$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa File: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (raw, json) Hash identifier: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s= Subject key identifier: D9:F1:35:9C:20:CD:10:1D:1A:12:B1:A1:95:F5:A2:6C:75:CB:4C:89 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 485C3979B9508F867127F7511C988DA67A057AE3 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa Signing time: Wed 05 Feb 2025 02:02:08 +0000 ROA not before: Wed 05 Feb 2025 01:57:08 +0000 ROA not after: Wed 04 Feb 2026 02:02:08 +0000 asID: 215617 IP address blocks: 2a0f:85c1:363::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 17:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5c:39:79:b9:50:8f:86:71:27:f7:51:1c:98:8d:a6:7a:05:7a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Feb 5 01:57:08 2025 GMT Not After : Feb 4 02:02:08 2026 GMT Subject: CN=D9F1359C20CD101D1A12B1A195F5A26C75CB4C89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d1:2a:d9:b8:6e:44:ec:af:09:a4:66:99:c2: 9c:fa:e9:7d:af:89:04:ba:bb:79:91:b0:70:28:86: b0:dc:d4:6a:93:78:d5:05:e7:df:91:26:94:04:ed: 66:13:6a:4c:6b:33:14:63:b2:0e:df:ab:0d:83:54: d3:f1:ce:da:64:dd:1e:95:8f:f2:fa:ce:82:64:16: 25:86:12:2d:d3:b2:67:99:c3:8d:a2:dc:4b:ae:5f: fb:13:b4:66:56:c3:69:20:aa:8d:64:84:c3:ac:68: c0:32:a9:b7:22:12:67:8a:c0:cd:c3:dc:9a:a5:1c: 62:6d:1b:5b:b2:2b:74:67:6d:a6:4a:5d:b5:61:ab: 94:4c:7c:93:67:a8:36:b5:cc:3a:da:b8:d9:eb:f7: 9a:16:a5:73:1a:03:1d:e1:4c:be:e3:cc:3d:5c:cf: ab:0f:e6:ba:73:1d:df:6d:2b:a0:88:9c:09:41:e4: 0e:60:c5:7b:1d:03:34:07:62:be:9d:0c:84:cb:05: bd:4d:5a:78:2d:d4:d1:a6:8c:38:9b:15:90:8a:56: 56:2f:cb:13:0a:54:45:98:63:c9:b2:b1:4b:14:fd: 70:dd:9a:c9:54:e3:cf:a5:d9:9f:a0:d3:f6:e1:33: 0c:fd:4b:88:da:c2:80:51:ea:23:c5:80:19:13:51: 01:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F1:35:9C:20:CD:10:1D:1A:12:B1:A1:95:F5:A2:6C:75:CB:4C:89 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:363::/48 Signature Algorithm: sha256WithRSAEncryption 19:3e:02:dc:8b:2a:31:2f:95:d5:40:23:d4:e6:d3:17:c0:38: f4:f0:cc:14:39:29:7a:d0:d6:54:28:15:02:73:f9:1f:bb:5c: 9b:cf:60:99:24:df:2f:d8:8a:09:96:fb:78:15:49:5a:c4:fc: bf:35:dc:31:9d:20:70:61:a1:d6:12:bf:c1:d2:46:97:fd:5f: e3:84:e5:1c:75:c5:86:ca:b9:ac:83:6a:3c:76:1e:88:30:4a: 17:1d:eb:09:d2:23:37:2b:11:49:a0:97:30:c3:36:de:5e:6b: 64:5c:e0:20:6c:99:bf:6b:49:4c:e7:18:8b:a5:8d:ae:0f:5d: 5b:76:a5:84:af:01:f9:95:64:f4:f0:8b:fd:b5:ea:90:c5:02: 02:22:e3:46:1c:31:b4:12:5a:47:a8:5a:63:88:7a:3f:81:c0: e5:63:90:fa:0d:c5:bd:78:35:2f:dd:04:ec:80:bd:24:69:07: b3:b5:8f:d8:b0:09:68:76:00:b1:ec:ea:e9:aa:b6:b9:dc:05: 20:fe:99:f5:be:bd:56:63:e2:1d:61:3d:f1:e8:73:5f:aa:2a: 96:c2:0b:34:5f:51:28:0b:a5:a6:a4:f3:4d:23:b7:8e:6a:ed: b1:3b:cc:06:ea:64:db:45:e3:5a:f3:44:21:11:ca:51:02:df: 58:31:4f:1c -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUSFw5eblQj4ZxJ/dRHJiNpnoFeuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNTAyMDUwMTU3MDhaFw0yNjAyMDQwMjAyMDhaMDMxMTAvBgNV BAMTKEQ5RjEzNTlDMjBDRDEwMUQxQTEyQjFBMTk1RjVBMjZDNzVDQjRDODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70SrZuG5E7K8JpGaZwpz66X2v iQS6u3mRsHAohrDc1GqTeNUF59+RJpQE7WYTakxrMxRjsg7fqw2DVNPxztpk3R6V j/L6zoJkFiWGEi3TsmeZw42i3EuuX/sTtGZWw2kgqo1khMOsaMAyqbciEmeKwM3D 3JqlHGJtG1uyK3RnbaZKXbVhq5RMfJNnqDa1zDrauNnr95oWpXMaAx3hTL7jzD1c z6sP5rpzHd9tK6CInAlB5A5gxXsdAzQHYr6dDITLBb1NWngt1NGmjDibFZCKVlYv yxMKVEWYY8mysUsU/XDdmslU48+l2Z+g0/bhMwz9S4jawoBR6iPFgBkTUQGTAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQU2fE1nCDNEB0aErGhlfWibHXLTIkwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMi8zMjYxMzA2 NjNhMzgzNTYzMzEzYTMzMzYzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTM2MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEDYzANBgkqhkiG9w0BAQsFAAOCAQEAGT4C 3IsqMS+V1UAj1ObTF8A49PDMFDkpetDWVCgVAnP5H7tcm89gmSTfL9iKCZb7eBVJ WsT8vzXcMZ0gcGGh1hK/wdJGl/1f44TlHHXFhsq5rINqPHYeiDBKFx3rCdIjNysR SaCXMMM23l5rZFzgIGyZv2tJTOcYi6WNrg9dW3alhK8B+ZVk9PCL/bXqkMUCAiLj RhwxtBJaR6haY4h6P4HA5WOQ+g3FvXg1L90E7IC9JGkHs7WP2LAJaHYAsezq6aq2 udwFIP6Z9b69VmPiHWE98ehzX6oqlsILNF9RKAulpqTzTSO3jmrtsTvMBupk20Xj WvNEIRHKUQLfWDFPHA== -----END CERTIFICATE-----Generated at Fri Jun 6 11:54:56 2025 by rpki-client