$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/326130363a313238313a373038303a3a2f34342d3434203d3e20323134393836.roa File: 326130363a313238313a373038303a3a2f34342d3434203d3e20323134393836.roa (raw, json) Hash identifier: 5AyW46QS+NNXmeLlk9GX6u+j5sEm8yE34btc4wy6pFU= Subject key identifier: 0A:94:89:BB:10:10:D3:5E:76:AC:5B:31:EB:4F:38:8D:55:C7:2C:04 Certificate issuer: /CN=E472D821C14C9E0738F632D7A74DF516C446A5E2 Certificate serial: 387F9D8435B15553B3C0BA47545BB786167B584D Authority key identifier: E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/326130363a313238313a373038303a3a2f34342d3434203d3e20323134393836.roa Signing time: Tue 01 Oct 2024 16:16:28 +0000 ROA not before: Tue 01 Oct 2024 16:11:28 +0000 ROA not after: Tue 30 Sep 2025 16:16:28 +0000 asID: 214986 IP address blocks: 2a06:1281:7080::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.crl rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 16:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:7f:9d:84:35:b1:55:53:b3:c0:ba:47:54:5b:b7:86:16:7b:58:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E472D821C14C9E0738F632D7A74DF516C446A5E2 Validity Not Before: Oct 1 16:11:28 2024 GMT Not After : Sep 30 16:16:28 2025 GMT Subject: CN=0A9489BB1010D35E76AC5B31EB4F388D55C72C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:97:0c:e4:c9:76:b9:50:2f:79:25:e1:ec:91: 17:ec:f7:b1:ab:c9:0d:98:7c:07:6b:6f:b6:5b:5b: 93:18:35:38:57:94:0f:1a:c9:ab:75:5e:30:a0:68: 0b:c7:2a:0b:76:8d:02:96:1b:9d:ff:df:bf:bb:9c: 91:1d:fa:a2:d8:1f:17:1b:bf:06:e1:30:37:20:cd: f3:0a:24:e1:ad:cf:ab:d6:0f:02:39:44:16:b2:8e: 7c:87:0c:41:ab:76:09:e6:89:13:e5:91:23:47:45: ee:a5:0f:20:67:92:b0:93:59:72:74:60:e8:c9:4d: 6e:65:a7:c5:aa:f7:da:1f:84:c8:cf:34:e6:c6:81: dd:7a:76:f5:4d:24:4e:00:a6:6d:35:46:59:b5:f0: 2a:24:4f:7d:25:96:63:b1:d9:69:7d:6e:48:95:12: 1f:2e:0c:0a:25:29:f5:2d:46:a7:47:c9:f4:81:34: ed:78:52:98:80:5b:81:dc:5b:51:f4:f9:b6:99:91: 60:01:6b:fa:8c:6a:11:25:1e:30:d3:93:65:b9:df: 42:47:1d:f8:98:cb:ab:54:56:51:85:57:20:1b:91: 8c:db:cf:1c:cd:1f:cf:a5:f8:b1:3e:b4:2f:57:c7: fb:e0:7d:9d:a6:13:e8:56:84:e5:ab:eb:e4:87:1d: 56:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:94:89:BB:10:10:D3:5E:76:AC:5B:31:EB:4F:38:8D:55:C7:2C:04 X509v3 Authority Key Identifier: keyid:E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/326130363a313238313a373038303a3a2f34342d3434203d3e20323134393836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:7080::/44 Signature Algorithm: sha256WithRSAEncryption 2d:72:59:dd:07:90:1c:4e:00:26:70:b6:79:58:ab:91:36:62: 09:5b:78:07:46:40:90:e3:01:b8:6b:cd:5e:10:ae:66:f6:02: 2b:92:4c:6a:10:7c:9a:31:59:fa:a6:ee:cf:a7:69:b4:18:70: db:d4:41:c2:94:be:41:cd:dd:c6:f2:d9:14:00:3a:26:ff:80: 9e:af:c8:f7:7f:9d:b3:a2:83:99:da:3c:15:80:48:70:da:2b: 83:22:c8:6c:83:7c:22:0b:b5:6c:29:72:fe:01:2b:8b:a5:42: 28:53:70:cc:04:bd:4b:45:0d:d5:75:0e:58:8a:d4:48:5d:75: 0d:e6:69:2b:88:2a:3c:9f:f2:0e:36:e2:f4:f1:c5:55:93:43: 50:5f:f3:80:02:22:5f:2e:ee:ef:02:73:e7:7a:84:12:0d:2c: 7e:64:e9:5b:82:ff:e3:7f:3a:b1:fa:b7:52:15:0c:a3:b5:94: 20:d2:83:40:fb:b8:b7:c7:7f:94:3c:58:4b:5d:9b:2b:6d:63: 4d:6b:19:08:8a:ed:e1:c0:eb:c6:17:64:6c:1a:62:09:3c:6e: 29:32:65:e0:16:62:bf:23:eb:f9:38:16:b7:7f:10:0e:f5:9f: 85:df:26:56:08:b1:24:f4:d2:ef:80:b2:27:d4:dc:08:74:92: 7a:52:ce:30 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUOH+dhDWxVVOzwLpHVFu3hhZ7WE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ3MkQ4MjFDMTRDOUUwNzM4RjYzMkQ3QTc0REY1MTZD NDQ2QTVFMjAeFw0yNDEwMDExNjExMjhaFw0yNTA5MzAxNjE2MjhaMDMxMTAvBgNV BAMTKDBBOTQ4OUJCMTAxMEQzNUU3NkFDNUIzMUVCNEYzODhENTVDNzJDMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCglwzkyXa5UC95JeHskRfs97Gr yQ2YfAdrb7ZbW5MYNThXlA8ayat1XjCgaAvHKgt2jQKWG53/37+7nJEd+qLYHxcb vwbhMDcgzfMKJOGtz6vWDwI5RBayjnyHDEGrdgnmiRPlkSNHRe6lDyBnkrCTWXJ0 YOjJTW5lp8Wq99ofhMjPNObGgd16dvVNJE4Apm01Rlm18CokT30llmOx2Wl9bkiV Eh8uDAolKfUtRqdHyfSBNO14UpiAW4HcW1H0+baZkWABa/qMahElHjDTk2W530JH HfiYy6tUVlGFVyAbkYzbzxzNH8+l+LE+tC9Xx/vgfZ2mE+hWhOWr6+SHHVYxAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUCpSJuxAQ0152rFsx6084jVXHLAQwHwYDVR0j BBgwFoAU5HLYIcFMngc49jLXp031FsRGpeIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjdlNThlNDItMjQ4ZS00ZDg4LWE1NzUtMGI0Njk2NTEz MDAxLzAvRTQ3MkQ4MjFDMTRDOUUwNzM4RjYzMkQ3QTc0REY1MTZDNDQ2QTVFMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9FNDcyRDgyMUMxNEM5RTA3MzhGNjMyRDdB NzRERjUxNkM0NDZBNUUyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yN2U1OGU0Mi0yNDhlLTRkODgtYTU3NS0wYjQ2OTY1MTMwMDEvMC8zMjYxMzAz NjNhMzEzMjM4MzEzYTM3MzAzODMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MTM0MzkzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKgYSgXCAMA0GCSqGSIb3DQEBCwUAA4IBAQAt clndB5AcTgAmcLZ5WKuRNmIJW3gHRkCQ4wG4a81eEK5m9gIrkkxqEHyaMVn6pu7P p2m0GHDb1EHClL5Bzd3G8tkUADom/4Cer8j3f52zooOZ2jwVgEhw2iuDIshsg3wi C7VsKXL+ASuLpUIoU3DMBL1LRQ3VdQ5YitRIXXUN5mkriCo8n/IONuL08cVVk0NQ X/OAAiJfLu7vAnPneoQSDSx+ZOlbgv/jfzqx+rdSFQyjtZQg0oNA+7i3x3+UPFhL XZsrbWNNaxkIiu3hwOvGF2RsGmIJPG4pMmXgFmK/I+v5OBa3fxAO9Z+F3yZWCLEk 9NLvgLIn1NwIdJJ6Us4w -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:50 2024 by rpki-client on console-ams.rpki-client.org