$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa File: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (raw, json) Hash identifier: wTqD67Uqf1W/idPthA4sHinaJ2FPLZ88IN640ixPrCU= Subject key identifier: 8E:A6:4A:E1:39:B7:74:F3:12:49:C8:1B:0F:8A:C0:08:B0:CD:5F:68 Certificate issuer: /CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Certificate serial: 1C63FCE1A09E60BE74D60774A7E446FAF49001A8 Authority key identifier: CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa Signing time: Tue 10 Sep 2024 19:15:22 +0000 ROA not before: Tue 10 Sep 2024 19:10:22 +0000 ROA not after: Tue 09 Sep 2025 19:15:22 +0000 asID: 200676 IP address blocks: 2a06:a003:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Oct 2024 21:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:63:fc:e1:a0:9e:60:be:74:d6:07:74:a7:e4:46:fa:f4:90:01:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Validity Not Before: Sep 10 19:10:22 2024 GMT Not After : Sep 9 19:15:22 2025 GMT Subject: CN=8EA64AE139B774F31249C81B0F8AC008B0CD5F68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f3:72:dd:16:80:7e:64:f6:4e:b7:1a:b3:c4: 3b:92:86:a1:b3:ad:e6:94:4f:d6:d1:4d:c9:56:4b: bc:8b:a1:89:4d:f1:3a:32:a3:81:a6:2c:2c:5e:a9: a3:6a:55:82:0b:1a:6a:b0:33:c3:e9:43:1a:ca:36: 67:a5:1c:74:1e:ed:53:dd:d2:d5:aa:6e:29:8e:06: c7:e5:c8:1a:b8:ec:f3:cf:55:0e:56:8c:db:b4:6b: e2:5e:f6:df:5d:a4:38:df:b9:ec:5e:1d:3c:70:c1: 22:40:ab:8c:12:ba:c7:a9:f6:05:4e:d5:c6:a9:4f: 37:43:0f:9f:1e:b6:3f:1f:db:07:d0:29:36:4c:3a: ba:08:11:fd:8d:ea:97:8a:53:df:d4:d5:15:f8:d4: f5:e6:3d:0c:34:f1:aa:15:d4:a9:d6:bc:83:f0:8c: 75:2a:dd:29:15:ce:6a:b9:4c:54:6f:60:37:55:50: 14:34:ed:c6:60:62:a5:88:00:57:7b:bc:cb:96:20: 71:6c:38:e4:bb:7c:9f:a3:dd:e7:c3:31:1d:62:9d: 73:0c:b7:b1:fb:71:20:26:4e:f9:09:98:ea:cc:0b: 3b:87:fd:93:be:7e:7c:b8:a6:9d:97:c8:67:3c:82: fc:be:16:c4:cd:e4:39:ba:5b:3e:02:3f:62:99:56: 1e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A6:4A:E1:39:B7:74:F3:12:49:C8:1B:0F:8A:C0:08:B0:CD:5F:68 X509v3 Authority Key Identifier: keyid:CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a003:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 53:12:3b:05:fa:8c:57:1b:fa:ec:1b:88:62:bc:dd:60:85:a2: a2:61:0c:98:77:8b:bc:48:86:eb:6f:e7:2e:4d:9a:58:8e:76: 6d:e1:13:8a:f6:f6:f6:5e:f8:af:b0:5e:b9:0e:c8:f5:88:0f: 2f:fc:37:d5:2a:15:66:e4:77:36:56:f2:65:40:05:04:e9:5d: 8f:0c:3a:b3:c2:56:68:10:e1:f3:c4:81:ac:df:a0:ae:f2:db: ce:eb:9a:65:d1:11:92:0b:9b:5c:e0:8a:f5:53:5f:be:c4:b0: 5b:2d:32:86:c5:ef:d6:50:f4:7b:cb:49:03:29:4e:e7:02:40: d9:73:86:89:9f:cf:4b:2e:4b:7f:2e:49:91:ff:75:29:a8:4f: 36:3c:42:7f:34:d5:16:1a:8a:6f:dc:62:09:df:e2:bf:24:6e: 8d:b7:07:57:a1:fe:92:af:ad:45:36:2b:6e:92:67:88:9f:7b: ee:c2:a8:66:c5:69:1e:46:22:a2:c0:3c:d7:de:b2:78:dc:02: 86:f3:c6:6b:4e:30:eb:ce:9b:e9:ed:2a:c5:41:1c:3a:a9:eb: 22:53:80:9f:8d:bd:bf:29:e8:ce:11:5b:54:10:c2:92:41:ad: 30:d7:4b:73:36:ff:bb:e0:97:5b:17:69:12:d7:bf:0b:7d:48: 60:1f:f2:fb -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUHGP84aCeYL501gd0p+RG+vSQAagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgz Rjk1NTFDRDAeFw0yNDA5MTAxOTEwMjJaFw0yNTA5MDkxOTE1MjJaMDMxMTAvBgNV BAMTKDhFQTY0QUUxMzlCNzc0RjMxMjQ5QzgxQjBGOEFDMDA4QjBDRDVGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH83LdFoB+ZPZOtxqzxDuShqGz reaUT9bRTclWS7yLoYlN8Toyo4GmLCxeqaNqVYILGmqwM8PpQxrKNmelHHQe7VPd 0tWqbimOBsflyBq47PPPVQ5WjNu0a+Je9t9dpDjfuexeHTxwwSJAq4wSusep9gVO 1capTzdDD58etj8f2wfQKTZMOroIEf2N6peKU9/U1RX41PXmPQw08aoV1KnWvIPw jHUq3SkVzmq5TFRvYDdVUBQ07cZgYqWIAFd7vMuWIHFsOOS7fJ+j3efDMR1inXMM t7H7cSAmTvkJmOrMCzuH/ZO+fny4pp2XyGc8gvy+FsTN5Dm6Wz4CP2KZVh77AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUjqZK4Tm3dPMSScgbD4rACLDNX2gwHwYDVR0j BBgwFoAUzhtPQ2e2pV80ypgaDWynWD+VUc0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzEvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1NTFDRC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1 NTFDRC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYt MzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3LzEvMzI2MTMwMzYzYTYxMzAzMDMz M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzMDM2MzczNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGoAOwCzANBgkqhkiG9w0BAQsFAAOCAQEAUxI7BfqMVxv67BuI YrzdYIWiomEMmHeLvEiG62/nLk2aWI52beETivb29l74r7BeuQ7I9YgPL/w31SoV ZuR3NlbyZUAFBOldjww6s8JWaBDh88SBrN+grvLbzuuaZdERkgubXOCK9VNfvsSw Wy0yhsXv1lD0e8tJAylO5wJA2XOGiZ/PSy5Lfy5Jkf91KahPNjxCfzTVFhqKb9xi Cd/ivyRujbcHV6H+kq+tRTYrbpJniJ977sKoZsVpHkYiosA8196yeNwChvPGa04w 686b6e0qxUEcOqnrIlOAn429vynozhFbVBDCkkGtMNdLczb/u+CXWxdpEte/C31I YB/y+w== -----END CERTIFICATE-----Generated at Wed Oct 23 04:06:45 2024 by rpki-client on console-fra.rpki-client.org