$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530373a3a2f34382d3438203d3e20323135393536.roa File: 326131343a373538303a656530373a3a2f34382d3438203d3e20323135393536.roa (raw, json) Hash identifier: bqdtJDZQwxUjECeVo6N8GUkB5746aKVjv0QuvYc/NYQ= Subject key identifier: F2:92:6F:D1:36:41:F2:35:4E:9F:CC:EF:73:EF:EC:ED:28:CA:B2:22 Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 6403B3D145FB6E7C0F0C4E15CE2D84D311E5E3B8 Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530373a3a2f34382d3438203d3e20323135393536.roa Signing time: Mon 03 Mar 2025 00:08:04 +0000 ROA not before: Mon 03 Mar 2025 00:03:04 +0000 ROA not after: Mon 02 Mar 2026 00:08:04 +0000 asID: 215956 IP address blocks: 2a14:7580:ee07::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 14:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:03:b3:d1:45:fb:6e:7c:0f:0c:4e:15:ce:2d:84:d3:11:e5:e3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Mar 3 00:03:04 2025 GMT Not After : Mar 2 00:08:04 2026 GMT Subject: CN=F2926FD13641F2354E9FCCEF73EFECED28CAB222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b9:76:06:ce:e3:4e:3b:7f:25:1b:1a:18:32: 70:37:e5:11:28:45:48:55:e5:71:d1:69:68:d0:85: 9f:60:dd:b0:b4:cb:2e:d5:94:09:a5:4e:84:44:e6: 69:6f:62:1a:65:86:ab:69:5e:66:1a:92:2f:32:f2: a5:3b:79:51:81:b3:57:95:da:88:83:33:d2:7f:0b: 51:c9:86:2d:80:f9:32:ae:45:f2:49:d7:6e:58:d4: ef:60:b2:df:00:9b:37:cd:fb:3c:25:fb:db:8a:b0: 6b:73:2d:8c:93:d3:58:5c:b9:2b:58:7b:b4:f6:66: ad:40:9f:ae:ba:35:a4:0c:85:5d:5b:40:e9:d3:63: cc:0d:db:e4:50:6b:6d:37:a0:e0:76:bf:64:e1:54: f7:14:80:91:fa:ef:23:c5:ce:66:32:8c:7a:89:40: ef:08:54:5c:03:fd:6c:22:6d:e8:ed:b6:a4:9e:be: b8:96:cd:14:56:0c:56:5d:57:fa:34:32:53:46:b7: bd:15:44:93:75:a2:cd:c3:02:7d:8a:49:e9:2a:cc: b0:0d:d0:26:44:05:50:c8:c2:ab:ba:38:25:0c:90: 81:05:97:51:8e:e9:4a:40:1e:3f:32:ff:9e:1d:7a: 5d:4f:00:67:ee:2b:e6:66:91:ec:9d:b3:16:65:19: 01:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:92:6F:D1:36:41:F2:35:4E:9F:CC:EF:73:EF:EC:ED:28:CA:B2:22 X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530373a3a2f34382d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ee07::/48 Signature Algorithm: sha256WithRSAEncryption 6d:50:eb:0e:ac:c9:6d:a2:48:05:47:ff:67:bf:e6:71:93:e5: 7e:e2:9a:52:7f:be:1d:bc:6b:10:e3:93:45:3f:66:3d:a5:16: f3:bd:9d:8e:65:82:8f:02:58:89:0f:39:0d:69:f8:2f:e0:8b: d2:9f:1f:52:fb:d0:37:78:30:a0:b6:0e:19:35:1f:ea:5e:4b: a0:6d:85:cf:99:c4:01:9b:71:fc:9e:c7:12:95:30:21:01:99: 1c:3b:86:af:d2:eb:43:76:b9:7b:95:2e:18:75:8a:d2:42:ab: e0:64:e9:93:16:21:72:91:ec:9b:0a:df:dd:6b:7c:3b:dd:d6: ca:be:c2:16:8b:79:d3:c9:9c:c8:a6:2f:b1:cd:07:99:c4:c1: 07:4a:ad:ac:13:0c:47:d3:f3:1a:d3:f8:75:ca:d4:05:34:0a: de:25:4c:91:82:6a:4c:45:21:ed:24:a8:09:44:56:3a:d2:38: d0:4a:66:46:35:f8:90:aa:37:82:3d:3c:6a:8f:ec:ca:27:43: 41:5b:1e:e4:ea:9d:29:e3:e2:0d:b1:c4:9d:52:b5:90:58:32: a9:e6:6a:df:57:bc:56:28:4b:35:68:48:67:b0:28:c1:0e:8a: 18:68:47:b6:29:6d:e7:d2:63:1c:f2:41:8b:a7:b4:d9:b6:e4: e4:ad:3d:27 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUZAOz0UX7bnwPDE4Vzi2E0xHl47gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAzMDMwMDAzMDRaFw0yNjAzMDIwMDA4MDRaMDMxMTAvBgNV BAMTKEYyOTI2RkQxMzY0MUYyMzU0RTlGQ0NFRjczRUZFQ0VEMjhDQUIyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3uXYGzuNOO38lGxoYMnA35REo RUhV5XHRaWjQhZ9g3bC0yy7VlAmlToRE5mlvYhplhqtpXmYaki8y8qU7eVGBs1eV 2oiDM9J/C1HJhi2A+TKuRfJJ125Y1O9gst8AmzfN+zwl+9uKsGtzLYyT01hcuStY e7T2Zq1An666NaQMhV1bQOnTY8wN2+RQa203oOB2v2ThVPcUgJH67yPFzmYyjHqJ QO8IVFwD/WwibejttqSevriWzRRWDFZdV/o0MlNGt70VRJN1os3DAn2KSekqzLAN 0CZEBVDIwqu6OCUMkIEFl1GO6UpAHj8y/54del1PAGfuK+ZmkeydsxZlGQHPAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU8pJv0TZB8jVOn8zvc+/s7SjKsiIwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjUzMDM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gO4HMA0GCSqGSIb3DQEBCwUAA4IBAQBt UOsOrMltokgFR/9nv+Zxk+V+4ppSf74dvGsQ45NFP2Y9pRbzvZ2OZYKPAliJDzkN afgv4IvSnx9S+9A3eDCgtg4ZNR/qXkugbYXPmcQBm3H8nscSlTAhAZkcO4av0utD drl7lS4YdYrSQqvgZOmTFiFykeybCt/da3w73dbKvsIWi3nTyZzIpi+xzQeZxMEH Sq2sEwxH0/Ma0/h1ytQFNAreJUyRgmpMRSHtJKgJRFY60jjQSmZGNfiQqjeCPTxq j+zKJ0NBWx7k6p0p4+INscSdUrWQWDKp5mrfV7xWKEs1aEhnsCjBDooYaEe2KW3n 0mMc8kGLp7TZtuTkrT0n -----END CERTIFICATE-----Generated at Sat Apr 5 06:27:07 2025 by rpki-client