$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa File: 326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa (raw, json) Hash identifier: L3iy+YX86wWmGOZpZV8HiBAb6AR0XfxqCfBWi0Rg3BI= Subject key identifier: 2E:C6:24:8F:E3:3D:29:A0:32:60:BE:F4:89:EF:0A:E3:31:21:EA:80 Certificate issuer: /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845 Certificate serial: 5A4429B1896FE305A922A1841332F6FB31216BD7 Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa Signing time: Sat 08 Feb 2025 19:35:59 +0000 ROA not before: Sat 08 Feb 2025 19:30:59 +0000 ROA not after: Sat 07 Feb 2026 19:35:59 +0000 asID: 215956 IP address blocks: 2a0a:6044:a508::/46 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 18:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:44:29:b1:89:6f:e3:05:a9:22:a1:84:13:32:f6:fb:31:21:6b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845 Validity Not Before: Feb 8 19:30:59 2025 GMT Not After : Feb 7 19:35:59 2026 GMT Subject: CN=2EC6248FE33D29A03260BEF489EF0AE33121EA80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:58:76:ed:3d:77:46:7f:9f:a5:54:40:5e:09: 85:54:a0:d0:ef:4f:6f:3f:d8:4c:ac:f5:31:26:b9: 1a:34:77:4a:e1:f3:61:47:b2:ff:cf:ab:6a:2a:91: c0:34:6c:97:99:03:46:6a:56:62:77:2e:b9:ec:c0: e6:af:69:1e:19:d1:87:0d:50:8f:aa:9b:91:8e:18: 14:cb:d6:ff:b1:81:1d:e8:6d:38:26:f4:61:2c:a6: ee:0a:aa:b7:74:f6:f7:81:e5:c2:85:13:3d:c9:36: 50:6d:e3:aa:c5:a1:1a:64:b5:b0:82:32:13:bd:f0: 01:e7:c6:c3:ca:ab:09:7f:e9:ca:fa:14:5d:ce:e9: 52:0f:f5:30:01:57:8f:b3:0e:04:bb:d8:4a:ec:6f: 6e:d9:20:91:a7:48:62:4a:1d:fb:da:a7:86:fb:ca: ed:5b:01:2c:8c:72:5d:ff:fc:8a:36:56:90:c3:07: 4a:5a:aa:63:88:87:ae:f2:4e:bd:77:24:c8:4e:fe: a3:04:11:02:a0:63:03:1e:12:87:19:fb:5c:0a:3d: 32:28:02:7c:56:6c:bd:89:e7:83:ac:5b:76:68:f5: 7c:6c:5d:10:2f:ae:12:06:a5:4e:26:67:cb:9b:6f: 5b:68:04:1d:ad:73:de:44:f5:d6:66:ac:71:54:c1: bb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C6:24:8F:E3:3D:29:A0:32:60:BE:F4:89:EF:0A:E3:31:21:EA:80 X509v3 Authority Key Identifier: keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a508::/46 Signature Algorithm: sha256WithRSAEncryption 1f:3f:4e:5b:cd:11:92:18:a7:a2:9f:b1:c8:c6:40:b6:a1:4f: c7:3c:32:8f:f8:5a:68:18:30:f0:a3:42:93:9f:cd:d3:e4:7d: e7:6c:da:9c:75:16:8b:34:80:92:64:0d:b6:87:47:fb:55:43: 94:ab:6e:83:48:f0:f5:74:25:66:e1:a4:44:7b:34:7b:0b:60: 3e:f7:e6:1f:ab:91:ce:92:c0:36:1b:90:d5:87:eb:ff:80:64: cf:b2:70:f3:d1:ee:3f:19:04:93:71:ba:30:54:5d:f2:44:40: ba:44:f8:f2:3a:a4:52:4c:6b:3f:e5:3d:55:1c:eb:2c:4b:25: e7:da:e7:5c:14:8f:3b:e6:81:d3:ef:cf:3c:b7:68:aa:e0:b2: d1:f8:70:8d:47:7c:7e:b4:08:e0:53:06:9b:60:49:f3:61:f6: c3:64:20:9b:7e:84:86:2d:06:36:ab:2a:51:ca:79:d9:68:fe: ef:23:65:7e:40:85:f8:16:20:a2:46:e9:0f:cb:11:41:f6:00: ce:d8:57:2e:ef:4a:16:38:c4:f2:63:6c:e6:6d:f1:7f:11:05: 9f:75:30:4b:8d:86:34:14:f3:04:cf:c8:90:dc:25:70:c1:88: b3:53:ff:86:8d:72:89:cd:99:8b:27:a9:5b:8a:5f:24:ab:6f: 0e:d0:10:ce -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUWkQpsYlv4wWpIqGEEzL2+zEha9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZFMEJCQTE5Mzc5NEI4MTQ2QjM2MEQ1MDQyMEE5QzRE Qzc3Qzg0NTAeFw0yNTAyMDgxOTMwNTlaFw0yNjAyMDcxOTM1NTlaMDMxMTAvBgNV BAMTKDJFQzYyNDhGRTMzRDI5QTAzMjYwQkVGNDg5RUYwQUUzMzEyMUVBODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7WHbtPXdGf5+lVEBeCYVUoNDv T28/2Eys9TEmuRo0d0rh82FHsv/Pq2oqkcA0bJeZA0ZqVmJ3LrnswOavaR4Z0YcN UI+qm5GOGBTL1v+xgR3obTgm9GEspu4Kqrd09veB5cKFEz3JNlBt46rFoRpktbCC MhO98AHnxsPKqwl/6cr6FF3O6VIP9TABV4+zDgS72Ersb27ZIJGnSGJKHfvap4b7 yu1bASyMcl3//Io2VpDDB0paqmOIh67yTr13JMhO/qMEEQKgYwMeEocZ+1wKPTIo AnxWbL2J54OsW3Zo9XxsXRAvrhIGpU4mZ8ubb1toBB2tc95E9dZmrHFUwbuPAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQULsYkj+M9KaAyYL70ie8K4zEh6oAwHwYDVR0j BBgwFoAUpuC7oZN5S4FGs2DVBCCpxNx3yEUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzIvQTZFMEJCQTE5Mzc5NEI4MTQ2QjM2MEQ1MDQyMEE5QzREQzc3Qzg0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9BNkUwQkJBMTkzNzk0QjgxNDZCMzYwRDUw NDIwQTlDNERDNzdDODQ1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMi8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYxMzUzMDM4M2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcCKgpgRKUIMA0GCSqGSIb3DQEBCwUAA4IBAQAf P05bzRGSGKein7HIxkC2oU/HPDKP+FpoGDDwo0KTn83T5H3nbNqcdRaLNICSZA22 h0f7VUOUq26DSPD1dCVm4aREezR7C2A+9+Yfq5HOksA2G5DVh+v/gGTPsnDz0e4/ GQSTcbowVF3yREC6RPjyOqRSTGs/5T1VHOssSyXn2udcFI875oHT7888t2iq4LLR +HCNR3x+tAjgUwabYEnzYfbDZCCbfoSGLQY2qypRynnZaP7vI2V+QIX4FiCiRukP yxFB9gDO2Fcu70oWOMTyY2zmbfF/EQWfdTBLjYY0FPMEz8iQ3CVwwYizU/+GjXKJ zZmLJ6lbil8kq28O0BDO -----END CERTIFICATE-----Generated at Sat Apr 5 04:30:22 2025 by rpki-client