$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a366430303a3a2f34382d3438203d3e203331383938.roa File: 326130613a363034343a366430303a3a2f34382d3438203d3e203331383938.roa (raw, json) Hash identifier: CqhLchBcwteTA2UPmKctbcElkZjqTuDjTDMOvO0SMqA= Subject key identifier: A1:EB:95:D9:EC:C7:BE:3F:06:39:61:00:C0:94:58:B1:5B:F9:54:4C Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 78C1FB46F1BFBEA8FF67E1272C1EC6761CBAFC0E Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a366430303a3a2f34382d3438203d3e203331383938.roa Signing time: Thu 06 Mar 2025 13:30:28 +0000 ROA not before: Thu 06 Mar 2025 13:25:28 +0000 ROA not after: Thu 05 Mar 2026 13:30:28 +0000 asID: 31898 IP address blocks: 2a0a:6044:6d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 07:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c1:fb:46:f1:bf:be:a8:ff:67:e1:27:2c:1e:c6:76:1c:ba:fc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Mar 6 13:25:28 2025 GMT Not After : Mar 5 13:30:28 2026 GMT Subject: CN=A1EB95D9ECC7BE3F06396100C09458B15BF9544C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c1:5c:ac:c1:fb:e3:ab:4b:58:2d:9d:0a:b9: d8:d4:e9:89:65:71:36:b9:74:4c:81:f4:a8:1a:e4: a1:67:4a:63:05:fd:80:66:c7:14:bb:aa:bd:13:44: 2a:99:fa:ef:9e:8d:0a:71:00:7a:4a:1a:37:55:f0: 04:da:38:8c:fd:7e:cb:e2:2c:78:bf:de:06:f1:6e: aa:83:f3:b4:e8:ba:4c:08:cd:d8:68:b1:e7:92:3f: a8:68:63:f0:9c:55:fb:90:da:63:45:27:12:0d:6a: 87:77:7c:23:7e:07:4f:26:99:d4:31:b6:57:44:5d: 7d:60:ac:e1:43:dc:e0:4f:4e:32:5b:84:97:62:9c: 7b:e7:71:65:c6:18:20:af:45:36:32:78:19:96:ce: 45:90:38:47:c7:20:31:e8:34:4e:82:f6:a0:62:b9: 16:a3:1c:c3:c2:0e:f5:09:03:c0:15:fe:cd:e1:b2: a7:f1:3a:b5:4e:84:a1:ad:0d:54:f1:93:95:a3:ce: f7:f8:51:9d:fa:bc:cc:9e:5f:d9:06:9c:a4:04:a3: 51:56:f1:f4:fe:7b:60:32:27:54:22:8f:89:13:21: 85:fb:fe:3d:22:b7:a5:5a:5b:23:66:c4:8b:2b:7b: b6:e5:b4:5b:9d:66:b1:dd:3a:60:d8:ad:06:65:0c: b9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EB:95:D9:EC:C7:BE:3F:06:39:61:00:C0:94:58:B1:5B:F9:54:4C X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a366430303a3a2f34382d3438203d3e203331383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6d00::/48 Signature Algorithm: sha256WithRSAEncryption a5:af:c0:0d:34:19:ba:8a:ea:c6:2e:69:7f:73:41:82:9d:69: 98:34:08:e5:fa:4a:ee:3c:79:19:8c:01:fd:15:df:76:7e:d5: 9c:35:35:b3:fb:46:68:06:51:96:88:fc:53:dc:21:84:e5:a9: cf:63:6c:9a:ff:31:2e:1e:0b:03:1c:22:a9:e0:70:01:df:ac: c5:23:0d:c4:8b:4d:5b:13:be:e7:c2:c7:b9:4e:bc:b0:8e:04: 02:68:42:08:c2:bb:bf:6f:28:52:8e:ac:a1:06:74:dd:34:c8: 2c:c1:ef:2c:fd:b8:99:36:00:bf:76:e2:ff:12:e2:ed:ed:a2: cd:4f:78:92:6a:2e:1b:93:c4:f3:c6:2f:54:39:9b:39:5f:74: b7:3a:d1:70:5b:b1:7d:ec:ce:22:72:7b:f4:e4:44:c7:ee:19: 3a:dc:3b:1d:24:8a:e9:3b:39:c2:b0:b2:3c:e4:56:4e:b5:2a: eb:60:75:46:ef:ad:48:23:68:b6:e4:e3:0e:74:b3:c1:6c:b3: bd:59:c2:01:64:a8:41:31:ce:c7:93:93:1d:19:7c:ec:bc:26: c3:16:26:10:ef:db:4e:9c:c7:3d:1e:3a:1b:be:b3:e3:9f:01: ca:35:48:bb:82:f7:60:fa:78:4e:9c:18:e4:d8:74:ff:fa:1a: 0c:af:6f:a5 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUeMH7RvG/vqj/Z+EnLB7Gdhy6/A4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAzMDYxMzI1MjhaFw0yNjAzMDUxMzMwMjhaMDMxMTAvBgNV BAMTKEExRUI5NUQ5RUNDN0JFM0YwNjM5NjEwMEMwOTQ1OEIxNUJGOTU0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiwVyswfvjq0tYLZ0KudjU6Yll cTa5dEyB9Kga5KFnSmMF/YBmxxS7qr0TRCqZ+u+ejQpxAHpKGjdV8ATaOIz9fsvi LHi/3gbxbqqD87ToukwIzdhoseeSP6hoY/CcVfuQ2mNFJxINaod3fCN+B08mmdQx tldEXX1grOFD3OBPTjJbhJdinHvncWXGGCCvRTYyeBmWzkWQOEfHIDHoNE6C9qBi uRajHMPCDvUJA8AV/s3hsqfxOrVOhKGtDVTxk5Wjzvf4UZ36vMyeX9kGnKQEo1FW 8fT+e2AyJ1Qij4kTIYX7/j0it6VaWyNmxIsre7bltFudZrHdOmDYrQZlDLlHAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUoeuV2ezHvj8GOWEAwJRYsVv5VEwwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2EzNjY0MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzEzODM5Mzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqCmBEbQAwDQYJKoZIhvcNAQELBQADggEBAKWvwA00GbqK6sYuaX9z QYKdaZg0COX6Su48eRmMAf0V33Z+1Zw1NbP7RmgGUZaI/FPcIYTlqc9jbJr/MS4e CwMcIqngcAHfrMUjDcSLTVsTvufCx7lOvLCOBAJoQgjCu79vKFKOrKEGdN00yCzB 7yz9uJk2AL924v8S4u3tos1PeJJqLhuTxPPGL1Q5mzlfdLc60XBbsX3sziJye/Tk RMfuGTrcOx0kiuk7OcKwsjzkVk61KutgdUbvrUgjaLbk4w50s8Fss71ZwgFkqEEx zseTkx0ZfOy8JsMWJhDv206cxz0eOhu+s+OfAco1SLuC92D6eE6cGOTYdP/6Ggyv b6U= -----END CERTIFICATE-----Generated at Sat Apr 26 16:15:05 2025 by rpki-client