$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/326130393a353463373a316562653a3a2f34382d3438203d3e20323134323939.roa File: 326130393a353463373a316562653a3a2f34382d3438203d3e20323134323939.roa (raw, json) Hash identifier: HE6NA8iuF7m/BEGtvKSapzIZyTFfFUeBBMBI1WKr7Q4= Subject key identifier: 0B:1F:C2:12:BB:0C:C3:81:29:CA:FE:C0:27:6D:AD:C2:FF:67:10:B5 Certificate issuer: /CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA Certificate serial: 3737D0983A7871AB419EC03139570EB52FFDB770 Authority key identifier: 3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/326130393a353463373a316562653a3a2f34382d3438203d3e20323134323939.roa Signing time: Wed 28 May 2025 15:36:20 +0000 ROA not before: Wed 28 May 2025 15:31:20 +0000 ROA not after: Wed 27 May 2026 15:36:20 +0000 asID: 214299 IP address blocks: 2a09:54c7:1ebe::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 01:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:37:d0:98:3a:78:71:ab:41:9e:c0:31:39:57:0e:b5:2f:fd:b7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA Validity Not Before: May 28 15:31:20 2025 GMT Not After : May 27 15:36:20 2026 GMT Subject: CN=0B1FC212BB0CC38129CAFEC0276DADC2FF6710B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4a:24:cd:86:bc:4e:1d:ee:d7:33:31:9c:78: d3:99:9d:a1:40:0c:ca:92:d7:86:18:e9:7f:c3:08: 84:3b:42:6b:26:f3:e2:15:ce:7e:05:01:ac:ce:40: bb:87:93:1a:33:75:ed:6e:e2:df:b0:1b:3f:b5:dd: b1:93:d9:12:db:11:db:9f:1d:bb:85:53:f8:af:a0: d3:da:5d:cd:9d:14:65:bf:91:4e:ee:ee:de:be:aa: 0c:94:35:31:bb:63:6e:09:7f:12:09:7c:c9:16:12: 46:ee:26:e4:46:6b:7c:e3:31:5b:39:0a:fd:8c:8f: 8f:a1:1c:2d:bf:e2:7b:cf:97:a0:14:3a:fa:3e:fb: df:a3:df:3e:82:8d:95:83:b3:a0:92:af:8a:e0:93: 5d:df:e0:1a:77:56:d1:b2:f5:a9:97:21:e4:1e:3a: 21:05:b2:c3:f3:cb:39:ea:a4:80:27:be:5c:fd:88: 35:91:97:17:43:87:82:d4:a8:b8:a7:dc:ee:8e:da: ae:39:b0:7c:ac:07:b6:5f:b8:17:21:af:36:60:d9: b3:2d:1a:22:44:b4:1f:f4:ac:24:0e:2d:36:40:42: 49:34:b3:a6:c3:2e:98:43:97:c5:b1:f3:08:e2:cd: 76:39:f2:33:7c:1f:00:e7:e8:ee:a0:40:a6:31:0e: f6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1F:C2:12:BB:0C:C3:81:29:CA:FE:C0:27:6D:AD:C2:FF:67:10:B5 X509v3 Authority Key Identifier: keyid:3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/326130393a353463373a316562653a3a2f34382d3438203d3e20323134323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c7:1ebe::/48 Signature Algorithm: sha256WithRSAEncryption 86:61:66:47:6e:48:c6:58:e9:73:2a:aa:7a:24:ae:b0:8e:bf: fb:d8:90:a8:55:14:c8:cd:d9:4b:cc:7c:d6:fb:da:3e:c3:0a: ae:9d:be:79:5c:10:4e:c4:a0:89:d8:49:bf:8e:4e:dc:8d:cf: 47:6c:81:55:c1:61:86:01:57:ff:fd:63:ab:90:cf:25:26:75: fb:d4:74:87:dc:20:01:80:50:af:a1:41:8f:3f:8e:cf:06:41: bc:5f:e3:33:a8:e7:0c:0c:c5:ae:52:ee:0f:76:ae:cf:79:12: a9:a9:30:a7:4b:87:8c:e4:ae:91:cc:41:f0:a6:29:23:30:f0: 88:a4:04:7a:49:f4:1e:8b:e9:b8:76:e5:bc:78:42:7b:c7:21: d5:13:85:3a:e8:b0:e9:a8:44:c5:26:e1:f6:fa:fb:3c:b8:bc: 65:b5:3b:6a:a1:69:74:f5:fe:87:d2:da:ce:ca:15:f5:a6:3e: 9b:39:74:89:76:fb:6f:94:39:6f:e5:57:44:a0:80:c6:0c:57: dd:35:3e:d6:09:08:8d:31:2d:85:89:70:77:b6:6e:9a:ed:43: 8f:4e:5b:3a:8c:8e:c1:bf:9d:3b:e3:15:0b:ba:b6:0f:e7:8b: cc:8b:69:0e:e3:4f:43:59:e4:4d:2d:c7:fa:47:05:17:a0:87: c9:87:8a:dd -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUNzfQmDp4catBnsAxOVcOtS/9t3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwRDVDOTg5RDA2REVFNENFRjczQjc2NDIzRjdEMUIy NDgzMDVDQTAeFw0yNTA1MjgxNTMxMjBaFw0yNjA1MjcxNTM2MjBaMDMxMTAvBgNV BAMTKDBCMUZDMjEyQkIwQ0MzODEyOUNBRkVDMDI3NkRBREMyRkY2NzEwQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSSiTNhrxOHe7XMzGceNOZnaFA DMqS14YY6X/DCIQ7Qmsm8+IVzn4FAazOQLuHkxozde1u4t+wGz+13bGT2RLbEduf HbuFU/ivoNPaXc2dFGW/kU7u7t6+qgyUNTG7Y24JfxIJfMkWEkbuJuRGa3zjMVs5 Cv2Mj4+hHC2/4nvPl6AUOvo++9+j3z6CjZWDs6CSr4rgk13f4Bp3VtGy9amXIeQe OiEFssPzyznqpIAnvlz9iDWRlxdDh4LUqLin3O6O2q45sHysB7ZfuBchrzZg2bMt GiJEtB/0rCQOLTZAQkk0s6bDLphDl8Wx8wjizXY58jN8HwDn6O6gQKYxDvatAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUCx/CErsMw4Epyv7AJ22twv9nELUwHwYDVR0j BBgwFoAUPw1cmJ0G3uTO9zt2Qj99GySDBcowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1 N2EyLzEvM0YwRDVDOTg5RDA2REVFNENFRjczQjc2NDIzRjdEMUIyNDgzMDVDQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy8zRjBENUM5ODlEMDZERUU0Q0VGNzNCNzY0 MjNGN0QxQjI0ODMwNUNBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9jZjgxZTIzNS04MTU4LTQwN2UtYmNmZi1mMDk2MzQ4MzU3YTIvMS8zMjYxMzAz OTNhMzUzNDYzMzczYTMxNjU2MjY1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzIzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKglUxx6+MA0GCSqGSIb3DQEBCwUAA4IBAQCG YWZHbkjGWOlzKqp6JK6wjr/72JCoVRTIzdlLzHzW+9o+wwqunb55XBBOxKCJ2Em/ jk7cjc9HbIFVwWGGAVf//WOrkM8lJnX71HSH3CABgFCvoUGPP47PBkG8X+MzqOcM DMWuUu4Pdq7PeRKpqTCnS4eM5K6RzEHwpikjMPCIpAR6SfQei+m4duW8eEJ7xyHV E4U66LDpqETFJuH2+vs8uLxltTtqoWl09f6H0trOyhX1pj6bOXSJdvtvlDlv5VdE oIDGDFfdNT7WCQiNMS2FiXB3tm6a7UOPTls6jI7Bv5074xULurYP54vMi2kO409D WeRNLcf6RwUXoIfJh4rd -----END CERTIFICATE-----Generated at Fri Jun 6 14:00:54 2025 by rpki-client