$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430303a3a2f34302d3438203d3e20323134323233.roa File: 326130613a363034343a363430303a3a2f34302d3438203d3e20323134323233.roa (raw, json) Hash identifier: kcbqbf/G/0reK47vt4i1+26RYj8ReWFmHDw3QOk2VxE= Subject key identifier: 19:B3:9B:AF:3E:74:4C:00:C5:2D:3A:33:88:7F:B8:96:52:B3:23:8E Certificate issuer: /CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429 Certificate serial: 50998DF06985B7467C846DEF0C5F6151FC9B318C Authority key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430303a3a2f34302d3438203d3e20323134323233.roa Signing time: Tue 11 Feb 2025 16:44:55 +0000 ROA not before: Tue 11 Feb 2025 16:39:55 +0000 ROA not after: Tue 10 Feb 2026 16:44:55 +0000 asID: 214223 IP address blocks: 2a0a:6044:6400::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 19:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:99:8d:f0:69:85:b7:46:7c:84:6d:ef:0c:5f:61:51:fc:9b:31:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429 Validity Not Before: Feb 11 16:39:55 2025 GMT Not After : Feb 10 16:44:55 2026 GMT Subject: CN=19B39BAF3E744C00C52D3A33887FB89652B3238E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:96:e8:0d:a6:b7:15:a7:73:01:b7:b8:65:a8: 1c:c7:91:7d:6e:d6:29:86:2d:b0:59:50:c1:57:18: 0a:75:58:04:b6:e0:d3:8a:3f:6e:fd:b7:d0:2a:32: 5e:d6:6c:00:39:62:8a:9e:98:14:d7:af:a7:5e:73: 43:f1:4e:5a:a1:7d:f9:2e:a9:bb:42:95:71:7c:8b: 94:03:8a:ad:fb:5c:05:26:a6:08:aa:67:bb:8c:59: 8f:61:59:71:ba:08:da:1f:17:32:ad:25:c5:7f:16: f3:54:0d:ef:fd:b1:11:f2:c9:30:63:3c:11:98:ae: 70:40:3d:e1:e2:7f:f7:9e:50:8c:ff:3a:68:ec:16: a4:b3:b4:6a:8c:6a:df:af:5a:4f:2e:9f:da:6c:fb: c0:89:eb:bc:c0:13:00:1e:f5:99:00:44:11:63:92: db:88:96:65:e3:9f:1b:b1:e2:a9:64:df:e0:72:b4: ca:7b:ff:5e:52:0b:af:e7:eb:1c:38:82:45:98:62: e0:e2:02:31:96:4e:1e:eb:86:2f:77:00:aa:02:e7: 2f:b1:e5:e5:3a:b5:92:93:82:5d:99:6b:08:1a:79: a5:00:38:cc:47:bc:97:74:b2:cb:ef:15:8b:63:66: f8:04:f0:d1:5e:46:64:26:be:fa:e5:62:d2:24:9a: 12:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B3:9B:AF:3E:74:4C:00:C5:2D:3A:33:88:7F:B8:96:52:B3:23:8E X509v3 Authority Key Identifier: keyid:ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430303a3a2f34302d3438203d3e20323134323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6400::/40 Signature Algorithm: sha256WithRSAEncryption 1f:8d:c4:66:d9:82:f0:1d:69:27:ed:e6:7a:7a:a8:e4:51:01: 97:3a:c7:d5:08:06:89:66:68:8f:26:8c:13:52:59:48:48:89: 25:dc:89:3a:97:cd:1e:5c:77:8e:38:18:6c:56:ce:9e:75:9e: d7:71:c8:1b:6e:0d:33:99:58:e6:0b:c5:b5:36:88:9a:0e:48: 40:a1:6e:ba:74:34:cb:67:9f:90:f6:f1:c2:52:20:a1:e7:41: 92:96:b4:49:23:1d:1f:2a:92:4c:b1:7d:a3:74:2c:1b:04:94: 0f:31:bd:e4:02:db:a7:1e:ab:30:cc:38:c8:36:c0:0b:fe:07: 62:4c:38:2c:9a:bc:84:64:4c:92:12:5e:55:57:6c:02:17:84: 76:1d:40:c2:7f:1a:78:64:c7:fa:bd:9c:88:ab:47:92:62:95: b8:86:77:e8:39:e0:7c:3d:f4:e5:51:b3:d5:5a:42:b1:55:3f: c0:99:75:f6:d6:7e:43:e2:34:15:20:e0:34:a3:e9:21:75:15: fa:bd:d5:b2:28:49:bc:aa:7e:8e:36:04:2e:dc:7b:84:fa:84: 87:ce:bc:17:6d:f1:27:ae:d1:b7:0d:ce:81:30:a7:01:7f:46: 18:50:69:12:47:39:b3:9e:9d:44:96:12:11:b5:19:b1:2b:90: 71:a1:a3:fc -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUUJmN8GmFt0Z8hG3vDF9hUfybMYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQwQjhBRTAzRDYyNTBENTlFRjhFN0JFNTU2RDk0RUI0 OTQxNTQyOTAeFw0yNTAyMTExNjM5NTVaFw0yNjAyMTAxNjQ0NTVaMDMxMTAvBgNV BAMTKDE5QjM5QkFGM0U3NDRDMDBDNTJEM0EzMzg4N0ZCODk2NTJCMzIzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTlugNprcVp3MBt7hlqBzHkX1u 1imGLbBZUMFXGAp1WAS24NOKP279t9AqMl7WbAA5YoqemBTXr6dec0PxTlqhffku qbtClXF8i5QDiq37XAUmpgiqZ7uMWY9hWXG6CNofFzKtJcV/FvNUDe/9sRHyyTBj PBGYrnBAPeHif/eeUIz/OmjsFqSztGqMat+vWk8un9ps+8CJ67zAEwAe9ZkARBFj ktuIlmXjnxux4qlk3+BytMp7/15SC6/n6xw4gkWYYuDiAjGWTh7rhi93AKoC5y+x 5eU6tZKTgl2ZawgaeaUAOMxHvJd0ssvvFYtjZvgE8NFeRmQmvvrlYtIkmhK7AgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUGbObrz50TADFLToziH+4llKzI44wHwYDVR0j BBgwFoAU7QuK4D1iUNWe+Oe+VW2U60lBVCkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmYwZDRiNGUtOWY3NC00ZGY0LWJmNWUtMDkyOTA5NmRi ZTA0LzMvRUQwQjhBRTAzRDYyNTBENTlFRjhFN0JFNTU2RDk0RUI0OTQxNTQyOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9FRDBCOEFFMDNENjI1MEQ1OUVGOEU3QkU1 NTZEOTRFQjQ5NDE1NDI5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yZjBkNGI0ZS05Zjc0LTRkZjQtYmY1ZS0wOTI5MDk2ZGJlMDQvMy8zMjYxMzA2 MTNhMzYzMDM0MzQzYTM2MzQzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MTM0MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgRGQwDQYJKoZIhvcNAQELBQADggEBAB+N xGbZgvAdaSft5np6qORRAZc6x9UIBolmaI8mjBNSWUhIiSXciTqXzR5cd444GGxW zp51ntdxyBtuDTOZWOYLxbU2iJoOSEChbrp0NMtnn5D28cJSIKHnQZKWtEkjHR8q kkyxfaN0LBsElA8xveQC26ceqzDMOMg2wAv+B2JMOCyavIRkTJISXlVXbAIXhHYd QMJ/Gnhkx/q9nIirR5JilbiGd+g54Hw99OVRs9VaQrFVP8CZdfbWfkPiNBUg4DSj 6SF1Ffq91bIoSbyqfo42BC7ce4T6hIfOvBdt8Seu0bcNzoEwpwF/RhhQaRJHObOe nUSWEhG1GbErkHGho/w= -----END CERTIFICATE-----Generated at Sun Apr 6 07:04:38 2025 by rpki-client