$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a633131303a3a2f34342d3434203d3e20323135313437.roa File: 326130363a313238333a633131303a3a2f34342d3434203d3e20323135313437.roa (raw, json) Hash identifier: Inap52a8v+7lZSU2U9FJt7+07oCq4V2h+j6RGecoYbQ= Subject key identifier: 19:29:E6:D6:81:98:00:A8:97:98:59:FC:8E:B9:B1:61:36:6A:3C:13 Certificate issuer: /CN=B6366F3DD14AC5399103961C30642E6779892C6C Certificate serial: 5FC85A838317E1073CCA6FEB1A3A3549343A61C3 Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a633131303a3a2f34342d3434203d3e20323135313437.roa Signing time: Fri 20 Sep 2024 16:26:25 +0000 ROA not before: Fri 20 Sep 2024 16:21:25 +0000 ROA not after: Fri 19 Sep 2025 16:26:25 +0000 asID: 215147 IP address blocks: 2a06:1283:c110::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Sep 2024 22:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c8:5a:83:83:17:e1:07:3c:ca:6f:eb:1a:3a:35:49:34:3a:61:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C Validity Not Before: Sep 20 16:21:25 2024 GMT Not After : Sep 19 16:26:25 2025 GMT Subject: CN=1929E6D6819800A8979859FC8EB9B161366A3C13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:19:f9:68:8c:c8:7e:43:d0:71:dc:2a:53:b3: 97:30:9d:09:68:fd:01:f2:c6:ad:b4:32:a4:c4:06: 6b:67:4f:9f:5c:54:3b:85:ae:2a:c4:4e:8f:f8:bb: 7d:30:10:bf:2a:71:15:1c:0a:5b:e7:f6:88:66:b2: 3f:3b:59:b0:42:9f:f5:50:9d:4b:b8:81:c9:e4:e8: af:fc:f0:3b:21:47:88:20:55:c2:8f:bf:6b:47:7b: 7b:51:65:5f:a3:ac:2c:99:f3:c4:2e:3e:c0:72:1d: 64:1a:98:1e:9f:04:08:c2:2a:cc:af:ab:06:43:d7: 65:41:06:8c:2c:49:f2:d4:de:56:c0:e2:68:32:2a: 61:1f:04:96:a7:20:02:8d:9f:d9:3e:6c:21:bb:53: 9e:71:f1:b7:78:08:4f:e2:15:61:27:70:84:ff:f6: cd:3f:0b:a9:8c:fe:23:a5:25:eb:4f:13:9f:4c:61: 62:57:32:98:a7:15:a1:d8:83:a9:aa:ba:d2:4b:71: c9:09:c3:04:bd:14:ff:25:b8:01:7d:de:90:d3:54: 4f:58:cc:52:61:fd:53:98:f0:39:44:4c:38:e9:e8: aa:9f:fa:9e:b4:7b:2d:56:1b:2c:27:45:f5:21:1a: 21:10:05:62:3a:f2:b3:c2:f0:4e:b1:ab:5f:f4:28: a7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:29:E6:D6:81:98:00:A8:97:98:59:FC:8E:B9:B1:61:36:6A:3C:13 X509v3 Authority Key Identifier: keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a633131303a3a2f34342d3434203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:c110::/44 Signature Algorithm: sha256WithRSAEncryption 6e:d7:93:6e:36:75:13:5b:fb:f5:a6:79:ef:f1:a7:e9:af:d8: 0c:63:03:0a:34:43:de:a3:a5:f6:de:4c:4e:8f:a2:68:bc:a1: d3:16:ab:f5:1a:a2:e0:d3:5c:5b:05:09:a0:77:3e:2a:1e:15: bd:06:2d:54:6e:39:c2:44:48:93:ad:ec:9a:62:55:2d:07:a3: bb:66:da:94:dc:1a:b2:c9:1f:85:61:d7:d3:ce:95:c1:fd:b9: a3:9a:20:7c:19:46:a2:3e:bc:a9:d3:d0:de:86:4b:d1:e7:38: 2c:f6:31:4e:68:42:84:82:89:12:0d:bb:d1:d0:fb:7a:0d:e3: ac:62:45:b9:eb:7c:8b:c0:83:63:ee:60:d2:04:52:5f:55:45: d1:e4:9e:24:9e:b8:cb:d6:69:79:37:74:a7:e0:bb:96:d2:d0: 0a:81:54:8b:69:6a:cd:8c:56:b0:75:0a:13:b9:e0:f2:2c:e9: 3f:c2:f3:42:1c:46:a8:e3:84:a3:38:f8:15:1b:9e:62:88:ef: 3b:3e:49:b6:48:42:4c:5c:3a:bc:f6:ce:b4:43:49:04:80:35: ff:6a:df:1f:ca:49:14:e4:46:2d:07:b9:13:0b:92:e6:56:5a: e9:30:b5:a4:cc:ca:79:31:22:58:95:f0:96:f0:a6:b4:2c:f5: 73:a1:40:5b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUX8hag4MX4Qc8ym/rGjo1STQ6YcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3 OTg5MkM2QzAeFw0yNDA5MjAxNjIxMjVaFw0yNTA5MTkxNjI2MjVaMDMxMTAvBgNV BAMTKDE5MjlFNkQ2ODE5ODAwQTg5Nzk4NTlGQzhFQjlCMTYxMzY2QTNDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGflojMh+Q9Bx3CpTs5cwnQlo /QHyxq20MqTEBmtnT59cVDuFrirETo/4u30wEL8qcRUcClvn9ohmsj87WbBCn/VQ nUu4gcnk6K/88DshR4ggVcKPv2tHe3tRZV+jrCyZ88QuPsByHWQamB6fBAjCKsyv qwZD12VBBowsSfLU3lbA4mgyKmEfBJanIAKNn9k+bCG7U55x8bd4CE/iFWEncIT/ 9s0/C6mM/iOlJetPE59MYWJXMpinFaHYg6mqutJLcckJwwS9FP8luAF93pDTVE9Y zFJh/VOY8DlETDjp6Kqf+p60ey1WGywnRfUhGiEQBWI68rPC8E6xq1/0KKdTAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUGSnm1oGYAKiXmFn8jrmxYTZqPBMwHwYDVR0j BBgwFoAUtjZvPdFKxTmRA5YcMGQuZ3mJLGwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzIvQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3OTg5MkM2Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvMS9CNjM2NkYzREQxNEFDNTM5OTEwMzk2MUMz MDY0MkU2Nzc5ODkyQzZDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMi8zMjYxMzAz NjNhMzEzMjM4MzMzYTYzMzEzMTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MTM1MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKgYSg8EQMA0GCSqGSIb3DQEBCwUAA4IBAQBu 15NuNnUTW/v1pnnv8afpr9gMYwMKNEPeo6X23kxOj6JovKHTFqv1GqLg01xbBQmg dz4qHhW9Bi1UbjnCREiTreyaYlUtB6O7ZtqU3BqyyR+FYdfTzpXB/bmjmiB8GUai Pryp09DehkvR5zgs9jFOaEKEgokSDbvR0Pt6DeOsYkW563yLwINj7mDSBFJfVUXR 5J4knrjL1ml5N3Sn4LuW0tAKgVSLaWrNjFawdQoTueDyLOk/wvNCHEao44SjOPgV G55iiO87Pkm2SEJMXDq89s60Q0kEgDX/at8fykkU5EYtB7kTC5LmVlrpMLWkzMp5 MSJYlfCW8Ka0LPVzoUBb -----END CERTIFICATE-----Generated at Sat Sep 28 10:58:31 2024 by rpki-client on console-fra.rpki-client.org