$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa File: 326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa (raw, json) Hash identifier: Mbx64j7UAG35RxfrZTK8oOnl74ijH3kmO/U7xup2Tw0= Subject key identifier: AB:ED:E8:D3:BD:62:82:E4:5B:CF:BC:9C:E3:8D:EB:8A:D3:9D:2E:36 Certificate issuer: /CN=1BD68BB33CF4B2C0746A88537A13578C0074B4E6 Certificate serial: 345C63319B6DCC0E2DB6DE0B94FC294C2426E008 Authority key identifier: 1B:D6:8B:B3:3C:F4:B2:C0:74:6A:88:53:7A:13:57:8C:00:74:B4:E6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa Signing time: Sun 23 Feb 2025 02:26:24 +0000 ROA not before: Sun 23 Feb 2025 02:21:24 +0000 ROA not after: Sun 22 Feb 2026 02:26:24 +0000 asID: 214701 IP address blocks: 2a0b:4e07:60d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.mft rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.cer rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Apr 2025 15:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:5c:63:31:9b:6d:cc:0e:2d:b6:de:0b:94:fc:29:4c:24:26:e0:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BD68BB33CF4B2C0746A88537A13578C0074B4E6 Validity Not Before: Feb 23 02:21:24 2025 GMT Not After : Feb 22 02:26:24 2026 GMT Subject: CN=ABEDE8D3BD6282E45BCFBC9CE38DEB8AD39D2E36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:ad:66:d1:b3:25:84:e6:d2:a8:92:3d:32: e1:a1:a1:06:e5:50:70:32:16:0e:15:a7:d2:17:94: 5d:8e:28:5e:1b:ef:d6:01:52:85:10:fb:1a:9d:2d: 56:48:27:24:ea:f8:4b:60:a9:ca:9f:fb:3e:9f:da: 49:58:92:5d:d4:b0:19:e4:60:a1:72:33:ce:d8:7a: 22:6d:b0:7b:84:0c:73:33:4a:dc:d7:01:16:ba:fc: 40:73:97:32:f6:de:0c:9c:c7:fa:30:58:09:82:25: 72:c9:be:98:76:9e:df:fc:f5:93:6a:e8:02:2d:71: d2:54:02:0f:7f:1f:61:aa:21:85:c8:b0:58:94:e3: d7:cd:86:1d:20:2a:6f:42:59:37:3b:c6:22:0b:88: 28:56:58:93:7a:45:3f:a9:6e:4f:1e:74:df:48:35: 28:ec:78:a6:cc:ff:7e:1e:fb:eb:4f:c1:30:7c:34: 1d:08:8e:f9:a2:6c:52:ef:cf:d4:64:a9:fd:ce:46: 92:3b:b4:1c:34:86:99:0e:db:d1:0b:b4:7b:74:15: 2c:11:c7:d9:b2:dd:7d:97:37:87:64:92:c4:87:da: 48:eb:42:7d:74:05:03:84:f4:05:9f:fb:03:a7:83: f9:bf:a5:97:dd:78:43:52:5a:d1:9d:c6:40:81:79: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:ED:E8:D3:BD:62:82:E4:5B:CF:BC:9C:E3:8D:EB:8A:D3:9D:2E:36 X509v3 Authority Key Identifier: keyid:1B:D6:8B:B3:3C:F4:B2:C0:74:6A:88:53:7A:13:57:8C:00:74:B4:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:60d0::/44 Signature Algorithm: sha256WithRSAEncryption 7e:35:60:bc:5a:3a:6d:a7:45:2d:68:2f:51:e1:bf:e5:ef:4b: b9:9a:e6:82:6c:b2:aa:b0:56:c5:be:4b:3f:f8:12:54:48:a0: 57:90:5d:30:95:be:69:f5:4a:d1:6c:0d:34:95:b5:41:09:61: ec:5a:cd:70:2b:af:c8:2c:a3:10:dc:4a:67:3e:2f:cb:e5:cf: 3e:7e:3d:0f:18:cf:ef:5c:81:f5:84:38:d5:22:88:7c:21:dc: f1:71:24:40:a7:a4:a7:49:51:d5:a7:25:c3:54:14:f3:2c:99: 1a:23:81:f0:c2:60:b0:41:98:ad:c0:b8:88:06:82:ea:08:60: b1:5b:71:7f:7e:6e:d0:4b:15:0a:29:4c:75:c3:37:06:37:10: b2:11:61:dd:6e:68:8e:7c:d8:fa:36:c0:78:64:87:16:01:ab: f3:02:b4:59:12:22:ed:db:7b:8b:65:7f:eb:e5:5b:e3:76:a8: b8:8a:68:41:13:43:55:bf:e5:cf:92:fb:ed:a2:d4:fd:aa:95: 1f:b8:a3:62:5d:0b:65:ce:bd:ea:8a:d6:8b:9b:76:0d:50:d8: 9a:a7:8a:11:05:fc:91:95:f7:6d:75:f9:ab:a7:37:73:fa:ad: b2:1a:20:48:3c:c1:97:ae:a8:a5:9c:b2:9e:c5:d3:35:8b:48: d3:dd:61:a3 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUNFxjMZttzA4ttt4LlPwpTCQm4AgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJENjhCQjMzQ0Y0QjJDMDc0NkE4ODUzN0ExMzU3OEMw MDc0QjRFNjAeFw0yNTAyMjMwMjIxMjRaFw0yNjAyMjIwMjI2MjRaMDMxMTAvBgNV BAMTKEFCRURFOEQzQkQ2MjgyRTQ1QkNGQkM5Q0UzOERFQjhBRDM5RDJFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCszK1m0bMlhObSqJI9MuGhoQbl UHAyFg4Vp9IXlF2OKF4b79YBUoUQ+xqdLVZIJyTq+Etgqcqf+z6f2klYkl3UsBnk YKFyM87YeiJtsHuEDHMzStzXARa6/EBzlzL23gycx/owWAmCJXLJvph2nt/89ZNq 6AItcdJUAg9/H2GqIYXIsFiU49fNhh0gKm9CWTc7xiILiChWWJN6RT+pbk8edN9I NSjseKbM/34e++tPwTB8NB0IjvmibFLvz9Rkqf3ORpI7tBw0hpkO29ELtHt0FSwR x9my3X2XN4dkksSH2kjrQn10BQOE9AWf+wOng/m/pZfdeENSWtGdxkCBeWSvAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUq+3o071iguRbz7yc443ritOdLjYwHwYDVR0j BBgwFoAUG9aLszz0ssB0aohTehNXjAB0tOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzEvMUJENjhCQjMzQ0Y0QjJDMDc0NkE4ODUzN0ExMzU3OEMwMDc0QjRFNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzcwNDAxYy03ZjQxLTRh NmItOTQzNC1jYzgwZGNhMDkzZTYvMi8xQkQ2OEJCMzNDRjRCMkMwNzQ2QTg4NTM3 QTEzNTc4QzAwNzRCNEU2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iZWFkMmRjZi1lYWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMS8zMjYxMzA2 MjNhMzQ2NTMwMzczYTM2MzA2NDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM0MzczMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKgtOB2DQMA0GCSqGSIb3DQEBCwUAA4IBAQB+ NWC8Wjptp0UtaC9R4b/l70u5muaCbLKqsFbFvks/+BJUSKBXkF0wlb5p9UrRbA00 lbVBCWHsWs1wK6/ILKMQ3EpnPi/L5c8+fj0PGM/vXIH1hDjVIoh8IdzxcSRAp6Sn SVHVpyXDVBTzLJkaI4HwwmCwQZitwLiIBoLqCGCxW3F/fm7QSxUKKUx1wzcGNxCy EWHdbmiOfNj6NsB4ZIcWAavzArRZEiLt23uLZX/r5Vvjdqi4imhBE0NVv+XPkvvt otT9qpUfuKNiXQtlzr3qitaLm3YNUNiap4oRBfyRlfdtdfmrpzdz+q2yGiBIPMGX rqilnLKexdM1i0jT3WGj -----END CERTIFICATE-----Generated at Thu Apr 3 07:24:31 2025 by rpki-client