$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa File: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (raw, json) Hash identifier: AF+Ua5qWjlXSmRcISzVN1U/rrOe/cIos4w3BIP5f38s= Subject key identifier: 69:E5:E1:F3:E8:B7:15:A2:F0:A8:4B:02:6F:04:D0:8D:CE:56:CD:A1 Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 15E42E5FA82AACC5F2769361D17562C4AED175C8 Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa Signing time: Wed 26 Jun 2024 09:51:30 +0000 ROA not before: Wed 26 Jun 2024 09:46:30 +0000 ROA not after: Wed 25 Jun 2025 09:51:30 +0000 asID: 63473 IP address blocks: 2a14:7581:d200::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 14:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e4:2e:5f:a8:2a:ac:c5:f2:76:93:61:d1:75:62:c4:ae:d1:75:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Jun 26 09:46:30 2024 GMT Not After : Jun 25 09:51:30 2025 GMT Subject: CN=69E5E1F3E8B715A2F0A84B026F04D08DCE56CDA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:30:44:e1:09:4c:91:3f:0a:6e:de:35:88: a5:57:01:cd:e8:0a:d5:f6:eb:12:4c:8d:bf:e6:9a: cb:d6:fc:80:2d:ca:3e:4d:3b:53:8d:b2:2d:3c:2e: b1:70:42:c5:10:5a:4c:ca:bd:72:7d:16:6b:24:bc: 81:5d:ea:30:9c:d1:28:e0:16:12:34:43:16:fd:e0: cb:bb:fd:0d:5e:17:0c:e5:b4:48:2f:48:b1:40:7d: 79:27:98:c2:46:c6:bf:3d:22:1e:67:31:77:fb:2f: 09:0b:28:82:09:6d:8e:21:aa:ec:07:66:2e:e8:29: b9:71:ff:44:7b:ee:da:3c:f2:5b:18:d3:d9:d2:f8: fd:f1:22:61:7c:c1:dc:be:2d:cb:c9:09:37:a4:66: 1c:f3:94:dc:d4:c9:b3:df:2d:30:12:c5:ca:47:5f: d6:12:2f:f3:a9:26:f2:66:5f:1d:c1:8c:7d:6b:b2: 2e:45:73:fc:e2:ec:69:6c:d0:80:76:4b:9e:b9:f7: 7d:b7:9a:31:53:da:0b:4c:c2:43:d8:f9:47:c1:ba: 4c:d9:46:16:b4:a4:c8:c6:ba:a0:22:f1:e7:b9:2d: d6:e1:89:5c:9b:7f:8b:11:30:31:7f:e6:62:10:80: 4d:ee:84:53:09:be:d3:aa:a6:bc:cf:6c:84:b1:f9: 6a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E5:E1:F3:E8:B7:15:A2:F0:A8:4B:02:6F:04:D0:8D:CE:56:CD:A1 X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:d200::/40 Signature Algorithm: sha256WithRSAEncryption 12:83:8b:63:7c:3d:f9:62:68:2e:9f:d1:fb:78:d1:5a:4d:ca: 05:c0:3c:39:e9:37:fb:ca:2c:69:39:62:b7:3b:93:32:7b:1b: c2:f3:b0:04:66:4d:d7:4a:35:b8:74:11:bf:09:2d:9f:4e:4d: 00:9c:39:b9:ad:a4:77:42:f6:38:8a:84:e9:5a:ab:cb:a1:dc: 77:46:9e:80:1a:1e:1d:bb:14:c8:aa:98:ee:27:43:e9:2f:ec: ac:5f:68:c9:02:e0:64:72:32:29:cb:4a:f5:af:34:61:65:8a: 12:0c:dd:3b:17:ac:ad:95:e6:b2:a5:f4:17:8d:3f:cc:f7:95: fc:ce:6a:2a:2d:e2:fa:b2:20:c6:ed:a6:0a:fc:a0:a2:8a:82: 23:97:a2:bb:b3:f3:0e:0a:53:8f:4d:57:d0:c6:db:76:2a:c0: de:ea:4b:43:f1:18:26:48:17:df:88:f0:7e:63:0c:e0:39:1b: a4:68:a6:cb:02:82:27:a3:6a:8d:24:d2:f6:e4:70:46:ed:51: 96:cb:0f:86:6c:18:04:56:3e:a9:b7:4e:ee:cc:c3:e5:98:f9: 9f:21:a2:3e:40:0a:ee:45:3f:79:bf:cc:92:fe:aa:e6:50:46: 5b:56:82:bc:2c:e1:e8:75:bf:b7:a8:b0:d5:dc:1b:17:a4:6c: 0b:96:1a:5a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFeQuX6gqrMXydpNh0XVixK7RdcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNDA2MjYwOTQ2MzBaFw0yNTA2MjUwOTUxMzBaMDMxMTAvBgNV BAMTKDY5RTVFMUYzRThCNzE1QTJGMEE4NEIwMjZGMDREMDhEQ0U1NkNEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkzBE4QlMkT8Kbt41iKVXAc3o CtX26xJMjb/mmsvW/IAtyj5NO1ONsi08LrFwQsUQWkzKvXJ9FmskvIFd6jCc0Sjg FhI0Qxb94Mu7/Q1eFwzltEgvSLFAfXknmMJGxr89Ih5nMXf7LwkLKIIJbY4hquwH Zi7oKblx/0R77to88lsY09nS+P3xImF8wdy+LcvJCTekZhzzlNzUybPfLTASxcpH X9YSL/OpJvJmXx3BjH1rsi5Fc/zi7Gls0IB2S5659323mjFT2gtMwkPY+UfBukzZ Rha0pMjGuqAi8ee5LdbhiVybf4sRMDF/5mIQgE3uhFMJvtOqprzPbISx+WpzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUaeXh8+i3FaLwqEsCbwTQjc5WzaEwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iNTljMTA2Yy01M2I0LTRlOTItOWZiYS1kNjA4MjdiNWJkYjgvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTY0MzIzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzYz MzM0MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYHSMA0GCSqGSIb3DQEBCwUAA4IBAQASg4tj fD35Ymgun9H7eNFaTcoFwDw56Tf7yixpOWK3O5MyexvC87AEZk3XSjW4dBG/CS2f Tk0AnDm5raR3QvY4ioTpWqvLodx3Rp6AGh4duxTIqpjuJ0PpL+ysX2jJAuBkcjIp y0r1rzRhZYoSDN07F6ytleaypfQXjT/M95X8zmoqLeL6siDG7aYK/KCiioIjl6K7 s/MOClOPTVfQxtt2KsDe6ktD8RgmSBffiPB+YwzgORukaKbLAoIno2qNJNL25HBG 7VGWyw+GbBgEVj6pt07uzMPlmPmfIaI+QAruRT95v8yS/qrmUEZbVoK8LOHodb+3 qLDV3BsXpGwLlhpa -----END CERTIFICATE-----Generated at Sat Apr 5 04:31:09 2025 by rpki-client