$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa File: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (raw, json) Hash identifier: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk= Subject key identifier: A7:8B:77:1D:15:D5:8E:FE:93:02:6F:10:20:54:AE:00:EF:DE:AC:9F Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 3D2EF58102057E36B59D0F87A9333C1ABAEB14F0 Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa Signing time: Wed 28 May 2025 10:33:29 +0000 ROA not before: Wed 28 May 2025 10:28:29 +0000 ROA not after: Wed 27 May 2026 10:33:29 +0000 asID: 63473 IP address blocks: 2a14:7581:d200::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 12:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:2e:f5:81:02:05:7e:36:b5:9d:0f:87:a9:33:3c:1a:ba:eb:14:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: May 28 10:28:29 2025 GMT Not After : May 27 10:33:29 2026 GMT Subject: CN=A78B771D15D58EFE93026F102054AE00EFDEAC9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e5:0a:1e:c5:f9:18:07:d8:48:13:3f:48:c6: ec:00:65:20:84:e5:6d:87:25:fa:5a:1e:37:04:86: c8:f0:c6:a5:3f:7e:e6:30:3e:d6:28:19:8d:96:53: 93:8d:be:fa:b3:91:6e:5e:8b:a5:89:22:b3:e2:77: 6b:4a:e7:00:86:17:0e:1b:06:e7:b2:01:64:81:5b: 6c:1e:9b:a9:59:40:84:88:d8:3d:bc:a9:7e:0f:8b: 4a:27:0f:4e:76:17:55:76:4d:30:1d:f1:b0:b7:33: 23:ff:b6:7c:ad:2c:47:e0:56:0b:08:6d:b9:dd:75: d6:b6:11:0f:06:a3:72:f4:ae:dc:7a:de:55:94:30: e3:71:e2:a6:c9:9e:6d:bb:f9:38:b8:1e:55:66:75: d6:4c:81:37:b8:47:6a:d5:75:37:f5:2d:e7:97:ab: 6f:41:56:7c:fb:cb:e4:c8:83:b8:56:0b:1a:b0:6b: f1:ae:7e:72:0b:5b:56:fe:39:5d:5f:67:fa:70:fb: 99:b1:8b:57:66:b4:8f:19:19:d5:ce:06:7a:0f:5a: ca:5e:fc:7e:d5:05:02:8c:18:91:77:65:f3:89:7c: 05:b5:23:db:26:18:1f:33:83:46:96:e4:e9:23:22: e7:11:bd:8c:53:16:40:c1:d7:cd:19:c9:7b:07:81: f5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8B:77:1D:15:D5:8E:FE:93:02:6F:10:20:54:AE:00:EF:DE:AC:9F X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:d200::/40 Signature Algorithm: sha256WithRSAEncryption 7b:96:0b:40:44:8e:74:72:8a:70:e0:44:4f:3c:00:52:df:34: 28:e4:72:cf:b6:58:b1:09:87:68:61:89:82:7e:88:45:90:b0: 17:04:19:19:75:bb:e3:8c:ac:8b:75:2f:29:45:79:04:68:33: b0:08:78:e4:c3:8c:46:b9:32:42:cd:d2:9b:5e:b6:c3:e2:16: 45:7c:f8:5a:17:2a:67:aa:f9:73:7e:86:f0:1f:55:9d:5e:e7: 58:da:d6:80:c7:ea:f2:94:6d:47:3f:ee:3a:aa:7a:51:be:cd: cc:d1:75:e3:2a:5e:b8:1d:de:56:49:cd:35:a5:1b:f0:c0:50: 38:3c:cd:bb:0b:e9:a5:7c:4d:be:7d:3f:5d:49:59:ef:f3:15: 3f:d7:21:fb:88:db:e7:31:0d:ef:c0:c1:e9:29:f8:18:ba:47: e0:43:6a:8d:6a:49:96:ce:14:46:4f:0e:7d:74:7d:9b:9e:43: df:ef:fb:e9:ae:cc:4e:f4:c5:e5:c7:e9:9a:01:42:06:9e:3a: f9:11:8b:bd:eb:14:6f:76:7b:e9:ae:b8:c2:71:a8:3a:d5:76: 94:2c:d1:c1:37:14:13:97:e7:b9:b3:3e:85:58:f3:27:8c:d0: ac:c9:3e:1d:96:15:23:6f:a0:80:19:55:c4:ee:22:1b:9e:2d: b0:d4:73:54 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPS71gQIFfja1nQ+HqTM8GrrrFPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNTA1MjgxMDI4MjlaFw0yNjA1MjcxMDMzMjlaMDMxMTAvBgNV BAMTKEE3OEI3NzFEMTVENThFRkU5MzAyNkYxMDIwNTRBRTAwRUZERUFDOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ5QoexfkYB9hIEz9IxuwAZSCE 5W2HJfpaHjcEhsjwxqU/fuYwPtYoGY2WU5ONvvqzkW5ei6WJIrPid2tK5wCGFw4b BueyAWSBW2wem6lZQISI2D28qX4Pi0onD052F1V2TTAd8bC3MyP/tnytLEfgVgsI bbnddda2EQ8Go3L0rtx63lWUMONx4qbJnm27+Ti4HlVmddZMgTe4R2rVdTf1LeeX q29BVnz7y+TIg7hWCxqwa/GufnILW1b+OV1fZ/pw+5mxi1dmtI8ZGdXOBnoPWspe /H7VBQKMGJF3ZfOJfAW1I9smGB8zg0aW5OkjIucRvYxTFkDB180ZyXsHgfXnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUp4t3HRXVjv6TAm8QIFSuAO/erJ8wHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iNTljMTA2Yy01M2I0LTRlOTItOWZiYS1kNjA4MjdiNWJkYjgvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTY0MzIzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzYz MzM0MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYHSMA0GCSqGSIb3DQEBCwUAA4IBAQB7lgtA RI50copw4ERPPABS3zQo5HLPtlixCYdoYYmCfohFkLAXBBkZdbvjjKyLdS8pRXkE aDOwCHjkw4xGuTJCzdKbXrbD4hZFfPhaFypnqvlzfobwH1WdXudY2taAx+rylG1H P+46qnpRvs3M0XXjKl64Hd5WSc01pRvwwFA4PM27C+mlfE2+fT9dSVnv8xU/1yH7 iNvnMQ3vwMHpKfgYukfgQ2qNakmWzhRGTw59dH2bnkPf7/vprsxO9MXlx+maAUIG njr5EYu96xRvdnvprrjCcag61XaULNHBNxQTl+e5sz6FWPMnjNCsyT4dlhUjb6CA GVXE7iIbni2w1HNU -----END CERTIFICATE-----Generated at Fri Jun 6 23:29:06 2025 by rpki-client