$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6533303a3a2f34342d3434203d3e203438373532.roa File: 326130373a323438363a6533303a3a2f34342d3434203d3e203438373532.roa (raw, json) Hash identifier: WDJmpgtYMTR9/hsq1Yyl3FztgUNiJzvER8pRhFL4Hf0= Subject key identifier: 4C:C9:98:5E:A3:71:61:6A:FD:B0:A3:24:48:F2:46:63:0E:37:DA:0B Certificate issuer: /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711 Certificate serial: 61171D34CA6B9D5DA5BFA54465909517A3EC20A9 Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6533303a3a2f34342d3434203d3e203438373532.roa Signing time: Tue 07 May 2024 01:10:42 +0000 ROA not before: Tue 07 May 2024 01:05:42 +0000 ROA not after: Tue 06 May 2025 01:10:42 +0000 asID: 48752 IP address blocks: 2a07:2486:e30::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.mft rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.mft rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 11 Jun 2024 18:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:17:1d:34:ca:6b:9d:5d:a5:bf:a5:44:65:90:95:17:a3:ec:20:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711 Validity Not Before: May 7 01:05:42 2024 GMT Not After : May 6 01:10:42 2025 GMT Subject: CN=4CC9985EA371616AFDB0A32448F246630E37DA0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b4:1a:4d:74:4f:74:aa:43:dd:26:fd:af:b0: 93:a3:52:97:a2:1a:e4:ce:ea:54:e9:a0:92:11:46: 9c:a2:67:eb:5f:74:89:e5:8a:e0:44:2c:b2:88:7b: 1e:c6:a2:b5:2d:b3:84:db:d2:10:e6:fe:68:30:02: af:c1:64:1b:20:32:dd:13:03:73:5e:cc:b2:92:e6: 1f:2b:99:c7:42:7b:fa:7b:e7:ed:74:76:fb:4e:64: 1e:ef:51:4e:32:78:cf:d3:b8:4f:75:ba:a4:a7:04: 64:b2:06:e3:df:3a:1f:ff:f5:88:9a:2b:b3:e8:47: fb:9f:85:85:94:29:15:33:b2:50:40:11:17:ee:7b: 29:31:ed:a3:b8:8c:ae:9f:95:19:db:1a:51:fb:fa: 5d:17:9d:d7:f6:37:f4:4c:88:c7:5c:9b:45:eb:c2: b3:d0:0c:71:ae:bd:7e:14:6c:7d:ad:88:4b:a8:6d: 2c:c2:ec:83:bf:5c:ab:f4:17:2a:0b:47:29:91:a8: ca:d4:49:24:1f:23:0f:0e:9e:7e:79:00:ed:21:43: d8:94:33:a9:5c:b4:ee:c7:66:00:89:39:62:fd:ca: d0:5b:ec:c7:1c:0c:a5:84:0f:5c:70:5b:33:80:57: 7a:4d:84:bc:1b:2d:f2:37:50:84:0b:fe:8a:42:fd: 8c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C9:98:5E:A3:71:61:6A:FD:B0:A3:24:48:F2:46:63:0E:37:DA:0B X509v3 Authority Key Identifier: keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6533303a3a2f34342d3434203d3e203438373532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:2486:e30::/44 Signature Algorithm: sha256WithRSAEncryption 24:40:66:ec:7e:cb:15:33:a7:55:4e:cf:70:75:26:ef:fa:0d: 6b:7e:4b:1a:20:18:3c:84:a7:32:6f:bd:b0:9f:f9:1e:c9:5b: 95:57:f0:61:58:15:be:7d:90:cb:79:31:8a:81:a1:31:aa:f2: 08:0f:8d:09:76:31:35:4d:ba:41:3a:2e:cd:37:24:b8:00:f1: d7:9b:23:22:01:ec:0e:d3:40:38:09:16:6c:de:5a:96:bf:f4: 8a:62:fa:b8:c5:bb:93:06:e9:29:64:00:aa:6f:64:69:56:ba: 9a:6e:e0:3a:bd:a1:87:3d:3e:a0:58:26:26:61:7b:f5:c2:3c: f1:31:11:91:55:34:01:a0:9d:c5:70:48:89:63:62:fd:61:9c: e3:63:ac:77:98:6f:1d:6b:20:b1:b5:3b:68:41:7e:9c:3f:49: 8b:c2:04:af:fd:9a:c9:1a:35:f9:c3:cc:e2:5f:c9:0c:a1:b1: 2d:42:e5:cb:7d:ec:ba:17:41:7c:42:b8:e9:e5:ee:f9:63:d5: 8f:ad:57:52:11:fa:d0:87:d8:2d:d1:00:11:d5:dc:27:0a:ac: 77:78:ee:d2:cb:5e:85:0d:89:0d:2a:eb:e7:90:81:fb:92:bd: 7f:86:18:77:4e:bc:07:9a:12:ea:a4:3f:33:e6:07:24:30:5e: 16:c9:6e:ce -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUYRcdNMprnV2lv6VEZZCVF6PsIKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyQjA4M0VFMzdCQ0YyRDczN0M1NzZFRjlENTMyRUQ3 MTdBMTcxMTAeFw0yNDA1MDcwMTA1NDJaFw0yNTA1MDYwMTEwNDJaMDMxMTAvBgNV BAMTKDRDQzk5ODVFQTM3MTYxNkFGREIwQTMyNDQ4RjI0NjYzMEUzN0RBMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrtBpNdE90qkPdJv2vsJOjUpei GuTO6lTpoJIRRpyiZ+tfdInliuBELLKIex7GorUts4Tb0hDm/mgwAq/BZBsgMt0T A3NezLKS5h8rmcdCe/p75+10dvtOZB7vUU4yeM/TuE91uqSnBGSyBuPfOh//9Yia K7PoR/ufhYWUKRUzslBAERfueykx7aO4jK6flRnbGlH7+l0Xndf2N/RMiMdcm0Xr wrPQDHGuvX4UbH2tiEuobSzC7IO/XKv0FyoLRymRqMrUSSQfIw8Onn55AO0hQ9iU M6lctO7HZgCJOWL9ytBb7MccDKWED1xwWzOAV3pNhLwbLfI3UIQL/opC/YypAgMB AAGjggKBMIICfTAdBgNVHQ4EFgQUTMmYXqNxYWr9sKMkSPJGYw432gswHwYDVR0j BBgwFoAUrCsIPuN7zy1zfFdu+dUy7XF6FxEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Q3YTU1MjctZmIxOS00NTY1LTk3MzMtZDQ1YTg3MDA1 MGU1LzEvQUMyQjA4M0VFMzdCQ0YyRDczN0M1NzZFRjlENTMyRUQ3MTdBMTcxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMWE3OTdmOS0zYzEwLTQ1 MzYtYWE2NC0wOWNhMmQ5NTQ1YzgvMC9BQzJCMDgzRUUzN0JDRjJENzM3QzU3NkVG OUQ1MzJFRDcxN0ExNzExLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9jZDdhNTUyNy1mYjE5LTQ1NjUtOTczMy1kNDVhODcwMDUwZTUvMS8zMjYxMzAz NzNhMzIzNDM4MzYzYTY1MzMzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDM0Mzgz NzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwQqBySGDjAwDQYJKoZIhvcNAQELBQADggEBACRAZux+ yxUzp1VOz3B1Ju/6DWt+SxogGDyEpzJvvbCf+R7JW5VX8GFYFb59kMt5MYqBoTGq 8ggPjQl2MTVNukE6Ls03JLgA8debIyIB7A7TQDgJFmzeWpa/9Ipi+rjFu5MG6Slk AKpvZGlWuppu4Dq9oYc9PqBYJiZhe/XCPPExEZFVNAGgncVwSIljYv1hnONjrHeY bx1rILG1O2hBfpw/SYvCBK/9mskaNfnDzOJfyQyhsS1C5ct97LoXQXxCuOnl7vlj 1Y+tV1IR+tCH2C3RABHV3CcKrHd47tLLXoUNiQ0q6+eQgfuSvX+GGHdOvAeaEuqk PzPmByQwXhbJbs4= -----END CERTIFICATE-----Generated at Tue Jun 11 03:06:32 2024 by rpki-client on console-fra.rpki-client.org