$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430313a3a2f34382d3438203d3e20323134323233.roa File: 326130613a363034343a363430313a3a2f34382d3438203d3e20323134323233.roa (raw, json) Hash identifier: 9NYGqo2Ls6hbV6+1P7vXYDKtF8hmmGEM+wvhFByd8+4= Subject key identifier: C3:92:14:1C:9D:E2:5A:5A:D7:CF:21:1F:C3:01:8B:1F:09:BB:4E:81 Certificate issuer: /CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429 Certificate serial: 1E989C4A4163AD24888E48E5E40830BDB0B09346 Authority key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430313a3a2f34382d3438203d3e20323134323233.roa Signing time: Sun 06 Apr 2025 16:08:59 +0000 ROA not before: Sun 06 Apr 2025 16:03:59 +0000 ROA not after: Sun 05 Apr 2026 16:08:59 +0000 asID: 214223 IP address blocks: 2a0a:6044:6401::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 21:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:98:9c:4a:41:63:ad:24:88:8e:48:e5:e4:08:30:bd:b0:b0:93:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429 Validity Not Before: Apr 6 16:03:59 2025 GMT Not After : Apr 5 16:08:59 2026 GMT Subject: CN=C392141C9DE25A5AD7CF211FC3018B1F09BB4E81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:04:c1:ce:6c:76:27:5c:ac:ac:9a:be:23:a1: 32:87:16:0b:47:32:ac:8a:67:b9:54:a6:4e:4e:1b: 4c:5a:77:1f:9e:ac:97:de:b6:71:b7:be:29:65:41: 4a:7d:08:14:d0:82:8f:f0:50:54:5b:11:9d:fa:f5: a6:77:ed:c9:be:95:eb:2b:74:d2:8e:97:b3:36:86: aa:05:60:6a:ac:70:11:3e:0c:42:45:d2:f2:83:8a: fd:38:fe:8d:65:70:2f:e4:88:dc:77:17:af:ae:e7: 01:ca:2a:b5:dc:88:38:99:ea:83:fb:6a:1e:8c:fd: dd:5f:93:f6:c6:9d:19:03:1e:9f:a1:6f:5b:59:8b: 05:8d:a9:fc:0c:21:a4:3e:8c:82:08:7b:24:92:af: 37:9b:27:9b:c5:87:62:a3:8a:d1:48:43:f0:28:34: de:a9:2c:5c:d9:3e:ef:88:7c:1f:24:a8:84:2f:2e: 0e:df:68:1e:aa:02:e5:11:18:9f:7b:62:c0:86:ab: 46:ae:66:ed:0d:7b:5c:cc:ff:a3:91:03:02:c4:9d: e7:4a:ab:3a:eb:f1:3a:0f:57:f1:7f:ec:2d:97:e4: 1c:cf:53:71:15:33:22:09:47:c9:a8:b0:da:1b:4c: 99:f9:69:5f:35:80:fa:5f:c7:c4:5c:76:20:b3:18: f8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:92:14:1C:9D:E2:5A:5A:D7:CF:21:1F:C3:01:8B:1F:09:BB:4E:81 X509v3 Authority Key Identifier: keyid:ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430313a3a2f34382d3438203d3e20323134323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6401::/48 Signature Algorithm: sha256WithRSAEncryption 31:b6:40:a4:b2:a1:d3:d1:1a:91:e6:8b:65:29:90:9d:79:97: d6:8c:66:58:71:d7:37:79:fd:07:bb:e6:d1:fa:76:fa:bd:8d: 06:24:04:c5:34:80:58:06:24:b4:be:25:b7:58:37:fb:eb:c3: 9c:73:32:b8:b9:ee:0a:41:4d:4b:9e:72:52:f8:4e:e7:39:c4: e1:32:7c:17:e1:b4:c1:7f:2a:07:8b:cc:0d:f0:f4:f9:0f:48: 09:2a:78:53:68:66:ff:4c:65:b5:10:29:23:22:10:9b:0c:23: bd:b0:90:6a:b8:aa:f4:e8:ce:1b:75:65:68:c1:70:54:43:ee: 5e:81:ba:31:a9:55:f1:f9:f6:18:7e:e0:3b:d4:46:2c:bf:ce: 69:b9:53:3c:0a:34:d5:5b:37:a3:40:30:48:59:ee:55:88:ef: ea:75:f8:fe:09:80:ae:e6:75:fb:25:f9:a5:91:ba:5f:72:46: 13:7a:b8:50:e5:5f:3a:eb:e7:77:21:d5:83:09:be:38:5b:9f: 47:8a:3a:ae:86:2a:92:e5:59:d3:6f:90:14:5e:ce:f6:fe:69: dc:50:30:a3:74:50:97:e4:10:67:ba:e4:0e:57:f2:df:ee:a8: 55:1e:dc:bc:95:4e:d6:4b:34:c9:6a:c8:27:8a:35:c8:4a:af: 8d:1d:67:c8 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUHpicSkFjrSSIjkjl5AgwvbCwk0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQwQjhBRTAzRDYyNTBENTlFRjhFN0JFNTU2RDk0RUI0 OTQxNTQyOTAeFw0yNTA0MDYxNjAzNTlaFw0yNjA0MDUxNjA4NTlaMDMxMTAvBgNV BAMTKEMzOTIxNDFDOURFMjVBNUFEN0NGMjExRkMzMDE4QjFGMDlCQjRFODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKBMHObHYnXKysmr4joTKHFgtH MqyKZ7lUpk5OG0xadx+erJfetnG3villQUp9CBTQgo/wUFRbEZ369aZ37cm+lesr dNKOl7M2hqoFYGqscBE+DEJF0vKDiv04/o1lcC/kiNx3F6+u5wHKKrXciDiZ6oP7 ah6M/d1fk/bGnRkDHp+hb1tZiwWNqfwMIaQ+jIIIeySSrzebJ5vFh2KjitFIQ/Ao NN6pLFzZPu+IfB8kqIQvLg7faB6qAuURGJ97YsCGq0auZu0Ne1zM/6ORAwLEnedK qzrr8ToPV/F/7C2X5BzPU3EVMyIJR8mosNobTJn5aV81gPpfx8RcdiCzGPh9AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUw5IUHJ3iWlrXzyEfwwGLHwm7ToEwHwYDVR0j BBgwFoAU7QuK4D1iUNWe+Oe+VW2U60lBVCkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmYwZDRiNGUtOWY3NC00ZGY0LWJmNWUtMDkyOTA5NmRi ZTA0LzMvRUQwQjhBRTAzRDYyNTBENTlFRjhFN0JFNTU2RDk0RUI0OTQxNTQyOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9FRDBCOEFFMDNENjI1MEQ1OUVGOEU3QkU1 NTZEOTRFQjQ5NDE1NDI5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yZjBkNGI0ZS05Zjc0LTRkZjQtYmY1ZS0wOTI5MDk2ZGJlMDQvMy8zMjYxMzA2 MTNhMzYzMDM0MzQzYTM2MzQzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRGQBMA0GCSqGSIb3DQEBCwUAA4IBAQAx tkCksqHT0RqR5otlKZCdeZfWjGZYcdc3ef0Hu+bR+nb6vY0GJATFNIBYBiS0viW3 WDf768OcczK4ue4KQU1LnnJS+E7nOcThMnwX4bTBfyoHi8wN8PT5D0gJKnhTaGb/ TGW1ECkjIhCbDCO9sJBquKr06M4bdWVowXBUQ+5egboxqVXx+fYYfuA71EYsv85p uVM8CjTVWzejQDBIWe5ViO/qdfj+CYCu5nX7JfmlkbpfckYTerhQ5V866+d3IdWD Cb44W59HijquhiqS5VnTb5AUXs72/mncUDCjdFCX5BBnuuQOV/Lf7qhVHty8lU7W SzTJasgnijXISq+NHWfI -----END CERTIFICATE-----Generated at Fri Jun 6 15:07:51 2025 by rpki-client