$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa File: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (raw, json) Hash identifier: wALn/kuHRs3MtX4loe3ndPMMd8kJpkWDJTPFOhhGFZ0= Subject key identifier: 74:62:52:66:61:AF:90:9C:2B:C6:B4:71:ED:7D:3E:F7:C0:93:98:3B Certificate issuer: /CN=178395FF98E8AEA645CFCD7DF742855D46457BAF Certificate serial: 7DE46F209820D0CAD69EBDAD4C961AC98D23F417 Authority key identifier: 17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa Signing time: Fri 14 Feb 2025 13:58:00 +0000 ROA not before: Fri 14 Feb 2025 13:53:00 +0000 ROA not after: Fri 13 Feb 2026 13:58:00 +0000 asID: 214723 IP address blocks: 2a0a:6044:ba00::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 13:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e4:6f:20:98:20:d0:ca:d6:9e:bd:ad:4c:96:1a:c9:8d:23:f4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=178395FF98E8AEA645CFCD7DF742855D46457BAF Validity Not Before: Feb 14 13:53:00 2025 GMT Not After : Feb 13 13:58:00 2026 GMT Subject: CN=7462526661AF909C2BC6B471ED7D3EF7C093983B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:28:06:0e:9b:d7:8c:bf:c3:6f:2e:a6:74:42: c3:83:47:04:a1:9c:f1:ef:38:f0:f5:9d:b9:f8:6a: 2c:85:eb:7b:73:f7:39:12:9c:76:60:01:9e:79:a0: 88:62:b3:38:c3:45:f9:c5:9d:b3:fe:b2:64:fa:fa: 61:59:51:af:32:1d:9a:87:e8:32:96:14:03:25:7b: ae:a5:c4:56:35:0e:9c:77:81:f5:2b:29:45:b6:c9: 2a:f4:d9:16:09:fe:ab:1e:c9:a1:88:27:d4:53:29: 37:c9:2b:97:c6:56:98:ba:0a:b7:57:a6:e3:8d:cf: c3:d0:a7:ca:49:97:da:4b:af:e1:0b:bd:05:16:21: d2:89:ce:fb:0a:af:83:2b:f2:d0:00:51:0d:05:92: ac:1c:a7:e6:57:ac:15:93:25:d1:32:b7:39:58:b7: c3:12:78:8b:ee:ac:a0:88:c2:fb:09:c1:d0:bf:d5: 13:ef:fd:0b:57:55:35:38:10:e1:cb:e1:15:7d:ef: b1:33:cb:6f:29:0f:ae:b5:04:54:dc:31:c8:20:a2: cc:a3:8f:12:86:67:fe:62:e1:a0:54:f7:1a:81:38: 42:9c:d9:76:df:88:b0:50:ae:87:54:8c:3a:6c:69: bd:5d:17:0a:e4:0d:bd:48:e7:93:53:a1:a9:ea:dc: 85:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:62:52:66:61:AF:90:9C:2B:C6:B4:71:ED:7D:3E:F7:C0:93:98:3B X509v3 Authority Key Identifier: keyid:17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ba00::/48 Signature Algorithm: sha256WithRSAEncryption 81:d7:6e:b7:9b:07:56:98:c3:f0:f4:e1:43:14:b1:57:75:15: 60:33:1d:48:3a:c3:80:95:9f:02:03:3d:42:f1:27:9e:ed:25: 15:23:34:be:10:67:be:93:72:75:a5:e1:fa:04:52:0b:79:65: 2e:88:81:0a:d8:28:ed:d0:b5:55:cf:a8:ee:4d:0e:04:93:0a: aa:02:92:0e:c4:ac:53:96:1a:13:3f:63:b1:c3:2e:8b:12:78: 7d:0e:de:42:05:2b:b1:e3:20:56:20:43:d5:4c:cc:32:cf:f8: e5:4e:d6:68:e1:05:bb:2b:c8:a0:54:bc:ec:15:22:ec:de:be: 9f:e9:ba:e8:cf:38:b1:44:a9:f9:ed:bf:90:97:0d:3f:d9:a1: 1f:83:94:55:af:2c:34:ff:64:63:39:a0:b2:03:77:cc:c6:0e: d6:d8:7a:d0:96:8f:7e:7c:bf:50:5c:2b:16:4f:ca:53:2e:73: 83:0e:ab:6f:3e:90:df:c8:c9:41:cd:bd:68:19:06:17:9c:53: 0d:d0:7a:d4:be:d9:55:f5:25:19:c0:31:e8:b0:5b:f4:6f:6f: fb:62:d0:ab:6e:41:57:43:c8:4e:92:b8:fc:9f:09:39:fa:50: dc:98:f9:aa:48:2e:8d:16:de:92:38:92:1b:f6:6e:0b:dd:f0: 32:17:51:1c -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUfeRvIJgg0MrWnr2tTJYayY0j9BcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc4Mzk1RkY5OEU4QUVBNjQ1Q0ZDRDdERjc0Mjg1NUQ0 NjQ1N0JBRjAeFw0yNTAyMTQxMzUzMDBaFw0yNjAyMTMxMzU4MDBaMDMxMTAvBgNV BAMTKDc0NjI1MjY2NjFBRjkwOUMyQkM2QjQ3MUVEN0QzRUY3QzA5Mzk4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIKAYOm9eMv8NvLqZ0QsODRwSh nPHvOPD1nbn4aiyF63tz9zkSnHZgAZ55oIhiszjDRfnFnbP+smT6+mFZUa8yHZqH 6DKWFAMle66lxFY1Dpx3gfUrKUW2ySr02RYJ/qseyaGIJ9RTKTfJK5fGVpi6CrdX puONz8PQp8pJl9pLr+ELvQUWIdKJzvsKr4Mr8tAAUQ0Fkqwcp+ZXrBWTJdEytzlY t8MSeIvurKCIwvsJwdC/1RPv/QtXVTU4EOHL4RV977Ezy28pD661BFTcMcggosyj jxKGZ/5i4aBU9xqBOEKc2XbfiLBQrodUjDpsab1dFwrkDb1I55NToanq3IX/AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUdGJSZmGvkJwrxrRx7X0+98CTmDswHwYDVR0j BBgwFoAUF4OV/5jorqZFz81990KFXUZFe68wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzIvMTc4Mzk1RkY5OEU4QUVBNjQ1Q0ZDRDdERjc0Mjg1NUQ0NjQ1N0JBRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy8xNzgzOTVGRjk4RThBRUE2NDVDRkNEN0RG NzQyODU1RDQ2NDU3QkFGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kN2U0NTkyZS0yM2MwLTRjY2MtOTRkYS02Yzk1ODA3ZjgzZTcvMi8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYyNjEzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzczMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRLoAMA0GCSqGSIb3DQEBCwUAA4IBAQCB 1263mwdWmMPw9OFDFLFXdRVgMx1IOsOAlZ8CAz1C8See7SUVIzS+EGe+k3J1peH6 BFILeWUuiIEK2Cjt0LVVz6juTQ4EkwqqApIOxKxTlhoTP2Oxwy6LEnh9Dt5CBSux 4yBWIEPVTMwyz/jlTtZo4QW7K8igVLzsFSLs3r6f6brozzixRKn57b+Qlw0/2aEf g5RVryw0/2RjOaCyA3fMxg7W2HrQlo9+fL9QXCsWT8pTLnODDqtvPpDfyMlBzb1o GQYXnFMN0HrUvtlV9SUZwDHosFv0b2/7YtCrbkFXQ8hOkrj8nwk5+lDcmPmqSC6N Ft6SOJIb9m4L3fAyF1Ec -----END CERTIFICATE-----Generated at Sat Apr 5 04:35:17 2025 by rpki-client