$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/326131343a373538303a6330303a3a2f34302d3438203d3e20313938303235.roa File: 326131343a373538303a6330303a3a2f34302d3438203d3e20313938303235.roa (raw, json) Hash identifier: 3eo92HTpLxu+/Kjst/g+aIrgcCeedR/rWPVZHkoZXZY= Subject key identifier: C1:EF:D5:5F:55:41:A6:95:F5:FE:08:89:B8:F9:4A:EA:B8:45:42:92 Certificate issuer: /CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749 Certificate serial: 706D4301F2B00599F510CC84AEFBF1052184638D Authority key identifier: B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/326131343a373538303a6330303a3a2f34302d3438203d3e20313938303235.roa Signing time: Sun 04 May 2025 11:20:33 +0000 ROA not before: Sun 04 May 2025 11:15:33 +0000 ROA not after: Sun 03 May 2026 11:20:33 +0000 asID: 198025 IP address blocks: 2a14:7580:c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 06:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:6d:43:01:f2:b0:05:99:f5:10:cc:84:ae:fb:f1:05:21:84:63:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749 Validity Not Before: May 4 11:15:33 2025 GMT Not After : May 3 11:20:33 2026 GMT Subject: CN=C1EFD55F5541A695F5FE0889B8F94AEAB8454292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:41:e7:b7:12:3d:24:ff:52:b3:2d:26:54:9a: 9c:5d:48:10:c0:56:49:66:27:69:75:7f:d4:ad:6b: b9:94:ef:79:19:91:39:ab:c6:5e:31:71:eb:fb:c7: 35:81:98:3e:be:73:83:f4:8c:82:85:1d:a0:91:f3: 67:df:eb:ac:58:87:98:0d:3b:f9:a9:e7:9e:aa:22: f4:c3:5b:d1:27:75:5f:b9:26:16:e1:f0:75:1b:f5: f3:af:6d:92:a4:fe:bf:bb:31:c8:da:78:70:22:ec: c8:4d:d2:6a:73:33:91:af:6d:a9:96:c1:5a:6c:66: a9:c2:b0:69:9a:56:b0:82:33:17:9a:85:67:bc:88: eb:ef:38:a1:41:34:69:09:8a:0e:47:48:7d:74:89: ae:f9:98:fc:b8:0d:06:76:83:6f:e3:52:ec:54:0e: 2e:77:8d:7e:aa:8a:1f:0d:38:78:ee:0c:17:84:94: d0:0c:4c:fa:26:ad:ac:db:6f:18:ce:87:f1:c5:46: f0:10:cd:86:6c:ec:10:10:a9:bc:d3:7b:07:7e:05: 6f:3e:60:e6:6d:91:c2:eb:a3:00:fc:2c:42:c6:b4: 1b:41:84:42:66:75:27:df:fe:8d:fc:9f:1f:48:cc: 98:c4:e1:c3:23:2d:d9:38:22:ca:19:e9:28:ec:35: 68:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EF:D5:5F:55:41:A6:95:F5:FE:08:89:B8:F9:4A:EA:B8:45:42:92 X509v3 Authority Key Identifier: keyid:B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/326131343a373538303a6330303a3a2f34302d3438203d3e20313938303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:c00::/40 Signature Algorithm: sha256WithRSAEncryption 2d:5b:66:94:56:bf:a6:8d:77:a2:a1:cd:46:e2:37:fd:fd:b1: 58:1c:39:94:aa:04:d0:67:40:cc:dd:19:89:da:1a:cc:84:3a: 4b:d5:f9:46:b9:3f:07:ff:21:ec:32:e2:88:82:ba:7d:29:61: d6:ad:5d:94:83:88:df:24:99:ad:6c:45:38:71:a4:d8:0d:c3: d6:54:6d:7e:42:af:e3:9d:4b:f2:ac:e9:b7:54:15:3f:fc:b7: c6:03:c6:4e:04:98:e4:4c:f9:77:b1:12:78:5c:3c:f2:50:47: 9b:4d:22:c8:15:d7:98:19:85:be:dc:80:01:b4:dd:d9:53:ee: f6:3f:d7:f5:58:e1:d4:28:f0:17:d8:6b:79:ae:2e:f5:a0:c7: e9:c5:27:b3:a9:7d:19:19:52:85:3b:74:38:6a:be:03:f6:d7: 3b:69:a4:8f:ce:2d:ee:fc:b1:6a:f8:5a:2a:79:d8:fe:4b:7c: 36:18:0c:66:64:66:44:33:47:b2:5d:08:43:c5:83:6f:1a:68: 47:34:6b:50:9e:70:8a:59:5d:b2:e4:95:de:9a:35:38:72:f2: 85:84:f8:58:87:7c:f6:a1:37:7f:b7:6d:b6:c9:01:e7:e3:6c: a8:c5:d7:d9:fd:62:1b:05:b8:fa:ca:ed:db:9c:b0:37:1b:51: 85:56:5e:c9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcG1DAfKwBZn1EMyErvvxBSGEY40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdEMkU4NkZEM0RBMTVCRDEzNENBMjE1NUMzQTlGREE3 MThCMzc0OTAeFw0yNTA1MDQxMTE1MzNaFw0yNjA1MDMxMTIwMzNaMDMxMTAvBgNV BAMTKEMxRUZENTVGNTU0MUE2OTVGNUZFMDg4OUI4Rjk0QUVBQjg0NTQyOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHQee3Ej0k/1KzLSZUmpxdSBDA VklmJ2l1f9Sta7mU73kZkTmrxl4xcev7xzWBmD6+c4P0jIKFHaCR82ff66xYh5gN O/mp556qIvTDW9EndV+5Jhbh8HUb9fOvbZKk/r+7McjaeHAi7MhN0mpzM5GvbamW wVpsZqnCsGmaVrCCMxeahWe8iOvvOKFBNGkJig5HSH10ia75mPy4DQZ2g2/jUuxU Di53jX6qih8NOHjuDBeElNAMTPomrazbbxjOh/HFRvAQzYZs7BAQqbzTewd+BW8+ YOZtkcLrowD8LELGtBtBhEJmdSff/o38nx9IzJjE4cMjLdk4IsoZ6SjsNWirAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUwe/VX1VBppX1/giJuPlK6rhFQpIwHwYDVR0j BBgwFoAUt9Lob9PaFb0TTKIVXDqf2nGLN0kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzZmZDRlYTEtYTI2Ni00ZGVhLWI0OGEtMTVkYTM1NDUy MTA5LzEvQjdEMkU4NkZEM0RBMTVCRDEzNENBMjE1NUMzQTlGREE3MThCMzc0OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CN0QyRTg2RkQzREExNUJEMTM0Q0EyMTU1 QzNBOUZEQTcxOEIzNzQ5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9jNmZkNGVhMS1hMjY2LTRkZWEtYjQ4YS0xNWRhMzU0NTIxMDkvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTYzMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMxMzkz ODMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYAMMA0GCSqGSIb3DQEBCwUAA4IBAQAtW2aU Vr+mjXeioc1G4jf9/bFYHDmUqgTQZ0DM3RmJ2hrMhDpL1flGuT8H/yHsMuKIgrp9 KWHWrV2Ug4jfJJmtbEU4caTYDcPWVG1+Qq/jnUvyrOm3VBU//LfGA8ZOBJjkTPl3 sRJ4XDzyUEebTSLIFdeYGYW+3IABtN3ZU+72P9f1WOHUKPAX2Gt5ri71oMfpxSez qX0ZGVKFO3Q4ar4D9tc7aaSPzi3u/LFq+Foqedj+S3w2GAxmZGZEM0eyXQhDxYNv GmhHNGtQnnCKWV2y5JXemjU4cvKFhPhYh3z2oTd/t222yQHn42yoxdfZ/WIbBbj6 yu3bnLA3G1GFVl7J -----END CERTIFICATE-----Generated at Fri Jun 6 23:02:27 2025 by rpki-client