$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/326130393a353463373a313030303a3a2f34382d3438203d3e20323134323939.roa File: 326130393a353463373a313030303a3a2f34382d3438203d3e20323134323939.roa (raw, json) Hash identifier: polSfU3C8waUTNHXjjV/PtCyw7FXJG9dpAnmbVhvFpA= Subject key identifier: 91:80:67:0C:50:7E:60:95:EF:E4:BE:EF:F4:87:AC:34:AB:40:9A:46 Certificate issuer: /CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA Certificate serial: 19AFB866FAD553E57B912FDDEC725A66F9C1060A Authority key identifier: 3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/326130393a353463373a313030303a3a2f34382d3438203d3e20323134323939.roa Signing time: Tue 27 May 2025 23:18:10 +0000 ROA not before: Tue 27 May 2025 23:13:10 +0000 ROA not after: Tue 26 May 2026 23:18:10 +0000 asID: 214299 IP address blocks: 2a09:54c7:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 01:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:af:b8:66:fa:d5:53:e5:7b:91:2f:dd:ec:72:5a:66:f9:c1:06:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA Validity Not Before: May 27 23:13:10 2025 GMT Not After : May 26 23:18:10 2026 GMT Subject: CN=9180670C507E6095EFE4BEEFF487AC34AB409A46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e6:d6:1f:b6:35:19:00:c2:f6:4e:5d:23:30: 42:20:ba:bf:69:a0:2b:f4:b5:4f:a9:54:0c:d1:71: f5:f0:89:ac:fc:d7:2e:44:c6:6e:00:e0:a6:c2:fa: e6:dc:98:b6:a4:f9:d3:15:34:56:a5:06:88:30:b4: 29:08:be:5f:5f:f8:e3:c0:e8:e8:16:e1:1f:68:8d: 4f:ef:1e:84:47:ee:c1:5c:38:f4:34:fc:fd:aa:34: 61:61:c7:aa:4b:69:f3:5c:58:9d:2a:86:ff:a4:7f: d9:84:61:8f:20:77:85:a3:35:68:69:1d:1e:ed:97: 17:ac:a9:3c:01:a5:6e:76:5e:3b:62:8d:a9:f1:d3: d0:cc:39:13:91:b2:9e:6b:3a:8a:7b:ae:7a:06:2e: df:72:c2:91:5a:a3:42:e1:0d:01:23:d1:41:c8:b3: bd:f9:f2:b3:49:8e:47:2d:31:d1:3b:f1:b4:c9:8a: 11:2f:74:5f:28:08:c2:94:68:80:37:87:81:33:03: de:e7:c4:c3:0f:72:e5:f1:56:10:4b:ca:ad:77:45: ba:3a:bf:23:32:c6:0e:b0:c2:60:e8:1b:8a:b5:28: e0:ee:e4:62:9b:c4:56:4d:e5:9f:3d:1e:ba:60:00: bb:d4:f7:dd:d4:80:bc:54:e0:d2:74:2e:de:94:11: ca:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:80:67:0C:50:7E:60:95:EF:E4:BE:EF:F4:87:AC:34:AB:40:9A:46 X509v3 Authority Key Identifier: keyid:3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/326130393a353463373a313030303a3a2f34382d3438203d3e20323134323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c7:1000::/48 Signature Algorithm: sha256WithRSAEncryption 24:95:2c:dc:6d:2c:de:94:87:bb:a8:af:46:77:a0:c2:86:7d: 8e:cf:13:9a:91:7a:ae:6f:ec:55:18:a2:2a:23:d2:ed:6f:7d: ea:73:16:22:05:c6:bd:e1:45:e5:fc:5c:06:78:bb:c1:ee:da: 5d:6b:79:07:1d:62:e9:98:16:d0:f6:a0:e2:9d:22:81:ac:3f: 57:05:de:e7:78:53:21:9b:71:5f:e8:da:ed:be:9f:ed:05:36: 61:df:5f:c7:e2:92:07:0d:78:8b:af:31:e8:36:f4:1e:78:26: 5a:a4:d9:09:52:24:26:4c:60:4f:97:65:87:71:39:5e:f1:6b: 21:db:ae:b5:cc:3a:c8:fc:47:ad:40:0e:50:12:9a:a2:58:a2: 6b:86:7a:c3:81:b6:c5:0a:02:03:f8:be:ba:a0:29:ea:53:ca: 48:dc:b1:8d:20:e2:b0:2b:e0:ae:c2:a5:97:94:c4:9e:a8:64: f7:54:a5:44:0c:2f:60:73:88:88:71:29:6b:e2:f8:1a:bb:a1: 63:98:21:b1:5a:82:cc:10:27:b2:b0:aa:9d:4a:c8:ed:5f:ef: 1b:ed:74:f0:29:a8:16:01:2a:e4:7b:57:94:3c:77:81:75:a0: 39:55:6c:6b:81:ea:2e:20:4a:ac:d2:f9:24:07:a8:f0:3a:f3: 45:2f:b8:84 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUGa+4ZvrVU+V7kS/d7HJaZvnBBgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwRDVDOTg5RDA2REVFNENFRjczQjc2NDIzRjdEMUIy NDgzMDVDQTAeFw0yNTA1MjcyMzEzMTBaFw0yNjA1MjYyMzE4MTBaMDMxMTAvBgNV BAMTKDkxODA2NzBDNTA3RTYwOTVFRkU0QkVFRkY0ODdBQzM0QUI0MDlBNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5tYftjUZAML2Tl0jMEIgur9p oCv0tU+pVAzRcfXwiaz81y5Exm4A4KbC+ubcmLak+dMVNFalBogwtCkIvl9f+OPA 6OgW4R9ojU/vHoRH7sFcOPQ0/P2qNGFhx6pLafNcWJ0qhv+kf9mEYY8gd4WjNWhp HR7tlxesqTwBpW52Xjtijanx09DMORORsp5rOop7rnoGLt9ywpFao0LhDQEj0UHI s7358rNJjkctMdE78bTJihEvdF8oCMKUaIA3h4EzA97nxMMPcuXxVhBLyq13Rbo6 vyMyxg6wwmDoG4q1KODu5GKbxFZN5Z89HrpgALvU993UgLxU4NJ0Lt6UEcpBAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUkYBnDFB+YJXv5L7v9IesNKtAmkYwHwYDVR0j BBgwFoAUPw1cmJ0G3uTO9zt2Qj99GySDBcowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1 N2EyLzEvM0YwRDVDOTg5RDA2REVFNENFRjczQjc2NDIzRjdEMUIyNDgzMDVDQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy8zRjBENUM5ODlEMDZERUU0Q0VGNzNCNzY0 MjNGN0QxQjI0ODMwNUNBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9jZjgxZTIzNS04MTU4LTQwN2UtYmNmZi1mMDk2MzQ4MzU3YTIvMS8zMjYxMzAz OTNhMzUzNDYzMzczYTMxMzAzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzIzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKglUxxAAMA0GCSqGSIb3DQEBCwUAA4IBAQAk lSzcbSzelIe7qK9Gd6DChn2OzxOakXqub+xVGKIqI9Ltb33qcxYiBca94UXl/FwG eLvB7tpda3kHHWLpmBbQ9qDinSKBrD9XBd7neFMhm3Ff6Nrtvp/tBTZh31/H4pIH DXiLrzHoNvQeeCZapNkJUiQmTGBPl2WHcTle8Wsh2661zDrI/EetQA5QEpqiWKJr hnrDgbbFCgID+L66oCnqU8pI3LGNIOKwK+CuwqWXlMSeqGT3VKVEDC9gc4iIcSlr 4vgau6FjmCGxWoLMECeysKqdSsjtX+8b7XTwKagWASrke1eUPHeBdaA5VWxrgeou IEqs0vkkB6jwOvNFL7iE -----END CERTIFICATE-----Generated at Fri Jun 6 13:52:38 2025 by rpki-client