$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666435303a3a2f34342d3438203d3e20323133363431.roa File: 326130353a646663333a666435303a3a2f34342d3438203d3e20323133363431.roa (raw, json) Hash identifier: Ll58kbn88xJ+7GCrCOfUngkySd5Y0zqTp3LliyiDW1o= Subject key identifier: F6:CC:88:AB:EA:92:B0:1C:78:B4:B8:30:88:40:8E:A3:86:6E:2B:79 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 3220945C98210AF94C3C9F14ADBC7183CA958F34 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666435303a3a2f34342d3438203d3e20323133363431.roa Signing time: Mon 02 Jun 2025 17:32:00 +0000 ROA not before: Mon 02 Jun 2025 17:27:00 +0000 ROA not after: Mon 01 Jun 2026 17:32:00 +0000 asID: 213641 IP address blocks: 2a05:dfc3:fd50::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 18:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:20:94:5c:98:21:0a:f9:4c:3c:9f:14:ad:bc:71:83:ca:95:8f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Jun 2 17:27:00 2025 GMT Not After : Jun 1 17:32:00 2026 GMT Subject: CN=F6CC88ABEA92B01C78B4B83088408EA3866E2B79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a0:5d:de:42:9c:a4:21:c8:71:88:54:9f:cb: cb:8e:f0:d8:67:7e:12:e6:23:6f:68:cd:ad:de:9f: a8:ec:06:28:70:09:f6:0e:99:d6:69:92:1d:2f:0a: 1b:c9:42:3a:ff:0d:f3:78:e2:c4:61:4a:c9:41:5c: 05:62:e6:b7:0c:d4:2c:93:f8:1a:76:34:f0:a8:17: 09:59:68:e2:8e:a5:af:92:12:9d:e5:eb:7b:9f:07: 1d:4f:a4:5c:fa:22:52:e8:bf:a6:93:d3:16:f0:d2: 8e:3e:25:af:70:49:df:92:85:73:f5:86:41:7a:f2: c0:a8:1b:1d:6b:03:98:74:48:73:cb:1e:af:85:e3: 3f:77:b3:54:e8:04:e4:06:4c:c1:31:7e:08:c0:7e: 3b:c1:fd:ab:74:64:af:5c:4c:c4:2a:0c:d2:de:08: 4c:41:6f:1c:d3:9f:6e:5c:f7:40:fb:b2:40:e3:04: 30:94:c2:2a:15:fd:d2:75:e8:e0:42:ac:b3:f1:46: 19:65:9c:15:f3:f9:33:99:f6:a7:93:ef:37:1d:43: 25:d8:29:c4:41:ef:f5:85:a5:8e:d8:69:39:9a:e2: 8c:cb:65:c6:2c:e2:7c:99:2b:22:6c:a6:a8:27:fe: 1a:1e:10:83:0a:cc:71:63:73:6d:8b:58:a7:d8:a7: 43:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CC:88:AB:EA:92:B0:1C:78:B4:B8:30:88:40:8E:A3:86:6E:2B:79 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666435303a3a2f34342d3438203d3e20323133363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd50::/44 Signature Algorithm: sha256WithRSAEncryption 26:53:ea:66:eb:cd:5f:f7:1f:74:b1:db:f7:13:b2:3f:94:ca: 8e:a4:59:d0:63:74:2e:b7:21:44:72:95:74:c2:43:46:14:5c: ac:05:d4:54:47:ed:fe:87:56:e0:23:a9:2a:79:f5:c7:e7:94: a5:2b:0e:c3:b1:eb:a5:c1:5d:87:39:f7:e6:8b:8d:b7:fb:bd: bc:34:8d:b9:d1:6a:e3:25:43:98:54:7d:f8:4e:fd:69:76:94: 1b:44:f9:e0:01:75:9c:d7:82:51:72:d1:50:58:8a:dc:19:88: 36:bd:6d:dd:12:16:7a:04:29:82:b5:53:e6:55:0b:8e:87:4d: 29:f9:68:c3:6e:8f:8a:bb:ba:e2:29:f2:0e:f5:3d:41:6e:44: e0:4c:52:39:f2:19:19:3e:bd:24:9d:c7:fc:8d:d6:9b:98:20: ed:4b:0a:da:f3:1d:36:25:57:03:77:6f:66:df:f1:19:29:a1: 15:fb:94:d6:e6:89:90:be:a1:73:a6:71:d2:52:92:49:6d:65: c4:40:e5:95:b0:a3:d5:cd:a4:19:71:9f:b1:97:fd:e5:8c:b8: 2a:0f:84:7e:41:07:56:b6:3b:98:86:2a:41:47:78:2a:7a:2f: b9:2c:7c:3b:bb:2e:c6:72:20:12:c9:e0:f9:2e:1b:6b:48:e0: 1b:bd:8d:bd -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUMiCUXJghCvlMPJ8Urbxxg8qVjzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA2MDIxNzI3MDBaFw0yNjA2MDExNzMyMDBaMDMxMTAvBgNV BAMTKEY2Q0M4OEFCRUE5MkIwMUM3OEI0QjgzMDg4NDA4RUEzODY2RTJCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeoF3eQpykIchxiFSfy8uO8Nhn fhLmI29oza3en6jsBihwCfYOmdZpkh0vChvJQjr/DfN44sRhSslBXAVi5rcM1CyT +Bp2NPCoFwlZaOKOpa+SEp3l63ufBx1PpFz6IlLov6aT0xbw0o4+Ja9wSd+ShXP1 hkF68sCoGx1rA5h0SHPLHq+F4z93s1ToBOQGTMExfgjAfjvB/at0ZK9cTMQqDNLe CExBbxzTn25c90D7skDjBDCUwioV/dJ16OBCrLPxRhllnBXz+TOZ9qeT7zcdQyXY KcRB7/WFpY7YaTma4ozLZcYs4nyZKyJspqgn/hoeEIMKzHFjc22LWKfYp0NPAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQU9syIq+qSsBx4tLgwiECOo4ZuK3kwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzUzYTY0NjY2MzMz M2E2NjY0MzUzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzEzMzM2MzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHBCoF38P9UDANBgkqhkiG9w0BAQsFAAOCAQEAJlPqZuvNX/cfdLHb 9xOyP5TKjqRZ0GN0LrchRHKVdMJDRhRcrAXUVEft/odW4COpKnn1x+eUpSsOw7Hr pcFdhzn35ouNt/u9vDSNudFq4yVDmFR9+E79aXaUG0T54AF1nNeCUXLRUFiK3BmI Nr1t3RIWegQpgrVT5lULjodNKflow26Piru64inyDvU9QW5E4ExSOfIZGT69JJ3H /I3Wm5gg7UsK2vMdNiVXA3dvZt/xGSmhFfuU1uaJkL6hc6Zx0lKSSW1lxEDllbCj 1c2kGXGfsZf95Yy4Kg+EfkEHVrY7mIYqQUd4KnovuSx8O7suxnIgEsng+S4ba0jg G72NvQ== -----END CERTIFICATE-----Generated at Thu Jun 5 05:15:40 2025 by rpki-client