$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666230303a3a2f34302d3438203d3e20323135343738.roa File: 326130353a646663333a666230303a3a2f34302d3438203d3e20323135343738.roa (raw, json) Hash identifier: j2KKwXnpuK/5jjJah50XRrAZWwRstxanoNQOm9o92sA= Subject key identifier: 23:E9:DB:78:B5:A2:D2:C5:58:8F:2A:12:1A:B6:26:C4:ED:BC:45:70 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 33497F2F6B71271EDFF0F1CC351B775BAE9DAB16 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666230303a3a2f34302d3438203d3e20323135343738.roa Signing time: Mon 17 Feb 2025 18:19:32 +0000 ROA not before: Mon 17 Feb 2025 18:14:32 +0000 ROA not after: Mon 16 Feb 2026 18:19:32 +0000 asID: 215478 IP address blocks: 2a05:dfc3:fb00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Mar 2025 21:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:49:7f:2f:6b:71:27:1e:df:f0:f1:cc:35:1b:77:5b:ae:9d:ab:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 17 18:14:32 2025 GMT Not After : Feb 16 18:19:32 2026 GMT Subject: CN=23E9DB78B5A2D2C5588F2A121AB626C4EDBC4570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:76:3c:83:d2:56:a2:d4:f6:40:98:46:d0:c0: eb:14:a6:66:8e:4e:80:79:cc:29:88:d4:91:62:ce: db:3d:ad:12:e3:c8:7f:66:98:62:3a:db:3d:71:15: cd:01:70:8f:5e:89:7e:2f:64:fc:74:78:d7:96:3b: 28:df:9a:77:d6:42:5b:ed:7d:b8:cf:cb:34:b6:75: 48:36:e6:22:b9:6b:65:32:58:c0:26:a7:f0:2a:db: df:91:15:77:c5:70:2d:fd:b3:b2:6f:1b:e5:1d:ee: ad:c8:f1:db:f2:de:80:83:1b:08:25:5d:06:68:b8: e9:50:d5:a4:1b:9b:f9:69:e6:93:03:63:a6:60:30: 14:1a:49:1e:fd:f4:52:c5:a7:00:84:f5:d0:c7:1f: 08:73:08:5e:b5:a6:b2:1f:bc:83:3b:8a:6c:25:f1: b5:ee:32:25:ca:1c:7c:38:91:a6:61:77:ef:34:e7: c3:45:60:f1:2a:e9:9a:d7:ca:8b:30:0b:fd:65:fe: d4:d0:59:11:51:26:95:5e:5e:c6:f2:89:37:5c:78: 53:06:9d:d2:21:f6:e6:c0:ce:ab:5e:01:13:db:12: 0a:df:62:97:11:99:c0:7b:c0:eb:12:f4:a9:57:7f: ed:04:33:0b:8d:ec:d7:90:cc:ff:59:c8:90:0e:49: 99:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E9:DB:78:B5:A2:D2:C5:58:8F:2A:12:1A:B6:26:C4:ED:BC:45:70 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666230303a3a2f34302d3438203d3e20323135343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fb00::/40 Signature Algorithm: sha256WithRSAEncryption 34:1c:9b:21:0c:c7:ca:07:c0:d6:75:cb:16:3d:28:59:cb:d6: 54:65:fa:05:e9:4a:16:2a:00:f4:e6:dd:8e:c2:b8:d3:41:a9: 83:f1:ac:75:ca:ed:ad:34:8f:bc:a8:63:6c:e5:9a:67:e1:86: 33:44:8f:79:6e:3b:18:2d:a9:80:d7:59:2c:63:51:0a:18:91: cd:6c:3f:a2:34:95:57:fd:11:78:06:b2:16:8d:3f:be:c6:27: 27:4d:d4:83:f7:aa:61:2f:f1:5b:90:a2:d1:7e:03:c5:d5:97: ec:b1:87:b6:c1:6c:8a:3d:6e:2c:e5:76:9c:12:af:a7:be:58: b5:06:3a:33:b2:1c:e9:7c:35:5b:30:07:4f:77:45:c1:77:2f: f9:19:26:05:07:4a:ec:df:b3:e4:46:ef:62:6b:10:da:1a:d6: c7:1a:5e:b7:a1:0e:ce:4c:a4:b5:4a:56:d1:56:f8:17:50:1d: fa:f5:d0:b4:5a:e4:36:b3:b1:88:43:0a:ff:c4:a2:02:27:6c: d1:2e:3a:2c:ae:13:64:67:ad:52:19:6a:6c:40:a9:b4:b5:c2: 18:69:e2:e1:75:72:40:2f:3f:59:87:2d:4c:bc:76:05:e1:b3: 73:85:78:5a:26:06:06:a6:9d:db:bc:66:b8:63:b1:7a:ce:33: d0:be:1e:d4 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUM0l/L2txJx7f8PHMNRt3W66dqxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMTcxODE0MzJaFw0yNjAyMTYxODE5MzJaMDMxMTAvBgNV BAMTKDIzRTlEQjc4QjVBMkQyQzU1ODhGMkExMjFBQjYyNkM0RURCQzQ1NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqdjyD0lai1PZAmEbQwOsUpmaO ToB5zCmI1JFizts9rRLjyH9mmGI62z1xFc0BcI9eiX4vZPx0eNeWOyjfmnfWQlvt fbjPyzS2dUg25iK5a2UyWMAmp/Aq29+RFXfFcC39s7JvG+Ud7q3I8dvy3oCDGwgl XQZouOlQ1aQbm/lp5pMDY6ZgMBQaSR799FLFpwCE9dDHHwhzCF61prIfvIM7imwl 8bXuMiXKHHw4kaZhd+8058NFYPEq6ZrXyoswC/1l/tTQWRFRJpVeXsbyiTdceFMG ndIh9ubAzqteARPbEgrfYpcRmcB7wOsS9KlXf+0EMwuN7NeQzP9ZyJAOSZlpAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUI+nbeLWi0sVYjyoSGrYmxO28RXAwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzUzYTY0NjY2MzMz M2E2NjYyMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNTM0MzczOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoF38P7MA0GCSqGSIb3DQEBCwUAA4IBAQA0HJshDMfKB8DWdcsW PShZy9ZUZfoF6UoWKgD05t2OwrjTQamD8ax1yu2tNI+8qGNs5Zpn4YYzRI95bjsY LamA11ksY1EKGJHNbD+iNJVX/RF4BrIWjT++xicnTdSD96phL/FbkKLRfgPF1Zfs sYe2wWyKPW4s5XacEq+nvli1BjozshzpfDVbMAdPd0XBdy/5GSYFB0rs37PkRu9i axDaGtbHGl63oQ7OTKS1SlbRVvgXUB369dC0WuQ2s7GIQwr/xKICJ2zRLjosrhNk Z61SGWpsQKm0tcIYaeLhdXJALz9Zhy1MvHYF4bNzhXhaJgYGpp3bvGa4Y7F6zjPQ vh7U -----END CERTIFICATE-----Generated at Thu Mar 13 07:15:18 2025 by rpki-client