$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa File: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (raw, json) Hash identifier: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8= Subject key identifier: CF:7E:92:8E:F9:B7:1E:A6:95:2F:F5:AF:7E:5E:EF:B7:80:6B:F4:9E Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 0303DB5739B0C35120200C51CE88418542832FD7 Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa Signing time: Tue 27 May 2025 14:33:28 +0000 ROA not before: Tue 27 May 2025 14:28:28 +0000 ROA not after: Tue 26 May 2026 14:33:28 +0000 asID: 37988 IP address blocks: 2a14:7581:d080::/41 maxlen: 41 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 01:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:03:db:57:39:b0:c3:51:20:20:0c:51:ce:88:41:85:42:83:2f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: May 27 14:28:28 2025 GMT Not After : May 26 14:33:28 2026 GMT Subject: CN=CF7E928EF9B71EA6952FF5AF7E5EEFB7806BF49E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:96:c4:47:ee:96:14:07:c2:08:ce:c8:3a:19: d4:a2:b7:36:e3:60:34:8d:a6:b0:8f:ae:1e:1b:61: 61:a9:5f:a8:9e:56:e0:57:c5:e2:d9:6c:8b:db:c3: ff:f7:1e:84:c4:a0:30:97:c5:85:c5:ad:fe:68:44: 49:b1:94:a6:35:e2:68:dc:c7:2b:b0:b7:db:c8:13: 4f:c5:77:c3:85:53:8d:27:70:2d:67:2e:64:ab:4c: d3:d4:af:4a:a9:c3:7b:66:80:77:9e:bb:d8:3e:18: bd:b1:a0:d2:ec:55:0e:1f:a6:0d:6b:f8:7e:9b:bd: 09:b8:b3:2d:5d:50:e1:81:72:60:d9:b5:b4:7c:d1: 3c:3b:61:bf:1c:59:b6:d2:0e:a2:e0:f7:b8:67:9c: 65:cb:ef:29:ee:13:4e:f4:a5:30:21:08:0d:6b:15: c5:d8:78:db:1e:54:6b:77:0c:4c:6a:67:e1:40:cc: 11:5e:58:17:55:79:96:0f:dc:65:65:ee:39:d0:ee: 0d:9d:7e:d1:9f:fe:cb:bc:46:64:11:e2:cc:b0:76: 22:ac:ee:3e:5f:65:40:db:94:66:6e:72:54:79:38: 10:59:62:ba:8a:73:e3:b3:c9:05:63:89:e8:0b:0b: 07:fe:67:bb:05:5c:85:4a:15:ca:2b:53:e3:c6:e9: 4e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7E:92:8E:F9:B7:1E:A6:95:2F:F5:AF:7E:5E:EF:B7:80:6B:F4:9E X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:d080::/41 Signature Algorithm: sha256WithRSAEncryption 3c:25:43:d3:04:47:ff:62:22:1f:4d:74:2e:25:14:d1:7a:30: 5b:8f:53:d1:34:0b:a7:9c:a8:4a:9a:42:fe:c0:7d:d7:1f:18: a9:68:d2:0b:f3:96:4d:74:67:fa:08:9d:0d:64:c3:fd:1e:2a: 40:d6:d0:ea:74:b1:05:30:5a:c1:62:7e:36:c4:67:f0:dc:0b: 01:2b:f8:ff:0b:2c:89:a2:f7:a3:0f:a6:3b:eb:d7:76:da:da: e5:c1:78:91:93:40:a9:13:3a:3f:a4:9d:bc:b9:8f:f7:ce:53: c8:a6:47:c8:98:d5:7d:4b:13:c1:92:83:e1:ae:49:1a:3b:eb: e3:2e:68:0e:72:f3:16:6d:ad:af:2b:5a:3b:43:52:54:5f:4e: 87:b5:8e:38:5a:ca:f7:47:30:68:09:6e:83:c5:f5:06:3e:db: c5:1e:97:37:31:bf:63:47:13:83:45:ee:08:9b:34:a7:aa:ed: 5d:24:b2:6e:9a:69:e0:77:f5:48:e3:14:11:70:dd:e8:2b:b6: 54:0f:49:b9:57:9c:bb:6f:af:c6:0f:cc:72:53:55:62:73:81: 22:fc:19:40:d3:83:d3:43:fe:21:26:e6:44:49:42:71:d4:60: cd:0f:c8:b0:c0:f6:a1:0a:18:4d:4f:8e:bd:8c:5e:9e:dc:e8: 18:eb:ad:4b -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUAwPbVzmww1EgIAxRzohBhUKDL9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNTA1MjcxNDI4MjhaFw0yNjA1MjYxNDMzMjhaMDMxMTAvBgNV BAMTKENGN0U5MjhFRjlCNzFFQTY5NTJGRjVBRjdFNUVFRkI3ODA2QkY0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlsRH7pYUB8IIzsg6GdSitzbj YDSNprCPrh4bYWGpX6ieVuBXxeLZbIvbw//3HoTEoDCXxYXFrf5oREmxlKY14mjc xyuwt9vIE0/Fd8OFU40ncC1nLmSrTNPUr0qpw3tmgHeeu9g+GL2xoNLsVQ4fpg1r +H6bvQm4sy1dUOGBcmDZtbR80Tw7Yb8cWbbSDqLg97hnnGXL7ynuE070pTAhCA1r FcXYeNseVGt3DExqZ+FAzBFeWBdVeZYP3GVl7jnQ7g2dftGf/su8RmQR4sywdiKs 7j5fZUDblGZuclR5OBBZYrqKc+OzyQVjiegLCwf+Z7sFXIVKFcorU+PG6U4PAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUz36Sjvm3HqaVL/Wvfl7vt4Br9J4wHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iNTljMTA2Yy01M2I0LTRlOTItOWZiYS1kNjA4MjdiNWJkYjgvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTY0MzAzODMwM2EzYTJmMzQzMTJkMzQzMTIwM2QzZTIwMzMz NzM5MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHByoUdYHQgDANBgkqhkiG9w0BAQsFAAOCAQEAPCVD 0wRH/2IiH010LiUU0XowW49T0TQLp5yoSppC/sB91x8YqWjSC/OWTXRn+gidDWTD /R4qQNbQ6nSxBTBawWJ+NsRn8NwLASv4/wssiaL3ow+mO+vXdtra5cF4kZNAqRM6 P6SdvLmP985TyKZHyJjVfUsTwZKD4a5JGjvr4y5oDnLzFm2trytaO0NSVF9Oh7WO OFrK90cwaAlug8X1Bj7bxR6XNzG/Y0cTg0XuCJs0p6rtXSSybppp4Hf1SOMUEXDd 6Cu2VA9JuVecu2+vxg/MclNVYnOBIvwZQNOD00P+ISbmRElCcdRgzQ/IsMD2oQoY TU+OvYxentzoGOutSw== -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:17 2025 by rpki-client