:66:e6:4a:c1:ae:0c:83:bd:96:af:e1:d0: f6:59:96:56:d6:c2:f5:53:a9:86:b3:0a:85:61:a0:ee:97:4b: 07:c4:98:4d:91:d8:55:bf:c0:e2:3e:3f:74:49:72:01:c6:7d: 67:d8:dc:2a:0e:5c:8b:c8:f8:d6:95:b8:2c:c5:95:f3:c1:d5: 4e:6b:06:a3:f2:df:ff:3b:0f:68:64:38:1f:09:78:11:7e:12: f9:71:12:b2:07:10:de:4b:76:de:af:ef:83:38:bd:85:a8:c5: 7e:5e:a4:5f:26:8f:a1:63:ea:58:55:ff:eb:f5:4f:c6:e2:24: ce:bd:a9:27:5b:15:7a:cf:88:2e:fe:d8:c7:09:01:e5:23:6c: 8e:be:62:59:34:f0:78:84:75:38:f3:cf:5b:5b:28:66:ea:76: b7:e1:eb:a7:6e:d3:3d:eb:da:fd:0c:87:0d:d2:be:54:b6:ef: 62:4f:b7:4b:2f:57:ae:e3:32:51:3f:7a:6b:df:31:6a:15:91: 9c:d8:61:7a:60:21:7a:6d:ac:ce:4a:4b:7d:10:3c:9c:61:ec: f7:73:fe:6d:13:7f:2a:ad:8f:f2:19:73:1e:69:79:8e:81:01: df:6d:b7:8d -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIUKhX1gJGq1PFgMM29mHRbZ7+Fsa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMDcxOTA4MjFaFw0yNjAyMDYxOTEzMjFaMDMxMTAvBgNV BAMTKDFDQ0Y4N0JCMTI2MDM2Mjg3NDlDRDIxQjEwNTNFRjJDQkJGNEVBNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfgmmppqjeHccyd8OGiBXaWxQj LnvfDakGejSipZDErHwBxJklhYvbN4GYDX7nLWwIZcuIw9dcCm9z8CBWWaRjmqeB aNH2XWXjF3wtx81usUeM1PMIRyaVWgc5dlhQ+vUgWOSrFboHHkWSKy5nqQG1JG9C KgXY339I/9BvoR92JJ5YrrQQvjJdL0dwwrLZGkTicmZzqp81wC9+dKtRhr3io8JS WctDsgrhC7Jo0JxkUP77D7pva0/VHQYXN2JzyyMruX6xFXDSpnmYNNnVgXL6phXX cD87ndy3bJr3p8tZ9a/5BMYDBqzSgSA62JdR5Zdu1sXGLPRBMIUt6qJKoMEJAgMB AAGjggJyMIICbjAdBgNVHQ4EFgQUHM+HuxJgNih0nNIbEFPvLLv06lMwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2EzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczMjM3MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAqCmBEAAEwDQYJKoZIhvcNAQELBQADggEBAK+cO44fIiGvZIqIeq7xXH4dYxHw wU/jdGbmSsGuDIO9lq/h0PZZllbWwvVTqYazCoVhoO6XSwfEmE2R2FW/wOI+P3RJ cgHGfWfY3CoOXIvI+NaVuCzFlfPB1U5rBqPy3/87D2hkOB8JeBF+EvlxErIHEN5L dt6v74M4vYWoxX5epF8mj6Fj6lhV/+v1T8biJM69qSdbFXrPiC7+2McJAeUjbI6+ Ylk08HiEdTjzz1tbKGbqdrfh66du0z3r2v0Mhw3SvlS272JPt0svV67jMlE/emvf MWoVkZzYYXpgIXptrM5KS30QPJxh7Pdz/m0Tfyqtj/IZcx5peY6BAd9tt40= -----END CERTIFICATE-----Generated at Mon Apr 28 15:06:59 2025 by rpki-client