$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a653030303a3a2f33362d3434203d3e20323134303430.roa File: 326130393a353463363a653030303a3a2f33362d3434203d3e20323134303430.roa (raw, json) Hash identifier: 6OLhIVRl9Rmz0UKVTCiOnu6fY0uMaMRa/eEW9fc/iCw= Subject key identifier: B2:62:1A:BC:FC:DF:77:FD:04:47:FC:CC:36:BC:0D:1C:FF:07:C5:99 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 7C3FFB8253BD87ADC9AC3DBA3ACD9272B4309B3C Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a653030303a3a2f33362d3434203d3e20323134303430.roa Signing time: Wed 14 May 2025 17:12:24 +0000 ROA not before: Wed 14 May 2025 17:07:24 +0000 ROA not after: Wed 13 May 2026 17:12:24 +0000 asID: 214040 IP address blocks: 2a09:54c6:e000::/36 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 22:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3f:fb:82:53:bd:87:ad:c9:ac:3d:ba:3a:cd:92:72:b4:30:9b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: May 14 17:07:24 2025 GMT Not After : May 13 17:12:24 2026 GMT Subject: CN=B2621ABCFCDF77FD0447FCCC36BC0D1CFF07C599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:19:0b:b2:46:f5:61:51:ac:2f:d0:ef:e6: 68:36:3b:7e:1d:0d:e4:8d:11:88:19:4c:a8:5b:66: fd:21:b5:c7:a4:af:7d:73:07:81:23:9a:ee:9e:61: 6a:89:1b:0e:b9:e5:4e:dd:0a:58:37:b1:0f:fc:6c: 95:ad:df:36:f3:ef:33:44:87:90:3e:41:09:e4:d4: 5c:66:03:d3:af:d3:2b:ac:80:05:45:ed:89:ae:be: 44:fe:9f:c2:64:08:16:88:f8:a4:0f:42:92:5e:13: b6:3b:ad:42:14:b8:a5:a1:f1:4a:95:ab:8f:3b:b1: 29:ce:a7:e5:7a:cf:82:51:50:f6:2f:f8:2b:09:4a: cb:9c:60:8c:5a:7c:29:8f:11:eb:22:81:1d:4b:87: aa:e6:65:54:8d:b7:e2:82:e3:a7:7a:17:66:a3:27: d0:a0:d8:16:bd:c6:35:07:56:49:c5:49:64:9a:91: a3:c3:8e:8c:09:32:cd:74:ef:10:3a:31:85:7d:bf: fa:35:38:2d:7c:71:ec:2d:e2:be:1e:a4:67:69:b4: 84:7d:b6:9f:97:ea:e2:99:9b:eb:5e:19:09:9b:72: 30:30:73:6e:14:91:d4:ff:f3:88:3e:98:11:67:32: dc:53:c1:82:89:a7:fe:44:18:5f:9a:b7:ea:0c:ff: 12:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:62:1A:BC:FC:DF:77:FD:04:47:FC:CC:36:BC:0D:1C:FF:07:C5:99 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a653030303a3a2f33362d3434203d3e20323134303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:e000::/36 Signature Algorithm: sha256WithRSAEncryption 57:b0:5c:ae:09:3c:ce:a0:b5:32:d3:6e:4b:8b:b0:6e:9d:c8: 14:10:46:de:e1:77:e6:d9:c7:2b:82:f0:28:fa:2d:d8:f6:3c: 15:e6:2a:59:43:43:03:ff:49:69:49:87:20:53:72:2b:54:69: 38:88:aa:b6:73:e1:00:08:e8:88:1a:3d:fd:00:45:44:98:7a: b8:3c:5f:53:be:e5:45:ec:21:0f:2b:d9:ba:5f:13:0f:2b:f9: 97:2c:60:80:ae:2c:c3:d8:f5:88:d2:78:b1:f7:56:f4:8f:1d: ad:95:9f:6e:3e:7e:c2:1d:a1:0a:ba:25:00:9c:3e:9d:3b:bb: e1:1f:9b:54:88:86:47:e3:b7:24:ca:a0:ff:a9:7b:11:b7:9f: 83:85:7d:02:7c:76:d7:1c:e6:86:b8:79:1f:e5:9a:dd:b6:5a: 3d:86:6f:db:9c:ec:ce:10:d5:fa:f1:27:55:c4:64:7c:2d:62: fa:f9:43:11:b1:9a:7e:c9:8a:9a:67:b2:74:0c:a9:10:7c:c6: f0:58:9e:e5:7a:ff:c8:3b:ed:7c:f2:2c:3d:3f:39:a7:ad:0f: fb:cb:7b:89:3b:63:8c:56:4b:a2:c7:80:dc:9a:0a:47:29:a6: f5:bb:7a:1e:26:33:43:f3:a0:0a:70:23:2d:82:02:6f:34:bd: 42:03:bd:ad -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUfD/7glO9h63JrD26Os2ScrQwmzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA1MTQxNzA3MjRaFw0yNjA1MTMxNzEyMjRaMDMxMTAvBgNV BAMTKEIyNjIxQUJDRkNERjc3RkQwNDQ3RkNDQzM2QkMwRDFDRkYwN0M1OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTBkLskb1YVGsL9Dv5mg2O34d DeSNEYgZTKhbZv0htcekr31zB4Ejmu6eYWqJGw655U7dClg3sQ/8bJWt3zbz7zNE h5A+QQnk1FxmA9Ov0yusgAVF7YmuvkT+n8JkCBaI+KQPQpJeE7Y7rUIUuKWh8UqV q487sSnOp+V6z4JRUPYv+CsJSsucYIxafCmPEesigR1Lh6rmZVSNt+KC46d6F2aj J9Cg2Ba9xjUHVknFSWSakaPDjowJMs107xA6MYV9v/o1OC18cewt4r4epGdptIR9 tp+X6uKZm+teGQmbcjAwc24UkdT/84g+mBFnMtxTwYKJp/5EGF+at+oM/xL5AgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUsmIavPzfd/0ER/zMNrwNHP8HxZkwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzkzYTM1MzQ2MzM2 M2E2NTMwMzAzMDNhM2EyZjMzMzYyZDM0MzQyMDNkM2UyMDMyMzEzNDMwMzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGBCoJVMbgMA0GCSqGSIb3DQEBCwUAA4IBAQBXsFyuCTzOoLUy025L i7BuncgUEEbe4Xfm2ccrgvAo+i3Y9jwV5ipZQ0MD/0lpSYcgU3IrVGk4iKq2c+EA COiIGj39AEVEmHq4PF9TvuVF7CEPK9m6XxMPK/mXLGCArizD2PWI0nix91b0jx2t lZ9uPn7CHaEKuiUAnD6dO7vhH5tUiIZH47ckyqD/qXsRt5+DhX0CfHbXHOaGuHkf 5Zrdtlo9hm/bnOzOENX68SdVxGR8LWL6+UMRsZp+yYqaZ7J0DKkQfMbwWJ7lev/I O+188iw9PzmnrQ/7y3uJO2OMVkuix4DcmgpHKab1u3oeJjND86AKcCMtggJvNL1C A72t -----END CERTIFICATE-----Generated at Tue Jun 3 10:16:23 2025 by rpki-client