$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/326130353a646663333a666434303a3a2f34342d3438203d3e20323134323939.roa File: 326130353a646663333a666434303a3a2f34342d3438203d3e20323134323939.roa (raw, json) Hash identifier: tzPv+0SYW7c4BhO+NRENEMHDxJFYhSgi+7F5pSL26rM= Subject key identifier: 3C:A4:66:9D:F8:E3:5E:FF:8D:EF:57:C9:FB:6C:8B:49:0A:5F:0D:69 Certificate issuer: /CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA Certificate serial: 09B5AACD3E2F4D02D7A17737871BB9C56B19596F Authority key identifier: 3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/326130353a646663333a666434303a3a2f34342d3438203d3e20323134323939.roa Signing time: Tue 27 May 2025 19:38:36 +0000 ROA not before: Tue 27 May 2025 19:33:36 +0000 ROA not after: Tue 26 May 2026 19:38:36 +0000 asID: 214299 IP address blocks: 2a05:dfc3:fd40::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 01:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b5:aa:cd:3e:2f:4d:02:d7:a1:77:37:87:1b:b9:c5:6b:19:59:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA Validity Not Before: May 27 19:33:36 2025 GMT Not After : May 26 19:38:36 2026 GMT Subject: CN=3CA4669DF8E35EFF8DEF57C9FB6C8B490A5F0D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c0:fa:ea:3a:d0:0b:05:e1:45:9b:f5:90:93: 36:f3:28:ee:b8:79:f3:6c:be:dd:8c:e1:f8:74:97: f3:03:df:83:39:57:74:22:9b:01:8c:4d:1a:df:1b: d4:8e:e8:68:32:44:ac:62:7a:4b:d2:97:9a:05:85: 1d:a5:55:0b:7b:cb:64:d1:13:59:ca:bb:26:15:0e: 31:06:b1:36:b1:30:0f:bc:1d:08:d3:fb:7f:af:c2: eb:b2:0d:03:34:62:7f:e2:ed:d3:a7:8a:ce:e7:b4: 71:ce:e6:22:84:87:f0:02:74:b4:9c:50:bb:3a:8d: 8b:9b:47:40:20:7f:4c:00:26:c0:5f:c5:f1:cb:ea: 4f:40:5c:5c:07:a3:36:73:e6:8f:ac:c6:2e:36:fc: d8:69:85:38:34:7d:d3:a1:7c:bb:3c:d6:85:d2:4c: 7e:0f:b5:dd:17:de:74:55:90:35:2c:9e:95:fe:32: b3:67:45:41:db:20:01:6a:2c:30:ba:e4:c8:c3:f5: cd:e7:6c:9a:b9:ec:ea:a7:c0:24:75:14:52:dc:31: 42:25:a9:55:56:3b:e4:4e:ef:3d:27:be:40:19:53: 1c:7d:6b:3f:7a:c6:75:26:58:71:39:39:f3:40:97: 24:d9:13:83:cc:91:a0:67:c9:c3:38:c9:29:40:2c: 78:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A4:66:9D:F8:E3:5E:FF:8D:EF:57:C9:FB:6C:8B:49:0A:5F:0D:69 X509v3 Authority Key Identifier: keyid:3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/326130353a646663333a666434303a3a2f34342d3438203d3e20323134323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd40::/44 Signature Algorithm: sha256WithRSAEncryption b2:ca:94:03:d6:43:b6:69:5d:cb:a3:f2:e1:26:eb:e5:49:fd: de:e8:d8:6c:e0:60:32:03:71:48:38:21:f7:39:22:7f:23:47: 83:3d:e1:a2:43:11:e2:f9:c3:68:25:5f:70:c6:8d:52:57:1d: 17:1a:0f:c6:e6:75:fd:f2:02:bb:c1:f0:c8:6d:51:cc:79:bb: c0:af:65:04:c0:a1:b5:8c:eb:25:75:3b:5e:88:e7:c9:f3:70: 97:1d:f9:c9:7f:3b:5b:dc:76:eb:c1:f6:b5:1b:1f:76:36:af: 51:27:b3:3e:60:c8:07:91:f4:77:40:ae:2f:46:ad:84:1f:3c: d1:7e:25:46:93:98:f1:cf:3a:59:66:b8:e8:17:7b:ae:e7:72: f8:81:02:c0:15:f9:37:73:5a:7c:7b:b7:4a:c6:2b:62:8d:5d: fb:71:8f:0b:03:d8:6a:7d:c2:c1:33:de:c5:e8:74:62:94:aa: e9:a1:4b:2c:0b:a4:bf:4e:cf:ff:fc:a6:58:8a:9d:7d:e6:cd: 4f:16:e8:c8:fa:c1:aa:c6:5b:bf:23:af:f4:9f:2c:fb:70:bc: bd:46:6a:ea:d2:bd:95:fb:12:9c:45:00:48:23:f0:22:17:53: de:ba:88:47:e8:ae:c6:20:67:e1:a0:5c:9a:c9:52:ec:b2:61: 02:54:ab:86 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUCbWqzT4vTQLXoXc3hxu5xWsZWW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwRDVDOTg5RDA2REVFNENFRjczQjc2NDIzRjdEMUIy NDgzMDVDQTAeFw0yNTA1MjcxOTMzMzZaFw0yNjA1MjYxOTM4MzZaMDMxMTAvBgNV BAMTKDNDQTQ2NjlERjhFMzVFRkY4REVGNTdDOUZCNkM4QjQ5MEE1RjBENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUwPrqOtALBeFFm/WQkzbzKO64 efNsvt2M4fh0l/MD34M5V3QimwGMTRrfG9SO6GgyRKxiekvSl5oFhR2lVQt7y2TR E1nKuyYVDjEGsTaxMA+8HQjT+3+vwuuyDQM0Yn/i7dOnis7ntHHO5iKEh/ACdLSc ULs6jYubR0Agf0wAJsBfxfHL6k9AXFwHozZz5o+sxi42/NhphTg0fdOhfLs81oXS TH4Ptd0X3nRVkDUsnpX+MrNnRUHbIAFqLDC65MjD9c3nbJq57OqnwCR1FFLcMUIl qVVWO+RO7z0nvkAZUxx9az96xnUmWHE5OfNAlyTZE4PMkaBnycM4ySlALHhtAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUPKRmnfjjXv+N71fJ+2yLSQpfDWkwHwYDVR0j BBgwFoAUPw1cmJ0G3uTO9zt2Qj99GySDBcowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1 N2EyLzEvM0YwRDVDOTg5RDA2REVFNENFRjczQjc2NDIzRjdEMUIyNDgzMDVDQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy8zRjBENUM5ODlEMDZERUU0Q0VGNzNCNzY0 MjNGN0QxQjI0ODMwNUNBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9jZjgxZTIzNS04MTU4LTQwN2UtYmNmZi1mMDk2MzQ4MzU3YTIvMS8zMjYxMzAz NTNhNjQ2NjYzMzMzYTY2NjQzNDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM0MzIzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfw/1AMA0GCSqGSIb3DQEBCwUAA4IBAQCy ypQD1kO2aV3Lo/LhJuvlSf3e6Nhs4GAyA3FIOCH3OSJ/I0eDPeGiQxHi+cNoJV9w xo1SVx0XGg/G5nX98gK7wfDIbVHMebvAr2UEwKG1jOsldTteiOfJ83CXHfnJfztb 3Hbrwfa1Gx92Nq9RJ7M+YMgHkfR3QK4vRq2EHzzRfiVGk5jxzzpZZrjoF3uu53L4 gQLAFfk3c1p8e7dKxitijV37cY8LA9hqfcLBM97F6HRilKrpoUssC6S/Ts///KZY ip195s1PFujI+sGqxlu/I6/0nyz7cLy9Rmrq0r2V+xKcRQBII/AiF1PeuohH6K7G IGfhoFyayVLssmECVKuG -----END CERTIFICATE-----Generated at Fri Jun 6 13:47:48 2025 by rpki-client