$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363930313a3a2f34382d3438203d3e20323136313833.roa File: 326130373a353463373a363930313a3a2f34382d3438203d3e20323136313833.roa (raw, json) Hash identifier: NYo5s1qbQ/1JlSrS70G5YUYg/O6TrwYn5HfSpWMmR6M= Subject key identifier: 2B:87:DB:C0:C7:5F:9A:D8:24:C2:CB:7F:D3:4E:CD:43:3E:7D:FA:00 Certificate issuer: /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E Certificate serial: 0A7D225989BD4CF18E8AFA88082A0220D7278D4C Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363930313a3a2f34382d3438203d3e20323136313833.roa Signing time: Mon 13 May 2024 23:25:13 +0000 ROA not before: Mon 13 May 2024 23:20:13 +0000 ROA not after: Mon 12 May 2025 23:25:13 +0000 asID: 216183 IP address blocks: 2a07:54c7:6901::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Jun 2024 07:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:7d:22:59:89:bd:4c:f1:8e:8a:fa:88:08:2a:02:20:d7:27:8d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E Validity Not Before: May 13 23:20:13 2024 GMT Not After : May 12 23:25:13 2025 GMT Subject: CN=2B87DBC0C75F9AD824C2CB7FD34ECD433E7DFA00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:30:ce:5f:49:75:4e:1b:12:c8:56:eb:20:cf: f4:d3:4c:e3:8e:ed:00:a4:e2:f6:c0:50:90:6a:fc: ae:b0:df:31:87:4f:07:a9:09:67:47:c9:49:50:5e: ef:8f:32:17:fb:6c:95:e4:42:38:35:93:be:55:df: 3d:fe:14:bc:66:92:95:b0:20:30:31:ff:a9:e0:70: ba:43:e9:cd:7e:a7:0e:c0:ba:dc:2a:3b:2e:53:9d: a4:4f:dd:d2:56:0f:de:1c:d4:14:41:77:39:9e:10: 63:b3:72:fc:c9:64:19:33:9e:10:f1:1e:c4:27:97: 21:be:20:b0:6f:db:b5:5d:d3:62:c6:df:35:3f:36: 37:7e:b3:12:30:05:b7:43:6f:75:84:a6:3c:75:b1: d2:45:cb:a5:12:c6:ee:e2:fc:eb:be:7a:39:eb:46: 3c:6b:06:74:46:21:34:7e:ee:44:3a:92:ad:77:28: 3d:de:ef:e8:bb:25:4e:db:1e:a2:19:fc:68:a6:4c: e4:0c:ad:45:a0:e3:07:37:ec:eb:77:1b:e2:d5:ae: f8:ae:f0:46:ad:6d:4b:7c:09:b9:61:27:f5:50:a9: 36:1e:ef:df:dc:df:42:02:f3:34:1a:4f:d2:24:1b: a8:81:88:a2:b5:8c:dd:b9:8b:25:f1:4d:23:69:38: 3d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:87:DB:C0:C7:5F:9A:D8:24:C2:CB:7F:D3:4E:CD:43:3E:7D:FA:00 X509v3 Authority Key Identifier: keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363930313a3a2f34382d3438203d3e20323136313833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c7:6901::/48 Signature Algorithm: sha256WithRSAEncryption 9e:d9:06:b4:80:c1:6a:fb:7c:a9:b2:93:44:a6:06:05:ed:05: 5b:cc:f4:d8:1e:58:66:a3:a2:95:80:7e:5c:55:f5:cb:ae:a1: 7b:b1:24:5a:06:fc:ce:63:c0:b2:1d:84:59:4c:13:21:09:63: e1:4b:e4:39:69:23:60:8b:a0:5b:24:c3:eb:7a:8a:e8:47:3d: c5:42:7f:36:4e:1d:5d:ab:41:69:ea:3f:ef:0d:4f:42:c7:38: 4b:e1:74:e1:81:6a:4f:8d:f8:21:80:06:a6:71:cd:81:f1:e3: 98:7a:c9:26:55:0c:12:12:a6:a2:6b:2e:74:bf:53:f7:f7:f7: 62:5b:4c:81:24:9c:bb:a5:04:75:f7:e2:2d:3b:ff:1e:61:49: e5:8f:6f:82:a6:cb:3a:96:96:4c:76:df:11:5c:5a:68:e2:29: 2f:2d:f0:4d:bf:28:a4:1a:c2:9b:91:f9:d5:bd:bb:72:fa:f0: c8:9d:bc:81:8c:df:5b:25:22:39:5e:6d:73:e7:ad:90:6b:e5: 17:99:e7:49:14:40:78:fa:0d:0b:61:b4:6e:dc:c3:f1:c7:63: 4f:a8:e5:f4:6c:94:24:a9:a3:3e:95:7f:92:77:64:cb:3a:0c: 9c:a8:fe:74:23:88:ea:e8:09:49:60:51:20:e9:43:18:b1:29: da:bc:d4:49 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUCn0iWYm9TPGOivqICCoCINcnjUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFBQkQ5NDI5RjNBNzMzNjY4Q0FDNjk4QzExM0E5RTM0 M0M5OUIzRTAeFw0yNDA1MTMyMzIwMTNaFw0yNTA1MTIyMzI1MTNaMDMxMTAvBgNV BAMTKDJCODdEQkMwQzc1RjlBRDgyNEMyQ0I3RkQzNEVDRDQzM0U3REZBMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNMM5fSXVOGxLIVusgz/TTTOOO 7QCk4vbAUJBq/K6w3zGHTwepCWdHyUlQXu+PMhf7bJXkQjg1k75V3z3+FLxmkpWw IDAx/6ngcLpD6c1+pw7AutwqOy5TnaRP3dJWD94c1BRBdzmeEGOzcvzJZBkznhDx HsQnlyG+ILBv27Vd02LG3zU/Njd+sxIwBbdDb3WEpjx1sdJFy6USxu7i/Ou+ejnr RjxrBnRGITR+7kQ6kq13KD3e7+i7JU7bHqIZ/GimTOQMrUWg4wc37Ot3G+LVrviu 8EatbUt8CblhJ/VQqTYe79/c30IC8zQaT9IkG6iBiKK1jN25iyXxTSNpOD2NAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUK4fbwMdfmtgkwst/007NQz59+gAwHwYDVR0j BBgwFoAU8avZQp86czZoysaYwROp40PJmz4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzNmExZTQtM2JmMC00MzUyLTkwNjEtNjY2OTRkMmJj YmQzLzAvRjFBQkQ5NDI5RjNBNzMzNjY4Q0FDNjk4QzExM0E5RTM0M0M5OUIzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9GMUFCRDk0MjlGM0E3MzM2NjhDQUM2OThD MTEzQTlFMzQzQzk5QjNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTM2YTFlNC0zYmYwLTQzNTItOTA2MS02NjY5NGQyYmNiZDMvMC8zMjYxMzAz NzNhMzUzNDYzMzczYTM2MzkzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM2MzEzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUx2kBMA0GCSqGSIb3DQEBCwUAA4IBAQCe 2Qa0gMFq+3ypspNEpgYF7QVbzPTYHlhmo6KVgH5cVfXLrqF7sSRaBvzOY8CyHYRZ TBMhCWPhS+Q5aSNgi6BbJMPreoroRz3FQn82Th1dq0Fp6j/vDU9CxzhL4XThgWpP jfghgAamcc2B8eOYeskmVQwSEqaiay50v1P39/diW0yBJJy7pQR19+ItO/8eYUnl j2+Cpss6lpZMdt8RXFpo4ikvLfBNvyikGsKbkfnVvbty+vDInbyBjN9bJSI5Xm1z 562Qa+UXmedJFEB4+g0LYbRu3MPxx2NPqOX0bJQkqaM+lX+Sd2TLOgycqP50I4jq 6AlJYFEg6UMYsSnavNRJ -----END CERTIFICATE-----Generated at Fri Jun 28 23:14:45 2024 by rpki-client on console-fra.rpki-client.org