$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa File: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (raw, json) Hash identifier: UtWLjV2JD6X8emwUC9bu8RyXGCD7bzymrTBVIEkaVv8= Subject key identifier: 7F:09:9D:B9:85:41:DA:57:DC:8F:56:21:B1:BC:FB:8A:01:2E:65:57 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 3A6D32EEA7AB11AFE59D6AEFB471F5E8515EFEFE Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa Signing time: Tue 27 May 2025 10:20:00 +0000 ROA not before: Tue 27 May 2025 10:15:00 +0000 ROA not after: Tue 26 May 2026 10:20:00 +0000 asID: 209710 IP address blocks: 2a14:7580:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 06:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6d:32:ee:a7:ab:11:af:e5:9d:6a:ef:b4:71:f5:e8:51:5e:fe:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: May 27 10:15:00 2025 GMT Not After : May 26 10:20:00 2026 GMT Subject: CN=7F099DB98541DA57DC8F5621B1BCFB8A012E6557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6b:db:5e:3d:d6:d3:41:2d:fe:b0:4a:9e:e9: fa:a1:cf:71:03:6a:32:a4:dc:85:ae:59:d0:75:33: 65:d3:06:0d:a3:9a:83:0c:39:70:ae:95:66:21:27: 4f:ea:9c:1d:37:b6:da:10:b7:40:17:a6:79:7f:f5: 85:1d:38:2f:1d:2d:f9:08:14:7f:83:1e:1d:96:96: eb:c8:ff:15:85:c1:b5:be:81:6b:6c:e3:93:fd:10: 2a:b6:f4:2f:2f:ef:63:2a:29:27:1c:9e:0c:bb:3e: 3b:ab:5e:5e:1a:f8:37:a2:0f:e7:68:bf:58:7d:df: 2c:a7:a6:85:4b:e3:37:4b:16:49:66:d3:6a:3a:83: 35:39:d5:39:fa:b9:a8:d6:55:cc:ac:c4:15:60:fc: 9b:a9:46:c5:5a:08:c6:23:6f:d2:8c:9e:43:79:f3: c1:24:64:36:02:c7:5e:95:46:3c:33:9a:12:bb:8a: 8d:b2:cb:62:6a:9c:0a:42:6f:f4:da:a8:55:a8:d0: b9:4f:47:59:51:08:9d:d8:16:8e:de:15:d9:b9:c9: 18:9c:de:07:4c:12:d0:67:2e:6a:e3:8b:3c:29:2d: d1:f2:87:7b:58:df:e3:1b:91:d9:31:5a:c4:40:ec: 74:b7:8a:74:1c:14:86:f4:a0:81:08:98:44:92:f0: 52:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:09:9D:B9:85:41:DA:57:DC:8F:56:21:B1:BC:FB:8A:01:2E:65:57 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:500::/40 Signature Algorithm: sha256WithRSAEncryption 6b:be:dc:4d:99:58:d9:c0:7e:af:61:b3:a5:08:3a:ed:27:35: 99:e7:1c:b1:81:d7:5a:15:ee:94:d5:78:50:e6:a3:a2:28:af: 53:14:19:5d:f9:72:d7:76:38:b0:2f:ad:09:ee:00:36:4d:d8: 07:85:f7:4c:0d:e2:9b:bb:1d:f3:14:02:80:e8:12:8d:2c:39: eb:09:e9:0d:9c:fa:53:aa:c8:bd:80:f8:ba:06:02:cb:4d:ab: d7:1e:62:91:2c:ef:57:d9:44:9a:a9:40:51:92:5f:5a:2e:4a: ed:d2:73:10:5b:53:e5:ec:d2:56:65:69:19:df:e0:95:20:60: ea:ad:0c:53:42:e7:d0:ec:89:17:43:4f:ec:bf:e5:02:ca:f9: de:17:13:1e:46:6c:1f:ad:f7:3c:d6:97:10:34:d5:a6:1d:88: 3d:52:57:cf:8a:f9:6e:3b:ba:c6:94:bf:c9:78:e8:1c:f7:bc: 1a:81:dc:cf:14:06:88:3c:cd:a8:c5:18:44:8c:52:5f:c8:78: fd:3a:19:e4:90:33:4e:12:a4:90:0d:02:90:ec:79:15:ea:7e: 65:1b:48:22:a7:a9:5a:89:5d:36:d6:d8:c0:c5:a9:66:5a:4b: ba:a5:f3:74:6b:90:ed:b3:e7:ca:11:11:46:cd:b0:9f:22:f6: ae:2d:ea:c7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOm0y7qerEa/lnWrvtHH16FFe/v4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNTA1MjcxMDE1MDBaFw0yNjA1MjYxMDIwMDBaMDMxMTAvBgNV BAMTKDdGMDk5REI5ODU0MURBNTdEQzhGNTYyMUIxQkNGQjhBMDEyRTY1NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCta9tePdbTQS3+sEqe6fqhz3ED ajKk3IWuWdB1M2XTBg2jmoMMOXCulWYhJ0/qnB03ttoQt0AXpnl/9YUdOC8dLfkI FH+DHh2WluvI/xWFwbW+gWts45P9ECq29C8v72MqKSccngy7PjurXl4a+DeiD+do v1h93yynpoVL4zdLFklm02o6gzU51Tn6uajWVcysxBVg/JupRsVaCMYjb9KMnkN5 88EkZDYCx16VRjwzmhK7io2yy2JqnApCb/TaqFWo0LlPR1lRCJ3YFo7eFdm5yRic 3gdMEtBnLmrjizwpLdHyh3tY3+MbkdkxWsRA7HS3inQcFIb0oIEImESS8FITAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUfwmduYVB2lfcj1Yhsbz7igEuZVcwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ZWNhYzQxMy00Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTM1MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzAz OTM3MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYAFMA0GCSqGSIb3DQEBCwUAA4IBAQBrvtxN mVjZwH6vYbOlCDrtJzWZ5xyxgddaFe6U1XhQ5qOiKK9TFBld+XLXdjiwL60J7gA2 TdgHhfdMDeKbux3zFAKA6BKNLDnrCekNnPpTqsi9gPi6BgLLTavXHmKRLO9X2USa qUBRkl9aLkrt0nMQW1Pl7NJWZWkZ3+CVIGDqrQxTQufQ7IkXQ0/sv+UCyvneFxMe Rmwfrfc81pcQNNWmHYg9UlfPivluO7rGlL/JeOgc97wagdzPFAaIPM2oxRhEjFJf yHj9OhnkkDNOEqSQDQKQ7HkV6n5lG0gip6laiV021tjAxalmWku6pfN0a5Dts+fK ERFGzbCfIvauLerH -----END CERTIFICATE-----Generated at Fri Jun 6 23:48:42 2025 by rpki-client