$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373030303a3a2f34302d3438203d3e20323032323234.roa File: 326130613a363034343a373030303a3a2f34302d3438203d3e20323032323234.roa (raw, json) Hash identifier: 2yZBNe8M/30I93uvAMUCuxRv4Jt5i6hcN7f+bLOfaDE= Subject key identifier: B0:67:A2:AD:16:4E:00:2C:55:20:DC:36:E0:7B:5C:46:C6:D0:88:13 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 1D0EB174D6074FF6DFD9EEBBE1AC64392B260C72 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373030303a3a2f34302d3438203d3e20323032323234.roa Signing time: Fri 07 Feb 2025 18:38:07 +0000 ROA not before: Fri 07 Feb 2025 18:33:07 +0000 ROA not after: Fri 06 Feb 2026 18:38:07 +0000 asID: 202224 IP address blocks: 2a0a:6044:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 02:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0e:b1:74:d6:07:4f:f6:df:d9:ee:bb:e1:ac:64:39:2b:26:0c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 7 18:33:07 2025 GMT Not After : Feb 6 18:38:07 2026 GMT Subject: CN=B067A2AD164E002C5520DC36E07B5C46C6D08813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:64:cb:56:86:9b:e9:40:26:31:93:66:b2:b8: 76:af:a3:e8:00:b9:e6:cc:79:8b:50:a5:fd:6a:98: d0:ee:71:01:ae:84:d0:39:c4:26:9b:df:8a:2f:43: cc:8e:f7:8e:90:75:8b:92:35:c1:f8:d7:f2:64:8b: ac:03:51:82:11:08:74:24:a5:26:31:2e:45:e6:91: f0:6f:87:5e:75:52:d2:9f:c6:ce:28:21:43:74:6f: 04:51:73:a2:ca:eb:67:84:b1:b1:b1:cd:d6:30:b6: ce:2a:99:bf:33:61:41:12:41:f0:64:f8:72:56:f2: 4a:50:d0:41:e9:1a:be:64:10:82:76:42:fd:e8:a5: 90:91:4b:48:83:be:40:6e:c8:5f:79:1e:17:9c:95: 51:a0:80:50:f4:48:48:30:9e:ed:3d:c4:8e:5c:1c: 66:bf:09:6a:7b:69:e7:0b:de:c9:ce:c1:47:fc:23: 7c:05:b3:55:db:e5:70:f8:74:37:d7:9f:4c:11:fe: 9f:8c:4e:b1:34:a3:3b:0d:79:3b:27:8e:1e:39:7f: 42:e9:e9:52:b1:65:31:e4:60:49:7a:12:49:fa:70: 0d:85:4e:a8:7c:d0:96:14:14:67:52:04:93:a8:e7: 19:08:b9:13:c2:34:b4:30:41:11:b4:50:b0:9a:5d: 18:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:67:A2:AD:16:4E:00:2C:55:20:DC:36:E0:7B:5C:46:C6:D0:88:13 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373030303a3a2f34302d3438203d3e20323032323234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7000::/40 Signature Algorithm: sha256WithRSAEncryption 1c:9b:5d:24:dd:cc:43:b3:d7:30:f8:14:50:f3:84:6b:52:54: 81:81:8e:18:e4:53:e5:e6:0c:a4:f0:89:cf:36:f9:a1:67:ab: ec:43:2c:49:d5:00:b7:f9:35:e4:0f:64:3f:72:b8:c2:d5:0a: d3:57:d6:ff:02:03:ce:6c:de:79:aa:cb:56:98:75:ee:0b:1d: 7f:0c:a6:bc:1c:e8:90:75:96:91:1b:c0:f9:ec:a5:b9:2a:a3: 0e:4d:35:68:2b:45:05:1c:ac:15:7c:24:e2:2e:71:65:bc:cb: a2:6b:62:5e:f0:91:5f:54:06:83:38:5b:f6:ab:ee:10:71:6a: 78:42:a7:19:26:ba:c8:4d:a7:00:4d:49:71:7d:37:2b:b6:f3: 64:af:a4:2b:01:5c:f7:b3:90:85:45:0f:ab:d4:72:69:85:5c: a0:c6:52:c6:94:e9:70:43:cc:ae:5a:84:09:c5:48:b1:8a:9a: a8:c6:79:9d:1d:cf:05:b9:9f:60:f1:f3:58:27:ab:73:52:58: e0:8b:f2:a2:13:9f:b0:4b:9a:7e:91:90:df:4d:5d:f6:06:71: d8:91:cc:85:51:60:2e:17:b0:06:ff:89:34:68:b5:e0:a6:42: 8c:6d:1b:65:80:5a:30:44:50:ea:68:1b:88:97:d9:93:6a:fe: 32:36:13:75 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUHQ6xdNYHT/bf2e674axkOSsmDHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMDcxODMzMDdaFw0yNjAyMDYxODM4MDdaMDMxMTAvBgNV BAMTKEIwNjdBMkFEMTY0RTAwMkM1NTIwREMzNkUwN0I1QzQ2QzZEMDg4MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpZMtWhpvpQCYxk2ayuHavo+gA uebMeYtQpf1qmNDucQGuhNA5xCab34ovQ8yO946QdYuSNcH41/Jki6wDUYIRCHQk pSYxLkXmkfBvh151UtKfxs4oIUN0bwRRc6LK62eEsbGxzdYwts4qmb8zYUESQfBk +HJW8kpQ0EHpGr5kEIJ2Qv3opZCRS0iDvkBuyF95HheclVGggFD0SEgwnu09xI5c HGa/CWp7aecL3snOwUf8I3wFs1Xb5XD4dDfXn0wR/p+MTrE0ozsNeTsnjh45f0Lp 6VKxZTHkYEl6Ekn6cA2FTqh80JYUFGdSBJOo5xkIuRPCNLQwQRG0ULCaXRhNAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUsGeirRZOACxVINw24HtcRsbQiBMwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2EzNzMwMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMjMyMzIzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoKYERwMA0GCSqGSIb3DQEBCwUAA4IBAQAcm10k3cxDs9cw+BRQ 84RrUlSBgY4Y5FPl5gyk8InPNvmhZ6vsQyxJ1QC3+TXkD2Q/crjC1QrTV9b/AgPO bN55qstWmHXuCx1/DKa8HOiQdZaRG8D57KW5KqMOTTVoK0UFHKwVfCTiLnFlvMui a2Je8JFfVAaDOFv2q+4QcWp4QqcZJrrITacATUlxfTcrtvNkr6QrAVz3s5CFRQ+r 1HJphVygxlLGlOlwQ8yuWoQJxUixipqoxnmdHc8FuZ9g8fNYJ6tzUljgi/KiE5+w S5p+kZDfTV32BnHYkcyFUWAuF7AG/4k0aLXgpkKMbRtlgFowRFDqaBuIl9mTav4y NhN1 -----END CERTIFICATE-----Generated at Mon Apr 28 15:12:24 2025 by rpki-client