$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030303a3a2f34342d3434203d3e20323134333132.roa File: 326130393a353463363a653030303a3a2f34342d3434203d3e20323134333132.roa (raw, json) Hash identifier: SDGFWvdjwoQDV5sjUu9wcCdgV8Ue9K9EafE6PeuXcDg= Subject key identifier: F4:D3:B0:7D:55:C1:46:13:2C:CA:DC:A1:BD:3B:88:98:E5:CF:47:68 Certificate issuer: /CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40 Certificate serial: 755F6A8E729C80FE49927DBBAB7C427EEEC40B90 Authority key identifier: 1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030303a3a2f34342d3434203d3e20323134333132.roa Signing time: Mon 09 Sep 2024 19:52:23 +0000 ROA not before: Mon 09 Sep 2024 19:47:23 +0000 ROA not after: Mon 08 Sep 2025 19:52:23 +0000 asID: 214312 IP address blocks: 2a09:54c6:e000::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.crl rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:5f:6a:8e:72:9c:80:fe:49:92:7d:bb:ab:7c:42:7e:ee:c4:0b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40 Validity Not Before: Sep 9 19:47:23 2024 GMT Not After : Sep 8 19:52:23 2025 GMT Subject: CN=F4D3B07D55C146132CCADCA1BD3B8898E5CF4768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ed:69:b3:b0:19:99:02:a9:e5:b1:35:c4:90: b2:60:f5:83:c6:95:26:aa:46:d3:70:4e:6f:8f:3c: 20:46:53:a3:b7:1f:db:d3:90:bd:98:3b:d3:57:2f: 95:20:7d:5b:42:18:b4:62:06:03:b1:12:89:75:4a: 4d:50:11:c1:8a:dd:bf:4c:5b:a7:f5:74:b5:2b:dd: dc:8d:aa:71:46:c7:93:16:f3:6c:a9:be:43:20:03: 28:6f:b1:7c:51:d9:b5:11:13:f7:5a:a9:e3:2b:f7: 93:08:2c:38:70:4f:d9:59:46:c2:ec:53:5b:75:d6: d3:e7:c8:6c:3f:58:ed:d1:00:08:46:12:56:63:30: 4b:a3:b7:2d:f0:ba:df:45:b5:66:b2:54:4b:a0:43: b6:c9:6f:e3:9b:47:2c:e8:2d:cc:e1:d9:02:56:2f: 3a:87:33:18:4c:19:32:0f:89:01:cb:1d:b7:ef:1d: 51:0b:83:e5:3c:63:4a:0b:91:d6:13:1e:f1:22:a6: 7d:ef:14:cb:f0:05:4a:a3:f3:ff:29:91:08:a4:8a: f9:55:ba:78:78:f0:8e:e0:c9:b0:4c:82:c2:34:95: 59:4b:ec:51:6b:b2:7a:6a:c6:a8:ed:d6:86:8f:e0: 8b:de:d5:d8:e8:a8:71:60:31:e0:71:68:89:85:5a: a9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D3:B0:7D:55:C1:46:13:2C:CA:DC:A1:BD:3B:88:98:E5:CF:47:68 X509v3 Authority Key Identifier: keyid:1D:A3:1F:62:E9:7F:E6:A2:A3:8D:8F:39:84:FE:D6:E3:13:D1:BC:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1DA31F62E97FE6A2A38D8F3984FED6E313D1BC40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/1/326130393a353463363a653030303a3a2f34342d3434203d3e20323134333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:e000::/44 Signature Algorithm: sha256WithRSAEncryption 5c:b9:39:b0:5e:ba:17:2b:28:58:9e:10:63:4f:8f:91:e3:5b: 4f:11:cf:d5:09:6e:18:7d:d6:4d:d0:a5:30:7d:30:ac:a9:88: 93:af:40:c0:15:ff:23:fb:3a:51:60:35:7f:ff:f1:39:5b:20: eb:b7:45:67:d7:63:c5:e9:9d:dc:1a:8b:24:7f:ec:22:63:7b: cd:df:cb:b8:4d:60:cc:c1:ce:5f:3d:07:82:bf:9e:5e:b8:35: f2:31:4b:32:64:0d:dd:17:54:bb:76:f7:b1:f3:6f:25:93:bb: 14:6b:81:f9:9c:80:c5:a0:0d:03:b4:30:5e:d8:85:3a:b2:30: 96:b1:a6:1a:9e:8b:dd:e6:00:f4:bc:4c:b2:c5:3f:e3:19:27: 78:05:88:6e:c4:1d:03:2c:78:ff:b2:a9:f2:c3:ea:77:b1:e1: 3e:5f:27:89:a5:b8:c5:96:7a:61:cb:9d:10:97:af:66:c3:56: 2b:b5:5c:6d:e7:92:ec:66:f9:7c:13:30:e7:b7:d6:de:a7:c7: ba:f2:2c:90:40:a8:23:b7:15:cb:87:de:4d:84:f1:c2:98:7a: d5:73:bf:eb:45:4d:91:4b:48:b7:b0:19:c6:36:00:50:48:5c: 8e:ad:5a:e1:82:c6:9c:cf:1e:76:97:b8:37:7d:20:a6:8b:02: 00:78:51:65 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUdV9qjnKcgP5Jkn27q3xCfu7EC5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURBMzFGNjJFOTdGRTZBMkEzOEQ4RjM5ODRGRUQ2RTMx M0QxQkM0MDAeFw0yNDA5MDkxOTQ3MjNaFw0yNTA5MDgxOTUyMjNaMDMxMTAvBgNV BAMTKEY0RDNCMDdENTVDMTQ2MTMyQ0NBRENBMUJEM0I4ODk4RTVDRjQ3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7WmzsBmZAqnlsTXEkLJg9YPG lSaqRtNwTm+PPCBGU6O3H9vTkL2YO9NXL5UgfVtCGLRiBgOxEol1Sk1QEcGK3b9M W6f1dLUr3dyNqnFGx5MW82ypvkMgAyhvsXxR2bURE/daqeMr95MILDhwT9lZRsLs U1t11tPnyGw/WO3RAAhGElZjMEujty3wut9FtWayVEugQ7bJb+ObRyzoLczh2QJW LzqHMxhMGTIPiQHLHbfvHVELg+U8Y0oLkdYTHvEipn3vFMvwBUqj8/8pkQikivlV unh48I7gybBMgsI0lVlL7FFrsnpqxqjt1oaP4Ive1djoqHFgMeBxaImFWql7AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU9NOwfVXBRhMsytyhvTuImOXPR2gwHwYDVR0j BBgwFoAUHaMfYul/5qKjjY85hP7W4xPRvEAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTU2NjQ0M2ItZGZmNC00ZDEzLWJiODEtNzJjODYzMGQ2 ZGY2LzEvMURBMzFGNjJFOTdGRTZBMkEzOEQ4RjM5ODRGRUQ2RTMxM0QxQkM0MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8xREEzMUY2MkU5N0ZFNkEyQTM4RDhGMzk4 NEZFRDZFMzEzRDFCQzQwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85NTY2NDQzYi1kZmY0LTRkMTMtYmI4MS03MmM4NjMwZDZkZjYvMS8zMjYxMzAz OTNhMzUzNDYzMzYzYTY1MzAzMDMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MTM0MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKglUxuAAMA0GCSqGSIb3DQEBCwUAA4IBAQBc uTmwXroXKyhYnhBjT4+R41tPEc/VCW4YfdZN0KUwfTCsqYiTr0DAFf8j+zpRYDV/ //E5WyDrt0Vn12PF6Z3cGoskf+wiY3vN38u4TWDMwc5fPQeCv55euDXyMUsyZA3d F1S7dvex828lk7sUa4H5nIDFoA0DtDBe2IU6sjCWsaYanovd5gD0vEyyxT/jGSd4 BYhuxB0DLHj/sqnyw+p3seE+XyeJpbjFlnphy50Ql69mw1YrtVxt55LsZvl8EzDn t9bep8e68iyQQKgjtxXLh95NhPHCmHrVc7/rRU2RS0i3sBnGNgBQSFyOrVrhgsac zx52l7g3fSCmiwIAeFFl -----END CERTIFICATE-----Generated at Thu Sep 19 10:53:22 2024 by rpki-client on console-fra.rpki-client.org