$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa File: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (raw, json) Hash identifier: vs66PWFM6L/hirNyhIXTRaz65c001j+IhkCdp8VdfS4= Subject key identifier: 07:52:DD:25:8D:C0:3F:FD:EE:55:E9:2F:91:C1:D6:97:96:0B:CF:B3 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 429DC84313A9FE3368B6D98BCEA302A1A9A261A5 Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa Signing time: Sat 17 May 2025 15:21:56 +0000 ROA not before: Sat 17 May 2025 15:16:56 +0000 ROA not after: Sat 16 May 2026 15:21:56 +0000 asID: 209710 IP address blocks: 2a14:7580:ff52::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 17:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:9d:c8:43:13:a9:fe:33:68:b6:d9:8b:ce:a3:02:a1:a9:a2:61:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: May 17 15:16:56 2025 GMT Not After : May 16 15:21:56 2026 GMT Subject: CN=0752DD258DC03FFDEE55E92F91C1D697960BCFB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:27:e3:6c:31:a3:b4:1e:c3:d4:98:48:bd: a0:67:2d:2c:cd:8c:b1:f3:5f:66:f1:0b:6d:a0:4d: 10:17:3b:8a:fa:03:f3:80:0b:f8:34:6d:f5:34:06: a6:29:06:8b:1a:8a:92:e2:32:91:fb:6f:50:49:41: 13:91:04:d0:84:00:11:fe:77:b9:71:cc:35:e7:61: bb:b7:f0:df:db:a9:34:03:ae:18:2a:11:11:53:44: 4e:06:f6:31:3c:63:80:6c:9e:06:1b:22:d9:90:f9: e0:2b:54:ab:98:6c:79:99:82:e4:3a:79:8e:a3:bf: 6a:e3:72:40:ed:19:23:28:1f:00:4e:c0:9f:c1:57: a0:e0:f3:7f:c4:fb:a5:51:07:b5:ba:b8:63:96:9a: 4d:3c:0d:5d:f4:69:8a:4b:7b:b0:e6:c9:ba:9c:97: 87:ba:fb:d6:bd:7a:16:9c:96:0b:50:67:74:ae:a2: 18:4f:33:06:06:b3:84:12:3b:e1:08:14:a0:50:72: 38:92:ab:d5:2d:cb:2d:00:c7:6d:75:a3:ba:39:db: 2b:65:af:e9:02:69:ee:60:4a:99:20:b0:ce:21:51: 2b:59:db:2c:42:dc:42:7a:52:3a:fa:05:53:f0:43: 55:04:87:51:bc:c9:dd:45:5b:8c:d8:5f:85:bc:4f: 42:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:52:DD:25:8D:C0:3F:FD:EE:55:E9:2F:91:C1:D6:97:96:0B:CF:B3 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff52::/48 Signature Algorithm: sha256WithRSAEncryption 6a:8c:d5:84:a9:04:2d:c3:24:ab:39:3b:78:35:24:67:52:db: 05:71:9b:50:33:09:9b:bd:43:e7:07:e3:cf:7d:a5:5d:75:42: fe:ba:ef:2b:85:41:19:67:cb:4e:80:37:02:5b:7f:3b:04:76: 0a:e6:09:bd:58:b9:21:2f:15:d1:f7:d6:12:b2:30:41:d7:c8: 29:9e:3d:5b:71:5b:c3:17:3e:49:6a:e0:e3:e7:4e:58:cd:68: 21:04:47:52:03:71:9d:54:21:ad:cd:e4:7c:24:db:16:50:a2: fa:96:f3:bd:22:0e:7f:f4:7e:94:14:9c:7e:94:00:bf:2b:69: 5a:00:0b:24:8e:3a:7e:c7:ce:25:25:de:ae:5a:5a:44:ef:f0: fe:df:67:df:7c:c4:10:af:18:ff:7d:4b:92:1b:66:5a:a5:9f: 6b:5a:3b:a2:34:e7:97:17:e0:1c:78:cd:54:c0:99:b8:e0:c6: 9d:2a:d4:d2:2c:37:d1:a1:e5:d8:64:46:3b:0f:e3:19:af:d4: 6b:7e:88:1b:f1:77:12:ee:bc:dd:5d:f0:07:ba:f2:79:5c:83: ea:7c:cd:3e:0f:93:67:5d:0b:d3:3e:26:b5:c5:86:8b:a4:10: 3e:94:c0:3a:0b:7f:5b:85:2d:89:aa:03:57:92:5c:9c:73:dd: a5:1a:db:90 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUQp3IQxOp/jNottmLzqMCoamiYaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNTA1MTcxNTE2NTZaFw0yNjA1MTYxNTIxNTZaMDMxMTAvBgNV BAMTKDA3NTJERDI1OERDMDNGRkRFRTU1RTkyRjkxQzFENjk3OTYwQkNGQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5ifjbDGjtB7D1JhIvaBnLSzN jLHzX2bxC22gTRAXO4r6A/OAC/g0bfU0BqYpBosaipLiMpH7b1BJQRORBNCEABH+ d7lxzDXnYbu38N/bqTQDrhgqERFTRE4G9jE8Y4BsngYbItmQ+eArVKuYbHmZguQ6 eY6jv2rjckDtGSMoHwBOwJ/BV6Dg83/E+6VRB7W6uGOWmk08DV30aYpLe7Dmybqc l4e6+9a9ehaclgtQZ3SuohhPMwYGs4QSO+EIFKBQcjiSq9Utyy0Ax211o7o52ytl r+kCae5gSpkgsM4hUStZ2yxC3EJ6Ujr6BVPwQ1UEh1G8yd1FW4zYX4W8T0LpAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUB1LdJY3AP/3uVekvkcHWl5YLz7MwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ZWNhYzQxMy00Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNTMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM5MzczMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9SMA0GCSqGSIb3DQEBCwUAA4IBAQBq jNWEqQQtwySrOTt4NSRnUtsFcZtQMwmbvUPnB+PPfaVddUL+uu8rhUEZZ8tOgDcC W387BHYK5gm9WLkhLxXR99YSsjBB18gpnj1bcVvDFz5JauDj505YzWghBEdSA3Gd VCGtzeR8JNsWUKL6lvO9Ig5/9H6UFJx+lAC/K2laAAskjjp+x84lJd6uWlpE7/D+ 32fffMQQrxj/fUuSG2ZapZ9rWjuiNOeXF+AceM1UwJm44MadKtTSLDfRoeXYZEY7 D+MZr9Rrfogb8XcS7rzdXfAHuvJ5XIPqfM0+D5NnXQvTPia1xYaLpBA+lMA6C39b hS2JqgNXklycc92lGtuQ -----END CERTIFICATE-----Generated at Sat Jun 7 07:47:07 2025 by rpki-client