$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa File: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (raw, json) Hash identifier: J8io8U0XPUuDsKGS242FyC3RGJyS4nfWqlR7rVI4fs4= Subject key identifier: 25:A6:E8:84:E1:7C:1C:14:28:9F:38:3A:0F:5E:AF:E7:7B:CA:8F:F6 Certificate issuer: /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC Certificate serial: 1EE4EB3740AF53EB5726BF155DE5FBFE67F714DE Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa Signing time: Fri 11 Apr 2025 01:21:10 +0000 ROA not before: Fri 11 Apr 2025 01:16:10 +0000 ROA not after: Fri 10 Apr 2026 01:21:10 +0000 asID: 8075 IP address blocks: 2a0a:6044:8fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 06:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e4:eb:37:40:af:53:eb:57:26:bf:15:5d:e5:fb:fe:67:f7:14:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC Validity Not Before: Apr 11 01:16:10 2025 GMT Not After : Apr 10 01:21:10 2026 GMT Subject: CN=25A6E884E17C1C14289F383A0F5EAFE77BCA8FF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d9:0e:8a:05:16:ff:cb:8e:e3:45:73:eb:a0: 34:af:f8:56:51:21:08:ed:d7:c5:77:f3:aa:92:14: 18:ef:3d:3c:dd:fe:7d:d5:8e:b2:b5:f3:46:ee:ae: 59:13:92:c6:0f:49:50:0b:dc:09:97:a8:06:58:db: 2c:66:7b:ca:fd:b8:50:c8:73:25:e5:5e:ef:55:96: c7:f4:ba:03:ba:58:fc:b1:9f:3e:50:8e:43:3c:59: 77:3b:4f:91:fe:2c:40:98:5e:d6:e1:9d:ca:ad:a6: e4:f3:d5:e4:ce:50:6c:e5:ef:db:c0:70:57:cd:82: d8:0a:39:9b:5c:f4:32:49:b2:a9:51:b9:95:d5:cc: 69:84:5a:12:e7:04:d1:8e:7e:07:b4:34:96:c0:d5: f0:97:e1:11:14:db:b3:99:22:e0:7e:5f:87:f4:4b: 63:96:9a:a7:a1:0d:fb:88:80:df:70:18:21:3f:5f: 4e:21:e6:27:d9:aa:35:b8:7c:68:c1:56:6e:cf:a5: da:58:fd:0e:b0:b1:cc:43:30:81:c8:03:09:8b:46: c0:7e:3c:c2:6b:78:d6:2c:bc:c5:90:65:6e:e4:20: 95:ed:97:b2:bf:2f:af:7c:26:8a:38:2d:3f:25:5a: 7f:e1:6b:f6:04:a8:ce:1e:aa:70:0e:16:00:77:53: fb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A6:E8:84:E1:7C:1C:14:28:9F:38:3A:0F:5E:AF:E7:7B:CA:8F:F6 X509v3 Authority Key Identifier: keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:8fff::/48 Signature Algorithm: sha256WithRSAEncryption 05:54:39:4a:a0:c4:85:56:68:f1:0d:98:b8:c0:f3:65:fe:85: 9d:a8:70:fd:0d:5f:8e:a5:da:97:02:0e:7f:fe:e7:01:91:3b: 0f:8e:0b:4a:e4:d5:ab:41:4e:18:ad:ed:a7:7e:90:2d:86:5e: 04:e5:6e:18:8f:d8:c9:92:68:0d:be:90:50:fd:a3:dc:d0:48: 4f:af:22:99:2c:b8:2c:ed:5b:44:f3:a4:cb:42:fe:dd:fb:55: 82:61:3b:9b:85:c2:f2:b0:58:f0:47:8a:ed:ae:af:55:1b:1b: 5c:4d:6d:ad:12:7b:b5:f2:68:26:84:b5:f2:eb:4b:e3:ad:32: 74:9d:27:54:9e:cd:6c:25:60:ad:5a:15:a8:fe:93:11:83:14: 70:82:a3:21:61:74:b7:38:53:6f:23:c5:88:02:d1:9d:ac:c5: bd:fb:97:9a:f8:76:98:8d:4c:6a:b8:d9:12:32:0e:a5:f6:41: 9b:d2:ad:3b:cb:24:31:3f:98:c8:eb:79:72:86:53:24:52:3b: a1:a6:e9:4d:27:ea:e5:02:cd:5c:52:eb:2b:cf:81:93:13:b5: 9f:81:04:5a:6f:f0:f9:9d:9b:fa:e6:87:ab:9c:62:e1:20:36: 30:f2:95:5a:93:7d:d1:61:8a:68:42:33:08:7f:cc:c9:67:7c: 30:4f:db:ce -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUHuTrN0CvU+tXJr8VXeX7/mf3FN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM4OEFGNjI5QzcwMkREQTg4RkE2QkIyQTk1NURCOEYy NEVEMkJCQzAeFw0yNTA0MTEwMTE2MTBaFw0yNjA0MTAwMTIxMTBaMDMxMTAvBgNV BAMTKDI1QTZFODg0RTE3QzFDMTQyODlGMzgzQTBGNUVBRkU3N0JDQThGRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN2Q6KBRb/y47jRXProDSv+FZR IQjt18V386qSFBjvPTzd/n3VjrK180burlkTksYPSVAL3AmXqAZY2yxme8r9uFDI cyXlXu9Vlsf0ugO6WPyxnz5QjkM8WXc7T5H+LECYXtbhncqtpuTz1eTOUGzl79vA cFfNgtgKOZtc9DJJsqlRuZXVzGmEWhLnBNGOfge0NJbA1fCX4REU27OZIuB+X4f0 S2OWmqehDfuIgN9wGCE/X04h5ifZqjW4fGjBVm7PpdpY/Q6wscxDMIHIAwmLRsB+ PMJreNYsvMWQZW7kIJXtl7K/L698Joo4LT8lWn/ha/YEqM4eqnAOFgB3U/uXAgMB AAGjggKBMIICfTAdBgNVHQ4EFgQUJabohOF8HBQonzg6D16v53vKj/YwHwYDVR0j BBgwFoAUQ4ivYpxwLdqI+muyqVXbjyTtK7wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzQvNDM4OEFGNjI5QzcwMkREQTg4RkE2QkIyQTk1NURCOEYyNEVEMkJCQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy80Mzg4QUY2MjlDNzAyRERBODhGQTZCQjJB OTU1REI4RjI0RUQyQkJDLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2IvNC8zMjYxMzA2 MTNhMzYzMDM0MzQzYTM4NjY2NjY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzgz MDM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAqCmBEj/8wDQYJKoZIhvcNAQELBQADggEBAAVUOUqg xIVWaPENmLjA82X+hZ2ocP0NX46l2pcCDn/+5wGROw+OC0rk1atBThit7ad+kC2G XgTlbhiP2MmSaA2+kFD9o9zQSE+vIpksuCztW0TzpMtC/t37VYJhO5uFwvKwWPBH iu2ur1UbG1xNba0Se7XyaCaEtfLrS+OtMnSdJ1SezWwlYK1aFaj+kxGDFHCCoyFh dLc4U28jxYgC0Z2sxb37l5r4dpiNTGq42RIyDqX2QZvSrTvLJDE/mMjreXKGUyRS O6Gm6U0n6uUCzVxS6yvPgZMTtZ+BBFpv8Pmdm/rmh6ucYuEgNjDylVqTfdFhimhC Mwh/zMlnfDBP284= -----END CERTIFICATE-----Generated at Wed Jun 4 22:33:10 2025 by rpki-client