$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623030623a3a2f34382d3438203d3e20323037343234.roa File: 326130363a313238333a623030623a3a2f34382d3438203d3e20323037343234.roa (raw, json) Hash identifier: u5M1XGQbJ7n1BlES+oPqv+PnF4oD7XYoRY1JdvNxLaQ= Subject key identifier: F5:32:73:43:2A:A3:C1:ED:15:83:2B:8B:77:15:CD:89:C3:A2:09:D2 Certificate issuer: /CN=20595BDBAD09C7D604202305854D1DF14F190959 Certificate serial: 5039D3E15B28240ACD0DF45C81EA53059E581598 Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623030623a3a2f34382d3438203d3e20323037343234.roa Signing time: Sun 15 Sep 2024 14:36:36 +0000 ROA not before: Sun 15 Sep 2024 14:31:36 +0000 ROA not after: Sun 14 Sep 2025 14:36:36 +0000 asID: 207424 IP address blocks: 2a06:1283:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Sep 2024 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:39:d3:e1:5b:28:24:0a:cd:0d:f4:5c:81:ea:53:05:9e:58:15:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959 Validity Not Before: Sep 15 14:31:36 2024 GMT Not After : Sep 14 14:36:36 2025 GMT Subject: CN=F53273432AA3C1ED15832B8B7715CD89C3A209D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1f:c3:a4:29:1e:62:25:54:ab:3a:82:a5:42: 18:8d:ae:ef:ff:54:b5:cd:0a:43:a2:ae:86:55:13: bb:95:9f:b7:37:9f:50:87:42:e0:03:a0:56:c4:32: 07:7c:19:fb:60:66:b0:83:44:68:d7:97:2e:81:3e: 76:d5:c5:75:2a:1d:ad:ce:6e:37:1e:3f:08:dd:c1: 57:75:6e:98:60:6e:9e:5e:79:1a:62:d6:93:f6:63: 67:de:9b:ef:4c:50:34:4d:9b:3f:6c:9f:15:29:a4: 1e:47:8c:9f:0f:ba:44:b7:c3:d8:bb:0c:c6:6a:ef: 63:7b:7e:43:65:7a:50:b7:1f:6e:99:35:19:9c:04: 3d:92:96:c2:d2:b8:bf:e6:5f:48:95:a3:60:1d:02: 12:f2:9d:9c:bb:a2:50:ce:39:67:30:ae:d9:bf:4a: b2:f9:b3:15:ee:75:e9:ef:3d:88:9c:c9:fc:f5:df: 37:83:d8:ba:b7:ad:71:44:29:d3:71:bc:49:9b:3b: 5f:44:cf:10:85:0e:84:5a:a2:49:96:48:6b:10:4c: d7:21:62:04:d1:d7:32:f6:e6:f6:47:41:d3:e3:d3: b7:5e:dc:32:fd:67:92:50:15:bc:85:5e:d6:f6:0c: 52:5f:e5:6c:e1:25:b4:92:6b:73:d9:b5:1d:ab:e1: 9e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:32:73:43:2A:A3:C1:ED:15:83:2B:8B:77:15:CD:89:C3:A2:09:D2 X509v3 Authority Key Identifier: keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a623030623a3a2f34382d3438203d3e20323037343234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 4f:ed:80:d1:3b:8e:e0:2a:7a:f0:47:46:91:dd:b2:be:96:12: 8c:6d:5c:09:36:ea:ef:46:12:38:94:ee:46:f8:a7:8a:4d:83: 30:d1:8e:63:ed:56:65:be:cc:86:2f:46:27:52:46:66:86:07: ee:ef:03:d7:17:fc:43:c0:f4:7f:35:bd:2c:3a:96:76:38:a0: 9c:e4:d9:57:07:61:fb:62:aa:be:c1:26:48:67:9f:7c:a5:c6: a9:8d:7b:4f:e5:4d:09:10:ac:3b:67:d0:f2:12:6a:52:75:33: 72:28:91:aa:6a:82:f8:70:2f:92:66:1f:ce:9a:09:26:98:aa: 19:f1:4b:2b:1a:9e:2a:48:6e:68:ac:d4:0f:af:52:8d:5d:e9: 9e:4a:99:fc:a1:d9:c5:74:7d:82:30:1d:73:f2:b8:72:0e:d0: b8:40:e3:5a:98:74:9d:c6:cf:ef:9c:12:a2:7c:3d:ce:2c:2e: ac:c6:67:dc:d7:16:0b:e7:c5:dc:4c:fb:12:a7:34:1d:b4:94: 66:51:13:3d:43:4d:ef:5a:ae:73:15:f2:dc:8d:6d:97:86:3e: 5e:a9:fc:4c:2a:85:27:9e:ff:29:c9:7f:5a:29:4d:c1:e3:e3: ae:b4:71:2e:10:d8:b7:42:7f:d4:19:69:3f:d0:8b:ef:4d:fe: 4a:90:ea:f3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUUDnT4VsoJArNDfRcgepTBZ5YFZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0 RjE5MDk1OTAeFw0yNDA5MTUxNDMxMzZaFw0yNTA5MTQxNDM2MzZaMDMxMTAvBgNV BAMTKEY1MzI3MzQzMkFBM0MxRUQxNTgzMkI4Qjc3MTVDRDg5QzNBMjA5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbH8OkKR5iJVSrOoKlQhiNru// VLXNCkOiroZVE7uVn7c3n1CHQuADoFbEMgd8GftgZrCDRGjXly6BPnbVxXUqHa3O bjcePwjdwVd1bphgbp5eeRpi1pP2Y2fem+9MUDRNmz9snxUppB5HjJ8PukS3w9i7 DMZq72N7fkNlelC3H26ZNRmcBD2SlsLSuL/mX0iVo2AdAhLynZy7olDOOWcwrtm/ SrL5sxXudenvPYicyfz13zeD2Lq3rXFEKdNxvEmbO19EzxCFDoRaokmWSGsQTNch YgTR1zL25vZHQdPj07de3DL9Z5JQFbyFXtb2DFJf5WzhJbSSa3PZtR2r4Z6tAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQU9TJzQyqjwe0VgyuLdxXNicOiCdIwHwYDVR0j BBgwFoAUIFlb260Jx9YEICMFhU0d8U8ZCVkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzEvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5MDk1OS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5 MDk1OS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzEvMzI2MTMwMzYzYTMxMzIzODMz M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNzM0MzIzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGEoOwCzANBgkqhkiG9w0BAQsFAAOCAQEAT+2A0TuO4Cp68EdG kd2yvpYSjG1cCTbq70YSOJTuRvinik2DMNGOY+1WZb7Mhi9GJ1JGZoYH7u8D1xf8 Q8D0fzW9LDqWdjignOTZVwdh+2KqvsEmSGeffKXGqY17T+VNCRCsO2fQ8hJqUnUz ciiRqmqC+HAvkmYfzpoJJpiqGfFLKxqeKkhuaKzUD69SjV3pnkqZ/KHZxXR9gjAd c/K4cg7QuEDjWph0ncbP75wSonw9ziwurMZn3NcWC+fF3Ez7Eqc0HbSUZlETPUNN 71qucxXy3I1tl4Y+Xqn8TCqFJ57/Kcl/WilNwePjrrRxLhDYt0J/1BlpP9CL703+ SpDq8w== -----END CERTIFICATE-----Generated at Sat Sep 28 16:24:42 2024 by rpki-client on console-fra.rpki-client.org