$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3130323a3a2f34382d3438203d3e203533333536.roa File: 326131343a373538313a3130323a3a2f34382d3438203d3e203533333536.roa (raw, json) Hash identifier: KT33M4dxF5QkjLpVprgB4zjxsn05AMxgukC8ckc6yAA= Subject key identifier: 59:5C:A9:5A:56:26:F9:83:B1:5E:B3:04:38:53:3F:63:58:20:17:E4 Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 572681074D2F3FD0BA855F4B51EDD71186FE9704 Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3130323a3a2f34382d3438203d3e203533333536.roa Signing time: Wed 29 May 2024 16:05:53 +0000 ROA not before: Wed 29 May 2024 16:00:53 +0000 ROA not after: Wed 28 May 2025 16:05:53 +0000 asID: 53356 IP address blocks: 2a14:7581:102::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Sep 2024 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:26:81:07:4d:2f:3f:d0:ba:85:5f:4b:51:ed:d7:11:86:fe:97:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: May 29 16:00:53 2024 GMT Not After : May 28 16:05:53 2025 GMT Subject: CN=595CA95A5626F983B15EB30438533F63582017E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:23:cd:90:89:f3:fc:7e:94:bd:4a:09:7a:da: 2e:d8:61:cb:9c:d0:c4:21:a6:bf:ec:84:01:97:be: 40:b6:5a:46:09:21:4c:b3:39:90:c7:aa:e4:3a:ce: 04:26:98:52:94:be:4d:78:36:9e:72:39:34:ce:63: bd:26:ec:33:f6:25:27:f4:ed:88:66:00:72:2f:cf: 75:d8:d1:64:32:98:eb:9c:b9:1a:76:79:04:c6:4f: b2:47:88:83:23:6f:ac:39:71:2e:d5:2f:1a:be:c6: c5:0f:5a:52:47:29:1f:1b:de:dc:f9:61:09:a4:56: 25:f4:52:af:85:5a:b0:30:39:73:1d:6b:6f:8c:aa: 74:ab:6c:64:b8:2b:f4:b1:5d:55:e3:4a:0a:6b:0d: 2f:05:7f:6f:10:cc:7a:0c:0d:80:ef:f3:f4:1b:11: 34:03:e5:59:b9:82:fc:3b:61:4d:f6:88:87:e7:1d: f7:86:7a:da:5e:ca:09:a8:a5:88:b4:30:61:0b:75: 8a:cf:50:0f:e8:fd:58:cb:15:bf:97:b3:76:d2:7c: 9c:ff:8e:b4:35:3a:57:1e:fa:c7:c4:3b:b0:be:26: 31:d5:ca:d9:cb:77:06:3e:f2:6d:48:84:d4:59:66: b2:f5:bf:15:6f:e8:e7:09:b1:b3:15:c3:b1:2b:ad: d1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5C:A9:5A:56:26:F9:83:B1:5E:B3:04:38:53:3F:63:58:20:17:E4 X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3130323a3a2f34382d3438203d3e203533333536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:102::/48 Signature Algorithm: sha256WithRSAEncryption 4a:fb:60:ee:94:f8:d9:d3:0d:19:7b:00:94:27:ba:72:c0:fe: 2f:cf:11:6e:c5:69:a2:80:b9:6a:6d:4e:f3:e9:c7:46:eb:7b: 0c:31:84:4b:7e:c0:96:0e:1c:a3:13:e9:44:35:41:17:52:b3: b5:62:fd:2e:f9:be:55:63:f4:14:c5:8f:32:51:0b:42:2d:76: 53:79:42:6b:0e:3f:96:63:85:a3:53:4b:ae:af:85:51:fd:76: 2b:3e:8b:c0:75:39:39:5e:03:d2:98:50:32:6f:94:58:75:fe: 3a:da:cf:d9:45:b9:77:07:17:b0:e2:4d:39:85:de:9a:24:5e: c9:f5:3a:21:ae:94:7c:bb:41:03:cb:55:58:f2:51:7c:cb:95: 66:ae:5a:3f:5a:42:9c:5e:bd:59:00:82:71:08:88:c1:9c:3b: 49:4f:4b:f9:a0:9c:ac:3a:33:5e:38:85:3d:71:be:d8:47:1b: a5:1d:36:99:4d:51:ec:39:d5:8c:f7:2d:61:56:06:25:47:53: a8:de:d6:91:5f:c2:3a:80:23:32:74:db:a2:37:56:9e:53:21: 9d:eb:ea:a5:a0:f0:43:43:ef:cd:49:5b:54:c1:0a:44:4b:52: be:88:d5:af:ad:ce:93:64:c5:70:67:2d:14:95:13:31:d0:8a: 91:74:9d:71 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUVyaBB00vP9C6hV9LUe3XEYb+lwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNDA1MjkxNjAwNTNaFw0yNTA1MjgxNjA1NTNaMDMxMTAvBgNV BAMTKDU5NUNBOTVBNTYyNkY5ODNCMTVFQjMwNDM4NTMzRjYzNTgyMDE3RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBI82QifP8fpS9Sgl62i7YYcuc 0MQhpr/shAGXvkC2WkYJIUyzOZDHquQ6zgQmmFKUvk14Np5yOTTOY70m7DP2JSf0 7YhmAHIvz3XY0WQymOucuRp2eQTGT7JHiIMjb6w5cS7VLxq+xsUPWlJHKR8b3tz5 YQmkViX0Uq+FWrAwOXMda2+MqnSrbGS4K/SxXVXjSgprDS8Ff28QzHoMDYDv8/Qb ETQD5Vm5gvw7YU32iIfnHfeGetpeygmopYi0MGELdYrPUA/o/VjLFb+Xs3bSfJz/ jrQ1Olce+sfEO7C+JjHVytnLdwY+8m1IhNRZZrL1vxVv6OcJsbMVw7ErrdEZAgMB AAGjggKBMIICfTAdBgNVHQ4EFgQUWVypWlYm+YOxXrMEOFM/Y1ggF+QwHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMxMzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzMz MzM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAqFHWBAQIwDQYJKoZIhvcNAQELBQADggEBAEr7YO6U +NnTDRl7AJQnunLA/i/PEW7FaaKAuWptTvPpx0brewwxhEt+wJYOHKMT6UQ1QRdS s7Vi/S75vlVj9BTFjzJRC0ItdlN5QmsOP5ZjhaNTS66vhVH9dis+i8B1OTleA9KY UDJvlFh1/jraz9lFuXcHF7DiTTmF3pokXsn1OiGulHy7QQPLVVjyUXzLlWauWj9a QpxevVkAgnEIiMGcO0lPS/mgnKw6M144hT1xvthHG6UdNplNUew51Yz3LWFWBiVH U6je1pFfwjqAIzJ026I3Vp5TIZ3r6qWg8END781JW1TBCkRLUr6I1a+tzpNkxXBn LRSVEzHQipF0nXE= -----END CERTIFICATE-----Generated at Fri Sep 27 22:26:19 2024 by rpki-client on console-fra.rpki-client.org