$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa File: 326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa (raw, json) Hash identifier: /JgrvpSR1ZDGP36oDONfP8baAAR4FG/skafz4v4Fs6E= Subject key identifier: F2:7D:10:7A:5A:0C:59:4F:6E:8E:34:E5:7C:A4:30:04:5C:87:12:CD Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 248804F8D6CEAA474B60BF9B8A1E74D033800B09 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa Signing time: Sat 12 Apr 2025 14:06:36 +0000 ROA not before: Sat 12 Apr 2025 14:01:36 +0000 ROA not after: Sat 11 Apr 2026 14:06:36 +0000 asID: 39351 IP address blocks: 2a0b:4e07:60e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Apr 2025 21:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:88:04:f8:d6:ce:aa:47:4b:60:bf:9b:8a:1e:74:d0:33:80:0b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Apr 12 14:01:36 2025 GMT Not After : Apr 11 14:06:36 2026 GMT Subject: CN=F27D107A5A0C594F6E8E34E57CA430045C8712CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f9:54:4e:70:f9:8a:75:33:fa:d0:3c:9d:43: 88:e8:0b:e1:cf:be:f8:66:89:f8:e5:8e:6e:81:b4: a8:6f:a3:a1:dd:3c:54:d5:72:97:e8:45:1c:01:72: bf:3f:88:b8:9d:6d:93:b6:0a:2b:10:ae:db:fa:81: 36:92:21:c1:ea:3b:a4:24:0b:b0:3d:d7:86:3f:40: 69:78:d1:04:9a:47:c4:12:e8:dc:65:19:a9:89:01: 6b:50:56:c9:69:7f:0e:24:ed:3e:f2:85:ee:dc:bd: 93:b2:b3:c9:d4:e1:29:83:74:47:f8:56:65:62:36: 0f:ba:5c:39:b2:27:02:6a:e4:bd:07:0a:38:a0:d4: a3:8f:5f:7e:7e:db:4c:21:ce:f9:1a:b0:4d:7e:cb: 2d:54:57:6b:4d:e6:8d:97:5b:ad:51:90:d4:10:3c: 99:b3:fe:56:fb:33:74:00:83:a7:46:0c:d6:d0:3f: 2f:d9:36:b0:68:24:44:3a:91:f2:bd:6e:b6:72:ea: 3b:91:00:84:a2:74:ea:d5:f7:de:2b:81:16:50:83: b8:ef:b2:73:14:b0:65:e4:74:8e:f6:d4:db:0a:da: a6:59:d1:9c:1c:92:64:e0:35:e4:ac:06:81:0d:28: 89:fa:3a:ab:fd:8a:cc:04:5d:24:7a:09:fe:71:39: c0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7D:10:7A:5A:0C:59:4F:6E:8E:34:E5:7C:A4:30:04:5C:87:12:CD X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:60e0::/44 Signature Algorithm: sha256WithRSAEncryption 10:c2:5f:a6:bc:af:5c:bb:f6:20:b8:3a:a3:e6:a9:0b:d6:db: 28:e9:d2:71:6d:48:f2:4d:b4:f1:5d:87:2e:36:5a:40:61:04: 27:ae:96:29:76:ac:9b:d8:ba:f3:fb:b4:fd:06:2c:43:2f:90: b8:62:9e:ea:4e:b4:64:d6:27:d7:33:15:66:20:da:c0:14:85: e7:5c:c0:71:de:6f:f0:4f:07:82:cb:2a:20:d0:21:6b:5d:44: ab:63:6b:8a:a7:62:34:b2:b8:f0:e9:a4:75:68:0a:29:fa:81: 5e:fd:d2:05:39:27:f0:ea:bf:1b:20:cb:38:ef:17:68:d0:ea: 74:9f:d0:cd:a7:7a:35:d5:ac:d3:c9:1f:b5:d7:61:b6:8c:25: f6:0c:6b:67:91:42:d8:03:4e:3c:43:20:6b:fc:00:5f:b8:ed: 83:d6:55:9d:cc:d6:f6:f4:f9:b2:de:8a:b3:31:6d:ca:39:92: 78:32:3f:ea:2d:35:5b:bb:0d:bc:74:14:52:e6:2c:d9:7a:c6: bb:a1:d7:42:3d:e6:15:4b:98:c3:22:0d:e3:82:20:df:4c:54: bf:6f:cd:2c:92:a7:ec:2d:ef:6d:fa:dc:43:35:fa:53:58:13: 9f:a1:4c:1e:a2:12:e0:87:85:e1:70:21:ae:17:c1:5f:af:4e: 9d:43:ab:47 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUJIgE+NbOqkdLYL+bih500DOACwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNTA0MTIxNDAxMzZaFw0yNjA0MTExNDA2MzZaMDMxMTAvBgNV BAMTKEYyN0QxMDdBNUEwQzU5NEY2RThFMzRFNTdDQTQzMDA0NUM4NzEyQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC++VROcPmKdTP60DydQ4joC+HP vvhmifjljm6BtKhvo6HdPFTVcpfoRRwBcr8/iLidbZO2CisQrtv6gTaSIcHqO6Qk C7A914Y/QGl40QSaR8QS6NxlGamJAWtQVslpfw4k7T7yhe7cvZOys8nU4SmDdEf4 VmViNg+6XDmyJwJq5L0HCjig1KOPX35+20whzvkasE1+yy1UV2tN5o2XW61RkNQQ PJmz/lb7M3QAg6dGDNbQPy/ZNrBoJEQ6kfK9brZy6juRAISidOrV994rgRZQg7jv snMUsGXkdI721NsK2qZZ0ZwckmTgNeSsBoENKIn6Oqv9iswEXSR6Cf5xOcA9AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU8n0QeloMWU9ujjTlfKQwBFyHEs0wHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmVhZDJkY2Yt ZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5YzUwLzMvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzNjMwNjUzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMzMzkzMzM1MzEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQqC04HYOAwDQYJKoZIhvcNAQELBQADggEBABDCX6a8r1y79iC4OqPm qQvW2yjp0nFtSPJNtPFdhy42WkBhBCeulil2rJvYuvP7tP0GLEMvkLhinupOtGTW J9czFWYg2sAUhedcwHHeb/BPB4LLKiDQIWtdRKtja4qnYjSyuPDppHVoCin6gV79 0gU5J/DqvxsgyzjvF2jQ6nSf0M2nejXVrNPJH7XXYbaMJfYMa2eRQtgDTjxDIGv8 AF+47YPWVZ3M1vb0+bLeirMxbco5kngyP+otNVu7Dbx0FFLmLNl6xruh10I95hVL mMMiDeOCIN9MVL9vzSySp+wt72363EM1+lNYE5+hTB6iEuCHheFwIa4XwV+vTp1D q0c= -----END CERTIFICATE-----Generated at Mon Apr 21 05:41:55 2025 by rpki-client