$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a313830303a3a2f33382d3338203d3e203434333331.roa File: 326130623a346530373a313830303a3a2f33382d3338203d3e203434333331.roa (raw, json) Hash identifier: 9lFP7JRbk5ezNjOsaqH4HSwwx0s/Xukmrb8s8nzO+2A= Subject key identifier: C2:48:F2:37:E2:97:B3:A9:A0:5A:AC:A8:3A:4B:2F:9B:4B:DC:DD:9A Certificate issuer: /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC Certificate serial: 56D36118D587799884D5D5B80F224D2DF220200E Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a313830303a3a2f33382d3338203d3e203434333331.roa Signing time: Wed 08 Jan 2025 14:24:32 +0000 ROA not before: Wed 08 Jan 2025 14:19:32 +0000 ROA not after: Wed 07 Jan 2026 14:24:32 +0000 asID: 44331 IP address blocks: 2a0b:4e07:1800::/38 maxlen: 38 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Mar 2025 19:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d3:61:18:d5:87:79:98:84:d5:d5:b8:0f:22:4d:2d:f2:20:20:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC Validity Not Before: Jan 8 14:19:32 2025 GMT Not After : Jan 7 14:24:32 2026 GMT Subject: CN=C248F237E297B3A9A05AACA83A4B2F9B4BDCDD9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6f:97:ba:01:9e:95:c9:43:84:dd:e8:33:70: 34:ab:14:32:5f:8b:c1:d3:fe:4d:24:3a:bf:75:ee: c3:1b:71:27:33:68:6b:48:22:ac:25:5e:53:cc:86: 1c:64:33:d3:27:0f:da:e0:2f:4b:77:d1:05:c5:fe: d5:36:fa:8e:8c:75:a1:03:46:89:1d:08:d6:23:39: d2:ae:e8:84:49:10:a4:0f:29:4f:42:f5:58:c2:c4: b5:dc:d4:66:3a:05:af:1b:f5:65:0c:01:3f:cb:00: 32:d0:01:b9:a4:8c:8a:5c:be:2e:4e:1c:17:24:d6: 97:72:14:66:f2:12:6e:e6:61:e5:38:0a:4e:18:2b: d6:82:07:e0:5b:65:1c:03:34:01:50:09:2b:53:cf: 97:11:c7:c5:10:a1:8b:28:b6:ea:19:5a:14:95:de: d0:bc:5a:7e:6f:fc:2f:89:8a:ac:01:2d:f7:59:d9: 72:3f:f5:54:64:02:c0:bd:70:48:03:ba:ed:25:15: 52:d5:44:6d:a2:3d:a4:0f:71:e6:70:80:06:7f:a6: 5c:b9:44:d2:dd:90:0f:d5:4f:2e:26:81:08:91:9b: 7c:40:80:b7:96:b1:d6:42:4e:5f:40:8f:90:fd:ef: 62:9b:a1:9b:3c:3a:36:a8:ad:b6:73:62:14:1b:30: c6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:48:F2:37:E2:97:B3:A9:A0:5A:AC:A8:3A:4B:2F:9B:4B:DC:DD:9A X509v3 Authority Key Identifier: keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a313830303a3a2f33382d3338203d3e203434333331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:1800::/38 Signature Algorithm: sha256WithRSAEncryption aa:19:c3:68:dc:6f:03:cb:31:3d:17:a2:0b:50:10:26:fc:38: 90:ce:66:db:14:5d:35:75:e4:fa:5a:0e:77:7b:61:60:a9:96: 7f:47:b4:89:23:5e:9a:a6:d8:d0:4f:bc:6f:b9:8e:b6:bd:d2: 11:08:07:d9:93:ab:15:6c:a4:b4:af:8a:ac:7d:4f:a7:f4:97: b6:30:6e:ea:2c:2b:7e:d6:1c:0a:06:f3:56:c8:d0:8e:16:51: e7:ba:eb:ab:0f:ba:1c:1f:6d:4f:68:5c:81:f2:05:43:c0:e8: 27:c6:7d:f0:f1:73:b8:24:26:99:44:c0:c3:d7:82:05:6b:93: 22:75:36:73:e4:e6:89:7e:a7:a2:0e:e4:78:42:66:5a:b6:f6: ee:96:ab:ba:5a:8d:c6:9e:25:06:d2:e0:40:92:75:b1:b8:b7: 02:1f:e1:e3:16:ed:a6:c1:3f:20:9a:1c:90:46:78:66:3c:76: e9:6a:2f:72:70:48:e0:b0:2b:41:f0:8e:d2:a4:10:39:b1:e3: b6:92:07:3d:fc:69:e4:0e:c9:fa:9e:8f:0a:e6:33:d8:28:88: d5:10:b9:3d:5c:f8:5c:c7:2a:40:ed:fb:fc:68:c3:2a:78:76: 49:59:9a:ef:bc:85:a8:ce:10:03:62:61:9d:79:b6:c5:ed:26: 57:43:20:72 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVtNhGNWHeZiE1dW4DyJNLfIgIA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE4MjA3NDY2QUIwQTdEN0QxRUYzQzdDRDAyRTgwQkVE NTgzNDBCQzAeFw0yNTAxMDgxNDE5MzJaFw0yNjAxMDcxNDI0MzJaMDMxMTAvBgNV BAMTKEMyNDhGMjM3RTI5N0IzQTlBMDVBQUNBODNBNEIyRjlCNEJEQ0REOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTb5e6AZ6VyUOE3egzcDSrFDJf i8HT/k0kOr917sMbcSczaGtIIqwlXlPMhhxkM9MnD9rgL0t30QXF/tU2+o6MdaED RokdCNYjOdKu6IRJEKQPKU9C9VjCxLXc1GY6Ba8b9WUMAT/LADLQAbmkjIpcvi5O HBck1pdyFGbyEm7mYeU4Ck4YK9aCB+BbZRwDNAFQCStTz5cRx8UQoYsotuoZWhSV 3tC8Wn5v/C+JiqwBLfdZ2XI/9VRkAsC9cEgDuu0lFVLVRG2iPaQPceZwgAZ/ply5 RNLdkA/VTy4mgQiRm3xAgLeWsdZCTl9Aj5D972KboZs8OjaorbZzYhQbMMZ/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUwkjyN+KXs6mgWqyoOksvm0vc3ZowHwYDVR0j BBgwFoAU0YIHRmqwp9fR7zx80C6AvtWDQLwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGM3MDQwMWMtN2Y0MS00YTZiLTk0MzQtY2M4MGRjYTA5 M2U2LzIvRDE4MjA3NDY2QUIwQTdEN0QxRUYzQzdDRDAyRTgwQkVENTgzNDBCQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04YmE1LTQ3 OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC9EMTgyMDc0NjZBQjBBN0Q3RDFFRjNDN0NE MDJFODBCRUQ1ODM0MEJDLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wYzcwNDAxYy03ZjQxLTRhNmItOTQzNC1jYzgwZGNhMDkzZTYvMi8zMjYxMzA2 MjNhMzQ2NTMwMzczYTMxMzgzMDMwM2EzYTJmMzMzODJkMzMzODIwM2QzZTIwMzQz NDMzMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGAioLTgcYMA0GCSqGSIb3DQEBCwUAA4IBAQCqGcNo 3G8DyzE9F6ILUBAm/DiQzmbbFF01deT6Wg53e2FgqZZ/R7SJI16aptjQT7xvuY62 vdIRCAfZk6sVbKS0r4qsfU+n9Je2MG7qLCt+1hwKBvNWyNCOFlHnuuurD7ocH21P aFyB8gVDwOgnxn3w8XO4JCaZRMDD14IFa5MidTZz5OaJfqeiDuR4QmZatvbulqu6 Wo3GniUG0uBAknWxuLcCH+HjFu2mwT8gmhyQRnhmPHbpai9ycEjgsCtB8I7SpBA5 seO2kgc9/GnkDsn6no8K5jPYKIjVELk9XPhcxypA7fv8aMMqeHZJWZrvvIWozhAD YmGdebbF7SZXQyBy -----END CERTIFICATE-----Generated at Thu Mar 13 06:47:52 2025 by rpki-client