$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613532313a3a2f34382d3438203d3e20323135393536.roa File: 326130613a363034343a613532313a3a2f34382d3438203d3e20323135393536.roa (raw, json) Hash identifier: hahaFQDZsW5KT+XMiGuLuOHPu1AUok6k1pISEh7hxUs= Subject key identifier: D0:54:37:A7:D7:80:4A:9D:4C:A3:C8:51:AD:07:D3:89:9F:57:48:B2 Certificate issuer: /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D Certificate serial: 17BBC9B1FE36DB20909D18B1EFF5B95B9B631EDE Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613532313a3a2f34382d3438203d3e20323135393536.roa Signing time: Sun 25 Aug 2024 20:28:18 +0000 ROA not before: Sun 25 Aug 2024 20:23:18 +0000 ROA not after: Sun 24 Aug 2025 20:28:18 +0000 asID: 215956 IP address blocks: 2a0a:6044:a521::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 16:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:bb:c9:b1:fe:36:db:20:90:9d:18:b1:ef:f5:b9:5b:9b:63:1e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D Validity Not Before: Aug 25 20:23:18 2024 GMT Not After : Aug 24 20:28:18 2025 GMT Subject: CN=D05437A7D7804A9D4CA3C851AD07D3899F5748B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:4e:ee:b9:1d:a3:f4:98:a7:19:dd:bc:c7: b3:82:08:c2:ef:78:a5:73:09:23:46:6e:41:35:98: c2:81:0d:86:f5:72:96:bf:83:04:da:90:9d:98:d3: 33:78:1b:f3:2d:e0:09:c1:8c:7c:69:41:d1:3f:d6: 5a:f9:9b:45:bd:f2:73:81:e4:c4:a8:64:ea:8d:ce: b7:73:91:85:db:46:db:5a:4a:43:b1:4f:8a:ce:eb: 4f:2e:35:e5:c0:8b:47:b1:64:d4:2b:c0:90:69:0f: 9b:46:ad:28:e9:86:97:f4:59:49:1a:23:0e:0f:c5: 17:ea:a5:eb:ad:37:a3:96:d9:2a:60:d2:4b:a0:b8: 74:46:12:36:d9:ee:8d:17:4d:e7:96:4e:02:24:25: a2:e2:c0:d8:f7:01:18:7d:89:c5:fd:dd:de:5c:94: 0c:f3:56:58:17:a5:f5:fb:7a:34:b4:63:78:0b:c1: ff:e5:ce:54:79:25:99:75:95:03:fb:a7:9c:e6:e0: 33:79:e1:7b:7c:38:e4:d5:80:b5:21:e1:20:63:f6: d3:c1:c9:3f:fc:91:e7:f8:e2:9b:36:c0:cb:ee:44: 22:40:bf:64:44:74:6d:3f:6b:7b:51:85:9f:a8:a7: fb:dd:dc:35:db:04:62:70:1a:69:4c:79:f1:62:8f: 8f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:54:37:A7:D7:80:4A:9D:4C:A3:C8:51:AD:07:D3:89:9F:57:48:B2 X509v3 Authority Key Identifier: keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613532313a3a2f34382d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a521::/48 Signature Algorithm: sha256WithRSAEncryption 71:ca:71:5d:42:ff:c5:09:9d:13:17:c6:ae:fa:9a:f6:c1:a0: 63:e6:fb:e9:fd:7d:63:30:ec:0a:2f:a1:2c:5c:a9:18:71:34: 97:4b:ac:fb:fd:eb:80:49:dc:50:0d:dd:85:29:bb:c0:cc:54: 87:2e:b6:64:9a:6c:1a:6e:64:a7:e1:96:df:0d:f0:57:7c:c3: d8:38:ad:2b:48:ba:d9:46:4b:18:53:c3:40:5f:c5:e2:29:9e: 19:fd:74:45:3d:4f:86:0e:ef:3f:d6:ba:ed:e1:c3:a9:e2:a1: 35:e5:ea:88:0f:ba:d7:08:41:df:92:1d:9d:1f:cb:3e:8b:0c: 2d:00:0e:5e:85:21:f0:51:c0:88:ca:d5:f5:0e:43:fd:7e:1e: fc:e9:6d:38:a5:1b:4d:05:74:29:23:20:b3:b0:53:a3:cb:df: 66:88:06:a2:b6:09:03:16:41:60:fb:e2:eb:c7:ad:02:6e:ef: 1d:73:27:42:d4:09:19:37:04:bc:58:0f:4c:5f:d3:ec:4e:40: b3:79:38:92:97:e7:bd:2a:e8:47:58:83:78:53:bf:e2:39:52: 0f:86:43:ea:53:7a:9f:0d:e9:be:44:5e:88:50:76:30:9e:83: e7:ac:54:d9:97:bd:40:e9:4e:9e:e3:59:54:02:ff:3d:8f:1a: 60:39:d9:86 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUF7vJsf422yCQnRix7/W5W5tjHt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4 QkNGRTk3RDAeFw0yNDA4MjUyMDIzMThaFw0yNTA4MjQyMDI4MThaMDMxMTAvBgNV BAMTKEQwNTQzN0E3RDc4MDRBOUQ0Q0EzQzg1MUFEMDdEMzg5OUY1NzQ4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0S07uuR2j9JinGd28x7OCCMLv eKVzCSNGbkE1mMKBDYb1cpa/gwTakJ2Y0zN4G/Mt4AnBjHxpQdE/1lr5m0W98nOB 5MSoZOqNzrdzkYXbRttaSkOxT4rO608uNeXAi0exZNQrwJBpD5tGrSjphpf0WUka Iw4PxRfqpeutN6OW2Spg0kuguHRGEjbZ7o0XTeeWTgIkJaLiwNj3ARh9icX93d5c lAzzVlgXpfX7ejS0Y3gLwf/lzlR5JZl1lQP7p5zm4DN54Xt8OOTVgLUh4SBj9tPB yT/8kef44ps2wMvuRCJAv2REdG0/a3tRhZ+op/vd3DXbBGJwGmlMefFij48VAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU0FQ3p9eASp1Mo8hRrQfTiZ9XSLIwHwYDVR0j BBgwFoAUEwO7iAj3Zrc9VHPPp7iE6YvP6X0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzEvMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4QkNGRTk3RC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8xMzAzQkI4ODA4Rjc2NkI3M0Q1NDczQ0ZB N0I4ODRFOThCQ0ZFOTdELmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMS8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYxMzUzMjMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRKUhMA0GCSqGSIb3DQEBCwUAA4IBAQBx ynFdQv/FCZ0TF8au+pr2waBj5vvp/X1jMOwKL6EsXKkYcTSXS6z7/euASdxQDd2F KbvAzFSHLrZkmmwabmSn4ZbfDfBXfMPYOK0rSLrZRksYU8NAX8XiKZ4Z/XRFPU+G Du8/1rrt4cOp4qE15eqID7rXCEHfkh2dH8s+iwwtAA5ehSHwUcCIytX1DkP9fh78 6W04pRtNBXQpIyCzsFOjy99miAaitgkDFkFg++Lrx60Cbu8dcydC1AkZNwS8WA9M X9PsTkCzeTiSl+e9KuhHWIN4U7/iOVIPhkPqU3qfDem+RF6IUHYwnoPnrFTZl71A 6U6e41lUAv89jxpgOdmG -----END CERTIFICATE-----Generated at Fri Nov 22 04:59:16 2024 by rpki-client on console-ams.rpki-client.org