$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa File: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (raw, json) Hash identifier: dUzgpny38MghrKpugSdB9dzvd5zDywxo+PBsCyfJHn4= Subject key identifier: 07:17:90:FD:72:9D:C9:09:24:22:A9:B4:ED:8F:70:74:03:37:4D:25 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 2EBEBDFA1FCD6918D31FB0BC11D6439F3E65F3AB Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa Signing time: Sun 20 Oct 2024 00:16:03 +0000 ROA not before: Sun 20 Oct 2024 00:11:03 +0000 ROA not after: Sun 19 Oct 2025 00:16:03 +0000 asID: 208453 IP address blocks: 2a14:1ec7:f00f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 07:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:be:bd:fa:1f:cd:69:18:d3:1f:b0:bc:11:d6:43:9f:3e:65:f3:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Oct 20 00:11:03 2024 GMT Not After : Oct 19 00:16:03 2025 GMT Subject: CN=071790FD729DC9092422A9B4ED8F707403374D25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:97:48:10:16:2e:34:a5:7a:27:98:27:c8:ec: 9d:80:30:00:fc:ca:5e:ca:f5:84:21:b2:1c:e4:fd: 32:51:61:05:55:09:99:8f:ad:af:74:9a:a8:68:98: f7:d4:64:b8:5b:8d:e4:7f:a2:46:2e:9e:59:ea:37: b2:14:4d:7b:87:09:0e:79:e4:e5:c3:cb:26:2f:0c: 45:6c:17:1a:57:bd:77:78:b0:ba:ad:92:df:67:78: a5:de:5a:96:c2:36:2d:a9:10:8a:94:ea:39:b7:03: 55:02:8a:e2:d1:4a:f9:7a:69:6a:c8:2b:a3:de:a0: fb:94:2c:8e:1f:ee:da:b5:cd:58:30:64:d9:02:a2: e1:32:40:39:b4:63:45:29:91:c0:14:bb:cf:c7:71: ce:22:af:70:d6:52:4c:ae:3a:13:a5:98:ec:02:1a: c1:d8:1b:6a:66:d1:2b:39:cb:36:85:c1:0a:d8:f6: 33:45:8a:7d:73:5e:de:25:ef:b4:51:6f:cb:fa:f6: 62:cc:44:37:c3:36:57:4d:ca:dd:13:05:85:98:1e: ca:b8:18:c4:29:7a:87:6a:ba:dc:3a:07:19:5f:20: 8b:15:6a:80:73:1b:50:29:c4:51:2d:48:8c:e1:4d: e9:30:f6:2b:b1:dd:37:55:07:ee:8f:71:a6:d4:94: a3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:17:90:FD:72:9D:C9:09:24:22:A9:B4:ED:8F:70:74:03:37:4D:25 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec7:f00f::/48 Signature Algorithm: sha256WithRSAEncryption 21:b4:47:ec:51:60:cb:d7:c5:c5:82:15:2f:a3:e6:97:10:a3: 5d:0d:eb:f9:d3:9f:e7:94:c7:a2:d1:f4:16:f6:9d:a3:6d:99: e8:7e:08:6b:b1:e7:0c:e8:65:bd:99:52:fb:9c:48:7f:c3:94: 93:ce:72:f5:4e:45:3d:f3:ac:4d:93:63:9d:01:8f:77:e4:f1: b1:9d:1f:21:3f:e9:18:3f:89:aa:7e:7f:4e:bc:cb:4c:8a:14: 60:c4:f2:bb:ad:6d:fe:23:ea:64:2a:65:db:1a:ad:d3:78:aa: 5d:98:79:65:d1:b6:ca:26:92:9f:26:98:32:80:2e:28:b0:b0: 4a:d8:6f:fe:17:02:79:bd:1c:aa:a2:68:a8:ba:f1:0d:f8:5f: 49:58:99:78:a8:a0:87:53:a9:83:90:b7:df:7f:12:15:ba:cf: c2:5f:a0:c1:4e:08:09:18:80:0d:c8:94:e8:f1:a7:12:fe:56: b8:f7:c1:1b:be:42:54:19:cc:03:90:6d:96:50:2e:a6:73:f7: 70:82:00:cd:40:26:60:e0:42:81:3f:4e:4f:9e:98:ee:e5:5f: 04:6b:80:96:2e:f7:d7:b0:97:5d:0a:6a:24:2c:8f:26:78:81: 64:48:da:f3:80:d9:04:dc:c6:b6:3f:13:89:8c:26:5d:50:58: ca:47:aa:0e -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIULr69+h/NaRjTH7C8EdZDnz5l86swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNDEwMjAwMDExMDNaFw0yNTEwMTkwMDE2MDNaMDMxMTAvBgNV BAMTKDA3MTc5MEZENzI5REM5MDkyNDIyQTlCNEVEOEY3MDc0MDMzNzREMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfl0gQFi40pXonmCfI7J2AMAD8 yl7K9YQhshzk/TJRYQVVCZmPra90mqhomPfUZLhbjeR/okYunlnqN7IUTXuHCQ55 5OXDyyYvDEVsFxpXvXd4sLqtkt9neKXeWpbCNi2pEIqU6jm3A1UCiuLRSvl6aWrI K6PeoPuULI4f7tq1zVgwZNkCouEyQDm0Y0UpkcAUu8/Hcc4ir3DWUkyuOhOlmOwC GsHYG2pm0Ss5yzaFwQrY9jNFin1zXt4l77RRb8v69mLMRDfDNldNyt0TBYWYHsq4 GMQpeodqutw6BxlfIIsVaoBzG1ApxFEtSIzhTekw9iux3TdVB+6PcabUlKOXAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUBxeQ/XKdyQkkIqm07Y9wdAM3TSUwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83MTQ3NmQ2Mi05Y2ZhLTQ4NzEtYTJkOS1mYWRmNTc4MWMxMWIvMi8zMjYxMzEz NDNhMzE2NTYzMzczYTY2MzAzMDY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM4MzQzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhQex/APMA0GCSqGSIb3DQEBCwUAA4IBAQAh tEfsUWDL18XFghUvo+aXEKNdDev505/nlMei0fQW9p2jbZnofghrsecM6GW9mVL7 nEh/w5STznL1TkU986xNk2OdAY935PGxnR8hP+kYP4mqfn9OvMtMihRgxPK7rW3+ I+pkKmXbGq3TeKpdmHll0bbKJpKfJpgygC4osLBK2G/+FwJ5vRyqomiouvEN+F9J WJl4qKCHU6mDkLfffxIVus/CX6DBTggJGIANyJTo8acS/la498EbvkJUGcwDkG2W UC6mc/dwggDNQCZg4EKBP05Pnpju5V8Ea4CWLvfXsJddCmokLI8meIFkSNrzgNkE 3Ma2PxOJjCZdUFjKR6oO -----END CERTIFICATE-----Generated at Sun Feb 16 22:08:37 2025 by rpki-client