$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: Kr++/O1eWk2rhooTEwkNaOpIKHaAHhcWSp5UY9Du6eM= Subject key identifier: EC:DF:54:78:74:0D:4B:84:72:27:AA:4F:DF:0F:D8:2C:5E:C0:AD:BB Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Certificate serial: 267BC62A80BCE2F7551A8D5E38FEF43BB7134FCD Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa Signing time: Mon 28 Apr 2025 16:23:47 +0000 ROA not before: Mon 28 Apr 2025 16:18:47 +0000 ROA not after: Mon 27 Apr 2026 16:23:47 +0000 asID: 214344 IP address blocks: 2a14:7581:9904::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 08:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:7b:c6:2a:80:bc:e2:f7:55:1a:8d:5e:38:fe:f4:3b:b7:13:4f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Validity Not Before: Apr 28 16:18:47 2025 GMT Not After : Apr 27 16:23:47 2026 GMT Subject: CN=ECDF5478740D4B847227AA4FDF0FD82C5EC0ADBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:52:11:9c:2e:45:2e:a9:32:c3:b9:2e:f2:38: d8:0a:df:57:6e:5f:33:fa:c7:5a:5f:6d:ab:e7:45: 04:ba:18:94:52:09:c7:a0:21:58:ff:ae:ea:ea:5d: 8e:0e:23:33:5f:8c:ca:25:11:49:9d:92:10:59:44: 3d:79:9e:55:b1:38:6b:fd:a3:11:bb:ab:32:28:14: 0b:cb:32:31:27:6e:5e:01:82:00:f6:33:fc:b2:57: 62:92:a0:b6:4a:28:dc:dd:95:b3:90:dc:cb:09:89: 03:b5:43:ef:76:67:44:7c:72:db:27:1b:74:31:7e: bc:24:4b:25:54:5a:05:98:2f:50:6c:85:3c:85:ee: 3a:9d:fa:a0:32:1a:d5:dc:10:c4:ea:18:3e:97:a5: d5:42:60:c2:60:56:92:1e:9f:3b:0d:ce:7e:1e:ff: 84:82:1c:62:29:b6:15:d8:00:ac:37:d6:53:2a:aa: 97:59:70:05:6c:82:b1:32:bf:97:e6:89:3b:93:65: 03:fd:ea:a9:5d:b6:14:df:04:65:f6:72:1f:08:a3: 1d:d8:2f:09:81:99:e6:93:61:23:38:1d:c5:4b:9f: 4f:2a:a6:ae:4d:fb:7a:9f:62:45:c0:09:28:b3:5a: b0:91:15:d7:08:59:5c:28:a6:b4:a7:ab:93:b5:30: 8c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DF:54:78:74:0D:4B:84:72:27:AA:4F:DF:0F:D8:2C:5E:C0:AD:BB X509v3 Authority Key Identifier: keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9904::/48 Signature Algorithm: sha256WithRSAEncryption 22:1a:81:de:60:d1:fd:3e:d8:6f:2b:4a:db:7f:f6:2e:c2:20: 0c:cd:0a:85:2c:c9:be:7c:c7:4d:f9:4d:81:f3:a8:14:62:8d: c5:aa:f3:4e:96:32:89:30:ea:9b:47:8f:d6:80:27:90:f5:58: 00:e5:81:3c:26:e4:69:37:fd:52:e4:aa:89:e2:98:95:ff:99: 88:e2:13:7e:0d:66:cb:85:79:a4:ec:68:49:61:5b:49:e2:9f: 4c:64:71:2b:52:52:89:41:fa:65:46:75:c9:f5:87:eb:0c:d8: 6f:65:07:56:a1:4f:92:9a:49:66:ca:6d:05:2a:0d:d4:f8:70: 7d:65:9d:8f:14:81:a6:7f:60:57:3d:0b:a2:68:1d:56:c7:c4: 61:b2:06:09:37:80:8a:9e:73:fc:34:33:2a:c1:4e:1b:60:d8: 86:77:9d:57:d8:09:f2:dd:77:81:18:24:b5:34:04:1f:13:5b: 6e:ba:d4:41:c5:46:f8:18:bc:9b:de:61:5a:02:81:55:cc:d5: ad:56:ca:7c:37:36:17:c0:90:25:58:af:51:09:37:78:7d:d1: 89:95:05:c0:ee:12:ee:ce:a6:62:d5:ac:13:f0:35:c7:05:e0: 19:30:e6:6c:e3:2c:3e:7e:4d:4e:37:5e:df:49:9b:f1:c0:54: d5:6c:2c:81 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUJnvGKoC84vdVGo1eOP70O7cTT80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJB ODcyMzk0NTAeFw0yNTA0MjgxNjE4NDdaFw0yNjA0MjcxNjIzNDdaMDMxMTAvBgNV BAMTKEVDREY1NDc4NzQwRDRCODQ3MjI3QUE0RkRGMEZEODJDNUVDMEFEQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrUhGcLkUuqTLDuS7yONgK31du XzP6x1pfbavnRQS6GJRSCcegIVj/rurqXY4OIzNfjMolEUmdkhBZRD15nlWxOGv9 oxG7qzIoFAvLMjEnbl4BggD2M/yyV2KSoLZKKNzdlbOQ3MsJiQO1Q+92Z0R8ctsn G3QxfrwkSyVUWgWYL1BshTyF7jqd+qAyGtXcEMTqGD6XpdVCYMJgVpIenzsNzn4e /4SCHGIpthXYAKw31lMqqpdZcAVsgrEyv5fmiTuTZQP96qldthTfBGX2ch8Iox3Y LwmBmeaTYSM4HcVLn08qpq5N+3qfYkXACSizWrCRFdcIWVwoprSnq5O1MIxvAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU7N9UeHQNS4RyJ6pP3w/YLF7ArbswHwYDVR0j BBgwFoAUh6TITUNm27FakJClWqLc66hyOUUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzEvODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJBODcyMzk0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1 QUEyRENFQkE4NzIzOTQ1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hNWQ0YzAwYi1kMTA1LTQ5MDYtYjk4MS0xZDAzNDNlMzAxZGEvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM5MzkzMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZkEMA0GCSqGSIb3DQEBCwUAA4IBAQAi GoHeYNH9PthvK0rbf/YuwiAMzQqFLMm+fMdN+U2B86gUYo3FqvNOljKJMOqbR4/W gCeQ9VgA5YE8JuRpN/1S5KqJ4piV/5mI4hN+DWbLhXmk7GhJYVtJ4p9MZHErUlKJ QfplRnXJ9YfrDNhvZQdWoU+Smklmym0FKg3U+HB9ZZ2PFIGmf2BXPQuiaB1Wx8Rh sgYJN4CKnnP8NDMqwU4bYNiGd51X2Any3XeBGCS1NAQfE1tuutRBxUb4GLyb3mFa AoFVzNWtVsp8NzYXwJAlWK9RCTd4fdGJlQXA7hLuzqZi1awT8DXHBeAZMOZs4yw+ fk1ON17fSZvxwFTVbCyB -----END CERTIFICATE-----Generated at Fri Jun 6 22:48:49 2025 by rpki-client