$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa File: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (raw, json) Hash identifier: gQv5NI8fa+cTBzk0tpepQG6QGKXWkVIlxityrSNAUjQ= Subject key identifier: F5:3F:20:CA:D9:9D:0E:EF:C3:56:B9:BF:11:D4:BF:22:02:E0:A1:51 Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 16097EA50AFADE62DD91333AF9A84D7C101AEB1A Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa Signing time: Mon 24 Feb 2025 06:20:02 +0000 ROA not before: Mon 24 Feb 2025 06:15:02 +0000 ROA not after: Mon 23 Feb 2026 06:20:02 +0000 asID: 9422 IP address blocks: 2a14:7581:4320::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 14:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:09:7e:a5:0a:fa:de:62:dd:91:33:3a:f9:a8:4d:7c:10:1a:eb:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Feb 24 06:15:02 2025 GMT Not After : Feb 23 06:20:02 2026 GMT Subject: CN=F53F20CAD99D0EEFC356B9BF11D4BF2202E0A151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6f:00:45:4d:2a:71:40:97:7f:62:5a:3d:c8: 08:61:01:f3:3a:c1:cd:f5:64:ad:6d:2b:41:b8:cc: 5a:c1:ad:32:c2:58:cb:c7:08:53:c5:e4:d2:c7:fd: d0:52:56:95:67:98:28:9e:e0:e2:4e:94:f6:77:83: ce:7d:43:f8:d2:db:72:70:16:18:ec:5e:47:9b:9a: a3:4e:9f:a6:fd:3f:0f:13:8e:19:68:70:33:6c:cf: 96:df:0b:22:9f:70:f2:5e:a0:d0:28:30:d0:a6:bd: ee:30:f0:32:ba:72:91:89:5a:61:f7:a7:13:61:e5: b2:3b:90:7e:7b:b5:b8:ab:49:41:a2:1a:73:13:06: c7:e4:4d:3d:28:cd:5b:50:63:7f:21:c6:2d:ef:f1: c9:e3:95:3d:69:8d:ff:f0:3b:8f:bd:a7:fb:a6:83: bc:dc:f3:a4:c9:c4:a8:e0:b4:0e:e7:2d:b6:f6:59: d4:f4:fa:68:4c:b6:33:a3:fd:e7:05:c3:c8:7c:0f: 40:30:17:3c:8e:91:8e:ef:19:32:53:f0:65:a6:15: 3c:8e:a4:93:03:37:b2:bd:4f:4b:9c:e9:eb:fa:e3: f9:be:5a:0c:ac:2f:b5:b5:4a:4a:7c:f7:d1:74:1d: 34:17:11:70:e3:c8:33:b9:78:7f:c4:0e:41:f5:69: 81:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3F:20:CA:D9:9D:0E:EF:C3:56:B9:BF:11:D4:BF:22:02:E0:A1:51 X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:4320::/44 Signature Algorithm: sha256WithRSAEncryption 50:63:6d:93:51:39:64:0c:f0:21:64:e7:0f:75:5d:54:1f:a3: 50:b6:28:ba:31:3d:f2:1a:3b:bb:65:60:8f:7c:dc:80:c1:fa: 55:e4:cb:ee:15:59:a0:56:84:0d:49:75:31:36:c8:62:b3:cc: 5a:b1:00:2e:ca:5e:c2:66:3f:54:aa:1a:a3:e8:06:17:ac:bb: db:5e:76:fa:47:80:60:ac:75:7f:45:0e:43:f0:77:c1:55:4d: 50:49:4c:10:b6:4b:33:f8:a0:fc:83:8c:6c:a7:89:08:e5:f7: fa:ea:43:db:38:a2:e8:6f:59:3f:3b:72:ad:f0:ac:6a:26:a2: ed:20:1d:77:42:a3:a2:85:0b:81:7c:6b:d6:f9:b1:0e:57:d8: 8b:b4:33:e2:c4:e1:2d:b9:61:3c:e2:ec:9f:6d:b6:e8:75:6e: 86:1a:e4:32:e6:0a:a9:f3:68:4c:74:e9:e1:80:6f:65:0d:a4: 5f:4e:2d:bf:5b:01:3b:8f:34:85:21:98:a9:43:84:0c:38:d0: 3f:4e:7b:a5:49:85:c3:14:42:19:c3:4e:bc:0f:5d:d2:11:66: d8:58:61:f3:8c:da:26:71:76:01:a6:5b:9a:e1:c9:bc:08:fe: c2:92:37:f1:c5:98:3a:4d:ac:0c:52:5f:e2:1a:1a:f2:65:e9: 42:34:32:f6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUFgl+pQr63mLdkTM6+ahNfBAa6xowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNTAyMjQwNjE1MDJaFw0yNjAyMjMwNjIwMDJaMDMxMTAvBgNV BAMTKEY1M0YyMENBRDk5RDBFRUZDMzU2QjlCRjExRDRCRjIyMDJFMEExNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwbwBFTSpxQJd/Ylo9yAhhAfM6 wc31ZK1tK0G4zFrBrTLCWMvHCFPF5NLH/dBSVpVnmCie4OJOlPZ3g859Q/jS23Jw FhjsXkebmqNOn6b9Pw8TjhlocDNsz5bfCyKfcPJeoNAoMNCmve4w8DK6cpGJWmH3 pxNh5bI7kH57tbirSUGiGnMTBsfkTT0ozVtQY38hxi3v8cnjlT1pjf/wO4+9p/um g7zc86TJxKjgtA7nLbb2WdT0+mhMtjOj/ecFw8h8D0AwFzyOkY7vGTJT8GWmFTyO pJMDN7K9T0uc6ev64/m+WgysL7W1Skp899F0HTQXEXDjyDO5eH/EDkH1aYEDAgMB AAGjggKBMIICfTAdBgNVHQ4EFgQU9T8gytmdDu/DVrm/EdS/IgLgoVEwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz NDNhMzczNTM4MzEzYTM0MzMzMjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzkz NDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwQqFHWBQyAwDQYJKoZIhvcNAQELBQADggEBAFBjbZNR OWQM8CFk5w91XVQfo1C2KLoxPfIaO7tlYI983IDB+lXky+4VWaBWhA1JdTE2yGKz zFqxAC7KXsJmP1SqGqPoBhesu9tedvpHgGCsdX9FDkPwd8FVTVBJTBC2SzP4oPyD jGyniQjl9/rqQ9s4ouhvWT87cq3wrGomou0gHXdCo6KFC4F8a9b5sQ5X2Iu0M+LE 4S25YTzi7J9ttuh1boYa5DLmCqnzaEx06eGAb2UNpF9OLb9bATuPNIUhmKlDhAw4 0D9Oe6VJhcMUQhnDTrwPXdIRZthYYfOM2iZxdgGmW5rhybwI/sKSN/HFmDpNrAxS X+IaGvJl6UI0MvY= -----END CERTIFICATE-----Generated at Sat Apr 5 04:34:25 2025 by rpki-client