$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3730303a3a2f34302d3430203d3e20313531313934.roa File: 326131343a373538303a3730303a3a2f34302d3430203d3e20313531313934.roa (raw, json) Hash identifier: omUm+VClsl1esxeSZas8cPGaOt8NK5P0JK8DttORXSQ= Subject key identifier: 65:5F:81:F5:8B:78:A3:8E:0D:6D:7A:13:C2:97:5A:7A:07:59:8B:5D Certificate issuer: /CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79 Certificate serial: 1531542B1350C94F42FF0B39993E3A9DC0335BD2 Authority key identifier: 1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3730303a3a2f34302d3430203d3e20313531313934.roa Signing time: Sun 04 May 2025 13:12:05 +0000 ROA not before: Sun 04 May 2025 13:07:05 +0000 ROA not after: Sun 03 May 2026 13:12:05 +0000 asID: 151194 IP address blocks: 2a14:7580:700::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:31:54:2b:13:50:c9:4f:42:ff:0b:39:99:3e:3a:9d:c0:33:5b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79 Validity Not Before: May 4 13:07:05 2025 GMT Not After : May 3 13:12:05 2026 GMT Subject: CN=655F81F58B78A38E0D6D7A13C2975A7A07598B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:25:6b:a2:e6:3e:15:36:ec:26:47:f6:5a:f2: 1e:bc:c3:0d:5a:a8:c1:d7:35:2f:22:65:9b:62:3b: a7:7f:4a:70:1a:93:c6:4d:44:e1:0a:fe:da:77:b6: 42:8f:3e:e4:53:3a:47:2d:c3:3f:46:3d:22:38:d1: 99:d9:89:79:3c:33:49:e0:ab:49:40:86:b9:64:72: 1c:66:8c:d1:0e:a3:17:75:f4:2d:ae:a5:c3:9b:ee: 62:74:7a:5e:06:66:7a:71:b8:f7:60:dc:70:9f:76: bb:0a:cf:d9:70:c1:48:b0:fa:9e:7b:8f:27:00:d9: 23:3e:8b:a0:e5:68:1a:f8:46:7d:08:44:41:e6:87: 6e:be:f1:09:84:1f:79:72:36:42:0f:f4:54:6e:27: be:ab:37:d9:27:fa:52:57:d2:8b:5f:02:2d:06:5a: cc:49:c7:c2:67:eb:a9:2a:a8:16:66:af:d7:22:bf: 88:c4:5e:34:23:e8:64:d2:7c:bf:d4:61:a8:ae:2e: a1:13:3b:86:a9:19:73:aa:66:8a:bc:09:de:d9:72: d3:da:17:c6:ed:b3:53:43:31:a2:7a:ce:cb:fe:e4: e5:e4:b7:39:7d:99:49:8a:93:37:53:06:e0:e8:7a: 97:83:16:64:6d:56:96:08:a1:1f:cc:46:d4:16:33: 29:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5F:81:F5:8B:78:A3:8E:0D:6D:7A:13:C2:97:5A:7A:07:59:8B:5D X509v3 Authority Key Identifier: keyid:1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3730303a3a2f34302d3430203d3e20313531313934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:700::/40 Signature Algorithm: sha256WithRSAEncryption 8b:18:fc:59:36:3f:cb:83:ff:a5:f1:0f:42:d4:93:0c:e1:d1: 13:6c:42:cc:05:fe:02:6c:47:4f:4b:16:17:42:ff:0c:5d:db: 1a:53:82:9b:24:7e:45:b3:c7:e6:9a:d8:39:ed:68:61:06:25: 30:57:5e:f6:0d:92:b9:84:f0:25:d7:66:e4:ad:8c:b0:4d:6e: 86:19:02:a4:20:0f:fd:1c:8c:51:45:90:a7:e0:cc:73:b4:20: 09:05:cf:28:14:3e:dc:6e:72:b2:7b:46:4e:2b:4c:85:f0:46: 98:0b:de:e7:0a:26:97:80:17:80:7b:34:93:37:f8:0d:6f:5a: f4:d0:e1:ea:34:8e:6f:25:af:b4:a6:63:a5:61:71:59:e3:a6: 51:56:68:6d:c6:68:f1:6b:28:6c:63:c4:75:65:0d:a7:50:bd: 0f:80:77:27:0b:89:7f:0a:32:d1:55:9f:83:c7:61:3d:84:89: 00:81:65:05:c3:5d:4f:f8:76:85:f8:4a:64:58:00:fb:87:56: 2a:0a:da:8e:c0:95:d9:7b:d2:37:00:d6:37:ed:fd:65:94:83: 61:ec:7f:a6:df:f0:83:97:a1:71:d3:ba:11:0d:2a:ea:a2:ff: 4f:2c:03:75:09:52:11:11:2c:46:35:01:55:4f:17:24:a4:cc: af:56:93:3a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFTFUKxNQyU9C/ws5mT46ncAzW9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI4MDQ4NTMxQ0ZFRDI1REVERTRFRjkzQ0JFRUJEMzdB MDA1M0M3OTAeFw0yNTA1MDQxMzA3MDVaFw0yNjA1MDMxMzEyMDVaMDMxMTAvBgNV BAMTKDY1NUY4MUY1OEI3OEEzOEUwRDZEN0ExM0MyOTc1QTdBMDc1OThCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLJWui5j4VNuwmR/Za8h68ww1a qMHXNS8iZZtiO6d/SnAak8ZNROEK/tp3tkKPPuRTOkctwz9GPSI40ZnZiXk8M0ng q0lAhrlkchxmjNEOoxd19C2upcOb7mJ0el4GZnpxuPdg3HCfdrsKz9lwwUiw+p57 jycA2SM+i6DlaBr4Rn0IREHmh26+8QmEH3lyNkIP9FRuJ76rN9kn+lJX0otfAi0G WsxJx8Jn66kqqBZmr9civ4jEXjQj6GTSfL/UYaiuLqETO4apGXOqZoq8Cd7ZctPa F8bts1NDMaJ6zsv+5OXktzl9mUmKkzdTBuDoepeDFmRtVpYIoR/MRtQWMynZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUZV+B9Yt4o44NbXoTwpdaegdZi10wHwYDVR0j BBgwFoAUG4BIUxz+0l3t5O+Ty+69N6AFPHkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzZmZDRlYTEtYTI2Ni00ZGVhLWI0OGEtMTVkYTM1NDUy MTA5LzIvMUI4MDQ4NTMxQ0ZFRDI1REVERTRFRjkzQ0JFRUJEMzdBMDA1M0M3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xQjgwNDg1MzFDRkVEMjVERURFNEVGOTND QkVFQkQzN0EwMDUzQzc5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9jNmZkNGVhMS1hMjY2LTRkZWEtYjQ4YS0xNWRhMzU0NTIxMDkvMi8zMjYxMzEz NDNhMzczNTM4MzAzYTM3MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMxMzUz MTMxMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYAHMA0GCSqGSIb3DQEBCwUAA4IBAQCLGPxZ Nj/Lg/+l8Q9C1JMM4dETbELMBf4CbEdPSxYXQv8MXdsaU4KbJH5Fs8fmmtg57Whh BiUwV172DZK5hPAl12bkrYywTW6GGQKkIA/9HIxRRZCn4MxztCAJBc8oFD7cbnKy e0ZOK0yF8EaYC97nCiaXgBeAezSTN/gNb1r00OHqNI5vJa+0pmOlYXFZ46ZRVmht xmjxayhsY8R1ZQ2nUL0PgHcnC4l/CjLRVZ+Dx2E9hIkAgWUFw11P+HaF+EpkWAD7 h1YqCtqOwJXZe9I3ANY37f1llINh7H+m3/CDl6Fx07oRDSrqov9PLAN1CVIRESxG NQFVTxckpMyvVpM6 -----END CERTIFICATE-----Generated at Fri Jun 6 23:07:26 2025 by rpki-client