$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a363030303a3a2f33362d3438203d3e20323135383230.roa File: 326130363a313238313a363030303a3a2f33362d3438203d3e20323135383230.roa (raw, json) Hash identifier: WV3QVndQwAzbpExy/EIjDkQI/fQzXER9aGTHgLF6uj4= Subject key identifier: E4:D5:29:9A:14:95:2F:D6:8E:C3:DE:37:A6:2A:EE:C8:61:33:C7:DB Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 4215220F51F97B319231E39F1ECFCAF9938E6A53 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a363030303a3a2f33362d3438203d3e20323135383230.roa Signing time: Sat 08 Feb 2025 19:38:32 +0000 ROA not before: Sat 08 Feb 2025 19:33:32 +0000 ROA not after: Sat 07 Feb 2026 19:38:32 +0000 asID: 215820 IP address blocks: 2a06:1281:6000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 21:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:15:22:0f:51:f9:7b:31:92:31:e3:9f:1e:cf:ca:f9:93:8e:6a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 8 19:33:32 2025 GMT Not After : Feb 7 19:38:32 2026 GMT Subject: CN=E4D5299A14952FD68EC3DE37A62AEEC86133C7DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:c3:e5:ea:5d:e9:4f:ee:33:fb:48:82:ff: 3c:65:a1:3b:63:94:dc:cb:8b:a7:f1:0a:e4:c3:ef: 95:ed:12:9f:f1:73:41:64:42:73:43:b9:1b:6c:ea: cd:6c:1a:f8:7e:e9:d9:1c:e5:b9:c7:19:ff:a4:b0: 38:bb:aa:c2:cf:d8:10:f1:b2:8e:64:86:b6:4d:49: 2a:7e:41:83:f3:5f:be:93:ac:8e:10:bc:07:d2:fc: a0:b5:9b:9e:11:15:a4:ce:c0:3b:8a:a5:7b:57:54: 8e:d2:a3:69:37:54:e1:6c:61:e2:68:ac:b1:b2:06: b8:7a:bb:ae:60:a7:3d:fb:35:48:ab:54:50:c5:76: ab:c4:df:da:9e:33:7e:97:ef:e9:c0:d1:d4:4d:8e: 54:7d:3b:ac:22:30:63:0a:40:ee:4d:d0:55:86:8f: 3e:5d:02:49:11:3d:17:0b:74:5e:e6:2f:58:8b:95: 17:a4:5f:c0:ef:9c:d6:5f:7b:ef:86:19:82:13:e6: f9:f0:96:5d:0c:26:97:5f:fa:cd:5d:75:90:a5:b9: ba:c3:3a:4b:c2:f1:5a:d9:62:e3:54:29:82:ae:63: 7d:10:4d:a7:b2:08:56:b7:69:6e:2f:89:a2:aa:56: 77:e7:74:dd:c2:d9:9d:95:0d:ba:c5:9c:cc:34:9b: 67:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D5:29:9A:14:95:2F:D6:8E:C3:DE:37:A6:2A:EE:C8:61:33:C7:DB X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238313a363030303a3a2f33362d3438203d3e20323135383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:6000::/36 Signature Algorithm: sha256WithRSAEncryption 72:ea:f8:c9:97:50:f8:d1:a4:6b:7b:06:91:8c:fd:3d:7c:31: a5:2f:95:c5:ae:b2:b4:8a:12:36:a3:04:95:33:74:37:d0:e2: 92:8f:92:9f:8b:40:51:37:59:1f:87:50:66:74:c4:a7:90:cc: e2:00:95:e0:e6:a3:1b:67:1c:38:b6:36:57:64:0a:9a:a7:05: 2a:26:28:6e:7f:74:7e:90:57:7d:fe:92:9a:10:ce:0b:08:ba: b5:ef:50:d4:51:da:54:d9:dd:5e:f9:2c:32:15:67:06:bb:69: 58:d9:04:e6:e9:2f:6a:f5:be:58:bf:20:15:6e:ff:2d:94:5f: 40:c5:4b:49:69:ed:5a:8a:08:ab:87:98:62:b1:88:a5:3a:c7: 11:e5:d0:c3:62:35:7d:c4:b6:50:c5:2a:af:19:73:49:5e:fd: 8b:fb:51:48:9b:c2:8c:f8:84:dd:fc:1f:d7:e2:8d:39:ea:d0: 13:77:fe:af:10:ce:40:79:01:03:6a:54:51:29:30:00:2f:2c: 5a:26:ad:6c:a7:66:45:88:97:23:6b:cc:3c:a3:38:3f:34:b8: 44:67:d9:2b:66:24:10:ac:fe:33:cd:08:b5:ca:f1:ef:85:b5: 21:86:3a:12:2c:fb:cb:77:79:de:63:d7:ec:98:44:8b:4c:f6: 80:63:d4:29 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUQhUiD1H5ezGSMeOfHs/K+ZOOalMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMDgxOTMzMzJaFw0yNjAyMDcxOTM4MzJaMDMxMTAvBgNV BAMTKEU0RDUyOTlBMTQ5NTJGRDY4RUMzREUzN0E2MkFFRUM4NjEzM0M3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ncPl6l3pT+4z+0iC/zxloTtj lNzLi6fxCuTD75XtEp/xc0FkQnNDuRts6s1sGvh+6dkc5bnHGf+ksDi7qsLP2BDx so5khrZNSSp+QYPzX76TrI4QvAfS/KC1m54RFaTOwDuKpXtXVI7So2k3VOFsYeJo rLGyBrh6u65gpz37NUirVFDFdqvE39qeM36X7+nA0dRNjlR9O6wiMGMKQO5N0FWG jz5dAkkRPRcLdF7mL1iLlRekX8DvnNZfe++GGYIT5vnwll0MJpdf+s1ddZClubrD OkvC8VrZYuNUKYKuY30QTaeyCFa3aW4viaKqVnfndN3C2Z2VDbrFnMw0m2djAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQU5NUpmhSVL9aOw943piruyGEzx9swHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzYzYTMxMzIzODMx M2EzNjMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNkM2UyMDMyMzEzNTM4MzIzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGBCoGEoFgMA0GCSqGSIb3DQEBCwUAA4IBAQBy6vjJl1D40aRrewaR jP09fDGlL5XFrrK0ihI2owSVM3Q30OKSj5Kfi0BRN1kfh1BmdMSnkMziAJXg5qMb Zxw4tjZXZAqapwUqJihuf3R+kFd9/pKaEM4LCLq171DUUdpU2d1e+SwyFWcGu2lY 2QTm6S9q9b5YvyAVbv8tlF9AxUtJae1aigirh5hisYilOscR5dDDYjV9xLZQxSqv GXNJXv2L+1FIm8KM+ITd/B/X4o056tATd/6vEM5AeQEDalRRKTAALyxaJq1sp2ZF iJcja8w8ozg/NLhEZ9krZiQQrP4zzQi1yvHvhbUhhjoSLPvLd3neY9fsmESLTPaA Y9Qp -----END CERTIFICATE-----Generated at Sat Apr 5 06:42:53 2025 by rpki-client