$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530303a3a2f34362d3438203d3e20323135393536.roa File: 326130613a363034343a613530303a3a2f34362d3438203d3e20323135393536.roa (raw, json) Hash identifier: xUPPpdCDSqoWg3s5y1davUFioaoYAU/44ExaIUjs6aI= Subject key identifier: 97:17:08:85:77:62:A7:FE:31:87:20:EB:DA:61:1D:56:DE:66:6D:12 Certificate issuer: /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845 Certificate serial: 16D9279FE0A606A1E10532D18D83F1E21C0E92DF Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530303a3a2f34362d3438203d3e20323135393536.roa Signing time: Sat 08 Feb 2025 19:35:55 +0000 ROA not before: Sat 08 Feb 2025 19:30:55 +0000 ROA not after: Sat 07 Feb 2026 19:35:55 +0000 asID: 215956 IP address blocks: 2a0a:6044:a500::/46 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 18:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d9:27:9f:e0:a6:06:a1:e1:05:32:d1:8d:83:f1:e2:1c:0e:92:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845 Validity Not Before: Feb 8 19:30:55 2025 GMT Not After : Feb 7 19:35:55 2026 GMT Subject: CN=971708857762A7FE318720EBDA611D56DE666D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:dd:9f:d3:13:ff:2d:e4:e7:4a:c4:de:f8: 38:8f:0d:e6:23:a3:2d:d8:c9:2c:ad:24:9a:36:96: 62:48:67:5e:4a:7b:5d:2b:6d:71:73:46:db:2b:cf: b9:d0:1e:40:93:0a:48:cb:8f:3e:89:6e:4f:e6:ba: 42:55:91:e1:fc:fd:4a:b5:25:d6:4f:5d:a3:2d:88: 0c:2b:77:64:ff:cb:60:75:80:f4:af:24:ec:2f:48: 5f:6b:c8:ee:c0:9a:57:ce:94:e6:f6:b7:cd:89:d3: c4:69:57:2e:58:40:20:84:f0:fe:57:b4:f0:ab:41: 62:d5:4b:18:f6:ec:c2:41:df:c6:e2:b3:59:4c:d5: 76:37:b4:3c:88:27:f0:1c:26:ab:08:e3:d2:2a:77: 9f:d3:56:e1:2d:be:8c:83:f9:37:29:8a:72:de:39: bf:ad:70:f0:63:02:85:3e:d3:2f:48:c6:36:87:22: 79:83:a7:61:82:62:d9:05:6b:c6:63:3b:2e:f0:fa: fe:0e:58:a7:b1:1a:0b:55:5b:95:9a:e7:03:00:27: 8d:5a:ef:0f:59:c4:bd:4a:9d:13:c5:99:ff:47:ef: 48:48:36:05:fc:32:93:ed:d4:72:ec:ed:4a:81:d4: 32:7a:6e:36:9f:ab:1f:55:ef:e2:c7:aa:a0:31:57: c9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:17:08:85:77:62:A7:FE:31:87:20:EB:DA:61:1D:56:DE:66:6D:12 X509v3 Authority Key Identifier: keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530303a3a2f34362d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a500::/46 Signature Algorithm: sha256WithRSAEncryption 5a:29:cc:78:8c:1e:5b:12:28:8a:e1:21:18:be:1d:32:9e:80: 98:82:be:f7:53:71:d3:27:d1:13:05:dc:88:85:0e:4e:3b:d3: 29:74:52:84:ca:55:f6:a8:0a:33:d1:b1:35:f7:d9:26:62:40: b0:a3:8c:fa:18:48:ed:f0:a0:0e:57:f4:2f:23:3a:c3:24:ae: 16:43:28:5f:69:53:47:7a:e2:cb:4a:ba:43:36:68:ca:cd:4a: 93:eb:97:97:bf:f9:a9:ff:a3:d4:8c:e7:29:99:98:23:17:ca: 09:d4:88:31:f0:e6:db:3d:b0:cf:8e:eb:2b:16:ae:a8:86:f2: 94:a3:f6:ef:73:8f:ec:39:a9:cf:df:26:aa:84:93:9b:91:3b: 9f:d4:31:b9:21:f7:44:29:aa:b3:6c:fc:97:33:f8:68:1c:e3: e3:4d:d6:bb:77:d4:0b:cf:bc:6c:39:31:d1:1b:ff:fe:0a:b4: f2:33:b4:c4:ab:af:98:1c:3b:b7:4b:9d:17:07:7b:c1:7d:29: ea:5c:c9:b7:9c:e8:f6:00:4c:9d:64:23:42:4f:9f:37:ac:99: dd:ec:14:ea:5d:b3:60:12:9c:63:90:48:a4:72:b0:82:87:3d: c5:1e:22:b7:cd:fb:83:8c:5a:c9:2e:28:75:5e:7c:90:41:d4: af:6f:32:1e -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUFtknn+CmBqHhBTLRjYPx4hwOkt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZFMEJCQTE5Mzc5NEI4MTQ2QjM2MEQ1MDQyMEE5QzRE Qzc3Qzg0NTAeFw0yNTAyMDgxOTMwNTVaFw0yNjAyMDcxOTM1NTVaMDMxMTAvBgNV BAMTKDk3MTcwODg1Nzc2MkE3RkUzMTg3MjBFQkRBNjExRDU2REU2NjZEMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8H92f0xP/LeTnSsTe+DiPDeYj oy3YySytJJo2lmJIZ15Ke10rbXFzRtsrz7nQHkCTCkjLjz6Jbk/mukJVkeH8/Uq1 JdZPXaMtiAwrd2T/y2B1gPSvJOwvSF9ryO7AmlfOlOb2t82J08RpVy5YQCCE8P5X tPCrQWLVSxj27MJB38bis1lM1XY3tDyIJ/AcJqsI49Iqd5/TVuEtvoyD+TcpinLe Ob+tcPBjAoU+0y9IxjaHInmDp2GCYtkFa8ZjOy7w+v4OWKexGgtVW5Wa5wMAJ41a 7w9ZxL1KnRPFmf9H70hINgX8MpPt1HLs7UqB1DJ6bjafqx9V7+LHqqAxV8kRAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUlxcIhXdip/4xhyDr2mEdVt5mbRIwHwYDVR0j BBgwFoAUpuC7oZN5S4FGs2DVBCCpxNx3yEUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzIvQTZFMEJCQTE5Mzc5NEI4MTQ2QjM2MEQ1MDQyMEE5QzREQzc3Qzg0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9BNkUwQkJBMTkzNzk0QjgxNDZCMzYwRDUw NDIwQTlDNERDNzdDODQ1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMi8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYxMzUzMDMwM2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcCKgpgRKUAMA0GCSqGSIb3DQEBCwUAA4IBAQBa Kcx4jB5bEiiK4SEYvh0ynoCYgr73U3HTJ9ETBdyIhQ5OO9MpdFKEylX2qAoz0bE1 99kmYkCwo4z6GEjt8KAOV/QvIzrDJK4WQyhfaVNHeuLLSrpDNmjKzUqT65eXv/mp /6PUjOcpmZgjF8oJ1Igx8ObbPbDPjusrFq6ohvKUo/bvc4/sOanP3yaqhJObkTuf 1DG5IfdEKaqzbPyXM/hoHOPjTda7d9QLz7xsOTHRG//+CrTyM7TEq6+YHDu3S50X B3vBfSnqXMm3nOj2AEydZCNCT583rJnd7BTqXbNgEpxjkEikcrCChz3FHiK3zfuD jFrJLih1XnyQQdSvbzIe -----END CERTIFICATE-----Generated at Sat Apr 5 04:30:04 2025 by rpki-client