$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633133303a3a2f34342d3438203d3e20323131303636.roa File: 326130363a313238333a633133303a3a2f34342d3438203d3e20323131303636.roa (raw, json) Hash identifier: I2S96ixXf4HB+eQJMKclkpUUi6trwlEyofNgOundUqI= Subject key identifier: D3:3E:A0:DB:82:7B:97:37:A2:73:C4:E5:03:32:D9:EB:75:66:93:05 Certificate issuer: /CN=20595BDBAD09C7D604202305854D1DF14F190959 Certificate serial: 2F661DC3DA9B3F5BD8840AB9822B6759B069863C Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633133303a3a2f34342d3438203d3e20323131303636.roa Signing time: Sun 30 Mar 2025 10:39:12 +0000 ROA not before: Sun 30 Mar 2025 10:34:12 +0000 ROA not after: Sun 29 Mar 2026 10:39:12 +0000 asID: 211066 IP address blocks: 2a06:1283:c130::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Apr 2025 11:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:66:1d:c3:da:9b:3f:5b:d8:84:0a:b9:82:2b:67:59:b0:69:86:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959 Validity Not Before: Mar 30 10:34:12 2025 GMT Not After : Mar 29 10:39:12 2026 GMT Subject: CN=D33EA0DB827B9737A273C4E50332D9EB75669305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cc:3d:4e:64:6e:3a:20:66:56:e7:60:52:85: ac:25:64:c2:5c:25:5a:8f:5a:29:bc:dd:d8:35:6a: 94:d4:ac:8e:c4:29:3f:b1:22:2f:f4:89:d6:a7:41: db:5e:38:85:68:84:1c:85:11:a5:45:6a:86:17:04: 10:ac:03:14:a7:21:9a:ef:f3:61:f7:04:fa:aa:f2: 62:14:5b:8f:fb:9f:3d:1f:a3:7a:f7:f8:89:8e:e1: b7:ea:56:fc:e1:5a:15:90:21:c7:9a:5f:e5:28:46: 03:88:d6:70:12:94:35:6d:6b:af:5b:ba:d1:76:7a: 5a:fc:27:54:92:15:13:a8:64:c5:5c:89:70:25:07: 24:1b:a4:c9:a1:20:7c:63:f0:3b:95:a1:50:ea:22: 4b:91:49:b0:52:3b:f0:22:02:25:7c:70:df:53:84: 5e:04:30:d9:61:52:a0:cf:3d:63:b4:ea:b9:8d:dc: 71:08:2a:ad:70:e0:2d:0d:9e:df:57:d5:2b:be:c5: 00:2e:b5:73:66:53:b6:6d:c6:4d:31:81:0e:42:4e: 0e:73:c4:dc:f4:b2:66:e5:69:a1:69:50:0c:b3:35: 22:ca:ff:c9:fc:7f:7b:9c:a9:37:26:a7:34:65:0c: b5:bd:f3:31:cf:71:93:69:71:bb:c1:18:d3:fb:d6: 7a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3E:A0:DB:82:7B:97:37:A2:73:C4:E5:03:32:D9:EB:75:66:93:05 X509v3 Authority Key Identifier: keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633133303a3a2f34342d3438203d3e20323131303636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:c130::/44 Signature Algorithm: sha256WithRSAEncryption 55:33:e3:ba:27:04:1d:79:be:2b:f4:df:b8:27:98:ec:c1:9c: e2:7d:eb:0f:d8:04:49:ec:62:35:90:f6:f3:f5:ce:74:95:be: 51:33:f2:bf:3a:a9:3b:ae:a2:d1:d3:f4:97:3c:b5:20:94:9a: 27:8d:10:49:58:b5:66:2a:30:08:a0:6c:3d:a0:7f:1b:ab:47: d4:78:c5:3a:2a:65:48:52:49:3b:fc:70:3f:ac:ca:0a:4a:46: 74:c1:05:3e:8a:ec:9d:2d:ac:c8:7b:45:ef:6b:0a:ab:f0:35: b6:ac:03:fe:90:6e:40:f8:25:3e:cb:0e:8b:36:5f:7f:56:7d: bd:39:89:02:a9:95:d7:d4:a8:74:c5:e4:33:95:80:ba:fd:76: d7:38:ca:9f:85:16:fe:aa:09:ae:f3:cd:89:d2:f1:71:80:8d: 1e:e5:e0:6b:8a:95:7a:d8:50:b2:6a:86:d8:9f:d1:b5:44:d1: 1c:1a:8d:dc:d3:31:09:41:fc:c8:2d:cb:0d:1c:57:7f:c2:a6: 8b:f1:6d:e2:25:e7:39:b0:b6:40:6f:59:a8:55:43:7d:0a:be: d4:1a:fd:57:6f:bd:b1:ca:b0:ef:6d:c0:b7:46:2e:13:d6:97: 29:ba:39:1e:3e:f7:7e:c4:89:9c:08:3c:a8:7c:78:9e:d7:52: 21:d3:14:fb -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUL2Ydw9qbP1vYhAq5gitnWbBphjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0 RjE5MDk1OTAeFw0yNTAzMzAxMDM0MTJaFw0yNjAzMjkxMDM5MTJaMDMxMTAvBgNV BAMTKEQzM0VBMERCODI3Qjk3MzdBMjczQzRFNTAzMzJEOUVCNzU2NjkzMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChzD1OZG46IGZW52BShawlZMJc JVqPWim83dg1apTUrI7EKT+xIi/0idanQdteOIVohByFEaVFaoYXBBCsAxSnIZrv 82H3BPqq8mIUW4/7nz0fo3r3+ImO4bfqVvzhWhWQIceaX+UoRgOI1nASlDVta69b utF2elr8J1SSFROoZMVciXAlByQbpMmhIHxj8DuVoVDqIkuRSbBSO/AiAiV8cN9T hF4EMNlhUqDPPWO06rmN3HEIKq1w4C0Nnt9X1Su+xQAutXNmU7Ztxk0xgQ5CTg5z xNz0smblaaFpUAyzNSLK/8n8f3ucqTcmpzRlDLW98zHPcZNpcbvBGNP71nqpAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQU0z6g24J7lzeic8TlAzLZ63VmkwUwHwYDVR0j BBgwFoAUIFlb260Jx9YEICMFhU0d8U8ZCVkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzEvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5MDk1OS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvMjA1OTVCREJBRDA5QzdENjA0MjAyMzA1ODU0RDFERjE0RjE5 MDk1OS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzEvMzI2MTMwMzYzYTMxMzIzODMz M2E2MzMxMzMzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzEzMTMwMzYzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHBCoGEoPBMDANBgkqhkiG9w0BAQsFAAOCAQEAVTPjuicEHXm+K/Tf uCeY7MGc4n3rD9gESexiNZD28/XOdJW+UTPyvzqpO66i0dP0lzy1IJSaJ40QSVi1 ZiowCKBsPaB/G6tH1HjFOiplSFJJO/xwP6zKCkpGdMEFPorsnS2syHtF72sKq/A1 tqwD/pBuQPglPssOizZff1Z9vTmJAqmV19SodMXkM5WAuv121zjKn4UW/qoJrvPN idLxcYCNHuXga4qVethQsmqG2J/RtUTRHBqN3NMxCUH8yC3LDRxXf8Kmi/Ft4iXn ObC2QG9ZqFVDfQq+1Br9V2+9scqw723At0YuE9aXKbo5Hj73fsSJnAg8qHx4ntdS IdMU+w== -----END CERTIFICATE-----Generated at Thu Apr 17 23:56:12 2025 by rpki-client