$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/326130393a353463373a316562653a3a2f34382d3438203d3e20323039383636.roa File: 326130393a353463373a316562653a3a2f34382d3438203d3e20323039383636.roa (raw, json) Hash identifier: TaPYx3TgPHUyddmtxy9zzW0mG+lkUufKcfpaVs06+uc= Subject key identifier: FF:D3:A7:45:5F:F1:5E:06:09:13:B2:E2:38:60:DF:D3:1D:3C:3F:52 Certificate issuer: /CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA Certificate serial: 6484C5EBC0962E7BC562E7F1E40A729F0715536F Authority key identifier: 3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/326130393a353463373a316562653a3a2f34382d3438203d3e20323039383636.roa Signing time: Tue 27 May 2025 19:39:46 +0000 ROA not before: Tue 27 May 2025 19:34:46 +0000 ROA not after: Tue 26 May 2026 19:39:46 +0000 asID: 209866 IP address blocks: 2a09:54c7:1ebe::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 01:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:84:c5:eb:c0:96:2e:7b:c5:62:e7:f1:e4:0a:72:9f:07:15:53:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA Validity Not Before: May 27 19:34:46 2025 GMT Not After : May 26 19:39:46 2026 GMT Subject: CN=FFD3A7455FF15E060913B2E23860DFD31D3C3F52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a9:23:cc:f2:d6:60:95:02:a4:48:e3:0d:3b: 91:d7:8c:f4:a3:79:53:08:e4:4f:3f:80:02:0c:de: 46:b6:ef:ab:d1:08:57:9e:5c:58:18:62:d7:2b:42: f1:31:58:c8:42:fd:37:2f:47:33:0b:05:03:2d:ec: 82:39:77:6d:d9:0b:61:52:37:e8:98:ee:42:1e:3b: 62:79:7e:e1:36:58:ee:0c:d9:68:49:0a:dc:65:67: 1c:ef:ee:11:9f:55:6b:8a:01:a1:9e:bb:e0:e2:df: d4:0e:e8:5a:e9:77:af:76:f0:8d:3b:90:74:66:45: 54:c2:83:cb:da:6f:8d:7d:63:ed:19:6f:de:4d:2e: 75:df:6c:0d:2e:14:8e:ce:43:55:8e:3c:02:d1:fb: 44:96:24:21:d3:90:2b:27:dc:c5:41:f2:58:43:61: 0e:0c:c3:13:67:81:0f:cd:84:55:e2:e2:d5:5c:0a: d9:2b:4d:96:d7:c7:d0:2a:3a:e6:4e:06:95:51:63: 9e:85:04:3c:a0:65:fd:d8:d9:af:de:47:d6:6e:6c: 99:f0:e9:de:fc:65:39:76:40:c9:91:cd:3b:1c:da: 49:ee:5e:a8:7a:4c:12:6a:d8:39:d1:c1:34:fe:13: 68:0d:ef:9d:e2:48:a3:e1:88:a5:05:27:63:26:ae: a8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D3:A7:45:5F:F1:5E:06:09:13:B2:E2:38:60:DF:D3:1D:3C:3F:52 X509v3 Authority Key Identifier: keyid:3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/326130393a353463373a316562653a3a2f34382d3438203d3e20323039383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c7:1ebe::/48 Signature Algorithm: sha256WithRSAEncryption bf:11:7b:8e:6b:2e:73:cc:b9:08:99:68:c6:25:e9:87:ad:3a: df:67:a7:f2:2d:3a:85:03:e4:11:5d:66:5a:e9:ca:9e:bc:95: d1:7d:68:11:81:2d:3d:af:63:b3:c2:d4:19:17:82:84:1b:32: 97:d3:67:9d:df:09:0e:ef:56:69:85:cf:4e:78:35:75:86:47: 6e:23:66:c0:49:1e:8f:a4:5f:33:ec:76:f0:29:94:bb:25:b0: cf:dd:71:37:57:d0:50:5d:1e:d8:de:07:2a:96:9b:e1:33:fd: 45:fb:48:2b:f6:d6:d5:d0:80:53:03:46:a8:a4:09:51:f5:6b: 22:d0:bf:d8:b2:b3:86:ee:28:50:28:25:19:1f:ff:9d:2b:e7: c3:4b:70:d8:09:b6:1d:8e:f8:56:a1:15:e2:99:d5:ba:76:da: e6:3f:f0:b6:9f:03:cb:8f:c4:bc:68:9b:7d:49:8b:71:78:d5: 52:38:cb:e9:d9:97:d3:fa:54:bb:2d:83:f8:85:e7:71:44:07: 3a:2b:b2:49:8c:a3:34:e7:d9:51:01:7c:e0:2d:b6:d7:11:af: ee:95:eb:9d:4f:29:a5:0d:0f:16:05:7b:19:4f:95:9e:62:26: bc:5c:ee:40:a8:f0:e0:30:78:21:80:0d:5d:0d:ed:e6:3e:c7: a2:0b:11:f1 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUZITF68CWLnvFYufx5ApynwcVU28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwRDVDOTg5RDA2REVFNENFRjczQjc2NDIzRjdEMUIy NDgzMDVDQTAeFw0yNTA1MjcxOTM0NDZaFw0yNjA1MjYxOTM5NDZaMDMxMTAvBgNV BAMTKEZGRDNBNzQ1NUZGMTVFMDYwOTEzQjJFMjM4NjBERkQzMUQzQzNGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqSPM8tZglQKkSOMNO5HXjPSj eVMI5E8/gAIM3ka276vRCFeeXFgYYtcrQvExWMhC/TcvRzMLBQMt7II5d23ZC2FS N+iY7kIeO2J5fuE2WO4M2WhJCtxlZxzv7hGfVWuKAaGeu+Di39QO6Frpd6928I07 kHRmRVTCg8vab419Y+0Zb95NLnXfbA0uFI7OQ1WOPALR+0SWJCHTkCsn3MVB8lhD YQ4MwxNngQ/NhFXi4tVcCtkrTZbXx9AqOuZOBpVRY56FBDygZf3Y2a/eR9ZubJnw 6d78ZTl2QMmRzTsc2knuXqh6TBJq2DnRwTT+E2gN753iSKPhiKUFJ2MmrqgtAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU/9OnRV/xXgYJE7LiOGDf0x08P1IwHwYDVR0j BBgwFoAUPw1cmJ0G3uTO9zt2Qj99GySDBcowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1 N2EyLzEvM0YwRDVDOTg5RDA2REVFNENFRjczQjc2NDIzRjdEMUIyNDgzMDVDQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy8zRjBENUM5ODlEMDZERUU0Q0VGNzNCNzY0 MjNGN0QxQjI0ODMwNUNBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9jZjgxZTIzNS04MTU4LTQwN2UtYmNmZi1mMDk2MzQ4MzU3YTIvMS8zMjYxMzAz OTNhMzUzNDYzMzczYTMxNjU2MjY1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM5MzgzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKglUxx6+MA0GCSqGSIb3DQEBCwUAA4IBAQC/ EXuOay5zzLkImWjGJemHrTrfZ6fyLTqFA+QRXWZa6cqevJXRfWgRgS09r2OzwtQZ F4KEGzKX02ed3wkO71Zphc9OeDV1hkduI2bASR6PpF8z7HbwKZS7JbDP3XE3V9BQ XR7Y3gcqlpvhM/1F+0gr9tbV0IBTA0aopAlR9Wsi0L/YsrOG7ihQKCUZH/+dK+fD S3DYCbYdjvhWoRXimdW6dtrmP/C2nwPLj8S8aJt9SYtxeNVSOMvp2ZfT+lS7LYP4 hedxRAc6K7JJjKM059lRAXzgLbbXEa/uleudTymlDQ8WBXsZT5WeYia8XO5AqPDg MHghgA1dDe3mPseiCxHx -----END CERTIFICATE-----Generated at Fri Jun 6 14:09:01 2025 by rpki-client