$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663630303a3a2f34302d3438203d3e20323038383834.roa File: 326130353a646663333a663630303a3a2f34302d3438203d3e20323038383834.roa (raw, json) Hash identifier: 7JWPSbuWUj3JLmVMpQpgJYayx2gO5Bkv1INn4E6UY2k= Subject key identifier: 41:98:CA:66:FD:4A:C9:D6:63:CC:3E:A8:62:7E:67:AC:BA:1E:83:51 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 2125945E128EB01CEBB59C91990D63F738B77EF2 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663630303a3a2f34302d3438203d3e20323038383834.roa Signing time: Tue 27 May 2025 10:07:58 +0000 ROA not before: Tue 27 May 2025 10:02:58 +0000 ROA not after: Tue 26 May 2026 10:07:58 +0000 asID: 208884 IP address blocks: 2a05:dfc3:f600::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 22:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:25:94:5e:12:8e:b0:1c:eb:b5:9c:91:99:0d:63:f7:38:b7:7e:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: May 27 10:02:58 2025 GMT Not After : May 26 10:07:58 2026 GMT Subject: CN=4198CA66FD4AC9D663CC3EA8627E67ACBA1E8351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:a6:3e:96:c8:c1:c1:dd:77:c6:c3:2b:68: f5:6e:8c:3b:bb:03:df:ad:21:70:05:d5:f3:d1:18: f2:c1:7d:a4:8f:b3:2c:1f:6a:da:6b:95:2e:18:4b: 14:d8:75:3e:4d:5b:4b:80:f5:9f:fb:2d:d8:66:4b: 32:c9:eb:fa:ec:de:d0:d4:9c:00:b8:10:a6:62:60: a1:0f:79:ee:fd:10:2b:1b:3d:93:ac:97:42:55:e2: f2:8a:c0:f1:b1:6d:04:31:c5:b9:a2:ac:45:ca:47: 4c:ed:a1:1d:af:f7:be:3d:2d:12:c7:35:c6:1c:ab: b1:f6:7a:57:b7:aa:ec:e5:b7:fd:ac:bc:bb:e9:62: 72:ca:ca:09:6f:67:15:88:38:b1:ff:cb:da:ea:e5: 5e:d2:85:53:3d:11:e3:6e:d6:0f:53:09:d6:ce:4a: a4:70:a9:63:1a:7c:29:67:36:fe:86:72:73:91:5f: fd:0a:83:db:ab:5f:5f:b2:3e:8e:29:62:1f:21:ea: 63:1f:28:48:ab:66:1f:6f:54:55:94:37:97:a1:0e: 9c:aa:38:8d:43:a4:32:4b:12:d5:bd:68:e0:c5:d5: 76:5e:c9:2f:43:02:0d:f9:ae:e3:cc:80:ea:be:ed: 9c:c5:d0:a2:2e:94:a3:26:e4:9c:ff:77:0c:d2:59: 61:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:98:CA:66:FD:4A:C9:D6:63:CC:3E:A8:62:7E:67:AC:BA:1E:83:51 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663630303a3a2f34302d3438203d3e20323038383834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:f600::/40 Signature Algorithm: sha256WithRSAEncryption 5f:bc:d9:f5:0d:ce:d8:eb:97:2c:2e:a2:df:a2:6c:32:86:bb: 5a:24:ad:48:4c:6d:6f:d9:af:6a:df:5c:26:99:f4:a2:f5:d2: 2f:7d:30:d6:f1:09:15:ea:14:a9:9e:7a:57:8a:09:77:1c:13: 3b:f0:ea:9b:3f:2c:f8:23:16:e9:87:3e:2d:fa:35:fa:3d:19: e0:72:70:a1:1e:46:cd:e4:04:63:01:f7:53:85:8f:e6:e2:39: 04:db:3e:70:fd:63:af:ce:5f:eb:5b:87:9d:a1:6d:cc:f3:10: 30:4b:de:d4:b9:29:5f:41:62:8f:dd:a6:a8:fc:77:bb:50:71: b1:fc:8e:6f:fc:7b:87:1f:a2:fb:46:67:7e:83:14:04:81:c9: db:1b:1b:34:a6:73:8b:92:09:aa:05:a0:88:25:4c:c4:b1:66: 58:c1:43:08:64:77:be:0e:ab:67:e9:86:3e:07:3f:65:93:47: e2:8b:33:1a:c6:0a:60:7b:92:a9:3e:4b:e8:a1:9b:d2:47:5e: 8a:db:e0:8a:95:77:cb:6f:dc:30:b1:1b:4a:98:da:ab:05:ef: 75:1a:f6:92:7c:46:eb:51:3a:ba:78:7f:e7:94:f5:ec:7d:4d: 2d:8e:5d:0b:db:65:00:25:5e:8a:11:25:dd:1c:bf:db:82:c1: 2a:89:a5:8d -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUISWUXhKOsBzrtZyRmQ1j9zi3fvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA1MjcxMDAyNThaFw0yNjA1MjYxMDA3NThaMDMxMTAvBgNV BAMTKDQxOThDQTY2RkQ0QUM5RDY2M0NDM0VBODYyN0U2N0FDQkExRTgzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7raY+lsjBwd13xsMraPVujDu7 A9+tIXAF1fPRGPLBfaSPsywfatprlS4YSxTYdT5NW0uA9Z/7LdhmSzLJ6/rs3tDU nAC4EKZiYKEPee79ECsbPZOsl0JV4vKKwPGxbQQxxbmirEXKR0ztoR2v9749LRLH NcYcq7H2ele3quzlt/2svLvpYnLKyglvZxWIOLH/y9rq5V7ShVM9EeNu1g9TCdbO SqRwqWMafClnNv6GcnORX/0Kg9urX1+yPo4pYh8h6mMfKEirZh9vVFWUN5ehDpyq OI1DpDJLEtW9aODF1XZeyS9DAg35ruPMgOq+7ZzF0KIulKMm5Jz/dwzSWWFrAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUQZjKZv1KydZjzD6oYn5nrLoeg1EwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzUzYTY0NjY2MzMz M2E2NjM2MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzODM4MzgzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoF38P2MA0GCSqGSIb3DQEBCwUAA4IBAQBfvNn1Dc7Y65csLqLf omwyhrtaJK1ITG1v2a9q31wmmfSi9dIvfTDW8QkV6hSpnnpXigl3HBM78OqbPyz4 Ixbphz4t+jX6PRngcnChHkbN5ARjAfdThY/m4jkE2z5w/WOvzl/rW4edoW3M8xAw S97UuSlfQWKP3aao/He7UHGx/I5v/HuHH6L7Rmd+gxQEgcnbGxs0pnOLkgmqBaCI JUzEsWZYwUMIZHe+Dqtn6YY+Bz9lk0fiizMaxgpge5KpPkvooZvSR16K2+CKlXfL b9wwsRtKmNqrBe91GvaSfEbrUTq6eH/nlPXsfU0tjl0L22UAJV6KESXdHL/bgsEq iaWN -----END CERTIFICATE-----Generated at Tue Jun 3 10:14:29 2025 by rpki-client