$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373a3a2f34382d3438203d3e203437323732.roa File: 326130613a363034343a373a3a2f34382d3438203d3e203437323732.roa (raw, json) Hash identifier: NatYDdljtJbRP9HbjTkCpQXauavCFGlQ13P41Cohs7Y= Subject key identifier: EC:FA:59:AC:C7:8A:AC:B6:7D:8A:F5:13:83:B9:28:C7:89:09:E0:36 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 1FDB517B3CE8121F78B70CA8F1DA47F40D1F7444 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373a3a2f34382d3438203d3e203437323732.roa Signing time: Fri 07 Feb 2025 19:13:20 +0000 ROA not before: Fri 07 Feb 2025 19:08:20 +0000 ROA not after: Fri 06 Feb 2026 19:13:20 +0000 asID: 47272 IP address blocks: 2a0a:6044:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 12:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:db:51:7b:3c:e8:12:1f:78:b7:0c:a8:f1:da:47:f4:0d:1f:74:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 7 19:08:20 2025 GMT Not After : Feb 6 19:13:20 2026 GMT Subject: CN=ECFA59ACC78AACB67D8AF51383B928C78909E036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:ee:b4:5a:04:14:f2:b7:19:88:e7:4c:c4: c1:c6:e8:ab:65:71:c2:fa:59:8e:9d:20:25:85:5a: 2f:03:4f:50:73:01:fb:9b:19:74:14:8b:c0:e9:49: 04:38:59:c5:b8:b0:cb:c0:fc:ae:9a:8b:c8:0d:03: cf:b4:73:00:ed:e1:26:1b:a9:de:22:7b:89:67:50: d0:b7:33:6f:1a:57:70:fb:99:5d:a6:e4:91:4f:55: 20:c3:3c:df:f5:5e:34:3d:7f:46:5c:81:2b:70:2e: 50:46:f7:64:c2:59:0e:5c:2e:a4:e2:4e:ac:d3:b9: 94:75:2b:66:98:a3:95:6c:ea:33:93:d6:d4:51:3b: c0:aa:2e:b6:42:ff:8a:53:2e:b8:ad:34:3c:11:31: 8f:62:ac:ce:99:47:d9:25:71:18:b5:43:37:b1:e5: 29:4e:b9:98:cd:e3:68:f0:da:08:9b:4c:03:1c:e1: 60:11:1a:27:6d:0d:2a:b5:28:24:ff:ad:b7:a9:78: 23:71:94:0e:dd:af:1c:b8:f5:34:a3:f0:4e:f2:99: da:d3:96:4a:d5:88:57:af:e7:8f:02:0d:5b:85:e2: 2e:96:1a:7f:05:9d:33:ea:a3:6a:d8:bf:b7:72:86: 55:5b:40:ec:22:11:ea:5f:3e:11:b5:8c:31:f9:88: a8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FA:59:AC:C7:8A:AC:B6:7D:8A:F5:13:83:B9:28:C7:89:09:E0:36 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373a3a2f34382d3438203d3e203437323732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7::/48 Signature Algorithm: sha256WithRSAEncryption 9a:e7:ef:c5:b4:9b:c7:24:fe:ac:37:ce:43:d8:16:e9:37:25: 03:19:66:7b:19:99:d4:e9:8b:dc:48:b9:29:97:5f:70:46:47: bc:89:5e:8f:f8:79:74:8e:11:3f:48:27:8e:13:b3:0f:c8:8b: b4:07:09:5d:a9:c7:94:ad:8d:34:9e:20:28:86:df:59:83:17: ac:64:a9:42:2b:f9:47:e1:5b:3c:83:17:f1:80:86:2d:0c:51: 18:e6:3d:ff:9a:31:55:05:00:01:91:69:5c:75:5c:46:51:48: aa:75:c6:0b:e9:d0:7e:ea:a0:b7:2f:f5:bc:00:0d:bc:94:2c: e4:74:0b:53:d0:c7:a3:e0:37:19:97:55:fb:66:d4:81:5c:f4: 40:60:d1:3f:9a:37:62:2c:91:18:72:de:51:87:db:b0:5c:fc: de:18:9f:15:db:ab:cb:fc:d7:da:22:31:cd:12:e1:6f:36:f5: d8:35:86:a6:a3:c4:fa:27:98:c8:90:18:31:61:ad:db:2c:04: 51:d5:ec:6b:b5:03:84:17:9b:4d:6f:3a:38:02:6d:30:ed:91: 52:33:39:3e:9d:ec:17:54:b6:4e:c3:a7:04:33:8b:a7:f6:8e: 20:a9:1e:74:69:38:62:b0:81:c6:81:77:99:e5:af:44:d8:43: a8:14:ce:b3 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIUH9tRezzoEh94twyo8dpH9A0fdEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMDcxOTA4MjBaFw0yNjAyMDYxOTEzMjBaMDMxMTAvBgNV BAMTKEVDRkE1OUFDQzc4QUFDQjY3RDhBRjUxMzgzQjkyOEM3ODkwOUUwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyFO60WgQU8rcZiOdMxMHG6Ktl ccL6WY6dICWFWi8DT1BzAfubGXQUi8DpSQQ4WcW4sMvA/K6ai8gNA8+0cwDt4SYb qd4ie4lnUNC3M28aV3D7mV2m5JFPVSDDPN/1XjQ9f0ZcgStwLlBG92TCWQ5cLqTi TqzTuZR1K2aYo5Vs6jOT1tRRO8CqLrZC/4pTLritNDwRMY9irM6ZR9klcRi1Qzex 5SlOuZjN42jw2gibTAMc4WARGidtDSq1KCT/rbepeCNxlA7drxy49TSj8E7ymdrT lkrViFev548CDVuF4i6WGn8FnTPqo2rYv7dyhlVbQOwiEepfPhG1jDH5iKgNAgMB AAGjggJyMIICbjAdBgNVHQ4EFgQU7PpZrMeKrLZ9ivUTg7kox4kJ4DYwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2EzNzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczMjM3MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAqCmBEAAcwDQYJKoZIhvcNAQELBQADggEBAJrn78W0m8ck/qw3zkPYFuk3JQMZ ZnsZmdTpi9xIuSmXX3BGR7yJXo/4eXSOET9IJ44Tsw/Ii7QHCV2px5StjTSeICiG 31mDF6xkqUIr+UfhWzyDF/GAhi0MURjmPf+aMVUFAAGRaVx1XEZRSKp1xgvp0H7q oLcv9bwADbyULOR0C1PQx6PgNxmXVftm1IFc9EBg0T+aN2IskRhy3lGH27Bc/N4Y nxXbq8v819oiMc0S4W829dg1hqajxPonmMiQGDFhrdssBFHV7Gu1A4QXm01vOjgC bTDtkVIzOT6d7BdUtk7DpwQzi6f2jiCpHnRpOGKwgcaBd5nlr0TYQ6gUzrM= -----END CERTIFICATE-----Generated at Tue Apr 29 00:53:21 2025 by rpki-client