$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a623a3a2f34382d3438203d3e203437323732.roa File: 326130613a363034343a623a3a2f34382d3438203d3e203437323732.roa (raw, json) Hash identifier: sBSsr9mU1ggjM8pZTIOo5/VguGZb5j/iCm8sWIY0vYI= Subject key identifier: AD:78:0E:AF:FA:8D:72:7D:B2:8F:EE:21:B6:78:26:05:5A:9D:72:C5 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 562608168D4DF285963306DB58CC1AF9C6073530 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a623a3a2f34382d3438203d3e203437323732.roa Signing time: Fri 07 Feb 2025 19:13:20 +0000 ROA not before: Fri 07 Feb 2025 19:08:20 +0000 ROA not after: Fri 06 Feb 2026 19:13:20 +0000 asID: 47272 IP address blocks: 2a0a:6044:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 02:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:26:08:16:8d:4d:f2:85:96:33:06:db:58:cc:1a:f9:c6:07:35:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 7 19:08:20 2025 GMT Not After : Feb 6 19:13:20 2026 GMT Subject: CN=AD780EAFFA8D727DB28FEE21B67826055A9D72C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:82:a3:ac:e5:df:4f:8d:76:48:3f:ec:23:ab: 6f:d0:26:9d:a0:b5:40:14:dd:cf:ef:fa:b9:0d:1a: 58:a9:d9:cc:d1:91:a2:fd:a3:74:3a:9b:c5:13:a6: b5:61:b8:73:0e:42:c5:35:c2:30:b2:18:25:d8:89: c8:83:5f:03:b4:15:42:93:a1:22:4b:cc:cb:aa:0a: 63:a4:f6:69:a7:91:8a:62:39:dc:1e:61:71:9d:bb: 48:6a:70:0a:c0:eb:99:fd:c6:13:5c:8d:93:97:33: cf:b1:24:79:bb:42:c7:c0:d8:c7:5d:89:99:88:f4: 2d:46:41:7a:7a:70:dd:b9:e8:cd:e5:b4:42:41:d5: b9:a4:76:ba:36:cb:58:97:53:e8:c4:5b:b0:df:48: 9c:b4:7e:26:7e:5c:e1:3a:88:85:45:58:a6:14:1e: 7a:16:e1:cc:e3:23:c3:d6:59:c7:60:fc:2d:f6:be: 4f:b9:08:e4:22:5c:c6:dc:42:54:0b:0d:a7:7f:fe: e1:be:6e:b6:23:86:52:48:75:44:5e:72:15:d9:8c: 20:f0:60:a3:c7:74:06:d3:d3:48:65:54:be:ff:b2: 87:c3:3f:ab:2c:ce:bd:90:fb:96:64:2a:bb:24:76: 05:d5:97:13:6f:7e:a6:cc:3f:d1:99:3e:c8:2f:33: 06:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:78:0E:AF:FA:8D:72:7D:B2:8F:EE:21:B6:78:26:05:5A:9D:72:C5 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a623a3a2f34382d3438203d3e203437323732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:b::/48 Signature Algorithm: sha256WithRSAEncryption 84:85:ca:3e:3d:9e:f8:78:24:b8:56:b2:84:6a:f4:98:d1:48: f2:7b:f2:58:43:f7:28:19:69:91:d4:a7:05:11:9d:9e:51:a9: 30:5a:37:36:80:97:11:ca:50:6d:24:f1:ac:a5:55:76:40:a9: 68:77:6b:49:31:a3:e4:32:d2:87:dd:a8:ca:09:44:cd:83:35: f3:13:2a:a2:b9:b9:8f:00:42:47:1f:bf:0f:cd:70:b5:18:3a: 66:5c:ee:81:cf:2e:24:5c:9f:03:3d:bc:c7:b1:67:ed:94:5f: 79:4a:27:11:14:7f:ef:eb:f4:d6:cf:3e:eb:71:e5:a2:2e:cd: b5:c9:db:cc:9a:37:ff:c0:b6:e5:0d:25:d5:9c:1e:d2:d5:93: 9d:46:86:4b:84:e3:de:e9:b7:c2:a3:07:60:4d:7b:e2:c6:43: 5f:fb:85:91:89:68:ce:87:af:7c:e2:eb:2f:b5:1b:5b:60:fd: c6:98:f9:54:b8:76:b8:ac:76:16:73:79:21:c7:e8:27:5b:cb: 94:b3:1c:4b:95:2f:a4:6e:ad:a8:ed:15:c1:02:08:1e:15:bf: 58:55:30:04:c6:ea:b8:44:63:38:2f:7a:ec:0b:28:12:bb:cb: ed:11:95:5a:b3:d1:28:c5:8d:79:c5:c7:c5:9d:6d:f8:88:51: a1:7a:c3:28 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIUViYIFo1N8oWWMwbbWMwa+cYHNTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMDcxOTA4MjBaFw0yNjAyMDYxOTEzMjBaMDMxMTAvBgNV BAMTKEFENzgwRUFGRkE4RDcyN0RCMjhGRUUyMUI2NzgyNjA1NUE5RDcyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gqOs5d9PjXZIP+wjq2/QJp2g tUAU3c/v+rkNGlip2czRkaL9o3Q6m8UTprVhuHMOQsU1wjCyGCXYiciDXwO0FUKT oSJLzMuqCmOk9mmnkYpiOdweYXGdu0hqcArA65n9xhNcjZOXM8+xJHm7QsfA2Mdd iZmI9C1GQXp6cN256M3ltEJB1bmkdro2y1iXU+jEW7DfSJy0fiZ+XOE6iIVFWKYU HnoW4czjI8PWWcdg/C32vk+5COQiXMbcQlQLDad//uG+brYjhlJIdURechXZjCDw YKPHdAbT00hlVL7/sofDP6sszr2Q+5ZkKrskdgXVlxNvfqbMP9GZPsgvMwa3AgMB AAGjggJyMIICbjAdBgNVHQ4EFgQUrXgOr/qNcn2yj+4htngmBVqdcsUwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2E2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczMjM3MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAqCmBEAAswDQYJKoZIhvcNAQELBQADggEBAISFyj49nvh4JLhWsoRq9JjRSPJ7 8lhD9ygZaZHUpwURnZ5RqTBaNzaAlxHKUG0k8aylVXZAqWh3a0kxo+Qy0ofdqMoJ RM2DNfMTKqK5uY8AQkcfvw/NcLUYOmZc7oHPLiRcnwM9vMexZ+2UX3lKJxEUf+/r 9NbPPutx5aIuzbXJ28yaN//AtuUNJdWcHtLVk51GhkuE497pt8KjB2BNe+LGQ1/7 hZGJaM6Hr3zi6y+1G1tg/caY+VS4drisdhZzeSHH6Cdby5SzHEuVL6RurajtFcEC CB4Vv1hVMATG6rhEYzgveuwLKBK7y+0RlVqz0SjFjXnFx8WdbfiIUaF6wyg= -----END CERTIFICATE-----Generated at Mon Apr 28 15:08:29 2025 by rpki-client