$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/326130363a613030333a3a2f34382d3438203d3e20323030363736.roa File: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (raw, json) Hash identifier: ahz6gPUt4YrcLpOD9Ozfm8bYrgH1OTsLIpfe4cqXpMc= Subject key identifier: 9B:55:FF:79:29:66:E1:E2:14:D9:5E:3D:A7:E7:0D:49:85:06:1B:D9 Certificate issuer: /CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Certificate serial: 0533C7B69905D3EED0194AD43175014AE40E6874 Authority key identifier: CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/326130363a613030333a3a2f34382d3438203d3e20323030363736.roa Signing time: Tue 10 Sep 2024 19:15:19 +0000 ROA not before: Tue 10 Sep 2024 19:10:19 +0000 ROA not after: Tue 09 Sep 2025 19:15:19 +0000 asID: 200676 IP address blocks: 2a06:a003::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Oct 2024 21:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:33:c7:b6:99:05:d3:ee:d0:19:4a:d4:31:75:01:4a:e4:0e:68:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Validity Not Before: Sep 10 19:10:19 2024 GMT Not After : Sep 9 19:15:19 2025 GMT Subject: CN=9B55FF792966E1E214D95E3DA7E70D4985061BD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c5:73:e2:50:cd:63:bf:a4:85:ca:fe:b5:0e: bd:47:5e:52:9b:3d:20:92:76:f3:12:0a:b2:81:fd: 99:b4:66:85:36:dc:f5:f2:d9:04:fc:a5:53:9a:85: 84:da:8f:d5:7f:90:20:77:34:14:62:f8:df:0f:58: e1:01:11:c0:ff:30:3c:e4:4c:8e:c4:5c:7d:a9:2e: 48:20:2c:97:8f:ed:e8:8f:4e:55:d1:c4:3c:49:72: b5:28:ba:16:41:6a:ec:6a:7d:54:51:20:d8:77:d6: 5f:8f:a9:71:5a:0f:79:3d:1b:54:0d:be:66:c1:17: 7d:25:5b:0e:d0:e3:1c:6c:60:b2:75:71:84:7a:21: 8d:44:13:85:6a:10:df:72:86:5a:f7:b2:46:d7:b7: 0c:17:8d:e2:1b:9e:f7:5d:51:6b:9a:65:07:2d:56: b3:a5:92:c5:00:39:a5:55:01:20:23:8d:2e:70:d6: c1:3c:29:65:e7:77:f9:fc:a0:b6:7b:79:92:e7:af: 02:3a:c5:19:1b:49:a1:02:b3:f1:77:6e:fe:c4:f0: 15:6f:50:9f:2f:0e:3c:6b:86:1d:ef:9c:9a:51:1f: 63:05:4d:f4:46:0d:ab:f8:9f:10:dd:41:2b:51:9b: 63:3b:1c:40:94:6c:2c:f7:45:07:ca:90:29:38:5c: f5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:55:FF:79:29:66:E1:E2:14:D9:5E:3D:A7:E7:0D:49:85:06:1B:D9 X509v3 Authority Key Identifier: keyid:CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/326130363a613030333a3a2f34382d3438203d3e20323030363736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a003::/48 Signature Algorithm: sha256WithRSAEncryption 0f:14:8c:c6:11:42:3b:e4:05:29:73:1e:3e:75:97:ef:e8:05: 12:f4:ff:2c:23:ee:82:32:ca:e7:ab:20:9f:c3:32:cc:b0:e0: dd:e5:7b:40:ec:81:b3:72:07:9d:2a:7f:d3:b5:6c:74:8d:6c: af:c3:6d:c2:0a:30:49:dd:bf:f9:7f:35:20:fd:0a:d0:9a:ab: 78:dc:7e:c2:ed:39:fe:84:0d:45:d4:bf:aa:6d:77:dc:62:d4: 6c:87:14:79:f4:9c:fe:83:83:d2:84:22:b0:0e:f0:ce:64:fe: 65:d8:f6:35:64:09:ea:75:69:7a:1e:ac:03:3d:97:cc:76:5a: ab:41:d0:f5:37:57:a4:bd:ec:9e:50:b3:aa:8e:13:68:2b:1b: a7:41:45:23:4d:ee:4b:54:ef:77:de:1f:78:6c:37:6a:54:99: 84:f7:7d:88:56:61:56:1d:d6:4e:f9:17:b0:b6:c0:aa:a7:83: 36:f0:2e:dc:16:57:f9:8c:43:d3:b2:64:ae:7b:70:19:5a:7d: 76:f1:b5:f3:d8:5a:51:98:53:5c:22:9f:74:8b:13:4f:56:db: 93:d0:e7:14:60:3b:59:6e:97:51:02:34:38:e3:8a:80:8a:b3: 5b:95:44:af:12:98:bf:48:8d:d0:1d:03:db:d2:b7:83:8c:0a: 4c:04:c8:d2 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgIUBTPHtpkF0+7QGUrUMXUBSuQOaHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgz Rjk1NTFDRDAeFw0yNDA5MTAxOTEwMTlaFw0yNTA5MDkxOTE1MTlaMDMxMTAvBgNV BAMTKDlCNTVGRjc5Mjk2NkUxRTIxNEQ5NUUzREE3RTcwRDQ5ODUwNjFCRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrxXPiUM1jv6SFyv61Dr1HXlKb PSCSdvMSCrKB/Zm0ZoU23PXy2QT8pVOahYTaj9V/kCB3NBRi+N8PWOEBEcD/MDzk TI7EXH2pLkggLJeP7eiPTlXRxDxJcrUouhZBauxqfVRRINh31l+PqXFaD3k9G1QN vmbBF30lWw7Q4xxsYLJ1cYR6IY1EE4VqEN9yhlr3skbXtwwXjeIbnvddUWuaZQct VrOlksUAOaVVASAjjS5w1sE8KWXnd/n8oLZ7eZLnrwI6xRkbSaECs/F3bv7E8BVv UJ8vDjxrhh3vnJpRH2MFTfRGDav4nxDdQStRm2M7HECUbCz3RQfKkCk4XPWxAgMB AAGjggJwMIICbDAdBgNVHQ4EFgQUm1X/eSlm4eIU2V49p+cNSYUGG9kwHwYDVR0j BBgwFoAUzhtPQ2e2pV80ypgaDWynWD+VUc0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzEvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1NTFDRC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1 NTFDRC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYt MzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3LzEvMzI2MTMwMzYzYTYxMzAzMDMz M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDMwMzYzNzM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA KgagAwAAMA0GCSqGSIb3DQEBCwUAA4IBAQAPFIzGEUI75AUpcx4+dZfv6AUS9P8s I+6CMsrnqyCfwzLMsODd5XtA7IGzcgedKn/TtWx0jWyvw23CCjBJ3b/5fzUg/QrQ mqt43H7C7Tn+hA1F1L+qbXfcYtRshxR59Jz+g4PShCKwDvDOZP5l2PY1ZAnqdWl6 HqwDPZfMdlqrQdD1N1ekveyeULOqjhNoKxunQUUjTe5LVO933h94bDdqVJmE932I VmFWHdZO+RewtsCqp4M28C7cFlf5jEPTsmSue3AZWn128bXz2FpRmFNcIp90ixNP VtuT0OcUYDtZbpdRAjQ444qAirNblUSvEpi/SI3QHQPb0reDjApMBMjS -----END CERTIFICATE-----Generated at Wed Oct 23 04:06:45 2024 by rpki-client on console-fra.rpki-client.org