$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a323a3a2f34382d3438203d3e203437323732.roa File: 326130613a363034343a323a3a2f34382d3438203d3e203437323732.roa (raw, json) Hash identifier: MGFRKN9cs5ykyaPyQQ/DYPzFJaICE3Seyck2RpLl8Xc= Subject key identifier: 08:6B:7C:0F:82:D5:EB:86:2D:DC:B3:7D:EA:C2:AD:6B:FC:A8:B3:57 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 37173ECDFF49911C19F7F2EBB67F9BB0CF175FA7 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a323a3a2f34382d3438203d3e203437323732.roa Signing time: Fri 07 Feb 2025 19:13:20 +0000 ROA not before: Fri 07 Feb 2025 19:08:20 +0000 ROA not after: Fri 06 Feb 2026 19:13:20 +0000 asID: 47272 IP address blocks: 2a0a:6044:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 15:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:17:3e:cd:ff:49:91:1c:19:f7:f2:eb:b6:7f:9b:b0:cf:17:5f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 7 19:08:20 2025 GMT Not After : Feb 6 19:13:20 2026 GMT Subject: CN=086B7C0F82D5EB862DDCB37DEAC2AD6BFCA8B357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:76:b6:31:22:28:04:e0:96:b7:16:97:1f:f4: 7a:78:bd:9f:d6:e5:72:1a:04:d4:7c:f5:69:4e:02: f3:44:2e:9a:d6:00:85:1a:d8:6b:5e:57:3f:14:6f: 1a:39:b6:7c:61:50:bd:be:0d:06:60:89:c0:27:b7: 5e:b6:8d:43:6e:01:3d:fd:39:3d:e8:4e:e3:f1:d4: e7:b8:63:bc:50:cf:a3:71:83:7f:e3:fa:60:d3:be: 04:b6:6d:31:88:19:ab:fd:4b:a9:80:ae:a5:0b:94: 87:6d:89:fa:ae:7e:40:48:ed:19:05:74:e3:f3:94: 4c:56:50:f4:40:03:38:98:95:45:50:e6:fa:fb:e6: 41:1b:ff:47:ff:20:10:ef:0c:f2:29:48:d5:bc:46: c0:a2:ba:25:42:eb:48:c5:e3:f1:4c:1f:1f:7c:36: 07:7c:9b:9e:71:c3:b2:bd:05:41:08:b2:32:37:34: a9:d9:39:df:31:85:10:80:ae:1d:22:ea:a5:07:0d: 2c:7d:6b:c4:c1:39:e5:47:a3:57:7a:a2:c6:aa:b8: e3:b7:45:f4:d8:ac:44:10:c3:c4:7a:05:b2:3a:a2: f3:c5:56:e0:0e:93:32:48:ab:a0:81:e7:8e:90:61: 97:0f:98:db:95:1c:43:5d:43:c8:d5:ac:03:9e:a8: f7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6B:7C:0F:82:D5:EB:86:2D:DC:B3:7D:EA:C2:AD:6B:FC:A8:B3:57 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a323a3a2f34382d3438203d3e203437323732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:2::/48 Signature Algorithm: sha256WithRSAEncryption 6f:aa:89:41:95:01:55:5f:d1:e6:1f:30:4a:41:66:23:86:e8: b0:53:84:01:04:b2:0b:28:f6:e2:a3:60:18:e7:12:d8:e2:c1: 55:1b:ee:2b:61:84:07:02:ac:39:ea:0c:d8:3d:a0:11:10:33: 1c:2d:ff:d9:d7:39:1b:cd:9d:41:a1:f9:81:d5:0d:88:e7:89: 53:65:da:00:f9:30:18:78:00:2c:a6:8d:fc:9b:e1:dd:73:ec: 68:77:f8:92:42:0a:cd:f2:b2:64:d0:7a:c3:d9:dd:3b:b0:ac: 9a:ed:69:aa:53:96:48:2c:15:a0:02:ed:2f:94:af:8f:9d:35: d2:82:c9:20:fc:78:02:68:f3:cd:86:eb:65:37:0c:0f:30:59: 51:9f:ed:95:f5:15:fc:7f:76:54:2e:47:02:c7:ae:73:df:70: d8:96:d2:dd:9a:8f:df:f8:23:57:a2:2f:b4:60:63:8d:20:8d: cd:58:94:3a:8d:26:87:3d:c8:bd:13:66:27:30:f1:e2:be:d2: dd:fe:cb:b7:72:04:39:8d:b7:6a:97:fc:c4:ad:c7:38:3e:bb: bb:84:b9:04:a4:04:05:1f:c2:c3:9c:44:ea:0b:ad:54:38:48: ff:a2:30:8e:e0:92:ab:89:22:ee:35:9f:31:99:98:dc:1d:3c: 65:10:b4:94 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIUNxc+zf9JkRwZ9/Lrtn+bsM8XX6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMDcxOTA4MjBaFw0yNjAyMDYxOTEzMjBaMDMxMTAvBgNV BAMTKDA4NkI3QzBGODJENUVCODYyRERDQjM3REVBQzJBRDZCRkNBOEIzNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvdrYxIigE4Ja3Fpcf9Hp4vZ/W 5XIaBNR89WlOAvNELprWAIUa2GteVz8Ubxo5tnxhUL2+DQZgicAnt162jUNuAT39 OT3oTuPx1Oe4Y7xQz6Nxg3/j+mDTvgS2bTGIGav9S6mArqULlIdtifqufkBI7RkF dOPzlExWUPRAAziYlUVQ5vr75kEb/0f/IBDvDPIpSNW8RsCiuiVC60jF4/FMHx98 Ngd8m55xw7K9BUEIsjI3NKnZOd8xhRCArh0i6qUHDSx9a8TBOeVHo1d6osaquOO3 RfTYrEQQw8R6BbI6ovPFVuAOkzJIq6CB546QYZcPmNuVHENdQ8jVrAOeqPc3AgMB AAGjggJyMIICbjAdBgNVHQ4EFgQUCGt8D4LV64Yt3LN96sKta/yos1cwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2EzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczMjM3MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAqCmBEAAIwDQYJKoZIhvcNAQELBQADggEBAG+qiUGVAVVf0eYfMEpBZiOG6LBT hAEEsgso9uKjYBjnEtjiwVUb7ithhAcCrDnqDNg9oBEQMxwt/9nXORvNnUGh+YHV DYjniVNl2gD5MBh4ACymjfyb4d1z7Gh3+JJCCs3ysmTQesPZ3TuwrJrtaapTlkgs FaAC7S+Ur4+dNdKCySD8eAJo882G62U3DA8wWVGf7ZX1Ffx/dlQuRwLHrnPfcNiW 0t2aj9/4I1eiL7RgY40gjc1YlDqNJoc9yL0TZicw8eK+0t3+y7dyBDmNt2qX/MSt xzg+u7uEuQSkBAUfwsOcROoLrVQ4SP+iMI7gkquJIu41nzGZmNwdPGUQtJQ= -----END CERTIFICATE-----Generated at Tue Apr 29 23:29:31 2025 by rpki-client