$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa File: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (raw, json) Hash identifier: lRerEWAZYVnj4WeC0lksu5JXgu5ks2mpqCgBEDRR0Q0= Subject key identifier: 38:40:13:68:A6:1D:C6:8D:02:B2:F9:2A:8B:63:3B:02:6E:AA:31:89 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 7EAAAB93A6C51A34E72122EDAC7A610D7C03ED6C Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa Signing time: Thu 29 May 2025 15:42:58 +0000 ROA not before: Thu 29 May 2025 15:37:58 +0000 ROA not after: Thu 28 May 2026 15:42:58 +0000 asID: 209109 IP address blocks: 2a14:7581:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 04:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:aa:ab:93:a6:c5:1a:34:e7:21:22:ed:ac:7a:61:0d:7c:03:ed:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: May 29 15:37:58 2025 GMT Not After : May 28 15:42:58 2026 GMT Subject: CN=38401368A61DC68D02B2F92A8B633B026EAA3189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d6:f1:f8:a2:a1:98:1c:59:f0:7e:d2:7f:66: e8:46:e6:30:4f:94:2e:21:32:eb:74:b5:bc:f7:cf: f6:3d:b4:31:e6:85:01:1d:b2:61:09:e1:d2:2c:3a: 78:7b:e2:23:d3:7d:52:c6:40:08:a7:03:7c:56:16: ed:1e:8a:db:5f:e2:6f:22:f2:e9:84:48:66:31:0d: 3b:44:75:42:f4:08:8c:31:78:ba:44:b1:9e:2b:86: 60:cb:47:5c:ee:a0:65:1e:a2:9f:25:1f:73:7b:f0: a7:32:73:79:dd:25:f5:fb:0f:46:7c:1d:b1:4a:af: 04:3b:6d:29:43:96:50:e9:64:05:1b:e1:bb:55:82: ff:31:35:e8:ec:26:c2:60:18:fc:43:72:cb:25:55: ac:8f:17:f1:34:71:c7:5e:0a:f5:71:b1:d4:6f:98: 7f:83:5f:d3:40:52:29:0c:e8:2e:a9:22:96:ac:5a: c9:17:25:db:15:be:e1:82:54:f4:7d:40:04:63:60: ff:fb:5e:8e:3a:c3:42:bf:ff:4c:de:5b:20:12:43: 0d:8f:2a:74:10:f4:2e:6f:19:ad:aa:2d:d0:67:90: ff:0b:b8:68:aa:e1:83:5d:c4:02:76:b5:6f:86:e5: 68:aa:92:88:57:b4:a9:95:28:58:d5:e8:16:9c:00: 5d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:40:13:68:A6:1D:C6:8D:02:B2:F9:2A:8B:63:3B:02:6E:AA:31:89 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2000::/40 Signature Algorithm: sha256WithRSAEncryption 9c:b0:0a:9c:6c:3c:6c:12:6d:b3:f5:36:34:ba:68:34:dc:80: 5b:5c:9c:9e:e4:21:e8:95:ce:e9:9e:a1:59:05:a0:8e:f5:a5: e5:2d:3b:68:c5:15:ac:aa:74:fd:d1:17:9f:c7:c9:31:09:87: 03:44:a5:42:8f:87:0d:59:02:ce:99:19:15:9a:ab:b2:75:e1: ca:92:f6:ce:b4:9b:83:f5:70:39:12:10:01:f3:84:ef:ab:0c: 5f:33:40:23:b4:78:0b:4e:e1:65:ed:66:dd:c5:f6:7c:bc:61: f3:8b:db:cb:a2:04:2a:99:de:5a:a3:04:71:48:18:0b:66:91: 04:e9:33:07:37:23:15:e7:a9:66:1c:00:44:2d:60:25:f7:9e: 4f:e8:98:f6:10:99:e3:4b:bb:33:ac:b2:62:43:ba:0f:0b:9b: f7:c7:81:ac:c9:3b:bb:a2:47:f7:12:d1:17:f7:09:97:c0:50: 13:44:62:b5:9d:2c:77:12:0f:9f:74:ac:63:04:cb:b8:bb:3f: 5a:b1:27:cf:9d:b7:a0:b5:84:86:8e:54:a0:64:a0:5e:80:da: 5b:b2:8e:4b:99:2b:e6:a3:bd:16:63:b1:3f:f9:9d:ae:9d:94: d5:62:bf:b6:e9:7f:92:0f:62:ff:eb:e0:3c:0e:32:cc:fb:35: 35:23:b6:5b -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUfqqrk6bFGjTnISLtrHphDXwD7WwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTA1MjkxNTM3NThaFw0yNjA1MjgxNTQyNThaMDMxMTAvBgNV BAMTKDM4NDAxMzY4QTYxREM2OEQwMkIyRjkyQThCNjMzQjAyNkVBQTMxODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1vH4oqGYHFnwftJ/ZuhG5jBP lC4hMut0tbz3z/Y9tDHmhQEdsmEJ4dIsOnh74iPTfVLGQAinA3xWFu0eittf4m8i 8umESGYxDTtEdUL0CIwxeLpEsZ4rhmDLR1zuoGUeop8lH3N78Kcyc3ndJfX7D0Z8 HbFKrwQ7bSlDllDpZAUb4btVgv8xNejsJsJgGPxDcsslVayPF/E0ccdeCvVxsdRv mH+DX9NAUikM6C6pIpasWskXJdsVvuGCVPR9QARjYP/7Xo46w0K//0zeWyASQw2P KnQQ9C5vGa2qLdBnkP8LuGiq4YNdxAJ2tW+G5WiqkohXtKmVKFjV6BacAF0jAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUOEATaKYdxo0Csvkqi2M7Am6qMYkwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYWRlYmI5ZC0zM2NjLTQyOWItYWEzNS0xMDYzNGE4YjFkZDQvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMyMzAzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MDM5MzEzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gSAwDQYJKoZIhvcNAQELBQADggEBAJyw CpxsPGwSbbP1NjS6aDTcgFtcnJ7kIeiVzumeoVkFoI71peUtO2jFFayqdP3RF5/H yTEJhwNEpUKPhw1ZAs6ZGRWaq7J14cqS9s60m4P1cDkSEAHzhO+rDF8zQCO0eAtO 4WXtZt3F9ny8YfOL28uiBCqZ3lqjBHFIGAtmkQTpMwc3IxXnqWYcAEQtYCX3nk/o mPYQmeNLuzOssmJDug8Lm/fHgazJO7uiR/cS0Rf3CZfAUBNEYrWdLHcSD590rGME y7i7P1qxJ8+dt6C1hIaOVKBkoF6A2luyjkuZK+ajvRZjsT/5na6dlNViv7bpf5IP Yv/r4DwOMsz7NTUjtls= -----END CERTIFICATE-----Generated at Sun Jun 15 19:06:16 2025 by rpki-client