$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a6164333a3a2f34382d3438203d3e20323136333131.roa File: 326130623a346530373a6164333a3a2f34382d3438203d3e20323136333131.roa (raw, json) Hash identifier: pDxAOCa00XUxi0CPysaIBKKN55EZc5LvYrA7FrzMjsg= Subject key identifier: E3:42:12:26:12:AF:0D:6E:36:F5:55:0D:15:8B:BD:B8:07:A2:7D:73 Certificate issuer: /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC Certificate serial: 125F7A89F28897D4C1ECB110FA2BD8B0DF1399ED Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a6164333a3a2f34382d3438203d3e20323136333131.roa Signing time: Thu 25 Jul 2024 11:35:12 +0000 ROA not before: Thu 25 Jul 2024 11:30:12 +0000 ROA not after: Thu 24 Jul 2025 11:35:12 +0000 asID: 216311 IP address blocks: 2a0b:4e07:ad3::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 01:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5f:7a:89:f2:88:97:d4:c1:ec:b1:10:fa:2b:d8:b0:df:13:99:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC Validity Not Before: Jul 25 11:30:12 2024 GMT Not After : Jul 24 11:35:12 2025 GMT Subject: CN=E342122612AF0D6E36F5550D158BBDB807A27D73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:31:37:4c:4f:1b:42:cb:24:c5:35:3f:c0:68: d2:0c:ec:f9:20:88:01:31:a9:28:d2:85:bd:35:dc: 59:55:56:64:dd:4c:95:a6:46:47:fe:9d:5c:66:67: cf:77:7c:61:13:17:b0:5f:94:d5:3d:e8:08:9b:54: e8:99:b2:dc:38:38:9a:75:70:f1:b2:1c:b1:71:87: 7a:f4:67:89:14:dc:cd:8d:85:57:7b:9a:b0:fc:c3: e8:a0:dd:f2:f5:50:a5:0e:d1:83:87:b7:2b:95:3b: bf:96:ee:9a:b6:86:a3:b0:84:be:53:0f:64:d0:f6: a7:eb:64:13:ff:4f:8c:8b:3d:43:f1:d9:80:86:e6: ef:f4:b0:9b:fa:a8:85:8f:98:03:4e:6c:72:b2:09: 53:20:4c:3a:f9:04:3d:c2:14:f7:ba:dc:6f:d8:94: de:50:50:10:a3:29:f2:cd:c1:eb:07:e5:28:59:e6: 9f:47:78:6f:55:b6:dc:03:3d:fd:48:46:d7:da:82: 27:ba:6b:5e:78:e3:22:fd:1d:dc:6f:3d:05:cd:25: ad:c8:5c:cb:37:26:4a:a5:5c:35:71:dd:6d:a6:81: a1:e8:fc:65:fd:1c:5c:db:4c:56:c2:5e:cd:d4:96: 7a:cc:a0:c8:85:79:86:79:f7:e2:06:d6:92:e4:6f: 82:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:42:12:26:12:AF:0D:6E:36:F5:55:0D:15:8B:BD:B8:07:A2:7D:73 X509v3 Authority Key Identifier: keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a6164333a3a2f34382d3438203d3e20323136333131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:ad3::/48 Signature Algorithm: sha256WithRSAEncryption 60:f8:78:f9:8d:c3:f7:5b:c6:e1:88:5c:3b:ec:41:ae:99:cf: 6b:c1:47:31:9c:ff:31:c7:50:6f:81:33:b1:c7:14:68:83:78: d1:4e:f9:6b:10:b9:64:47:83:89:d9:7f:d5:9f:9f:09:99:ef: e5:16:dc:12:02:1f:99:d3:dc:fb:d5:74:df:7f:eb:27:bb:95: dc:3e:04:8c:df:5f:30:a8:32:dc:a4:e5:a3:d9:12:61:bf:63: 67:b6:08:24:f7:6c:ba:21:68:a1:2d:6b:a8:e3:98:03:24:fb: 45:09:3e:9a:f9:91:2c:a4:f4:7d:f9:d3:fb:ee:47:3e:d1:75: ef:27:46:48:46:4f:9d:61:f9:d3:d3:56:e9:de:28:7d:d8:d3: 1c:46:d3:cf:45:a5:21:ac:aa:f3:6f:6c:cc:49:90:63:d1:e6: 39:c2:2c:b6:29:b3:e8:aa:23:38:53:c0:6a:a0:32:cd:24:da: 00:0f:1d:d4:c3:6b:f9:5c:7d:c9:40:43:51:71:d9:60:f0:1a: d7:b7:0b:40:f6:19:86:b5:c3:02:8a:a4:f9:cb:64:12:a1:60: f4:76:b8:cd:04:db:2e:3b:dd:df:bd:4e:7f:ab:cc:c2:e0:d1: d7:7c:2c:93:ea:62:ca:b6:1a:47:fa:bf:20:48:4a:e8:6b:6e: 20:77:eb:ea -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUEl96ifKIl9TB7LEQ+ivYsN8Tme0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE4MjA3NDY2QUIwQTdEN0QxRUYzQzdDRDAyRTgwQkVE NTgzNDBCQzAeFw0yNDA3MjUxMTMwMTJaFw0yNTA3MjQxMTM1MTJaMDMxMTAvBgNV BAMTKEUzNDIxMjI2MTJBRjBENkUzNkY1NTUwRDE1OEJCREI4MDdBMjdENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNMTdMTxtCyyTFNT/AaNIM7Pkg iAExqSjShb013FlVVmTdTJWmRkf+nVxmZ893fGETF7BflNU96AibVOiZstw4OJp1 cPGyHLFxh3r0Z4kU3M2NhVd7mrD8w+ig3fL1UKUO0YOHtyuVO7+W7pq2hqOwhL5T D2TQ9qfrZBP/T4yLPUPx2YCG5u/0sJv6qIWPmANObHKyCVMgTDr5BD3CFPe63G/Y lN5QUBCjKfLNwesH5ShZ5p9HeG9VttwDPf1IRtfagie6a1544yL9HdxvPQXNJa3I XMs3JkqlXDVx3W2mgaHo/GX9HFzbTFbCXs3UlnrMoMiFeYZ59+IG1pLkb4IbAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQU40ISJhKvDW429VUNFYu9uAeifXMwHwYDVR0j BBgwFoAU0YIHRmqwp9fR7zx80C6AvtWDQLwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGM3MDQwMWMtN2Y0MS00YTZiLTk0MzQtY2M4MGRjYTA5 M2U2LzIvRDE4MjA3NDY2QUIwQTdEN0QxRUYzQzdDRDAyRTgwQkVENTgzNDBCQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04YmE1LTQ3 OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC9EMTgyMDc0NjZBQjBBN0Q3RDFFRjNDN0NE MDJFODBCRUQ1ODM0MEJDLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wYzcwNDAxYy03ZjQxLTRhNmItOTQzNC1jYzgwZGNhMDkzZTYvMi8zMjYxMzA2 MjNhMzQ2NTMwMzczYTYxNjQzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NjMzMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoLTgcK0zANBgkqhkiG9w0BAQsFAAOCAQEAYPh4 +Y3D91vG4YhcO+xBrpnPa8FHMZz/McdQb4EzsccUaIN40U75axC5ZEeDidl/1Z+f CZnv5RbcEgIfmdPc+9V033/rJ7uV3D4EjN9fMKgy3KTlo9kSYb9jZ7YIJPdsuiFo oS1rqOOYAyT7RQk+mvmRLKT0ffnT++5HPtF17ydGSEZPnWH509NW6d4ofdjTHEbT z0WlIayq829szEmQY9HmOcIstimz6KojOFPAaqAyzSTaAA8d1MNr+Vx9yUBDUXHZ YPAa17cLQPYZhrXDAoqk+ctkEqFg9Ha4zQTbLjvd371Of6vMwuDR13wsk+piyrYa R/q/IEhK6GtuIHfr6g== -----END CERTIFICATE-----Generated at Thu Sep 19 17:01:31 2024 by rpki-client on console-ams.rpki-client.org