$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa File: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (raw, json) Hash identifier: om6MZdplPIcdMRLg/3Q5DKtj7YbX8M+yf1GQW3Oq+ZQ= Subject key identifier: 12:B9:63:CB:70:8F:59:7B:91:B3:AC:E2:36:61:D2:DF:D3:E6:DA:16 Certificate issuer: /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC Certificate serial: 3585F8D0070F8B40EFB67D9570B4C2E2A6BB85F5 Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa Signing time: Wed 12 Feb 2025 09:21:08 +0000 ROA not before: Wed 12 Feb 2025 09:16:08 +0000 ROA not after: Wed 11 Feb 2026 09:21:08 +0000 asID: 8075 IP address blocks: 2a0a:6044:8fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 06:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:85:f8:d0:07:0f:8b:40:ef:b6:7d:95:70:b4:c2:e2:a6:bb:85:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC Validity Not Before: Feb 12 09:16:08 2025 GMT Not After : Feb 11 09:21:08 2026 GMT Subject: CN=12B963CB708F597B91B3ACE23661D2DFD3E6DA16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:24:4b:7a:c8:0a:d4:f7:b5:71:e7:46:3b: f0:d4:b6:f3:d0:66:d5:3a:ba:a3:b5:6f:4c:89:0d: 16:79:9c:c2:b2:2e:73:6e:e5:0c:e9:fb:7f:42:12: f0:aa:af:e8:7a:3f:f8:59:a6:5c:c7:6c:67:a7:94: 8b:51:e2:b6:c2:7c:b0:93:c9:10:5a:40:ec:65:b2: b1:a2:5c:89:a3:52:21:e1:01:5c:61:52:49:7f:49: 45:12:4c:08:37:73:0b:22:5f:e2:e8:f0:e7:f9:c0: be:1b:2f:63:f7:ff:f4:39:a8:41:34:a1:c5:9c:6c: 80:66:97:50:a8:28:ff:7a:8f:c1:63:a7:d3:83:ef: 55:07:96:d1:15:cb:46:7f:37:b2:5b:8e:06:39:62: b8:61:c9:c6:fd:af:2e:ef:7f:e8:c7:30:a0:70:9e: 77:61:d1:0e:a9:e4:e9:1d:31:c7:36:41:66:c1:64: 9b:70:12:76:aa:77:bd:e3:7e:1e:a5:ba:97:dd:39: 2d:6b:e7:96:a7:fa:41:63:9e:30:9b:1e:4d:06:c8: ef:96:4f:be:3a:a4:7e:19:3f:cc:17:d3:d1:c0:31: b5:0c:a5:98:77:d3:16:14:e9:15:97:51:09:16:b5: a1:42:9b:ec:7d:1a:f5:68:db:f3:2d:33:26:ad:cf: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B9:63:CB:70:8F:59:7B:91:B3:AC:E2:36:61:D2:DF:D3:E6:DA:16 X509v3 Authority Key Identifier: keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:8fff::/48 Signature Algorithm: sha256WithRSAEncryption 4a:e1:56:ff:00:af:01:18:7c:81:27:0f:86:e0:a9:98:b6:d3: 0d:90:ed:16:3c:84:dd:a5:5c:03:95:be:40:49:ba:58:50:ed: 95:82:19:56:ac:44:d9:e8:f1:07:2b:1b:ef:18:ec:1a:53:e4: 61:d3:52:fe:6d:5c:ae:50:29:e8:6b:5a:8a:e4:ff:bd:c4:31: c9:74:a2:ab:55:7d:91:05:bd:7d:f3:75:8a:57:ca:16:81:06: fc:f7:22:d0:02:89:43:5b:9f:cc:31:31:e3:3f:9f:15:9c:57: a7:2c:65:65:31:78:6d:95:30:9c:2d:6d:24:c3:22:4e:5e:29: 34:5b:cf:20:12:a1:19:14:41:09:e0:50:6a:fa:7e:42:2f:34: 11:50:78:0c:de:f5:d7:b6:93:02:a2:3c:d3:1e:9b:9f:54:32: 24:f8:6e:45:0a:a1:86:7e:f7:d5:22:f2:54:17:ef:4b:b5:56: 6b:91:c2:22:6f:22:0f:7d:b7:33:11:3b:6c:56:f7:8f:6d:5a: d9:e5:40:df:0b:7c:59:a9:65:2b:d4:75:f4:c3:bc:7d:43:60: b9:58:e5:de:1a:c5:bd:0a:4e:e1:ca:ce:2f:14:c5:e6:32:f7: 48:57:80:be:d8:55:30:2e:46:34:97:6c:e2:f5:19:ef:19:ba: e4:a3:a5:2c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUNYX40AcPi0Dvtn2VcLTC4qa7hfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM4OEFGNjI5QzcwMkREQTg4RkE2QkIyQTk1NURCOEYy NEVEMkJCQzAeFw0yNTAyMTIwOTE2MDhaFw0yNjAyMTEwOTIxMDhaMDMxMTAvBgNV BAMTKDEyQjk2M0NCNzA4RjU5N0I5MUIzQUNFMjM2NjFEMkRGRDNFNkRBMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxSRLesgK1Pe1cedGO/DUtvPQ ZtU6uqO1b0yJDRZ5nMKyLnNu5Qzp+39CEvCqr+h6P/hZplzHbGenlItR4rbCfLCT yRBaQOxlsrGiXImjUiHhAVxhUkl/SUUSTAg3cwsiX+Lo8Of5wL4bL2P3//Q5qEE0 ocWcbIBml1CoKP96j8Fjp9OD71UHltEVy0Z/N7JbjgY5Yrhhycb9ry7vf+jHMKBw nndh0Q6p5OkdMcc2QWbBZJtwEnaqd73jfh6lupfdOS1r55an+kFjnjCbHk0GyO+W T746pH4ZP8wX09HAMbUMpZh30xYU6RWXUQkWtaFCm+x9GvVo2/MtMyatz39DAgMB AAGjggKBMIICfTAdBgNVHQ4EFgQUErljy3CPWXuRs6ziNmHS39Pm2hYwHwYDVR0j BBgwFoAUQ4ivYpxwLdqI+muyqVXbjyTtK7wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzQvNDM4OEFGNjI5QzcwMkREQTg4RkE2QkIyQTk1NURCOEYyNEVEMkJCQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy80Mzg4QUY2MjlDNzAyRERBODhGQTZCQjJB OTU1REI4RjI0RUQyQkJDLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2IvNC8zMjYxMzA2 MTNhMzYzMDM0MzQzYTM4NjY2NjY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzgz MDM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAqCmBEj/8wDQYJKoZIhvcNAQELBQADggEBAErhVv8A rwEYfIEnD4bgqZi20w2Q7RY8hN2lXAOVvkBJulhQ7ZWCGVasRNno8QcrG+8Y7BpT 5GHTUv5tXK5QKehrWork/73EMcl0oqtVfZEFvX3zdYpXyhaBBvz3ItACiUNbn8wx MeM/nxWcV6csZWUxeG2VMJwtbSTDIk5eKTRbzyASoRkUQQngUGr6fkIvNBFQeAze 9de2kwKiPNMem59UMiT4bkUKoYZ+99Ui8lQX70u1VmuRwiJvIg99tzMRO2xW949t WtnlQN8LfFmpZSvUdfTDvH1DYLlY5d4axb0KTuHKzi8UxeYy90hXgL7YVTAuRjSX bOL1Ge8ZuuSjpSw= -----END CERTIFICATE-----Generated at Fri Apr 4 20:19:01 2025 by rpki-client