$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa File: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (raw, json) Hash identifier: 7nhFTtPjQhKd1Ac2yjZIA1kYzFwc8dF19rkGkZd+QFk= Subject key identifier: 74:25:70:20:2A:40:59:1F:07:65:E0:E5:D7:C8:CF:2B:89:1A:0F:6F Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 46902C2036285BFAAADBA8B025E4F902B5742132 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa Signing time: Sat 01 Mar 2025 21:39:02 +0000 ROA not before: Sat 01 Mar 2025 21:34:02 +0000 ROA not after: Sat 28 Feb 2026 21:39:02 +0000 asID: 215171 IP address blocks: 2a14:7581:4940::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 14:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:90:2c:20:36:28:5b:fa:aa:db:a8:b0:25:e4:f9:02:b5:74:21:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Mar 1 21:34:02 2025 GMT Not After : Feb 28 21:39:02 2026 GMT Subject: CN=742570202A40591F0765E0E5D7C8CF2B891A0F6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:7b:f0:0a:48:f0:4b:86:32:5c:ce:0c:81: bf:3d:5b:15:32:a3:0c:b5:d3:73:85:a3:c9:86:7b: a5:f5:76:8d:f7:85:b6:9f:13:ab:43:84:a3:21:04: bb:05:3a:f5:32:bb:22:19:3c:af:4e:37:c0:ad:27: da:ef:29:43:dd:6d:fa:56:06:f2:46:d7:f8:9c:b9: c9:08:e7:5a:53:3b:b6:c1:33:52:c8:99:38:53:01: b3:22:f9:7f:51:0d:5d:cb:92:c4:d3:3f:15:91:3e: 87:69:75:06:3c:e1:8a:c5:37:0a:b2:9a:b1:f7:c4: 55:0e:a6:be:eb:e4:bf:6e:29:a6:26:df:94:59:c0: f7:ee:73:0f:38:08:89:44:1f:f7:30:80:75:8c:36: 39:ee:86:05:0a:0e:b0:76:f0:9d:aa:33:38:e8:73: ca:f4:0f:34:52:08:e1:ad:4f:f3:b5:8f:c5:2a:1c: 49:33:d9:4f:a0:ae:64:f8:e0:20:e2:b9:b1:60:41: 10:ce:e6:08:c4:45:03:e0:1f:12:5c:2c:6e:b0:22: e1:4f:18:3e:ab:e4:65:89:5f:e8:c4:f6:9c:9e:52: 12:26:50:9f:51:3e:e6:64:04:43:36:75:50:9e:f3: cf:30:1f:e3:0f:e4:e6:d2:fc:f2:d6:d4:77:48:c9: ba:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:25:70:20:2A:40:59:1F:07:65:E0:E5:D7:C8:CF:2B:89:1A:0F:6F X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:4940::/44 Signature Algorithm: sha256WithRSAEncryption b8:2a:f4:ea:2e:b9:65:30:65:bb:bb:d7:9a:ee:d4:21:70:92: e5:ea:07:fd:69:87:21:ca:bb:a4:5b:18:36:37:0c:bd:9e:1c: fc:24:c2:09:18:99:5a:40:a1:8f:f7:7a:4d:88:2c:e9:d8:b5: 2a:6d:88:50:00:36:77:f7:ae:f8:12:ea:98:79:eb:f0:24:8f: 70:fb:bf:2b:29:57:52:8e:91:99:69:f8:90:37:14:32:fd:4e: f3:50:12:83:12:7c:b0:65:de:55:eb:b7:08:dc:8e:d7:ea:25: ea:b6:67:d8:f2:0c:29:0d:c7:11:bc:bd:b6:6a:ba:3c:4f:5a: 11:fd:13:d1:f1:1d:24:19:32:7d:23:41:93:bf:48:2d:05:3d: 9f:7a:78:49:00:d4:cb:91:f8:af:65:4b:1c:11:0c:dd:c5:cd: 03:ab:85:80:bd:ee:5f:ac:4c:48:48:f1:42:df:f3:9b:8f:ad: ff:55:86:b2:3d:d9:6f:05:54:6b:87:34:a9:82:ce:76:3a:a2: 52:da:8d:a0:38:a1:e2:da:33:28:62:cc:5d:b3:19:bb:73:cc: d6:f1:05:7a:cf:8f:9c:3d:17:96:53:90:4a:fb:89:44:f9:51: bc:7d:aa:95:92:61:c1:77:ce:62:46:8a:18:7b:8c:e5:41:86: 28:46:23:f4 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIURpAsIDYoW/qq26iwJeT5ArV0ITIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNTAzMDEyMTM0MDJaFw0yNjAyMjgyMTM5MDJaMDMxMTAvBgNV BAMTKDc0MjU3MDIwMkE0MDU5MUYwNzY1RTBFNUQ3QzhDRjJCODkxQTBGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiW3vwCkjwS4YyXM4Mgb89WxUy owy103OFo8mGe6X1do33hbafE6tDhKMhBLsFOvUyuyIZPK9ON8CtJ9rvKUPdbfpW BvJG1/icuckI51pTO7bBM1LImThTAbMi+X9RDV3LksTTPxWRPodpdQY84YrFNwqy mrH3xFUOpr7r5L9uKaYm35RZwPfucw84CIlEH/cwgHWMNjnuhgUKDrB28J2qMzjo c8r0DzRSCOGtT/O1j8UqHEkz2U+grmT44CDiubFgQRDO5gjERQPgHxJcLG6wIuFP GD6r5GWJX+jE9pyeUhImUJ9RPuZkBEM2dVCe888wH+MP5ObS/PLW1HdIybpxAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUdCVwICpAWR8HZeDl18jPK4kaD28wHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz NDNhMzczNTM4MzEzYTM0MzkzNDMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MTM1MzEzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gUlAMA0GCSqGSIb3DQEBCwUAA4IBAQC4 KvTqLrllMGW7u9ea7tQhcJLl6gf9aYchyrukWxg2Nwy9nhz8JMIJGJlaQKGP93pN iCzp2LUqbYhQADZ39674EuqYeevwJI9w+78rKVdSjpGZafiQNxQy/U7zUBKDEnyw Zd5V67cI3I7X6iXqtmfY8gwpDccRvL22aro8T1oR/RPR8R0kGTJ9I0GTv0gtBT2f enhJANTLkfivZUscEQzdxc0Dq4WAve5frExISPFC3/Obj63/VYayPdlvBVRrhzSp gs52OqJS2o2gOKHi2jMoYsxdsxm7c8zW8QV6z4+cPReWU5BK+4lE+VG8faqVkmHB d85iRooYe4zlQYYoRiP0 -----END CERTIFICATE-----Generated at Sat Apr 5 04:35:31 2025 by rpki-client