$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353430303a3a2f33382d3338203d3e20323136343535.roa File: 326130373a353463373a353430303a3a2f33382d3338203d3e20323136343535.roa (raw, json) Hash identifier: WgAgPO7m2PRtW/hhLgCh/LUbstT+o0+84QgZ+UQ8JTY= Subject key identifier: 61:DD:2A:63:F4:A8:58:17:94:6B:1A:F2:93:F0:3B:B2:2E:89:46:47 Certificate issuer: /CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Certificate serial: 6CF69999556D5F9636E4F139C77F688B50250C8F Authority key identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353430303a3a2f33382d3338203d3e20323136343535.roa Signing time: Sat 26 Oct 2024 12:40:40 +0000 ROA not before: Sat 26 Oct 2024 12:35:40 +0000 ROA not after: Sat 25 Oct 2025 12:40:40 +0000 asID: 216455 IP address blocks: 2a07:54c7:5400::/38 maxlen: 38 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f6:99:99:55:6d:5f:96:36:e4:f1:39:c7:7f:68:8b:50:25:0c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Validity Not Before: Oct 26 12:35:40 2024 GMT Not After : Oct 25 12:40:40 2025 GMT Subject: CN=61DD2A63F4A85817946B1AF293F03BB22E894647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:1b:a5:96:07:f1:bd:06:4d:b2:98:a5:ea: 55:1c:75:dc:00:d9:9f:65:db:a7:4f:26:d3:1d:74: df:62:dc:89:19:fe:ff:95:34:d0:8c:74:47:2e:58: 4d:ea:67:fd:65:e1:be:53:f1:61:77:d5:9b:8d:19: d0:8e:bd:90:44:b7:d8:09:28:42:14:3b:6e:7a:88: 9d:c3:e5:29:95:a9:93:cc:84:c6:1a:bb:57:30:f9: d3:03:b6:53:88:66:58:7c:7a:5c:84:a3:f4:2a:45: 5f:fb:3e:09:b6:69:27:f3:88:08:fe:cd:a7:99:0e: 22:83:2e:d0:51:7b:37:dd:a0:e9:91:d4:39:d7:e1: c5:37:bc:e7:29:70:98:fb:15:fa:58:df:aa:4d:4b: 40:46:48:f9:58:78:fb:ba:62:54:7c:15:23:26:04: e1:ff:3a:0d:a6:1a:ee:db:91:9f:f8:11:a1:6e:e0: dc:8f:e2:a5:d6:4a:cd:d7:87:58:c5:48:94:72:59: 43:74:e8:46:08:3b:f4:da:0a:c7:8e:31:01:85:83: 7e:44:a1:15:37:88:3d:cb:55:25:34:07:00:76:02: 74:ec:52:e2:0f:7c:2c:58:73:a0:76:d1:2a:6f:9e: 56:d1:e7:3c:81:f8:db:e4:c8:1b:ce:25:d5:d6:0d: 63:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DD:2A:63:F4:A8:58:17:94:6B:1A:F2:93:F0:3B:B2:2E:89:46:47 X509v3 Authority Key Identifier: keyid:A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353430303a3a2f33382d3338203d3e20323136343535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c7:5400::/38 Signature Algorithm: sha256WithRSAEncryption 0f:d2:22:09:99:88:53:46:8e:77:28:3e:b5:ee:51:c9:b7:2c: 22:07:2c:c1:bb:d0:d8:b6:f8:ed:07:a3:5d:3b:1a:9a:1b:4d: 8b:a5:fe:a4:50:c8:25:0f:c0:ef:40:44:19:97:a1:81:0b:ae: e9:8f:35:81:9f:9b:7d:47:c1:5b:ab:36:73:8f:f7:07:9d:fc: 90:4e:08:bf:e0:e4:86:93:dc:d8:4a:fd:8d:7f:85:41:f0:83: 38:6a:a8:8f:25:fd:18:67:6b:56:aa:5a:eb:62:23:94:08:25: 92:9d:6b:68:95:c0:d1:e6:2a:1f:a2:ae:11:cc:78:16:14:f7: e3:08:db:3e:56:76:10:d4:54:a6:81:d3:17:44:3d:93:ba:61: f2:3d:e0:97:9c:ad:f0:6a:8f:5b:cd:50:b8:df:23:b2:93:02: 80:01:34:e3:fa:8c:81:b5:fa:91:c2:fd:26:14:4c:af:65:7e: 5d:cf:7d:2e:34:51:40:a7:b7:bb:95:2e:f0:6f:8e:b3:f5:58: 9d:3c:ef:9c:77:9d:7b:34:5e:77:1a:2c:48:c6:68:27:f0:ab: 6e:f1:47:de:94:5b:3f:0c:ca:46:50:81:8a:7e:ba:77:8e:a7: 60:92:e6:dc:47:c9:d2:21:59:6c:ea:64:d6:09:c6:a8:e5:9d: 72:cc:0a:bd -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUbPaZmVVtX5Y25PE5x39oi1AlDI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4 M0IyMTlCNTAeFw0yNDEwMjYxMjM1NDBaFw0yNTEwMjUxMjQwNDBaMDMxMTAvBgNV BAMTKDYxREQyQTYzRjRBODU4MTc5NDZCMUFGMjkzRjAzQkIyMkU4OTQ2NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk7hullgfxvQZNspil6lUcddwA 2Z9l26dPJtMddN9i3IkZ/v+VNNCMdEcuWE3qZ/1l4b5T8WF31ZuNGdCOvZBEt9gJ KEIUO256iJ3D5SmVqZPMhMYau1cw+dMDtlOIZlh8elyEo/QqRV/7Pgm2aSfziAj+ zaeZDiKDLtBRezfdoOmR1DnX4cU3vOcpcJj7FfpY36pNS0BGSPlYePu6YlR8FSMm BOH/Og2mGu7bkZ/4EaFu4NyP4qXWSs3Xh1jFSJRyWUN06EYIO/TaCseOMQGFg35E oRU3iD3LVSU0BwB2AnTsUuIPfCxYc6B20SpvnlbR5zyB+NvkyBvOJdXWDWOzAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUYd0qY/SoWBeUaxryk/A7si6JRkcwHwYDVR0j BBgwFoAUqBb9qK3sgIWoo0jmmHCd5YOyGbUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzAvQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4M0IyMTlCNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9BODE2RkRBOEFERUM4MDg1QThBMzQ4RTY5 ODcwOURFNTgzQjIxOUI1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81ODIxYzQ3ZS1lODE1LTQyZGUtYmQ2Yi0xOWEyZTFhZTU2NGEvMC8zMjYxMzAz NzNhMzUzNDYzMzczYTM1MzQzMDMwM2EzYTJmMzMzODJkMzMzODIwM2QzZTIwMzIz MTM2MzQzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYCKgdUx1QwDQYJKoZIhvcNAQELBQADggEBAA/S IgmZiFNGjncoPrXuUcm3LCIHLMG70Ni2+O0Ho107GpobTYul/qRQyCUPwO9ARBmX oYELrumPNYGfm31HwVurNnOP9wed/JBOCL/g5IaT3NhK/Y1/hUHwgzhqqI8l/Rhn a1aqWutiI5QIJZKda2iVwNHmKh+irhHMeBYU9+MI2z5WdhDUVKaB0xdEPZO6YfI9 4JecrfBqj1vNULjfI7KTAoABNOP6jIG1+pHC/SYUTK9lfl3PfS40UUCnt7uVLvBv jrP1WJ0875x3nXs0XncaLEjGaCfwq27xR96UWz8MykZQgYp+uneOp2CS5txHydIh WWzqZNYJxqjlnXLMCr0= -----END CERTIFICATE-----Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org