$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa File: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (raw, json) Hash identifier: 1zLEB1ySqLG6O8dK77EoS7uCQ9LHKZ/5i0AbZm+a9vI= Subject key identifier: A5:E7:CA:15:2E:C9:4A:E6:F9:37:88:CE:AA:0C:62:0C:3E:4F:06:13 Certificate issuer: /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09 Certificate serial: 12BFA77DD6CF8C65A26D99CDC4AF2CCA2468092F Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa Signing time: Wed 21 Aug 2024 13:31:30 +0000 ROA not before: Wed 21 Aug 2024 13:26:30 +0000 ROA not after: Wed 20 Aug 2025 13:31:30 +0000 asID: 8075 IP address blocks: 2a0a:6044:8fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:bf:a7:7d:d6:cf:8c:65:a2:6d:99:cd:c4:af:2c:ca:24:68:09:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09 Validity Not Before: Aug 21 13:26:30 2024 GMT Not After : Aug 20 13:31:30 2025 GMT Subject: CN=A5E7CA152EC94AE6F93788CEAA0C620C3E4F0613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a9:22:5b:ac:57:0e:c5:37:a6:9d:de:b8:43: 2b:a9:42:ae:15:b1:20:75:2d:50:04:09:22:ec:7c: db:2f:79:a2:18:c5:87:6d:de:e1:d8:2e:b4:c8:53: 3c:c0:93:f4:77:ee:f8:1b:30:e7:5b:82:a2:9b:84: cb:8a:4a:17:be:a1:c3:87:98:b6:59:27:df:46:b8: 7f:da:9f:b9:b3:68:0e:69:f7:d5:8d:16:42:08:40: 1c:d4:2d:b3:a0:82:3a:e7:4b:30:85:60:b8:fc:f9: e7:ca:22:8c:7e:63:3b:16:95:76:e4:92:84:0f:b2: 78:df:cb:cf:fd:78:a9:b6:31:a9:da:43:96:dc:54: c9:a3:7d:ef:1c:17:92:18:75:08:14:1f:85:3e:e0: 27:e4:22:db:c0:22:a4:b3:86:33:df:10:08:0c:a2: 42:8a:ba:7c:fa:c7:2b:a5:55:85:6b:dc:b7:b9:de: 31:dd:e1:d9:8e:a5:26:c9:58:81:ab:e0:0c:30:71: 05:54:f9:65:1e:b0:17:ba:ba:fe:82:72:46:4f:da: 10:b5:38:2d:91:3d:77:b2:8d:b3:90:72:58:88:5d: b4:ef:47:92:30:40:11:a5:53:f0:38:58:10:e9:f9: 85:bb:9c:50:b2:9d:90:e5:47:60:68:02:74:20:d2: b3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E7:CA:15:2E:C9:4A:E6:F9:37:88:CE:AA:0C:62:0C:3E:4F:06:13 X509v3 Authority Key Identifier: keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:8fff::/48 Signature Algorithm: sha256WithRSAEncryption 47:dd:85:33:5e:12:6e:12:28:42:d0:aa:01:4d:7e:b6:ed:98: 15:f9:31:77:e8:8b:f6:c1:af:db:29:71:6e:1c:10:3e:d4:6d: fc:29:bd:6b:14:68:e9:37:ce:02:f1:3f:55:a7:67:9a:b6:8b: 0c:dc:1c:11:8f:86:4b:ee:97:aa:ee:c0:dc:36:73:69:92:03: 3b:23:13:63:f8:b2:81:b0:e4:cd:12:84:31:10:f9:16:00:8a: 9a:4f:91:32:a8:15:75:e9:0d:84:5b:0b:5d:e4:89:56:05:9e: e5:a1:b6:28:d4:fb:07:3d:cc:2f:96:3b:88:90:30:78:79:29: 85:3d:f5:e6:1e:82:bb:91:b6:b0:62:84:46:d0:c7:c1:bc:20: 1a:5c:04:11:71:a7:f1:56:0a:d9:20:3b:3b:e2:f7:62:a0:19: c2:7f:16:91:17:80:12:07:4f:c6:51:e5:12:30:76:a0:ed:3f: b0:3c:4c:0b:0b:9b:c7:96:16:a9:45:f8:ec:bc:79:43:ca:2e: 6a:72:d1:28:17:22:6a:1d:04:dc:c2:40:6e:41:82:2c:d5:93: cc:6e:cb:00:cf:d1:b0:1f:be:38:5f:09:a6:14:e1:0b:5a:31: a2:23:c3:e4:a5:6b:56:22:10:17:4c:60:a7:d1:13:9b:74:ad: 1b:da:36:0c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUEr+nfdbPjGWibZnNxK8syiRoCS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIy RkM5MEQwOTAeFw0yNDA4MjExMzI2MzBaFw0yNTA4MjAxMzMxMzBaMDMxMTAvBgNV BAMTKEE1RTdDQTE1MkVDOTRBRTZGOTM3ODhDRUFBMEM2MjBDM0U0RjA2MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOqSJbrFcOxTemnd64QyupQq4V sSB1LVAECSLsfNsveaIYxYdt3uHYLrTIUzzAk/R37vgbMOdbgqKbhMuKShe+ocOH mLZZJ99GuH/an7mzaA5p99WNFkIIQBzULbOggjrnSzCFYLj8+efKIox+YzsWlXbk koQPsnjfy8/9eKm2ManaQ5bcVMmjfe8cF5IYdQgUH4U+4CfkItvAIqSzhjPfEAgM okKKunz6xyulVYVr3Le53jHd4dmOpSbJWIGr4AwwcQVU+WUesBe6uv6CckZP2hC1 OC2RPXeyjbOQcliIXbTvR5IwQBGlU/A4WBDp+YW7nFCynZDlR2BoAnQg0rMDAgMB AAGjggKBMIICfTAdBgNVHQ4EFgQUpefKFS7JSub5N4jOqgxiDD5PBhMwHwYDVR0j BBgwFoAUuJv6hNxa/gUHaggAuWD+oi/JDQkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzEvQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIyRkM5MEQwOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CODlCRkE4NERDNUFGRTA1MDc2QTA4MDBC OTYwRkVBMjJGQzkwRDA5LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2IvMS8zMjYxMzA2 MTNhMzYzMDM0MzQzYTM4NjY2NjY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzgz MDM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAqCmBEj/8wDQYJKoZIhvcNAQELBQADggEBAEfdhTNe Em4SKELQqgFNfrbtmBX5MXfoi/bBr9spcW4cED7UbfwpvWsUaOk3zgLxP1WnZ5q2 iwzcHBGPhkvul6ruwNw2c2mSAzsjE2P4soGw5M0ShDEQ+RYAippPkTKoFXXpDYRb C13kiVYFnuWhtijU+wc9zC+WO4iQMHh5KYU99eYegruRtrBihEbQx8G8IBpcBBFx p/FWCtkgOzvi92KgGcJ/FpEXgBIHT8ZR5RIwdqDtP7A8TAsLm8eWFqlF+Oy8eUPK Lmpy0SgXImodBNzCQG5BgizVk8xuywDP0bAfvjhfCaYU4QtaMaIjw+Sla1YiEBdM YKfRE5t0rRvaNgw= -----END CERTIFICATE-----Generated at Thu Sep 19 10:53:22 2024 by rpki-client on console-fra.rpki-client.org