$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a613a3a2f34382d3438203d3e203437323732.roa File: 326130613a363034343a613a3a2f34382d3438203d3e203437323732.roa (raw, json) Hash identifier: sdo0MMMxJWxEOw/JdbIULoBdehLWhfkuFC2JsUNGplo= Subject key identifier: 15:FC:80:E5:34:95:DA:BD:24:88:1E:64:E7:39:5C:6D:26:4D:CA:54 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 5FBBA039B758DC24F2B0021CFCBB6489034B53D3 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a613a3a2f34382d3438203d3e203437323732.roa Signing time: Fri 07 Feb 2025 19:13:22 +0000 ROA not before: Fri 07 Feb 2025 19:08:22 +0000 ROA not after: Fri 06 Feb 2026 19:13:22 +0000 asID: 47272 IP address blocks: 2a0a:6044:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 02:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:bb:a0:39:b7:58:dc:24:f2:b0:02:1c:fc:bb:64:89:03:4b:53:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 7 19:08:22 2025 GMT Not After : Feb 6 19:13:22 2026 GMT Subject: CN=15FC80E53495DABD24881E64E7395C6D264DCA54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:03:72:6f:b8:14:15:98:ec:c9:02:d0:a2: 43:50:40:6a:94:12:d9:ea:e9:d5:31:f9:b2:f0:d6: c9:10:34:b0:ee:1f:86:f9:9a:b3:a4:ab:41:bd:24: b5:86:8a:24:a6:ce:aa:72:a6:5d:be:92:1e:18:9c: 91:e0:8a:10:92:ef:e7:6b:71:f4:95:31:18:37:98: b8:5c:d1:55:b9:7a:c7:15:8b:ef:7c:a1:34:3e:19: b0:16:cf:ad:49:0d:73:af:10:10:90:a0:41:6c:06: d7:b8:39:4e:ea:a5:96:33:de:09:65:77:7f:e9:a2: 96:87:51:24:29:d5:f1:8f:93:65:9b:22:5d:d5:47: 6d:67:ac:3c:35:99:09:a4:38:e4:6d:fa:35:04:70: 66:f2:69:9b:8b:89:a5:68:05:d2:93:33:fa:9a:17: cb:6f:c2:7f:72:e2:df:92:74:1e:a2:27:c6:ae:6f: d1:ba:39:34:73:5c:d9:14:07:8f:3b:93:c7:3f:e3: fa:5c:4a:5f:8e:3f:43:b7:0b:fe:40:ca:fc:2e:f9: 86:56:a5:13:81:13:dd:75:67:e5:45:70:fa:4f:ff: 7f:2e:d1:1c:79:a3:74:8c:70:f1:e6:76:cd:53:03: 68:bc:db:4e:f3:d5:f3:cc:31:7a:e9:2e:e4:18:03: f6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FC:80:E5:34:95:DA:BD:24:88:1E:64:E7:39:5C:6D:26:4D:CA:54 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a613a3a2f34382d3438203d3e203437323732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a::/48 Signature Algorithm: sha256WithRSAEncryption 36:fa:f4:54:3b:cd:3c:cb:7e:f3:d6:95:32:7e:22:e5:43:3b: d8:c3:e5:25:2e:3f:c5:4f:f9:a8:ae:9b:dd:4c:01:9e:eb:53: 1e:4a:ca:99:d1:21:bf:1c:6d:16:37:28:11:ca:c4:8e:d2:cf: 62:0e:7e:dd:fe:3f:d4:67:33:3c:af:70:b2:b5:7f:9f:cf:2b: a1:24:9d:96:eb:ee:31:db:7b:25:20:7e:a7:1c:60:c8:87:8d: 18:8f:98:29:9b:c0:4d:df:0c:88:06:4b:79:6e:bf:67:6a:6c: 95:db:06:19:33:55:67:c5:c3:42:47:4c:20:17:7b:eb:92:e0: 51:e4:49:d3:56:e0:f5:ba:e5:27:b5:8d:7a:82:60:19:45:74: 6b:55:13:50:0a:03:96:9a:c0:6d:5c:dc:40:96:66:36:26:ae: 24:e6:25:92:db:a2:e5:36:54:d9:f2:29:7a:8c:ea:43:e9:d4: 74:54:f0:d9:a1:f1:61:2e:67:90:6b:d7:6f:a2:6d:73:76:60: 9d:f2:95:90:38:d1:39:52:05:62:62:eb:c8:fb:97:3e:96:55: ec:35:94:b8:9d:60:98:87:90:3a:f2:92:1e:e3:08:2e:94:92: b0:fa:d3:ed:b5:6b:c8:f1:7d:70:67:2a:98:40:c1:3c:5f:b7: 0e:f0:cd:e5 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIUX7ugObdY3CTysAIc/LtkiQNLU9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMDcxOTA4MjJaFw0yNjAyMDYxOTEzMjJaMDMxMTAvBgNV BAMTKDE1RkM4MEU1MzQ5NURBQkQyNDg4MUU2NEU3Mzk1QzZEMjY0RENBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCucANyb7gUFZjsyQLQokNQQGqU Etnq6dUx+bLw1skQNLDuH4b5mrOkq0G9JLWGiiSmzqpypl2+kh4YnJHgihCS7+dr cfSVMRg3mLhc0VW5escVi+98oTQ+GbAWz61JDXOvEBCQoEFsBte4OU7qpZYz3gll d3/popaHUSQp1fGPk2WbIl3VR21nrDw1mQmkOORt+jUEcGbyaZuLiaVoBdKTM/qa F8tvwn9y4t+SdB6iJ8aub9G6OTRzXNkUB487k8c/4/pcSl+OP0O3C/5Ayvwu+YZW pROBE911Z+VFcPpP/38u0Rx5o3SMcPHmds1TA2i8207z1fPMMXrpLuQYA/bDAgMB AAGjggJyMIICbjAdBgNVHQ4EFgQUFfyA5TSV2r0kiB5k5zlcbSZNylQwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2E2MTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczMjM3MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAqCmBEAAowDQYJKoZIhvcNAQELBQADggEBADb69FQ7zTzLfvPWlTJ+IuVDO9jD 5SUuP8VP+aium91MAZ7rUx5KypnRIb8cbRY3KBHKxI7Sz2IOft3+P9RnMzyvcLK1 f5/PK6EknZbr7jHbeyUgfqccYMiHjRiPmCmbwE3fDIgGS3luv2dqbJXbBhkzVWfF w0JHTCAXe+uS4FHkSdNW4PW65Se1jXqCYBlFdGtVE1AKA5aawG1c3ECWZjYmriTm JZLbouU2VNnyKXqM6kPp1HRU8Nmh8WEuZ5Br12+ibXN2YJ3ylZA40TlSBWJi68j7 lz6WVew1lLidYJiHkDrykh7jCC6UkrD60+21a8jxfXBnKphAwTxftw7wzeU= -----END CERTIFICATE-----Generated at Mon Apr 28 15:08:20 2025 by rpki-client