$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa File: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (raw, json) Hash identifier: tFQ4zhgC2iPnwqXyLnNzgEkZZIC1LjVxrVLEJzRxX40= Subject key identifier: 7D:59:3B:93:3B:B4:0B:21:AE:F6:C7:AB:94:F5:D6:43:03:EB:B0:0D Certificate issuer: /CN=178395FF98E8AEA645CFCD7DF742855D46457BAF Certificate serial: 04AE0EFAB6B4DA93B9E5C0D856353AA27AA035A3 Authority key identifier: 17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa Signing time: Fri 14 Feb 2025 13:57:59 +0000 ROA not before: Fri 14 Feb 2025 13:52:59 +0000 ROA not after: Fri 13 Feb 2026 13:57:59 +0000 asID: 214723 IP address blocks: 2a0a:6044:ba00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 13:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ae:0e:fa:b6:b4:da:93:b9:e5:c0:d8:56:35:3a:a2:7a:a0:35:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=178395FF98E8AEA645CFCD7DF742855D46457BAF Validity Not Before: Feb 14 13:52:59 2025 GMT Not After : Feb 13 13:57:59 2026 GMT Subject: CN=7D593B933BB40B21AEF6C7AB94F5D64303EBB00D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:d5:27:db:98:07:8b:1e:39:da:8d:c2:5b: fa:d8:fb:8c:22:ad:da:e2:0f:c5:9a:ef:95:11:87: 2b:1f:c4:dd:ee:03:e1:c7:12:d9:74:e7:56:c5:9f: 4e:21:7f:02:1c:a6:9f:2a:c8:d4:29:1f:34:6b:be: bd:93:20:19:27:c3:c2:1a:b4:56:cb:0b:43:08:27: f8:d3:a4:f3:0a:8c:fa:21:50:a8:5a:24:49:76:29: e5:34:17:0a:dd:b2:bc:99:3e:97:a0:d6:c1:fe:cb: a2:0c:6e:1d:fc:21:06:eb:b4:07:33:0f:c1:70:3e: b0:ed:b8:1a:b8:ca:1a:fa:19:9c:5e:1b:d7:1d:d0: bf:01:fe:49:2e:92:43:82:7b:f2:11:51:be:ba:ea: 74:d1:ea:1b:6b:12:20:cc:da:7d:4c:32:5e:00:e1: 94:eb:a6:6d:5e:67:95:1d:7b:88:57:98:79:4b:59: 2c:4b:6c:04:d8:19:d6:46:77:b3:e8:95:fc:27:a3: 90:f6:fa:67:a8:73:eb:98:35:ee:d1:86:fb:0a:ad: 0e:90:37:20:4b:e6:d3:40:d5:74:14:6b:1c:7e:60: 86:11:3b:86:1f:18:ae:03:82:f4:47:e3:f0:b9:d6: a8:ef:0d:fa:e0:04:c6:9a:00:02:f9:de:6e:d4:17: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:59:3B:93:3B:B4:0B:21:AE:F6:C7:AB:94:F5:D6:43:03:EB:B0:0D X509v3 Authority Key Identifier: keyid:17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ba00::/40 Signature Algorithm: sha256WithRSAEncryption 8e:78:aa:3c:5b:f1:43:a9:e6:95:27:18:dd:73:54:90:99:11: 20:91:f9:e1:84:11:7c:1a:f6:c6:f7:2e:62:f3:56:ff:f9:dc: 62:5b:5b:82:af:9a:6e:84:60:4a:b0:92:c0:68:4e:ff:cc:fe: a6:de:05:8b:b5:b9:78:da:78:02:f3:c2:9a:c7:e8:de:ca:f6: df:3c:ea:83:10:43:4a:d3:c2:47:b1:c6:2e:8f:17:5b:d2:d4: f5:dc:6e:1c:b4:b0:3a:e7:0b:40:ad:19:c3:2d:fb:96:bf:e7: f8:82:91:53:e4:89:cc:d0:dd:be:a0:49:8e:03:4e:c7:79:0b: 7f:e0:09:01:fb:12:30:8c:a6:9b:5b:77:b5:e2:31:ce:55:4e: a5:ab:70:ee:2c:32:39:47:15:81:f0:2c:e8:6f:f4:e1:cb:99: e3:50:9d:c4:92:ee:a2:31:f2:1a:16:2f:2c:5c:85:33:52:d2: 84:19:ec:11:9f:9b:cb:1a:55:0f:c1:05:b6:d0:d5:58:e1:74: 61:c1:b2:72:40:92:98:dc:b8:52:5d:53:28:10:81:c5:b2:8a: 70:17:7d:ec:46:c8:32:19:3a:fb:d2:7f:6d:af:b6:5a:c9:c0: f8:da:a6:c8:d2:b1:64:cf:be:2d:12:89:82:44:b3:11:0f:c6: 85:89:85:3f -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUBK4O+ra02pO55cDYVjU6onqgNaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc4Mzk1RkY5OEU4QUVBNjQ1Q0ZDRDdERjc0Mjg1NUQ0 NjQ1N0JBRjAeFw0yNTAyMTQxMzUyNTlaFw0yNjAyMTMxMzU3NTlaMDMxMTAvBgNV BAMTKDdENTkzQjkzM0JCNDBCMjFBRUY2QzdBQjk0RjVENjQzMDNFQkIwMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxcdUn25gHix452o3CW/rY+4wi rdriD8Wa75URhysfxN3uA+HHEtl051bFn04hfwIcpp8qyNQpHzRrvr2TIBknw8Ia tFbLC0MIJ/jTpPMKjPohUKhaJEl2KeU0FwrdsryZPpeg1sH+y6IMbh38IQbrtAcz D8FwPrDtuBq4yhr6GZxeG9cd0L8B/kkukkOCe/IRUb666nTR6htrEiDM2n1MMl4A 4ZTrpm1eZ5Ude4hXmHlLWSxLbATYGdZGd7Polfwno5D2+meoc+uYNe7RhvsKrQ6Q NyBL5tNA1XQUaxx+YIYRO4YfGK4DgvRH4/C51qjvDfrgBMaaAAL53m7UF5r1AgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUfVk7kzu0CyGu9serlPXWQwPrsA0wHwYDVR0j BBgwFoAUF4OV/5jorqZFz81990KFXUZFe68wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzIvMTc4Mzk1RkY5OEU4QUVBNjQ1Q0ZDRDdERjc0Mjg1NUQ0NjQ1N0JBRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy8xNzgzOTVGRjk4RThBRUE2NDVDRkNEN0RG NzQyODU1RDQ2NDU3QkFGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kN2U0NTkyZS0yM2MwLTRjY2MtOTRkYS02Yzk1ODA3ZjgzZTcvMi8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYyNjEzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz MTM0MzczMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgRLowDQYJKoZIhvcNAQELBQADggEBAI54 qjxb8UOp5pUnGN1zVJCZESCR+eGEEXwa9sb3LmLzVv/53GJbW4Kvmm6EYEqwksBo Tv/M/qbeBYu1uXjaeALzwprH6N7K9t886oMQQ0rTwkexxi6PF1vS1PXcbhy0sDrn C0CtGcMt+5a/5/iCkVPkiczQ3b6gSY4DTsd5C3/gCQH7EjCMpptbd7XiMc5VTqWr cO4sMjlHFYHwLOhv9OHLmeNQncSS7qIx8hoWLyxchTNS0oQZ7BGfm8saVQ/BBbbQ 1VjhdGHBsnJAkpjcuFJdUygQgcWyinAXfexGyDIZOvvSf22vtlrJwPjapsjSsWTP vi0SiYJEsxEPxoWJhT8= -----END CERTIFICATE-----Generated at Sat Apr 5 04:35:30 2025 by rpki-client