$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230303a3a2f34302d3438203d3e203538323132.roa File: 326130363a313238333a386230303a3a2f34302d3438203d3e203538323132.roa (raw, json) Hash identifier: gPJ2xtgaJ2u1CChDcJQcPQZ6ELKiSlG4etMyKHn7PrU= Subject key identifier: 4B:D9:1B:38:D9:8C:3B:E4:76:69:00:F3:49:65:BD:0B:D6:1D:51:86 Certificate issuer: /CN=B6366F3DD14AC5399103961C30642E6779892C6C Certificate serial: 1724F53F8B7E8AE6C0EC727670BCE9E10CE01365 Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230303a3a2f34302d3438203d3e203538323132.roa Signing time: Thu 13 Feb 2025 21:39:23 +0000 ROA not before: Thu 13 Feb 2025 21:34:23 +0000 ROA not after: Thu 12 Feb 2026 21:39:23 +0000 asID: 58212 IP address blocks: 2a06:1283:8b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Mar 2025 17:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:24:f5:3f:8b:7e:8a:e6:c0:ec:72:76:70:bc:e9:e1:0c:e0:13:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C Validity Not Before: Feb 13 21:34:23 2025 GMT Not After : Feb 12 21:39:23 2026 GMT Subject: CN=4BD91B38D98C3BE4766900F34965BD0BD61D5186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:44:02:55:d3:34:95:2d:8d:8a:2a:c0:a2:83: 28:09:82:5e:93:de:2d:a0:a9:0e:1f:67:5c:d8:91: b2:0b:bf:3a:52:e3:64:fd:3e:0d:8d:6f:f1:aa:c3: ba:af:21:d0:c1:2b:64:25:52:a8:39:43:d1:f8:72: 7c:36:4c:a4:61:31:b2:89:66:c1:2b:6f:e4:de:91: 2e:05:0a:d0:ab:c5:79:fb:ba:85:c0:8c:dc:aa:ed: 8a:79:89:a7:a3:55:be:5e:01:d3:c3:2b:c4:e3:0a: c2:c1:9a:85:16:41:b9:67:88:7b:ca:c9:9c:d2:d9: 04:c5:c8:7b:32:e6:ae:60:d0:6f:63:c4:f5:0d:ff: 4b:41:9d:b0:57:45:14:6c:75:7c:2a:1b:ea:8a:7c: a8:a8:52:8f:75:89:c9:e6:59:b5:55:77:57:5b:e1: 70:06:44:37:9c:9a:ef:f6:29:e0:d4:4d:36:78:ec: a2:95:24:ff:49:63:5c:ea:e3:57:f9:03:6e:3d:97: 8d:dd:47:5d:26:84:d6:7b:57:39:49:c7:d5:ef:4b: c8:94:aa:46:8b:24:eb:0c:8e:52:39:a1:aa:74:2a: 01:95:b7:3b:e2:64:d1:b9:6a:f5:2e:17:03:eb:88: 9a:77:fa:d9:b0:13:81:20:56:4a:39:54:db:94:2f: 08:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D9:1B:38:D9:8C:3B:E4:76:69:00:F3:49:65:BD:0B:D6:1D:51:86 X509v3 Authority Key Identifier: keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230303a3a2f34302d3438203d3e203538323132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8b00::/40 Signature Algorithm: sha256WithRSAEncryption 8b:e7:59:76:bf:2a:60:e4:00:e2:c3:7a:4f:e5:be:cd:95:a7: 4d:e0:61:64:5f:ab:06:c8:e6:ce:76:5b:af:b3:5b:b5:44:af: df:e1:52:c7:03:fb:04:b0:fe:7e:60:2f:2c:9a:79:27:49:71: bc:bf:a9:52:bd:56:ca:74:59:54:ef:62:a5:00:44:78:cf:75: db:74:28:66:b5:dd:4f:92:27:29:1b:fd:1f:dd:0c:ba:e2:a7: 07:f3:53:2a:ce:7f:86:71:98:c9:5f:dc:e3:20:45:99:6c:61: 31:3d:dc:8b:c5:26:10:55:b9:d4:46:d3:e7:75:9a:3d:b3:fd: 7d:af:0d:ac:d5:26:0b:1a:2a:22:4b:02:94:51:2f:4d:fd:4d: 4e:f2:67:8f:73:d7:71:2c:84:28:85:14:30:d5:58:70:e7:e0: 36:46:51:e4:9f:d5:cc:87:86:04:9a:06:21:92:c7:f6:96:6f: cb:24:54:3b:c2:a0:f1:07:11:06:0e:d8:b7:57:0a:8e:e6:22: 8e:c5:eb:cb:29:cc:04:08:82:81:e5:66:d5:e4:bb:5e:5d:2c: 10:9b:45:78:ec:7e:ed:60:3a:e6:17:1d:1a:52:7b:fd:40:21: a8:20:ce:ad:f8:65:77:6d:90:40:2c:47:76:6b:17:e1:9f:2b: 7c:7c:cb:53 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFyT1P4t+iubA7HJ2cLzp4QzgE2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3 OTg5MkM2QzAeFw0yNTAyMTMyMTM0MjNaFw0yNjAyMTIyMTM5MjNaMDMxMTAvBgNV BAMTKDRCRDkxQjM4RDk4QzNCRTQ3NjY5MDBGMzQ5NjVCRDBCRDYxRDUxODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRRAJV0zSVLY2KKsCigygJgl6T 3i2gqQ4fZ1zYkbILvzpS42T9Pg2Nb/Gqw7qvIdDBK2QlUqg5Q9H4cnw2TKRhMbKJ ZsErb+TekS4FCtCrxXn7uoXAjNyq7Yp5iaejVb5eAdPDK8TjCsLBmoUWQblniHvK yZzS2QTFyHsy5q5g0G9jxPUN/0tBnbBXRRRsdXwqG+qKfKioUo91icnmWbVVd1db 4XAGRDecmu/2KeDUTTZ47KKVJP9JY1zq41f5A249l43dR10mhNZ7VzlJx9XvS8iU qkaLJOsMjlI5oap0KgGVtzviZNG5avUuFwPriJp3+tmwE4EgVko5VNuULwjrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUS9kbONmMO+R2aQDzSWW9C9YdUYYwHwYDVR0j BBgwFoAUtjZvPdFKxTmRA5YcMGQuZ3mJLGwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzIvQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3OTg5MkM2Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvMS9CNjM2NkYzREQxNEFDNTM5OTEwMzk2MUMz MDY0MkU2Nzc5ODkyQzZDLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjIzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzUz ODMyMzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoGEoOLMA0GCSqGSIb3DQEBCwUAA4IBAQCL51l2 vypg5ADiw3pP5b7NladN4GFkX6sGyObOdluvs1u1RK/f4VLHA/sEsP5+YC8smnkn SXG8v6lSvVbKdFlU72KlAER4z3XbdChmtd1PkicpG/0f3Qy64qcH81Mqzn+GcZjJ X9zjIEWZbGExPdyLxSYQVbnURtPndZo9s/19rw2s1SYLGioiSwKUUS9N/U1O8meP c9dxLIQohRQw1Vhw5+A2RlHkn9XMh4YEmgYhksf2lm/LJFQ7wqDxBxEGDti3VwqO 5iKOxevLKcwECIKB5WbV5LteXSwQm0V47H7tYDrmFx0aUnv9QCGoIM6t+GV3bZBA LEd2axfhnyt8fMtT -----END CERTIFICATE-----Generated at Thu Mar 13 06:28:19 2025 by rpki-client