$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a626230333a3a2f34382d3438203d3e20323135393536.roa File: 326130613a363034343a626230333a3a2f34382d3438203d3e20323135393536.roa (raw, json) Hash identifier: NDJ2VDM/Eiv+V0CSbiFDmgHl5TLpl4BeCY2GYLphTlU= Subject key identifier: E0:61:FE:E2:80:5A:5A:FC:D4:D9:57:AC:F1:E1:B2:77:86:00:67:E6 Certificate issuer: /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D Certificate serial: 66B49C47DA00C0E24A89A4DCF663E174EF656796 Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a626230333a3a2f34382d3438203d3e20323135393536.roa Signing time: Fri 12 Jul 2024 15:13:45 +0000 ROA not before: Fri 12 Jul 2024 15:08:45 +0000 ROA not after: Fri 11 Jul 2025 15:13:45 +0000 asID: 215956 IP address blocks: 2a0a:6044:bb03::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 07:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b4:9c:47:da:00:c0:e2:4a:89:a4:dc:f6:63:e1:74:ef:65:67:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D Validity Not Before: Jul 12 15:08:45 2024 GMT Not After : Jul 11 15:13:45 2025 GMT Subject: CN=E061FEE2805A5AFCD4D957ACF1E1B277860067E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:2d:2c:41:09:8f:94:fe:d5:90:e5:9f:92: ed:89:c6:ae:27:eb:ec:44:eb:9e:8a:2f:bc:60:3f: 3c:d1:2e:cb:ab:6b:b5:4c:69:99:f0:d7:33:f2:32: ef:af:37:6e:3c:f8:12:c9:91:f7:df:20:5b:56:98: 6f:0a:1a:df:77:18:64:91:d9:69:1c:af:f1:c4:fb: f1:d6:b4:3f:63:8a:52:81:13:48:92:df:88:fd:73: 35:a8:c2:11:99:c0:e0:6f:0f:c2:0e:67:a1:84:37: 48:ca:d4:42:95:66:3b:25:62:12:d8:5f:d8:03:42: 62:e3:88:63:c4:81:25:b0:ac:d2:57:2c:d8:d3:10: 52:0f:97:33:05:66:74:e2:b2:6b:d2:16:2e:61:84: 35:86:18:b0:a1:44:24:02:79:a1:85:b7:20:07:8f: e0:91:51:2d:e4:c7:d2:79:ab:1b:75:7d:42:09:6e: 13:a3:13:9f:f1:73:f0:a4:f8:af:5e:14:70:ce:8b: 5c:38:cf:ec:9f:2a:5e:f0:15:6c:97:fd:5f:f2:e8: e5:ab:26:1a:ac:b5:6c:e1:a4:29:69:17:88:65:db: 51:b9:be:c1:be:2c:0d:5b:75:aa:63:c0:2d:81:6e: bd:c3:55:6c:3c:78:bb:69:3b:35:2a:4c:8c:77:72: 14:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:61:FE:E2:80:5A:5A:FC:D4:D9:57:AC:F1:E1:B2:77:86:00:67:E6 X509v3 Authority Key Identifier: keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a626230333a3a2f34382d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:bb03::/48 Signature Algorithm: sha256WithRSAEncryption 4a:e0:a3:07:fd:a2:b8:d3:83:2f:ad:b1:97:35:9b:29:f1:75: 1e:86:21:f7:90:af:9c:30:03:8f:74:a4:af:cf:0b:23:67:fb: 20:ab:b6:b6:be:4a:80:19:d2:ab:c8:2e:50:18:7e:44:4b:37: 61:dd:27:fc:29:3c:10:50:52:57:7c:4a:79:b0:1a:00:19:1d: 2a:52:e8:56:0b:07:f1:e3:84:82:b9:dc:03:78:c3:6c:92:06: b6:a8:fc:7d:10:5a:5d:0a:1d:b8:f9:d5:81:75:87:d9:7b:c1: 3e:58:38:55:c2:9c:2b:53:8e:7b:bf:20:bb:c7:a3:5f:de:5f: a9:6c:62:49:3b:b8:ba:ca:53:69:53:40:73:6a:54:64:f0:4f: d1:f5:c2:25:96:2b:f2:96:ce:cf:f1:f3:a5:47:24:6e:47:1b: ae:33:c1:41:a1:f7:38:0b:42:14:ed:81:e7:eb:69:22:79:d1: 4c:25:10:ad:81:41:de:9a:e0:a7:d5:c8:2b:0c:87:d1:79:77: d6:73:61:97:21:59:a1:5e:c6:f8:c9:20:46:b9:cd:67:ea:57: 2e:82:1d:94:4b:61:ff:35:da:cd:82:0b:ea:b4:08:4f:64:dd: 35:c4:d5:92:81:83:2e:fc:48:ed:b0:f8:23:0b:ac:c5:23:b5: 32:1c:b7:f7 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUZrScR9oAwOJKiaTc9mPhdO9lZ5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4 QkNGRTk3RDAeFw0yNDA3MTIxNTA4NDVaFw0yNTA3MTExNTEzNDVaMDMxMTAvBgNV BAMTKEUwNjFGRUUyODA1QTVBRkNENEQ5NTdBQ0YxRTFCMjc3ODYwMDY3RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8fS0sQQmPlP7VkOWfku2Jxq4n 6+xE656KL7xgPzzRLsura7VMaZnw1zPyMu+vN248+BLJkfffIFtWmG8KGt93GGSR 2Wkcr/HE+/HWtD9jilKBE0iS34j9czWowhGZwOBvD8IOZ6GEN0jK1EKVZjslYhLY X9gDQmLjiGPEgSWwrNJXLNjTEFIPlzMFZnTismvSFi5hhDWGGLChRCQCeaGFtyAH j+CRUS3kx9J5qxt1fUIJbhOjE5/xc/Ck+K9eFHDOi1w4z+yfKl7wFWyX/V/y6OWr JhqstWzhpClpF4hl21G5vsG+LA1bdapjwC2Bbr3DVWw8eLtpOzUqTIx3chQdAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU4GH+4oBaWvzU2Ves8eGyd4YAZ+YwHwYDVR0j BBgwFoAUEwO7iAj3Zrc9VHPPp7iE6YvP6X0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzEvMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4QkNGRTk3RC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8xMzAzQkI4ODA4Rjc2NkI3M0Q1NDczQ0ZB N0I4ODRFOThCQ0ZFOTdELmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMS8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYyNjIzMDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRLsDMA0GCSqGSIb3DQEBCwUAA4IBAQBK 4KMH/aK404MvrbGXNZsp8XUehiH3kK+cMAOPdKSvzwsjZ/sgq7a2vkqAGdKryC5Q GH5ESzdh3Sf8KTwQUFJXfEp5sBoAGR0qUuhWCwfx44SCudwDeMNskga2qPx9EFpd Ch24+dWBdYfZe8E+WDhVwpwrU457vyC7x6Nf3l+pbGJJO7i6ylNpU0BzalRk8E/R 9cIllivyls7P8fOlRyRuRxuuM8FBofc4C0IU7YHn62kiedFMJRCtgUHemuCn1cgr DIfReXfWc2GXIVmhXsb4ySBGuc1n6lcugh2US2H/NdrNggvqtAhPZN01xNWSgYMu /EjtsPgjC6zFI7UyHLf3 -----END CERTIFICATE-----Generated at Thu Sep 19 17:01:37 2024 by rpki-client on console-ams.rpki-client.org