$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa File: 326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa (raw, json) Hash identifier: uiMI1V9iDBnc4aeyFy7FdroRMl1LET62eWCxVC0ETqw= Subject key identifier: 18:F3:5B:6B:AD:97:71:5A:F3:DE:91:CF:7E:17:F5:C1:91:B5:56:8F Certificate issuer: /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D Certificate serial: 7CB0A4CFE99B5BEE5FA9A71B7A0AB498F59EC2CA Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa Signing time: Fri 12 Jul 2024 15:06:32 +0000 ROA not before: Fri 12 Jul 2024 15:01:32 +0000 ROA not after: Fri 11 Jul 2025 15:06:32 +0000 asID: 215956 IP address blocks: 2a0a:6044:a508::/46 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 07:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b0:a4:cf:e9:9b:5b:ee:5f:a9:a7:1b:7a:0a:b4:98:f5:9e:c2:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D Validity Not Before: Jul 12 15:01:32 2024 GMT Not After : Jul 11 15:06:32 2025 GMT Subject: CN=18F35B6BAD97715AF3DE91CF7E17F5C191B5568F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:57:1a:a7:cc:bf:56:7a:3d:6a:b2:7f:1a:3c: 21:db:c0:2b:ec:97:1f:f5:9d:9b:e0:88:86:73:45: e6:0b:5f:ce:43:2a:bb:e3:70:e9:09:4d:f6:76:f4: 0a:b0:1b:92:de:49:99:72:6b:20:a1:f5:0d:af:0a: 26:b8:4f:8b:aa:49:4d:98:0a:26:a4:ed:90:d0:aa: 5f:2c:fd:31:26:48:fa:d0:53:34:e2:d4:0a:e4:63: 9a:9a:7f:65:02:f9:e4:05:87:32:c1:d4:9e:5d:b4: 03:5c:d1:fc:94:8c:a4:17:72:a7:79:b1:6e:3b:66: 06:e5:28:8f:17:84:ff:cb:37:05:ca:fe:32:a0:19: 7f:82:61:1e:32:4f:84:78:0d:5b:a8:43:6c:46:79: f2:5c:bc:3e:f8:16:bd:16:18:09:8a:bc:db:ba:f2: 70:33:98:2a:36:5f:ea:28:71:24:50:c2:a3:71:96: 52:b3:e3:48:a2:11:ad:8b:e8:dc:83:fe:de:41:52: e4:ba:bb:6d:a3:0b:42:69:a3:f3:61:ac:ba:8c:66: b9:20:2d:a8:14:eb:8a:1d:43:91:5a:4b:0a:b2:09: a6:c4:6c:3f:31:07:88:5b:16:80:9d:35:7c:35:de: 23:51:47:a9:6b:36:d8:00:51:45:51:36:71:04:fb: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F3:5B:6B:AD:97:71:5A:F3:DE:91:CF:7E:17:F5:C1:91:B5:56:8F X509v3 Authority Key Identifier: keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a508::/46 Signature Algorithm: sha256WithRSAEncryption aa:b0:76:1e:1b:e1:95:0c:4f:d7:8f:f6:e0:10:86:de:8e:fd: ca:7c:35:f5:62:f7:83:1c:5e:80:61:1e:5f:1b:f0:b3:61:bf: f5:d3:ab:d8:f6:95:00:76:ad:9c:60:60:8c:36:96:03:af:05: dd:be:ed:f6:7d:86:69:55:49:62:25:bd:b3:cc:78:df:c8:7f: bd:12:22:b5:b9:ec:ce:a2:d2:57:bb:dc:a3:1d:5f:ec:4a:08: 75:ff:64:04:20:a9:06:56:33:8b:10:6f:fd:50:c6:62:3d:02: 6d:67:16:5b:e9:4d:bf:e7:e8:37:ee:87:c1:eb:7a:78:85:4f: 5e:63:57:49:46:49:21:36:8b:39:6c:c2:91:c6:de:b2:22:79: 90:9d:5d:0d:52:83:06:6f:94:a4:47:d3:54:7a:16:40:30:ce: fc:49:51:46:d7:8a:38:7e:f0:64:e1:a8:f1:d3:d7:04:e1:3a: fc:1a:07:17:df:95:3f:32:e2:37:de:29:e6:d4:44:d0:e0:55: ac:34:ee:db:e1:65:0f:f4:1f:1a:4e:0f:b4:92:ac:64:b0:0f: a3:24:e6:4a:55:63:d4:7f:81:b7:2a:8f:38:ae:14:9e:0b:76: 55:db:4a:f6:0c:8b:bf:2c:3d:b8:f8:62:7a:25:6e:30:94:e8: 86:1d:78:d4 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUfLCkz+mbW+5fqacbegq0mPWewsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4 QkNGRTk3RDAeFw0yNDA3MTIxNTAxMzJaFw0yNTA3MTExNTA2MzJaMDMxMTAvBgNV BAMTKDE4RjM1QjZCQUQ5NzcxNUFGM0RFOTFDRjdFMTdGNUMxOTFCNTU2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVxqnzL9Wej1qsn8aPCHbwCvs lx/1nZvgiIZzReYLX85DKrvjcOkJTfZ29AqwG5LeSZlyayCh9Q2vCia4T4uqSU2Y Ciak7ZDQql8s/TEmSPrQUzTi1ArkY5qaf2UC+eQFhzLB1J5dtANc0fyUjKQXcqd5 sW47ZgblKI8XhP/LNwXK/jKgGX+CYR4yT4R4DVuoQ2xGefJcvD74Fr0WGAmKvNu6 8nAzmCo2X+oocSRQwqNxllKz40iiEa2L6NyD/t5BUuS6u22jC0Jpo/NhrLqMZrkg LagU64odQ5FaSwqyCabEbD8xB4hbFoCdNXw13iNRR6lrNtgAUUVRNnEE+yg9AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUGPNba62XcVrz3pHPfhf1wZG1Vo8wHwYDVR0j BBgwFoAUEwO7iAj3Zrc9VHPPp7iE6YvP6X0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzEvMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4QkNGRTk3RC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8xMzAzQkI4ODA4Rjc2NkI3M0Q1NDczQ0ZB N0I4ODRFOThCQ0ZFOTdELmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMS8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYxMzUzMDM4M2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcCKgpgRKUIMA0GCSqGSIb3DQEBCwUAA4IBAQCq sHYeG+GVDE/Xj/bgEIbejv3KfDX1YveDHF6AYR5fG/CzYb/106vY9pUAdq2cYGCM NpYDrwXdvu32fYZpVUliJb2zzHjfyH+9EiK1uezOotJXu9yjHV/sSgh1/2QEIKkG VjOLEG/9UMZiPQJtZxZb6U2/5+g37ofB63p4hU9eY1dJRkkhNos5bMKRxt6yInmQ nV0NUoMGb5SkR9NUehZAMM78SVFG14o4fvBk4ajx09cE4Tr8GgcX35U/MuI33inm 1ETQ4FWsNO7b4WUP9B8aTg+0kqxksA+jJOZKVWPUf4G3Ko84rhSeC3ZV20r2DIu/ LD24+GJ6JW4wlOiGHXjU -----END CERTIFICATE-----Generated at Thu Sep 19 17:07:50 2024 by rpki-client on console-fra.rpki-client.org