$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463343a3a2f34372d3438203d3e20323135393536.roa File: 326131343a373538303a656463343a3a2f34372d3438203d3e20323135393536.roa (raw, json) Hash identifier: uF3B4COq4JueAHRk0xeq+DbXlEsmruob4xno4tjyV2A= Subject key identifier: 0E:DD:4F:70:EE:60:49:EE:E2:97:AA:4D:CA:6A:80:68:6C:F5:1F:37 Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 4415F7D8480491666CEA1BE2AAA40208027507AF Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463343a3a2f34372d3438203d3e20323135393536.roa Signing time: Sat 08 Mar 2025 00:16:06 +0000 ROA not before: Sat 08 Mar 2025 00:11:06 +0000 ROA not after: Sat 07 Mar 2026 00:16:06 +0000 asID: 215956 IP address blocks: 2a14:7580:edc4::/47 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 14:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:15:f7:d8:48:04:91:66:6c:ea:1b:e2:aa:a4:02:08:02:75:07:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Mar 8 00:11:06 2025 GMT Not After : Mar 7 00:16:06 2026 GMT Subject: CN=0EDD4F70EE6049EEE297AA4DCA6A80686CF51F37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:41:f3:5f:8e:2c:fb:b5:f9:f7:b3:6c:e2: 3f:1a:94:54:2d:4c:fd:64:f8:43:3e:ce:e3:98:3d: 12:75:0e:15:fe:bf:c3:85:87:64:cc:68:45:a3:ec: bb:20:91:ba:78:e3:34:11:5c:f6:ec:67:2d:09:01: fa:d4:e8:66:34:85:e9:ca:e8:8d:f5:25:11:e9:4e: 1e:1c:ce:0e:65:81:08:13:72:4e:ea:08:97:e4:1d: db:07:83:20:43:2a:95:e5:f6:f3:f9:19:8e:44:9d: d1:22:1a:64:a4:85:0d:51:76:f6:60:b0:65:c8:b6: bf:32:f1:e9:24:db:6d:bd:12:7b:c9:33:28:5d:ae: 80:b3:b6:a6:df:bf:8c:21:79:c5:1c:53:90:14:65: 20:89:31:67:c8:23:df:62:56:76:c0:06:70:0c:55: 69:00:59:0d:e8:b6:6d:af:62:a4:a5:1d:84:79:66: 59:3d:34:c7:99:d0:bc:43:f5:27:7e:9b:a2:e8:9e: dc:11:d8:a1:ba:d3:54:89:71:34:f5:61:0d:38:d8: dd:3d:b2:c4:e3:18:fc:0a:00:3d:7f:0f:30:bc:66: dc:f4:1c:25:9c:b0:7c:fd:3d:b1:2e:91:b5:67:d6: 31:f2:ed:a4:b8:ea:0e:64:01:69:af:25:89:2f:8c: 5e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DD:4F:70:EE:60:49:EE:E2:97:AA:4D:CA:6A:80:68:6C:F5:1F:37 X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463343a3a2f34372d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:edc4::/47 Signature Algorithm: sha256WithRSAEncryption 2f:70:52:82:88:f1:0e:4c:60:91:99:e2:f1:23:da:9a:72:9a: 3e:7a:46:d7:a3:a0:88:06:2c:8e:12:d8:d0:19:1f:52:a1:71: 6d:52:1e:f6:a6:16:a9:22:78:6c:00:63:1b:ea:24:6e:69:0c: 86:ae:e6:0e:15:f6:6d:a2:b3:c8:ff:37:06:01:21:1c:31:47: 97:47:ee:f5:d3:d3:63:95:17:a9:3b:e2:9d:9a:28:08:89:22: f5:86:d0:4e:0d:cd:d4:e8:eb:b6:67:8d:ae:50:93:9f:68:72: f5:1a:9b:9d:08:c2:e3:ea:c8:3b:43:1b:b5:f0:65:a2:e0:79: 10:c7:ad:03:69:37:6d:63:9a:15:82:d6:c5:7d:7d:19:85:39: 6b:20:3e:0f:17:0b:c6:56:e5:a1:c8:89:c3:c5:93:ad:29:dd: da:2e:b8:48:64:9f:80:89:8f:4b:7f:63:97:13:93:66:5c:93: 52:52:3a:73:f5:15:c7:43:94:e6:a8:29:a4:ef:e2:1c:cf:08: c9:49:f8:be:22:bb:07:35:13:04:3a:5c:bf:ec:93:38:96:d6: 2d:f9:86:32:0e:bd:06:f0:b1:e0:00:3a:45:f0:53:50:20:94: 68:0b:ae:67:e3:44:12:81:41:bc:21:41:7f:9e:29:b1:dd:22: 65:91:2d:35 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIURBX32EgEkWZs6hviqqQCCAJ1B68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAzMDgwMDExMDZaFw0yNjAzMDcwMDE2MDZaMDMxMTAvBgNV BAMTKDBFREQ0RjcwRUU2MDQ5RUVFMjk3QUE0RENBNkE4MDY4NkNGNTFGMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/V0HzX44s+7X597Ns4j8alFQt TP1k+EM+zuOYPRJ1DhX+v8OFh2TMaEWj7Lsgkbp44zQRXPbsZy0JAfrU6GY0henK 6I31JRHpTh4czg5lgQgTck7qCJfkHdsHgyBDKpXl9vP5GY5EndEiGmSkhQ1RdvZg sGXItr8y8ekk2229EnvJMyhdroCztqbfv4whecUcU5AUZSCJMWfII99iVnbABnAM VWkAWQ3otm2vYqSlHYR5Zlk9NMeZ0LxD9Sd+m6LontwR2KG601SJcTT1YQ042N09 ssTjGPwKAD1/DzC8Ztz0HCWcsHz9PbEukbVn1jHy7aS46g5kAWmvJYkvjF7VAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUDt1PcO5gSe7il6pNymqAaGz1HzcwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjQ2MzM0M2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcBKhR1gO3EMA0GCSqGSIb3DQEBCwUAA4IBAQAv cFKCiPEOTGCRmeLxI9qacpo+ekbXo6CIBiyOEtjQGR9SoXFtUh72phapInhsAGMb 6iRuaQyGruYOFfZtorPI/zcGASEcMUeXR+7109NjlRepO+KdmigIiSL1htBODc3U 6Ou2Z42uUJOfaHL1GpudCMLj6sg7Qxu18GWi4HkQx60DaTdtY5oVgtbFfX0ZhTlr ID4PFwvGVuWhyInDxZOtKd3aLrhIZJ+AiY9Lf2OXE5NmXJNSUjpz9RXHQ5TmqCmk 7+IczwjJSfi+IrsHNRMEOly/7JM4ltYt+YYyDr0G8LHgADpF8FNQIJRoC65n40QS gUG8IUF/nimx3SJlkS01 -----END CERTIFICATE-----Generated at Sat Apr 5 06:24:10 2025 by rpki-client