$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030393a3a2f34382d3438203d3e20323135323030.roa File: 326131343a373538313a313030393a3a2f34382d3438203d3e20323135323030.roa (raw, json) Hash identifier: 1FaufrcLIFo4XDZKQMbTC9NTREnJtH4H7Fy28AcR59s= Subject key identifier: E2:A4:6C:DC:54:4F:82:E7:9D:75:40:0C:A3:B5:06:BB:30:57:23:BA Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 73E6A542986DC81511A416B6FAEB24DC38EFD746 Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030393a3a2f34382d3438203d3e20323135323030.roa Signing time: Mon 02 Dec 2024 09:57:51 +0000 ROA not before: Mon 02 Dec 2024 09:52:51 +0000 ROA not after: Mon 01 Dec 2025 09:57:51 +0000 asID: 215200 IP address blocks: 2a14:7581:1009::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 11:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e6:a5:42:98:6d:c8:15:11:a4:16:b6:fa:eb:24:dc:38:ef:d7:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Dec 2 09:52:51 2024 GMT Not After : Dec 1 09:57:51 2025 GMT Subject: CN=E2A46CDC544F82E79D75400CA3B506BB305723BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f7:3f:ec:92:9f:07:27:2b:ad:41:9a:7c:90: 37:cb:27:cd:c3:58:7d:21:61:eb:b8:73:2a:c7:7f: b2:03:e7:fb:3d:9e:6b:ff:98:46:bf:4f:aa:34:cb: c9:49:20:93:d1:86:2b:59:12:9f:f1:0f:16:25:fa: 3a:a0:5b:7f:ee:cb:60:22:a1:a3:e6:bb:20:4e:a0: f7:e9:ea:b8:00:bd:b0:92:1d:a7:03:ed:14:73:0e: c6:f3:df:80:3c:f4:2c:fe:71:99:c1:d5:2b:c3:62: 03:a5:96:33:b5:2a:5c:ff:0e:db:01:14:93:70:95: 1e:63:bb:d5:62:87:8b:c7:5d:81:e7:30:f8:9e:2c: 27:51:c5:6b:50:0e:56:32:d8:80:c4:fe:c4:2e:af: 93:95:e2:06:72:e3:04:37:83:25:81:c0:00:e5:b9: 30:d8:b6:2c:cf:46:da:b8:c2:a6:6b:1d:a8:e1:e8: 54:a4:7f:b4:9c:6f:b1:a1:7e:7f:65:e6:76:2c:1f: cc:c9:12:c5:0d:d0:ff:8c:5b:fd:65:ca:e1:e9:f0: 17:25:7c:3d:8a:6b:41:3a:29:c6:71:ad:06:cb:f3: 2b:e5:6c:5e:17:11:27:c7:db:e1:e5:fa:34:b1:dd: 51:05:9a:23:44:5f:5b:f7:84:ad:a1:e5:a8:f8:4c: 0b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A4:6C:DC:54:4F:82:E7:9D:75:40:0C:A3:B5:06:BB:30:57:23:BA X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030393a3a2f34382d3438203d3e20323135323030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:1009::/48 Signature Algorithm: sha256WithRSAEncryption 19:68:b4:8b:23:93:12:2c:88:f6:af:d3:a8:51:9e:35:95:ab: fe:e9:52:3f:59:b2:7a:d1:6c:92:6a:05:5c:79:77:c9:2c:31: 79:73:53:43:da:bc:84:69:9a:50:7a:af:55:d6:f6:9b:2b:07: 0f:09:97:a4:7a:04:cc:64:21:93:f0:39:7a:af:fa:6c:58:f9: cd:4c:ba:8a:a4:3a:03:f5:6f:5f:91:a2:51:7f:e4:b1:99:fb: 9a:55:fd:42:9b:e2:d9:ad:da:02:67:a0:00:96:bf:7b:97:6b: 21:3a:e9:c6:1b:52:55:09:18:33:7c:4d:77:77:18:ed:dc:3d: e9:9e:29:6d:35:03:a1:ed:d9:1c:2a:6f:ef:7a:a9:01:96:e5: 62:9a:75:3e:b9:e4:85:a0:b9:e0:1b:33:0f:78:61:ff:ef:53: 31:01:bc:69:c2:95:5f:47:77:01:65:4d:e1:a2:fa:57:1e:6f: df:f2:01:c3:a6:2c:6c:25:d8:73:55:ec:6f:74:e5:b5:d9:a3: 07:9f:bc:30:22:c6:35:48:3e:ef:95:ef:5e:77:92:d5:d0:c3: 1f:70:d0:04:b8:de:6f:05:87:e4:24:76:64:75:bf:00:37:49: 55:9f:f9:73:74:58:0f:20:c1:79:c9:d5:eb:2a:83:c0:ce:9f: fb:0c:6e:5b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUc+alQphtyBURpBa2+usk3Djv10YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNDEyMDIwOTUyNTFaFw0yNTEyMDEwOTU3NTFaMDMxMTAvBgNV BAMTKEUyQTQ2Q0RDNTQ0RjgyRTc5RDc1NDAwQ0EzQjUwNkJCMzA1NzIzQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi9z/skp8HJyutQZp8kDfLJ83D WH0hYeu4cyrHf7ID5/s9nmv/mEa/T6o0y8lJIJPRhitZEp/xDxYl+jqgW3/uy2Ai oaPmuyBOoPfp6rgAvbCSHacD7RRzDsbz34A89Cz+cZnB1SvDYgOlljO1Klz/DtsB FJNwlR5ju9Vih4vHXYHnMPieLCdRxWtQDlYy2IDE/sQur5OV4gZy4wQ3gyWBwADl uTDYtizPRtq4wqZrHajh6FSkf7Scb7Ghfn9l5nYsH8zJEsUN0P+MW/1lyuHp8Bcl fD2Ka0E6KcZxrQbL8yvlbF4XESfH2+Hl+jSx3VEFmiNEX1v3hK2h5aj4TAspAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU4qRs3FRPgueddUAMo7UGuzBXI7owHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMxMzAzMDM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzIzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gRAJMA0GCSqGSIb3DQEBCwUAA4IBAQAZ aLSLI5MSLIj2r9OoUZ41lav+6VI/WbJ60WySagVceXfJLDF5c1ND2ryEaZpQeq9V 1vabKwcPCZekegTMZCGT8Dl6r/psWPnNTLqKpDoD9W9fkaJRf+SxmfuaVf1Cm+LZ rdoCZ6AAlr97l2shOunGG1JVCRgzfE13dxjt3D3pniltNQOh7dkcKm/veqkBluVi mnU+ueSFoLngGzMPeGH/71MxAbxpwpVfR3cBZU3hovpXHm/f8gHDpixsJdhzVexv dOW12aMHn7wwIsY1SD7vle9ed5LV0MMfcNAEuN5vBYfkJHZkdb8AN0lVn/lzdFgP IMF5ydXrKoPAzp/7DG5b -----END CERTIFICATE-----Generated at Fri Jun 6 23:45:12 2025 by rpki-client