$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa File: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (raw, json) Hash identifier: nIC6lswk91hjl6KPMQ+RZfHgO+0KGr/fDFoPo3gap1k= Subject key identifier: 10:2C:D8:BC:B8:83:8B:E3:4D:B6:B2:37:9E:46:C0:D8:5B:8A:DA:34 Certificate issuer: /CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3 Certificate serial: 0EF8ED20B31DCDB5CF9BCB4FB1B8001D96EEE3DC Authority key identifier: 3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa Signing time: Sat 01 Mar 2025 17:42:57 +0000 ROA not before: Sat 01 Mar 2025 17:37:57 +0000 ROA not after: Sat 28 Feb 2026 17:42:57 +0000 asID: 6517 IP address blocks: 2a14:7584:4000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Apr 2025 15:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f8:ed:20:b3:1d:cd:b5:cf:9b:cb:4f:b1:b8:00:1d:96:ee:e3:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3 Validity Not Before: Mar 1 17:37:57 2025 GMT Not After : Feb 28 17:42:57 2026 GMT Subject: CN=102CD8BCB8838BE34DB6B2379E46C0D85B8ADA34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:74:6b:36:91:82:13:af:9f:be:23:98:b1:a3: d1:0e:9d:23:d2:4b:d0:fa:48:a6:de:44:c7:2f:08: 93:f6:a4:36:4c:d2:c5:56:6b:9e:68:9c:22:3f:86: 55:ca:8d:62:7c:df:2b:45:e8:75:b1:a5:89:c7:6e: 09:34:b5:48:4b:19:de:f7:6e:c9:a3:00:06:f7:f5: 5a:dc:20:53:34:59:44:86:3f:ca:a2:9d:5a:a1:47: 7b:b8:97:eb:e2:78:1f:71:f0:f5:dc:4f:6d:cd:07: d9:b2:7d:03:e2:c7:e9:68:66:0f:56:cc:06:91:bd: 14:b1:38:b8:59:8c:a0:9b:64:30:d6:19:54:0c:39: 76:f4:48:f3:17:d2:8e:4b:b9:c7:2b:83:be:61:47: 23:82:9e:88:b8:ce:ed:bd:cd:91:ba:97:bd:15:13: 6a:90:1b:08:6c:2c:4e:cc:70:79:c3:c9:6a:86:22: d4:4c:38:aa:3a:f9:f5:61:44:a4:b6:a9:e5:95:cf: 5f:27:54:40:40:3d:07:55:9f:cb:0c:93:ee:eb:da: 11:cd:4e:7f:e3:b0:a5:ed:8f:f7:b2:4f:7e:e1:64: de:1d:3f:b3:af:fc:04:26:87:40:26:78:12:44:86: f8:54:f7:99:e1:74:d0:6c:b6:30:dc:af:6b:71:9a: 01:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2C:D8:BC:B8:83:8B:E3:4D:B6:B2:37:9E:46:C0:D8:5B:8A:DA:34 X509v3 Authority Key Identifier: keyid:3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:4000::/36 Signature Algorithm: sha256WithRSAEncryption 28:71:88:5a:8c:28:fd:42:b7:34:a4:85:17:f6:d5:6f:60:c1: 47:8e:ce:11:8e:e8:ac:18:4b:72:f9:92:d7:b7:9e:5a:a1:ab: f0:a4:b1:fd:a8:5d:a6:9b:de:f3:5f:2e:80:ad:49:91:9e:ad: f7:88:2b:05:4e:7f:26:02:7b:1d:dd:52:b8:15:25:bc:09:7a: 08:f2:45:e4:c9:d3:df:eb:7c:09:33:cd:d6:77:4b:b5:9d:ab: 6b:32:b8:c8:0b:cb:32:bb:39:9f:cc:1b:65:fc:37:1c:97:fa: c4:43:fa:83:3f:31:ac:fd:8c:a0:5a:71:57:28:d4:b4:1b:98: 05:0d:1d:2b:9e:d5:44:3f:ee:81:42:95:11:98:d7:b5:e6:6b: 67:76:93:5b:75:8b:66:be:61:cf:a4:3c:e4:31:92:6d:ca:f2: 33:f5:24:69:1e:39:f6:fd:cf:6d:4e:88:5b:97:0e:a9:c9:8b: e1:7f:7b:79:b5:fd:ff:0d:2e:fd:d1:0f:ac:8e:96:81:0a:07: 76:de:d5:42:96:d5:43:b1:a8:11:b1:e0:ba:38:43:78:62:70: 87:90:ad:2e:09:d3:50:88:31:97:f7:5a:1b:23:20:27:32:59: 91:b1:37:99:16:c0:5a:c7:c7:8a:c9:ba:98:e4:87:19:0b:77: 97:22:3c:2d -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIUDvjtILMdzbXPm8tPsbgAHZbu49wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQkUxNEQwODY4RTM5RTQzRTI3QjU4NTY3NkRGNUI4 MkExMjJFMzAeFw0yNTAzMDExNzM3NTdaFw0yNjAyMjgxNzQyNTdaMDMxMTAvBgNV BAMTKDEwMkNEOEJDQjg4MzhCRTM0REI2QjIzNzlFNDZDMEQ4NUI4QURBMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+dGs2kYITr5++I5ixo9EOnSPS S9D6SKbeRMcvCJP2pDZM0sVWa55onCI/hlXKjWJ83ytF6HWxpYnHbgk0tUhLGd73 bsmjAAb39VrcIFM0WUSGP8qinVqhR3u4l+vieB9x8PXcT23NB9myfQPix+loZg9W zAaRvRSxOLhZjKCbZDDWGVQMOXb0SPMX0o5Luccrg75hRyOCnoi4zu29zZG6l70V E2qQGwhsLE7McHnDyWqGItRMOKo6+fVhRKS2qeWVz18nVEBAPQdVn8sMk+7r2hHN Tn/jsKXtj/eyT37hZN4dP7Ov/AQmh0AmeBJEhvhU95nhdNBstjDcr2txmgE1AgMB AAGjggKAMIICfDAdBgNVHQ4EFgQUECzYvLiDi+NNtrI3nkbA2FuK2jQwHwYDVR0j BBgwFoAUOjvhTQho455D4ntYVnbfW4KhIuMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk NDdhLzEvM0EzQkUxNEQwODY4RTM5RTQzRTI3QjU4NTY3NkRGNUI4MkExMjJFMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zQTNCRTE0RDA4NjhFMzlFNDNFMjdCNTg1 Njc2REY1QjgyQTEyMkUzLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81OWM4M2U1Yy00YjU1LTRhMWEtODAwMy0xYjdlY2M1MWQ0N2EvMS8zMjYxMzEz NDNhMzczNTM4MzQzYTM0MzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzYz NTMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgQqFHWEQDANBgkqhkiG9w0BAQsFAAOCAQEAKHGIWowo /UK3NKSFF/bVb2DBR47OEY7orBhLcvmS17eeWqGr8KSx/ahdppve818ugK1JkZ6t 94grBU5/JgJ7Hd1SuBUlvAl6CPJF5MnT3+t8CTPN1ndLtZ2razK4yAvLMrs5n8wb Zfw3HJf6xEP6gz8xrP2MoFpxVyjUtBuYBQ0dK57VRD/ugUKVEZjXteZrZ3aTW3WL Zr5hz6Q85DGSbcryM/UkaR459v3PbU6IW5cOqcmL4X97ebX9/w0u/dEPrI6WgQoH dt7VQpbVQ7GoEbHgujhDeGJwh5CtLgnTUIgxl/daGyMgJzJZkbE3mRbAWsfHism6 mOSHGQt3lyI8LQ== -----END CERTIFICATE-----Generated at Sun Apr 20 04:25:20 2025 by rpki-client