$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a363630303a3a2f34302d3438203d3e20323134363630.roa File: 326130613a363034343a363630303a3a2f34302d3438203d3e20323134363630.roa (raw, json) Hash identifier: NcUomJHrgaVh4EN1BeKY9x4BTioFewvtZwnCrekAwHQ= Subject key identifier: F3:36:06:99:A3:86:41:99:9C:D3:89:FB:D2:C8:57:5B:14:07:22:81 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 4B61C3DC46A240FAFA85F6DF2755F7F84E818B0F Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a363630303a3a2f34302d3438203d3e20323134363630.roa Signing time: Fri 07 Feb 2025 18:37:05 +0000 ROA not before: Fri 07 Feb 2025 18:32:05 +0000 ROA not after: Fri 06 Feb 2026 18:37:05 +0000 asID: 214660 IP address blocks: 2a0a:6044:6600::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 12:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:61:c3:dc:46:a2:40:fa:fa:85:f6:df:27:55:f7:f8:4e:81:8b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 7 18:32:05 2025 GMT Not After : Feb 6 18:37:05 2026 GMT Subject: CN=F3360699A38641999CD389FBD2C8575B14072281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f0:00:96:fd:c3:c9:09:9f:91:3f:c2:27:5d: 3b:d5:11:55:6f:07:4b:38:bb:a2:df:56:70:21:19: 78:a7:ea:a1:97:7e:19:5b:65:ac:b0:9a:7b:89:41: e8:ec:32:7c:1b:b3:06:e6:f4:28:09:cc:48:37:95: 1e:7e:fb:5e:e4:03:0f:6b:8d:26:a2:63:85:b9:c5: b6:12:13:ce:02:73:68:36:d6:df:fe:53:63:11:19: 30:49:3d:97:17:68:e5:17:d9:75:e3:02:3f:e7:ee: 0f:f7:bc:b4:66:68:b1:39:cb:0d:eb:d0:53:33:60: ef:85:fa:61:19:8e:5e:72:26:5c:e5:d6:31:70:61: 7b:29:4f:11:13:2f:4f:d7:6b:21:50:27:29:85:33: a7:7b:21:8c:bc:95:32:28:d1:a7:ee:43:da:ff:66: 03:73:27:59:a0:35:d6:d2:16:24:3d:36:71:49:1b: d2:f0:69:bf:ca:44:63:a7:e0:db:75:84:e2:69:d2: e7:2d:83:ef:b3:44:a6:15:dc:3f:5c:52:ec:91:cf: cd:e6:2e:d8:f6:e6:10:1c:b6:19:06:8a:4c:5b:2a: 93:d8:b8:9d:71:06:49:ac:4b:c8:81:2a:29:b1:43: 7a:2a:37:4f:73:92:da:7c:c4:b3:91:b7:20:cb:15: ca:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:36:06:99:A3:86:41:99:9C:D3:89:FB:D2:C8:57:5B:14:07:22:81 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a363630303a3a2f34302d3438203d3e20323134363630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6600::/40 Signature Algorithm: sha256WithRSAEncryption 11:5c:d9:2c:5c:7a:7e:53:36:98:35:02:43:e9:90:47:fe:24: a5:2e:ac:e0:ad:e3:23:ae:68:26:85:ef:53:33:c2:8c:6a:78: 53:85:51:65:d7:5e:2f:74:1c:ed:9c:65:ec:08:08:33:62:b2: d2:25:9c:8d:cf:9d:8a:08:98:a5:5e:a6:6b:b8:51:fb:9b:78: 65:81:b4:5d:a3:b3:d0:cc:6a:55:e6:2b:7e:44:5b:6e:af:2f: 15:25:ea:6a:c4:ba:c5:6b:2c:90:87:ac:cd:3d:aa:60:d6:11: 12:15:ba:cc:d2:10:07:c8:12:db:50:6f:91:e1:d1:73:51:9a: 1b:0c:f5:c3:39:b5:c0:53:1c:87:0e:08:c4:35:58:69:72:f0: 71:40:72:84:0d:53:6a:79:11:f2:b5:03:2e:2b:44:ab:72:3c: 17:e3:9a:89:1c:82:07:98:76:27:95:13:37:9a:d4:79:82:a8: b4:81:74:f0:73:ec:8b:7c:54:3a:ff:8e:57:8e:c4:7a:90:c1: 5f:ff:cd:a2:2b:7d:f1:de:d4:95:9f:1f:53:81:f6:f2:8a:61: a2:84:4a:bc:eb:57:d5:1c:16:49:ee:a1:f5:33:e6:82:ab:ca: 07:a7:96:74:a0:a0:44:30:3e:47:3d:6c:52:8b:85:1b:49:5f: 42:45:73:91 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUS2HD3EaiQPr6hfbfJ1X3+E6Biw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMDcxODMyMDVaFw0yNjAyMDYxODM3MDVaMDMxMTAvBgNV BAMTKEYzMzYwNjk5QTM4NjQxOTk5Q0QzODlGQkQyQzg1NzVCMTQwNzIyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk8ACW/cPJCZ+RP8InXTvVEVVv B0s4u6LfVnAhGXin6qGXfhlbZaywmnuJQejsMnwbswbm9CgJzEg3lR5++17kAw9r jSaiY4W5xbYSE84Cc2g21t/+U2MRGTBJPZcXaOUX2XXjAj/n7g/3vLRmaLE5yw3r 0FMzYO+F+mEZjl5yJlzl1jFwYXspTxETL0/XayFQJymFM6d7IYy8lTIo0afuQ9r/ ZgNzJ1mgNdbSFiQ9NnFJG9Lwab/KRGOn4Nt1hOJp0uctg++zRKYV3D9cUuyRz83m Ltj25hActhkGikxbKpPYuJ1xBkmsS8iBKimxQ3oqN09zktp8xLORtyDLFcofAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQU8zYGmaOGQZmc04n70shXWxQHIoEwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2EzNjM2MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNDM2MzYzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoKYERmMA0GCSqGSIb3DQEBCwUAA4IBAQARXNksXHp+UzaYNQJD 6ZBH/iSlLqzgreMjrmgmhe9TM8KManhThVFl114vdBztnGXsCAgzYrLSJZyNz52K CJilXqZruFH7m3hlgbRdo7PQzGpV5it+RFtury8VJepqxLrFayyQh6zNPapg1hES FbrM0hAHyBLbUG+R4dFzUZobDPXDObXAUxyHDgjENVhpcvBxQHKEDVNqeRHytQMu K0SrcjwX45qJHIIHmHYnlRM3mtR5gqi0gXTwc+yLfFQ6/45XjsR6kMFf/82iK33x 3tSVnx9TgfbyimGihEq861fVHBZJ7qH1M+aCq8oHp5Z0oKBEMD5HPWxSi4UbSV9C RXOR -----END CERTIFICATE-----Generated at Mon Apr 28 22:35:12 2025 by rpki-client