$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a343030303a3a2f33362d3336203d3e20323133343238.roa File: 326131343a373538303a343030303a3a2f33362d3336203d3e20323133343238.roa (raw, json) Hash identifier: f38GGJwA8aLs49rknYyp3/ozCmX5eTGnavOZGUBAqUw= Subject key identifier: 58:1D:75:0D:9E:68:EB:3C:B0:F8:7C:66:E1:A9:3F:94:1A:EF:8F:00 Certificate issuer: /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Certificate serial: 3B827637209902DEB81C390A889121873620D6A4 Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a343030303a3a2f33362d3336203d3e20323133343238.roa Signing time: Sun 09 Mar 2025 05:14:59 +0000 ROA not before: Sun 09 Mar 2025 05:09:59 +0000 ROA not after: Sun 08 Mar 2026 05:14:59 +0000 asID: 213428 IP address blocks: 2a14:7580:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 13:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:82:76:37:20:99:02:de:b8:1c:39:0a:88:91:21:87:36:20:d6:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Validity Not Before: Mar 9 05:09:59 2025 GMT Not After : Mar 8 05:14:59 2026 GMT Subject: CN=581D750D9E68EB3CB0F87C66E1A93F941AEF8F00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:58:cf:7e:65:86:c0:b0:62:f0:b8:49:61: 78:10:13:46:e3:20:70:5a:89:86:c1:eb:09:12:6c: 49:df:31:12:f0:10:db:e4:a2:e2:6d:22:30:c9:f0: 98:fa:05:bb:a3:83:48:ac:93:c3:3c:71:87:92:e6: ec:06:8d:94:e7:c3:c0:de:7d:6e:ff:bd:1d:7a:ef: 40:d7:99:3d:dc:44:bf:ad:b0:17:21:f4:87:9d:31: fe:bb:ec:46:6a:ac:d3:61:02:61:c5:07:01:4c:e3: b7:80:fc:7c:42:24:e1:8c:a6:5d:e8:4c:69:0e:f9: c0:00:29:e7:01:74:b4:d9:04:4e:69:ec:99:5a:a7: 08:0f:23:d0:4f:c9:3e:99:15:e9:50:f3:12:e4:5c: db:18:38:3c:16:88:e9:a9:78:8e:50:23:b4:7f:4b: de:05:eb:e3:b5:67:f6:ef:cb:5b:56:91:8b:c7:06: cf:b9:1d:82:fa:29:17:e3:94:7a:19:ab:5c:92:f2: 4d:6d:d9:fa:d6:7a:b1:5a:e1:52:a5:70:0a:77:62: 04:ae:ad:68:13:f0:1c:88:09:76:7b:78:cb:1a:3f: 0b:ae:60:39:00:c1:3e:11:e7:91:1f:29:00:b8:63: 95:83:db:0c:b1:8c:84:4c:3e:60:25:79:0d:5a:a4: 1a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1D:75:0D:9E:68:EB:3C:B0:F8:7C:66:E1:A9:3F:94:1A:EF:8F:00 X509v3 Authority Key Identifier: keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a343030303a3a2f33362d3336203d3e20323133343238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:4000::/36 Signature Algorithm: sha256WithRSAEncryption b5:4e:7a:7d:bc:d5:af:c7:ba:3e:13:f0:0f:d6:6e:cb:b8:7d: 1d:a9:fc:98:e2:80:29:66:9f:a9:d6:db:3b:b1:92:b0:49:a0: 03:10:dd:c2:db:2c:a0:ac:41:0f:11:f6:de:5a:d7:78:09:ae: d8:20:f8:df:e3:16:be:dc:89:c9:61:0d:5d:c1:d2:b7:f8:19: 63:a0:51:b1:78:4f:ad:48:8c:08:25:e0:44:2c:c5:23:d8:ed: 47:23:90:38:ed:2a:1f:21:ed:1c:95:9f:94:c4:86:47:07:0d: 3b:f0:f0:9b:af:4e:f7:e1:cf:a9:5e:fd:16:b1:69:37:7a:a5: b0:d0:18:0c:cf:62:ae:24:dd:d4:60:3c:84:e5:e1:79:28:ca: 90:ce:0d:45:f2:20:a8:0a:7d:3e:8b:10:b8:fe:99:d8:8f:b6: a2:ae:3d:42:b7:f5:fd:f8:81:4b:ad:d6:09:a3:13:19:96:2a: 41:c9:d4:67:5a:74:11:89:3a:ba:58:55:2e:24:9e:ca:3f:5a: 16:e3:a4:4e:cc:54:ea:c4:cd:84:60:28:1c:cb:f9:c1:de:c0: 80:9f:9f:f1:0b:7f:92:41:0b:b8:0e:22:17:d2:35:48:59:3f: d6:d2:a2:86:59:9d:a2:a2:5c:f3:23:7a:e8:fb:91:8b:b0:e6: f2:a8:13:69 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUO4J2NyCZAt64HDkKiJEhhzYg1qQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENG OTM5RjRGNDAeFw0yNTAzMDkwNTA5NTlaFw0yNjAzMDgwNTE0NTlaMDMxMTAvBgNV BAMTKDU4MUQ3NTBEOUU2OEVCM0NCMEY4N0M2NkUxQTkzRjk0MUFFRjhGMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6ljPfmWGwLBi8LhJYXgQE0bj IHBaiYbB6wkSbEnfMRLwENvkouJtIjDJ8Jj6Bbujg0isk8M8cYeS5uwGjZTnw8De fW7/vR1670DXmT3cRL+tsBch9IedMf677EZqrNNhAmHFBwFM47eA/HxCJOGMpl3o TGkO+cAAKecBdLTZBE5p7JlapwgPI9BPyT6ZFelQ8xLkXNsYODwWiOmpeI5QI7R/ S94F6+O1Z/bvy1tWkYvHBs+5HYL6KRfjlHoZq1yS8k1t2frWerFa4VKlcAp3YgSu rWgT8ByICXZ7eMsaPwuuYDkAwT4R55EfKQC4Y5WD2wyxjIRMPmAleQ1apBrTAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUWB11DZ5o6zyw+Hxm4ak/lBrvjwAwHwYDVR0j BBgwFoAU9ABy/9wPGxWmnlvHmi9YjPk59PQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzAvRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNDAwNzJGRkRDMEYxQjE1QTY5RTVCQzc5 QTJGNTg4Q0Y5MzlGNEY0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xOWFhOWRhNy1mMWU0LTRkOTgtYmY5NS05ZmRmY2Y0NDhmNzcvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTM0MzAzMDMwM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIz MTMzMzQzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1gEAwDQYJKoZIhvcNAQELBQADggEBALVO en281a/Huj4T8A/Wbsu4fR2p/JjigClmn6nW2zuxkrBJoAMQ3cLbLKCsQQ8R9t5a 13gJrtgg+N/jFr7ciclhDV3B0rf4GWOgUbF4T61IjAgl4EQsxSPY7UcjkDjtKh8h 7RyVn5TEhkcHDTvw8JuvTvfhz6le/RaxaTd6pbDQGAzPYq4k3dRgPITl4XkoypDO DUXyIKgKfT6LELj+mdiPtqKuPUK39f34gUut1gmjExmWKkHJ1GdadBGJOrpYVS4k nso/WhbjpE7MVOrEzYRgKBzL+cHewICfn/ELf5JBC7gOIhfSNUhZP9bSooZZnaKi XPMjeuj7kYuw5vKoE2k= -----END CERTIFICATE-----Generated at Sat Apr 5 04:35:33 2025 by rpki-client