$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa File: 326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa (raw, json) Hash identifier: 1uuqh7vWgIM0zB+uNA1obgzEdiTwrJmrg/6SIClfVTE= Subject key identifier: 84:91:D5:FA:AB:61:CE:D5:7C:9B:98:2E:C1:44:33:73:99:75:65:30 Certificate issuer: /CN=6203327B6A4B0AFB982B640B8BFF2A92B1C73343 Certificate serial: 01671F45824ABAF541C35E37E218D7C7684297A1 Authority key identifier: 62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa Signing time: Fri 07 Feb 2025 19:02:22 +0000 ROA not before: Fri 07 Feb 2025 18:57:22 +0000 ROA not after: Fri 06 Feb 2026 19:02:22 +0000 asID: 214486 IP address blocks: 2a0a:6044:7e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 21:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:67:1f:45:82:4a:ba:f5:41:c3:5e:37:e2:18:d7:c7:68:42:97:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6203327B6A4B0AFB982B640B8BFF2A92B1C73343 Validity Not Before: Feb 7 18:57:22 2025 GMT Not After : Feb 6 19:02:22 2026 GMT Subject: CN=8491D5FAAB61CED57C9B982EC144337399756530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:53:64:55:26:87:68:2d:aa:6a:0b:07:a3:7f: 7a:fd:49:05:67:e3:2e:92:39:65:ec:5b:6b:76:c6: cf:f9:fc:c4:7d:34:20:a9:ec:cc:88:41:15:ac:d5: 5f:59:13:bb:ed:03:35:f5:a8:c6:8d:6b:6b:d0:10: 51:de:38:40:12:be:10:1b:0d:c8:2c:ec:19:e7:d8: 26:96:f8:bd:4a:db:dc:73:94:ef:8f:61:66:e2:e3: 35:dc:05:69:b8:f2:50:39:cc:0f:95:6a:5e:0a:14: 75:ef:ec:cf:d1:bb:1a:59:e7:2d:77:40:cd:c1:79: 52:ba:65:43:9b:ec:1b:54:87:c3:be:af:5e:11:7e: 60:53:36:c0:73:f0:4f:65:35:f1:af:77:7b:e0:c6: 28:a3:15:7f:ab:97:41:80:a4:8a:3b:69:1a:e5:a8: fe:16:4c:24:8f:11:a7:67:d8:0e:0d:3a:40:64:b8: 6a:43:75:c8:00:5a:9c:96:d5:ea:be:13:d1:ce:1a: ca:b1:92:26:73:36:a1:29:40:0f:7c:d2:98:6c:e0: 3e:75:fa:ca:c5:1d:30:d2:13:f3:f5:cb:1a:e9:f7: 70:e5:28:e7:1c:c2:a6:dd:b2:27:4c:cc:c9:42:61: 72:39:da:e7:d3:48:b2:eb:bf:07:3f:fd:6a:52:eb: 31:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:91:D5:FA:AB:61:CE:D5:7C:9B:98:2E:C1:44:33:73:99:75:65:30 X509v3 Authority Key Identifier: keyid:62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7e00::/40 Signature Algorithm: sha256WithRSAEncryption 07:0b:68:f8:24:2f:a9:be:86:5c:15:59:28:49:2a:b1:3a:2e: 3f:dc:f1:36:05:84:13:fd:ea:67:db:2f:0c:1c:e7:08:97:93: a7:40:b9:d0:c7:fb:12:89:a1:b4:47:a2:e3:14:52:11:a2:a4: 54:6c:f1:92:10:64:06:cf:63:c7:12:15:d2:55:de:74:12:79: 9b:f4:13:78:8a:22:4b:93:d3:de:27:a6:67:ad:e1:f0:1d:c2: 20:5c:a9:1d:9d:e0:e3:12:bd:f4:16:78:c7:d4:b0:4d:e8:17: 21:f1:f5:14:af:48:42:43:76:ec:0b:37:9c:d1:9a:d6:5c:7b: 02:fa:4e:40:ce:94:cc:d0:1a:b7:00:1d:59:0d:6e:e5:6c:cf: 13:bb:ea:24:78:47:6b:ac:b0:20:24:7d:65:b4:5b:59:09:cc: d7:d2:af:65:6e:48:f9:db:d3:30:3f:13:05:da:ac:98:2c:e5: b1:c5:16:f8:75:c9:a8:4d:02:63:a6:63:50:85:79:ba:b4:9c: ea:75:6f:18:5c:05:03:29:4f:32:5b:74:90:b8:74:50:7c:ff: 63:29:40:64:6a:f6:42:5b:83:ff:e1:96:d6:ee:82:9a:3d:1a: 36:1c:78:62:85:71:e0:0a:fb:e8:7a:32:7f:32:f9:c2:ff:b1: c3:23:17:5b -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUAWcfRYJKuvVBw1434hjXx2hCl6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwMzMyN0I2QTRCMEFGQjk4MkI2NDBCOEJGRjJBOTJC MUM3MzM0MzAeFw0yNTAyMDcxODU3MjJaFw0yNjAyMDYxOTAyMjJaMDMxMTAvBgNV BAMTKDg0OTFENUZBQUI2MUNFRDU3QzlCOTgyRUMxNDQzMzczOTk3NTY1MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNU2RVJodoLapqCwejf3r9SQVn 4y6SOWXsW2t2xs/5/MR9NCCp7MyIQRWs1V9ZE7vtAzX1qMaNa2vQEFHeOEASvhAb Dcgs7Bnn2CaW+L1K29xzlO+PYWbi4zXcBWm48lA5zA+Val4KFHXv7M/RuxpZ5y13 QM3BeVK6ZUOb7BtUh8O+r14RfmBTNsBz8E9lNfGvd3vgxiijFX+rl0GApIo7aRrl qP4WTCSPEadn2A4NOkBkuGpDdcgAWpyW1eq+E9HOGsqxkiZzNqEpQA980phs4D51 +srFHTDSE/P1yxrp93DlKOccwqbdsidMzMlCYXI52ufTSLLrvwc//WpS6zElAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUhJHV+qthztV8m5guwUQzc5l1ZTAwHwYDVR0j BBgwFoAUYgMye2pLCvuYK2QLi/8qkrHHM0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmVjYmM0MDQtYWM0My00NDliLThjN2UtOGYxZTk5ZDlh YzQ5LzMvNjIwMzMyN0I2QTRCMEFGQjk4MkI2NDBCOEJGRjJBOTJCMUM3MzM0My5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy82MjAzMzI3QjZBNEIwQUZCOTgyQjY0MEI4 QkZGMkE5MkIxQzczMzQzLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mZWNiYzQwNC1hYzQzLTQ0OWItOGM3ZS04ZjFlOTlkOWFjNDkvMy8zMjYxMzA2 MTNhMzYzMDM0MzQzYTM3NjUzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MTM0MzQzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgRH4wDQYJKoZIhvcNAQELBQADggEBAAcL aPgkL6m+hlwVWShJKrE6Lj/c8TYFhBP96mfbLwwc5wiXk6dAudDH+xKJobRHouMU UhGipFRs8ZIQZAbPY8cSFdJV3nQSeZv0E3iKIkuT094npmet4fAdwiBcqR2d4OMS vfQWeMfUsE3oFyHx9RSvSEJDduwLN5zRmtZcewL6TkDOlMzQGrcAHVkNbuVszxO7 6iR4R2ussCAkfWW0W1kJzNfSr2VuSPnb0zA/EwXarJgs5bHFFvh1yahNAmOmY1CF ebq0nOp1bxhcBQMpTzJbdJC4dFB8/2MpQGRq9kJbg//hltbugpo9GjYceGKFceAK ++h6Mn8y+cL/scMjF1s= -----END CERTIFICATE-----Generated at Mon Apr 28 14:25:55 2025 by rpki-client