$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a313030303a3a2f33362d3434203d3e20323133383634.roa File: 326130393a353463363a313030303a3a2f33362d3434203d3e20323133383634.roa (raw, json) Hash identifier: k3FJXVM4TEttJvbotUtqQjFz1XxoO17WZiC7A/kNS6c= Subject key identifier: 45:0F:B0:CD:42:77:3A:C1:11:DA:77:1D:46:C9:8C:ED:80:66:A5:CC Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 22575023780913E4137E0A4FCA24734798DE6FEE Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a313030303a3a2f33362d3434203d3e20323133383634.roa Signing time: Wed 14 May 2025 17:27:19 +0000 ROA not before: Wed 14 May 2025 17:22:19 +0000 ROA not after: Wed 13 May 2026 17:27:19 +0000 asID: 213864 IP address blocks: 2a09:54c6:1000::/36 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 22:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:57:50:23:78:09:13:e4:13:7e:0a:4f:ca:24:73:47:98:de:6f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: May 14 17:22:19 2025 GMT Not After : May 13 17:27:19 2026 GMT Subject: CN=450FB0CD42773AC111DA771D46C98CED8066A5CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:9f:a4:af:ab:8d:89:32:a7:79:50:91:73: fa:04:9b:73:f7:9d:d4:61:22:eb:e5:74:47:14:0e: be:5f:4e:fa:de:5b:96:d5:82:b1:16:87:96:f5:22: 5f:bf:5e:1f:da:c3:bc:6c:37:5b:07:75:8c:a3:b6: 96:a5:7e:f0:e8:8a:8b:de:0f:41:94:17:4a:87:e3: 52:57:0e:99:d3:e6:e0:97:46:55:4e:a3:31:83:a1: b4:cb:4f:1b:10:88:97:36:50:ad:95:58:98:f3:26: 3e:c4:e0:ad:0d:f2:b1:dd:3f:a3:d9:59:3c:d4:01: 52:c5:3c:46:57:93:40:30:d0:0f:90:aa:d1:57:7b: 79:c7:e7:cf:c9:1d:e7:8d:03:71:bb:d9:e5:6c:d5: 56:90:d1:c9:0c:ef:a8:51:95:e7:c8:ad:4b:e7:03: 8e:e0:3e:a7:a6:74:cc:50:17:8f:32:8f:b9:27:da: fe:9e:c1:f5:3d:9d:87:c0:13:9e:c1:4b:21:06:15: c0:f4:73:a7:a9:77:ea:1b:07:cc:a0:23:d1:b5:f4: 00:61:e6:18:d5:fb:74:f8:8f:e7:b0:61:d5:62:69: 67:5b:99:18:85:7e:58:d2:f1:56:e4:3b:2e:c1:be: f2:46:a6:66:f1:d3:4e:b3:15:ab:0c:84:8f:58:ae: e3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0F:B0:CD:42:77:3A:C1:11:DA:77:1D:46:C9:8C:ED:80:66:A5:CC X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a313030303a3a2f33362d3434203d3e20323133383634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:1000::/36 Signature Algorithm: sha256WithRSAEncryption 6d:66:dd:b6:a6:dd:82:6d:7d:82:02:e9:a9:f4:f0:05:ce:a9: d0:08:5b:ad:50:46:c1:a2:b0:11:6f:42:55:a1:0c:a0:db:70: cc:24:df:c2:fe:35:81:cc:95:8c:d5:ea:34:17:72:31:62:29: 1a:2e:0a:07:8d:9e:f9:36:57:13:fa:76:e1:ae:2e:2d:3c:5d: 2b:44:88:c2:5a:c7:83:22:6b:6f:74:d8:a2:a7:13:0a:35:34: 18:b9:80:73:82:40:4e:d7:6d:0c:e5:f8:0c:4a:fc:a1:d6:d3: be:52:8b:4d:d5:db:53:27:29:dc:b7:09:72:37:2d:b0:68:05: 5b:bf:53:ca:ae:20:a3:a4:f9:32:76:e0:c1:74:5d:c7:a0:42: 95:81:2a:96:18:25:11:0e:f2:88:fb:be:2a:cd:0e:c6:5c:09: e6:06:c0:4f:38:5d:d9:3f:23:d6:3c:e8:b9:50:e7:83:be:94: c1:23:ee:a4:d7:c3:bc:35:cf:61:19:ce:54:e8:69:21:99:b7: 9c:cb:ff:df:c3:61:db:e6:8a:68:c9:32:6f:ba:30:8e:86:d3: c3:15:de:ae:d6:07:2d:9f:84:9f:b8:5a:ff:ed:9b:e0:20:79: 39:19:87:86:13:07:fd:cc:0b:b4:3e:4d:d8:4b:c3:92:5c:e3: 94:b6:40:af -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUIldQI3gJE+QTfgpPyiRzR5jeb+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA1MTQxNzIyMTlaFw0yNjA1MTMxNzI3MTlaMDMxMTAvBgNV BAMTKDQ1MEZCMENENDI3NzNBQzExMURBNzcxRDQ2Qzk4Q0VEODA2NkE1Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1RZ+kr6uNiTKneVCRc/oEm3P3 ndRhIuvldEcUDr5fTvreW5bVgrEWh5b1Il+/Xh/aw7xsN1sHdYyjtpalfvDoiove D0GUF0qH41JXDpnT5uCXRlVOozGDobTLTxsQiJc2UK2VWJjzJj7E4K0N8rHdP6PZ WTzUAVLFPEZXk0Aw0A+QqtFXe3nH58/JHeeNA3G72eVs1VaQ0ckM76hRlefIrUvn A47gPqemdMxQF48yj7kn2v6ewfU9nYfAE57BSyEGFcD0c6epd+obB8ygI9G19ABh 5hjV+3T4j+ewYdViaWdbmRiFfljS8VbkOy7BvvJGpmbx006zFasMhI9YruPpAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQURQ+wzUJ3OsER2ncdRsmM7YBmpcwwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzkzYTM1MzQ2MzM2 M2EzMTMwMzAzMDNhM2EyZjMzMzYyZDM0MzQyMDNkM2UyMDMyMzEzMzM4MzYzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGBCoJVMYQMA0GCSqGSIb3DQEBCwUAA4IBAQBtZt22pt2CbX2CAump 9PAFzqnQCFutUEbBorARb0JVoQyg23DMJN/C/jWBzJWM1eo0F3IxYikaLgoHjZ75 NlcT+nbhri4tPF0rRIjCWseDImtvdNiipxMKNTQYuYBzgkBO120M5fgMSvyh1tO+ UotN1dtTJynctwlyNy2waAVbv1PKriCjpPkyduDBdF3HoEKVgSqWGCURDvKI+74q zQ7GXAnmBsBPOF3ZPyPWPOi5UOeDvpTBI+6k18O8Nc9hGc5U6Gkhmbecy//fw2Hb 5opoyTJvujCOhtPDFd6u1gctn4SfuFr/7ZvgIHk5GYeGEwf9zAu0Pk3YS8OSXOOU tkCv -----END CERTIFICATE-----Generated at Tue Jun 3 10:14:29 2025 by rpki-client