$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/326130393a353463373a313030313a3a2f34382d3438203d3e20323134323939.roa File: 326130393a353463373a313030313a3a2f34382d3438203d3e20323134323939.roa (raw, json) Hash identifier: sMFqJHE6ZX3ycW3EXnTJu0zQlY1y10K2aBBpHFeENOs= Subject key identifier: D3:83:13:BE:07:36:00:C9:1A:7D:D5:AC:E9:1D:31:BE:E9:B7:5C:9A Certificate issuer: /CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA Certificate serial: 79192A5A58425F20B2FAA051D57C794C17329F11 Authority key identifier: 3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/326130393a353463373a313030313a3a2f34382d3438203d3e20323134323939.roa Signing time: Tue 27 May 2025 23:18:28 +0000 ROA not before: Tue 27 May 2025 23:13:28 +0000 ROA not after: Tue 26 May 2026 23:18:28 +0000 asID: 214299 IP address blocks: 2a09:54c7:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 01:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:19:2a:5a:58:42:5f:20:b2:fa:a0:51:d5:7c:79:4c:17:32:9f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA Validity Not Before: May 27 23:13:28 2025 GMT Not After : May 26 23:18:28 2026 GMT Subject: CN=D38313BE073600C91A7DD5ACE91D31BEE9B75C9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:48:45:a8:86:21:85:be:97:ff:ad:d5:74: 96:38:7b:af:d2:d6:14:ca:53:b8:a0:c6:f0:1d:cc: 29:80:08:62:8d:7f:2c:8f:16:a7:1c:66:f3:8e:38: e4:a1:e0:d6:f2:a3:b0:b4:c3:91:64:e6:49:86:e8: f8:31:d7:b2:60:19:2a:8e:ed:58:90:70:1b:fe:55: 02:a4:91:ac:12:69:65:42:24:e6:0c:b1:e1:1d:b8: 6c:18:42:3b:73:fd:ce:79:3f:77:57:77:06:15:d8: dd:96:97:44:30:ce:5f:c0:8f:de:7d:15:50:f8:39: de:70:bf:02:df:76:aa:90:00:24:7a:db:b3:01:83: 8b:fd:eb:14:bf:59:9d:92:06:f2:c3:a3:71:20:00: 20:68:9a:79:66:23:15:e9:4b:49:3e:a2:05:2a:65: d6:6b:dd:a6:4e:65:2e:40:dd:dc:3b:e7:8e:bb:4f: 2d:f8:61:fa:e7:5f:20:9b:ac:c6:17:d8:66:b8:54: 5b:70:c5:8e:3a:01:f2:42:53:28:dd:d7:30:ce:61: e4:7f:29:1f:32:55:75:fa:55:fd:e3:3d:02:3d:c3: 83:60:b6:64:18:35:0f:3e:33:d4:09:ef:c9:56:fb: e8:ad:a2:8f:3f:c8:99:08:6f:e9:51:69:f8:b6:dd: c0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:83:13:BE:07:36:00:C9:1A:7D:D5:AC:E9:1D:31:BE:E9:B7:5C:9A X509v3 Authority Key Identifier: keyid:3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/326130393a353463373a313030313a3a2f34382d3438203d3e20323134323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c7:1001::/48 Signature Algorithm: sha256WithRSAEncryption a6:24:7a:21:8f:95:f2:cd:68:3b:c8:da:5c:c5:ca:b2:3b:74: a2:29:9f:7d:2a:b7:a0:25:95:da:21:f5:bc:4e:f4:88:5e:3c: ca:03:09:09:48:4b:cf:1a:78:ef:80:84:fc:b1:23:00:68:b8: 71:20:3b:ff:53:ed:e7:65:7e:ae:c2:f6:08:46:a3:6c:98:14: de:d8:6f:05:3d:53:b7:20:92:67:1a:89:db:51:87:8f:4e:0e: b5:d8:59:20:28:c1:91:2a:e6:24:a6:9a:8e:82:ee:e4:0d:de: 6a:09:a9:27:78:3f:91:eb:f6:77:c7:8e:ad:fd:78:41:97:b8: ce:6c:02:24:6d:72:a7:9d:39:bb:85:ab:aa:02:03:a7:8e:9b: ac:df:ab:07:10:55:05:60:16:dd:13:4a:cf:36:ab:c7:c7:dd: ec:98:d3:28:6d:4b:d6:a6:f1:7e:de:fb:d7:d8:9d:1d:e6:9a: d4:11:9c:9f:e3:1e:96:17:88:e4:46:fa:e0:90:21:ab:79:b3: 1f:f6:33:fb:b5:3f:2d:3e:25:03:a6:58:a1:df:86:74:cd:23: f7:12:1c:66:c8:29:58:bd:cd:fe:b2:50:59:c8:a2:67:0e:02: ba:1d:e8:fe:71:0e:30:b5:80:8e:6a:b0:f8:9a:e8:56:2d:32: ff:ba:80:55 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUeRkqWlhCXyCy+qBR1Xx5TBcynxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwRDVDOTg5RDA2REVFNENFRjczQjc2NDIzRjdEMUIy NDgzMDVDQTAeFw0yNTA1MjcyMzEzMjhaFw0yNjA1MjYyMzE4MjhaMDMxMTAvBgNV BAMTKEQzODMxM0JFMDczNjAwQzkxQTdERDVBQ0U5MUQzMUJFRTlCNzVDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+khFqIYhhb6X/63VdJY4e6/S 1hTKU7igxvAdzCmACGKNfyyPFqccZvOOOOSh4Nbyo7C0w5Fk5kmG6Pgx17JgGSqO 7ViQcBv+VQKkkawSaWVCJOYMseEduGwYQjtz/c55P3dXdwYV2N2Wl0Qwzl/Aj959 FVD4Od5wvwLfdqqQACR627MBg4v96xS/WZ2SBvLDo3EgACBomnlmIxXpS0k+ogUq ZdZr3aZOZS5A3dw75467Ty34YfrnXyCbrMYX2Ga4VFtwxY46AfJCUyjd1zDOYeR/ KR8yVXX6Vf3jPQI9w4NgtmQYNQ8+M9QJ78lW++itoo8/yJkIb+lRafi23cBzAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU04MTvgc2AMkafdWs6R0xvum3XJowHwYDVR0j BBgwFoAUPw1cmJ0G3uTO9zt2Qj99GySDBcowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1 N2EyLzEvM0YwRDVDOTg5RDA2REVFNENFRjczQjc2NDIzRjdEMUIyNDgzMDVDQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy8zRjBENUM5ODlEMDZERUU0Q0VGNzNCNzY0 MjNGN0QxQjI0ODMwNUNBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9jZjgxZTIzNS04MTU4LTQwN2UtYmNmZi1mMDk2MzQ4MzU3YTIvMS8zMjYxMzAz OTNhMzUzNDYzMzczYTMxMzAzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzIzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKglUxxABMA0GCSqGSIb3DQEBCwUAA4IBAQCm JHohj5XyzWg7yNpcxcqyO3SiKZ99KregJZXaIfW8TvSIXjzKAwkJSEvPGnjvgIT8 sSMAaLhxIDv/U+3nZX6uwvYIRqNsmBTe2G8FPVO3IJJnGonbUYePTg612FkgKMGR KuYkppqOgu7kDd5qCakneD+R6/Z3x46t/XhBl7jObAIkbXKnnTm7hauqAgOnjpus 36sHEFUFYBbdE0rPNqvHx93smNMobUvWpvF+3vvX2J0d5prUEZyf4x6WF4jkRvrg kCGrebMf9jP7tT8tPiUDplih34Z0zSP3EhxmyClYvc3+slBZyKJnDgK6Hej+cQ4w tYCOarD4muhWLTL/uoBV -----END CERTIFICATE-----Generated at Fri Jun 6 13:46:31 2025 by rpki-client