$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616363303a3a2f34342d3438203d3e20323135313530.roa File: 326130613a363034343a616363303a3a2f34342d3438203d3e20323135313530.roa (raw, json) Hash identifier: d/1dHO9HJN6B62/Pdawn9VHom5gUv/aBjvgYI7hvnVs= Subject key identifier: 4E:61:C8:B8:BB:B3:32:7A:CC:84:17:52:9C:DC:05:F0:8C:FF:E2:C2 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 0CCD9F0B61584B84080798EF9AC7429FC3254AF2 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616363303a3a2f34342d3438203d3e20323135313530.roa Signing time: Sat 15 Feb 2025 13:25:37 +0000 ROA not before: Sat 15 Feb 2025 13:20:37 +0000 ROA not after: Sat 14 Feb 2026 13:25:37 +0000 asID: 215150 IP address blocks: 2a0a:6044:acc0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 12:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cd:9f:0b:61:58:4b:84:08:07:98:ef:9a:c7:42:9f:c3:25:4a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 15 13:20:37 2025 GMT Not After : Feb 14 13:25:37 2026 GMT Subject: CN=4E61C8B8BBB3327ACC8417529CDC05F08CFFE2C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5d:e8:9e:96:63:f7:d3:80:e5:4a:84:01:2f: 91:b7:19:99:f4:1d:a5:03:1b:17:a0:da:b8:49:e5: a0:6e:c9:2b:b3:12:45:42:8b:82:18:a9:43:f7:10: d5:a2:81:2d:4d:c8:04:eb:ac:48:48:84:9a:16:a7: 91:c2:f4:58:89:b7:cb:a2:ff:ed:0c:5d:c4:ca:4f: 81:f9:93:72:c2:44:ba:71:a2:97:00:3f:43:f8:d0: 0b:d1:f7:65:cf:44:83:b8:a4:36:61:5c:61:ba:4d: 19:89:44:40:27:fe:53:a4:68:fe:6f:0d:cb:c2:e4: 7c:30:95:68:26:78:19:04:21:d3:ab:d9:8e:d7:b1: 85:8b:ca:97:12:ac:f2:86:7c:58:70:11:77:09:90: 21:29:4f:63:29:ea:9d:e4:66:ca:fd:ec:4b:cf:e7: dc:97:41:1b:fe:14:1c:3d:13:33:ad:25:1d:c1:a1: 97:bb:a4:77:29:bb:d8:18:f9:dd:c4:af:e1:bb:47: 03:d1:09:36:2b:f3:c6:df:9f:a3:f2:f0:05:03:11: c8:b6:f5:ab:bf:c2:29:8d:a8:05:55:7e:4b:3e:60: ca:06:78:c0:97:ac:a7:1e:0f:6e:e8:b6:40:fd:bb: d8:d1:3b:8c:5d:30:5b:78:1f:cb:1e:51:0b:a9:ae: 89:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:61:C8:B8:BB:B3:32:7A:CC:84:17:52:9C:DC:05:F0:8C:FF:E2:C2 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616363303a3a2f34342d3438203d3e20323135313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:acc0::/44 Signature Algorithm: sha256WithRSAEncryption 69:08:f7:39:86:69:77:d3:4c:5d:f1:18:7e:9d:11:08:ba:d1: 6a:1d:65:c1:c0:42:f5:0f:b9:04:97:1a:96:f1:f9:54:af:04: 90:08:e6:de:ae:b0:69:0f:37:e3:cb:b0:14:6d:29:22:86:57: 33:29:08:91:f3:07:ea:5a:e0:6f:d5:0a:67:ec:5a:b8:f9:c6: 43:5a:36:ee:23:a1:c0:0e:30:c2:a6:b4:93:dd:57:83:0e:68: 0c:df:6a:f9:fd:80:66:ca:c4:1a:ed:48:61:20:08:08:99:2c: b8:d7:55:2e:41:64:49:b3:57:59:ee:ec:cd:c4:b7:c6:42:c5: a7:96:21:b6:c2:e7:e8:5d:28:f5:0f:68:4d:28:33:a0:4c:a9: 7d:52:f2:c0:e2:63:da:7c:39:7b:c0:a8:de:ed:24:3e:68:1a: a5:0a:5d:23:e1:d6:e8:f0:3a:18:9b:a1:1a:5d:5d:43:dc:b4: 38:1d:f0:4b:49:ea:39:16:a0:79:c5:14:cd:e2:35:75:f6:6c: 8d:4c:cc:e2:dd:cf:92:ca:25:85:61:d9:97:4e:98:80:59:26: ea:85:0e:4a:90:d7:ee:8b:8d:98:85:e6:59:f4:60:14:f0:14: 0b:74:24:f8:e5:8c:8e:1d:f6:37:82:13:41:78:07:8d:51:9b: 87:7a:2a:1d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUDM2fC2FYS4QIB5jvmsdCn8MlSvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMTUxMzIwMzdaFw0yNjAyMTQxMzI1MzdaMDMxMTAvBgNV BAMTKDRFNjFDOEI4QkJCMzMyN0FDQzg0MTc1MjlDREMwNUYwOENGRkUyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXeielmP304DlSoQBL5G3GZn0 HaUDGxeg2rhJ5aBuySuzEkVCi4IYqUP3ENWigS1NyATrrEhIhJoWp5HC9FiJt8ui /+0MXcTKT4H5k3LCRLpxopcAP0P40AvR92XPRIO4pDZhXGG6TRmJREAn/lOkaP5v DcvC5HwwlWgmeBkEIdOr2Y7XsYWLypcSrPKGfFhwEXcJkCEpT2Mp6p3kZsr97EvP 59yXQRv+FBw9EzOtJR3BoZe7pHcpu9gY+d3Er+G7RwPRCTYr88bfn6Py8AUDEci2 9au/wimNqAVVfks+YMoGeMCXrKceD27otkD9u9jRO4xdMFt4H8seUQuprol9AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUTmHIuLuzMnrMhBdSnNwF8Iz/4sIwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2E2MTYzNjMzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzEzNTMxMzUzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHBCoKYESswDANBgkqhkiG9w0BAQsFAAOCAQEAaQj3OYZpd9NMXfEY fp0RCLrRah1lwcBC9Q+5BJcalvH5VK8EkAjm3q6waQ8348uwFG0pIoZXMykIkfMH 6lrgb9UKZ+xauPnGQ1o27iOhwA4wwqa0k91Xgw5oDN9q+f2AZsrEGu1IYSAICJks uNdVLkFkSbNXWe7szcS3xkLFp5YhtsLn6F0o9Q9oTSgzoEypfVLywOJj2nw5e8Co 3u0kPmgapQpdI+HW6PA6GJuhGl1dQ9y0OB3wS0nqORagecUUzeI1dfZsjUzM4t3P ksolhWHZl06YgFkm6oUOSpDX7ouNmIXmWfRgFPAUC3Qk+OWMjh32N4ITQXgHjVGb h3oqHQ== -----END CERTIFICATE-----Generated at Mon Apr 28 18:39:51 2025 by rpki-client