$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3731303a3a2f34382d3438203d3e20313938303235.roa File: 326131343a373538303a3731303a3a2f34382d3438203d3e20313938303235.roa (raw, json) Hash identifier: Hxl/WHpFi1Lrr9tPJHprlKCFg1f6KdSpCnh41pb8RUw= Subject key identifier: 18:1C:2D:E1:C7:48:5C:93:3D:28:40:D5:FC:C2:1B:2A:82:E2:D4:BD Certificate issuer: /CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79 Certificate serial: 4F676F3176F2306438DB6B292E602931F0B9E7FB Authority key identifier: 1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3731303a3a2f34382d3438203d3e20313938303235.roa Signing time: Tue 20 May 2025 13:56:52 +0000 ROA not before: Tue 20 May 2025 13:51:52 +0000 ROA not after: Tue 19 May 2026 13:56:52 +0000 asID: 198025 IP address blocks: 2a14:7580:710::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 05:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:67:6f:31:76:f2:30:64:38:db:6b:29:2e:60:29:31:f0:b9:e7:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79 Validity Not Before: May 20 13:51:52 2025 GMT Not After : May 19 13:56:52 2026 GMT Subject: CN=181C2DE1C7485C933D2840D5FCC21B2A82E2D4BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:09:f7:94:ff:52:8e:f5:d5:87:c9:65:a5:42: 3a:86:8f:21:06:b6:c4:df:3b:5d:94:f3:0d:c1:0e: b2:fc:ff:36:35:04:fb:43:c3:f5:49:41:9d:3a:1f: ee:19:cf:99:49:96:ba:fd:7e:a7:06:3c:98:84:8f: 41:ee:86:62:d0:6a:0b:ce:b5:e4:35:5a:2c:b2:73: 46:39:9d:2f:23:e2:a6:7f:28:cf:b3:6a:87:ad:a3: 10:a9:41:09:0c:8f:39:05:ca:f0:6b:ca:5c:50:85: eb:41:d5:71:c8:35:5e:8e:9a:5d:31:89:6f:82:df: 45:09:a4:50:8f:e0:e9:1a:36:43:07:6b:c0:a8:6f: dc:bc:ab:3c:6a:0b:eb:db:43:af:28:23:a1:4e:c1: a4:3a:1e:b0:fe:53:c4:a8:e6:a0:5d:15:c6:1b:c2: 0d:06:0b:02:86:73:6b:f7:df:17:38:1f:a5:5e:4b: 61:de:ce:8e:53:c4:6a:fb:68:9e:8b:17:d5:f1:ca: 40:eb:83:d8:a9:d7:e0:2b:59:f4:a4:7f:39:ef:e3: b1:20:13:b4:1f:2b:ae:1e:86:11:26:4c:de:52:8f: e9:65:c1:f9:73:5d:de:cc:67:78:9c:3c:54:d7:d1: db:02:9e:b6:2f:81:cf:33:d9:62:56:b9:42:c6:2b: da:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1C:2D:E1:C7:48:5C:93:3D:28:40:D5:FC:C2:1B:2A:82:E2:D4:BD X509v3 Authority Key Identifier: keyid:1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3731303a3a2f34382d3438203d3e20313938303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:710::/48 Signature Algorithm: sha256WithRSAEncryption 78:fd:de:8c:ef:64:07:15:14:e4:3b:b3:fd:e0:65:2f:53:8d: b9:a5:8e:8c:d3:7c:39:f4:49:54:16:91:26:5f:e1:5a:52:19: ed:81:e2:f9:f0:0f:23:05:04:b1:f2:ae:63:21:1f:ca:ba:3a: e1:88:7d:62:31:04:2d:b0:ea:d3:d2:30:a8:03:e3:a4:bb:e7: 50:84:41:79:a1:ea:cf:9e:b1:ee:a0:d0:10:56:29:54:c9:63: 61:6b:19:da:10:bf:ba:54:cd:bc:fa:d2:63:54:04:89:c7:6b: cd:7c:43:30:b0:ba:3f:01:8e:d2:63:96:f2:41:4b:b4:ec:b3: 5c:77:3f:03:43:92:87:97:35:11:89:ad:e9:be:ad:85:a8:64: df:67:e2:88:f7:bb:35:73:77:b0:1a:7c:49:1c:b5:cb:eb:d5: 52:bd:74:d7:f3:f8:f9:99:e6:19:3a:1a:f7:79:00:64:3b:da: 88:7b:c8:76:2d:f6:85:e4:0a:71:48:fd:b9:dc:b2:55:20:52: cc:c1:b0:78:05:8e:65:72:9a:20:d9:7d:51:e4:82:b7:12:47: b8:3d:8a:df:ab:3b:e6:2a:60:83:97:9d:f7:d8:25:6b:42:eb: 7e:7f:70:f9:69:4f:d9:b5:0e:00:d1:cb:fd:40:70:ab:37:ad: 4d:26:27:03 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUT2dvMXbyMGQ422spLmApMfC55/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI4MDQ4NTMxQ0ZFRDI1REVERTRFRjkzQ0JFRUJEMzdB MDA1M0M3OTAeFw0yNTA1MjAxMzUxNTJaFw0yNjA1MTkxMzU2NTJaMDMxMTAvBgNV BAMTKDE4MUMyREUxQzc0ODVDOTMzRDI4NDBENUZDQzIxQjJBODJFMkQ0QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbCfeU/1KO9dWHyWWlQjqGjyEG tsTfO12U8w3BDrL8/zY1BPtDw/VJQZ06H+4Zz5lJlrr9fqcGPJiEj0HuhmLQagvO teQ1Wiyyc0Y5nS8j4qZ/KM+zaoetoxCpQQkMjzkFyvBrylxQhetB1XHINV6Oml0x iW+C30UJpFCP4OkaNkMHa8Cob9y8qzxqC+vbQ68oI6FOwaQ6HrD+U8So5qBdFcYb wg0GCwKGc2v33xc4H6VeS2Hezo5TxGr7aJ6LF9XxykDrg9ip1+ArWfSkfznv47Eg E7QfK64ehhEmTN5Sj+llwflzXd7MZ3icPFTX0dsCnrYvgc8z2WJWuULGK9p9AgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUGBwt4cdIXJM9KEDV/MIbKoLi1L0wHwYDVR0j BBgwFoAUG4BIUxz+0l3t5O+Ty+69N6AFPHkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzZmZDRlYTEtYTI2Ni00ZGVhLWI0OGEtMTVkYTM1NDUy MTA5LzIvMUI4MDQ4NTMxQ0ZFRDI1REVERTRFRjkzQ0JFRUJEMzdBMDA1M0M3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xQjgwNDg1MzFDRkVEMjVERURFNEVGOTND QkVFQkQzN0EwMDUzQzc5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9jNmZkNGVhMS1hMjY2LTRkZWEtYjQ4YS0xNWRhMzU0NTIxMDkvMi8zMjYxMzEz NDNhMzczNTM4MzAzYTM3MzEzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkz ODMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYAHEDANBgkqhkiG9w0BAQsFAAOCAQEAeP3e jO9kBxUU5Duz/eBlL1ONuaWOjNN8OfRJVBaRJl/hWlIZ7YHi+fAPIwUEsfKuYyEf yro64Yh9YjEELbDq09IwqAPjpLvnUIRBeaHqz56x7qDQEFYpVMljYWsZ2hC/ulTN vPrSY1QEicdrzXxDMLC6PwGO0mOW8kFLtOyzXHc/A0OSh5c1EYmt6b6thahk32fi iPe7NXN3sBp8SRy1y+vVUr101/P4+ZnmGToa93kAZDvaiHvIdi32heQKcUj9udyy VSBSzMGweAWOZXKaINl9UeSCtxJHuD2K36s75ipgg5ed99gla0Lrfn9w+WlP2bUO ANHL/UBwqzetTSYnAw== -----END CERTIFICATE-----Generated at Fri Jun 6 23:05:44 2025 by rpki-client