$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323030303a3a2f33382d313238203d3e20323134303739.roa File: 326130393a353463373a323030303a3a2f33382d313238203d3e20323134303739.roa (raw, json) Hash identifier: jbXFk9J6Tb0xjRgZ5UAVMW1M9wCI7fR90MG3lsP1MKc= Subject key identifier: 83:90:85:00:7D:CB:91:13:A4:7E:D9:E8:56:DB:C1:12:61:97:6F:B7 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 7285EF0B20CC6F666374E9140777216589111012 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323030303a3a2f33382d313238203d3e20323134303739.roa Signing time: Wed 28 May 2025 18:17:15 +0000 ROA not before: Wed 28 May 2025 18:12:15 +0000 ROA not after: Wed 27 May 2026 18:17:15 +0000 asID: 214079 IP address blocks: 2a09:54c7:2000::/38 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 22:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:85:ef:0b:20:cc:6f:66:63:74:e9:14:07:77:21:65:89:11:10:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: May 28 18:12:15 2025 GMT Not After : May 27 18:17:15 2026 GMT Subject: CN=839085007DCB9113A47ED9E856DBC11261976FB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a9:b4:11:2c:ba:6d:f6:f0:d7:36:22:bf:75: 19:71:3f:29:e8:27:40:42:f5:7b:c2:6e:fb:95:3e: 90:ef:88:d3:32:5e:fd:b6:04:ff:c9:5e:98:a2:9c: ed:d2:dd:2d:dd:31:5f:51:b4:7b:14:1f:4e:54:06: 91:ce:9e:1c:ca:ce:e6:79:23:c3:d6:97:54:e0:8e: ff:f7:37:46:ac:e5:60:1c:36:cf:de:20:e8:0c:fe: ad:98:aa:d1:a2:40:6c:fd:cb:21:fb:8a:38:c4:00: 54:2a:42:88:21:fe:03:3d:4a:5f:0f:4a:3a:1c:e5: e7:2a:c0:ed:6e:71:7a:af:bb:17:20:82:e5:5e:4f: b3:cf:5e:9f:33:2d:64:21:69:79:05:08:0c:33:be: 89:7f:91:34:9b:1b:d0:2c:b4:a8:f4:b4:f0:d6:29: cc:72:dc:b4:d5:e6:78:47:b7:fa:23:0e:36:88:35: 1d:52:10:9b:e6:41:f1:66:de:ca:eb:75:26:1a:d0: 79:62:00:d2:1a:a1:8f:95:c6:f6:db:ed:04:0c:76: 29:c3:63:19:2f:2a:58:de:fd:9d:9c:ad:c5:49:8a: eb:dd:fc:d4:ae:b1:b1:9f:32:d1:ec:05:39:ef:cf: b2:ec:92:9c:31:d7:4f:9f:f8:86:51:80:b4:c0:3c: 12:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:90:85:00:7D:CB:91:13:A4:7E:D9:E8:56:DB:C1:12:61:97:6F:B7 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323030303a3a2f33382d313238203d3e20323134303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c7:2000::/38 Signature Algorithm: sha256WithRSAEncryption 90:64:9c:4f:b0:d1:ec:b0:d4:33:b8:86:53:71:c5:ee:e8:95: 1d:63:c8:f1:a0:fc:30:a1:9b:cb:fa:35:b7:b2:4c:17:e0:06: 19:36:dc:19:68:2d:5a:a2:0b:0e:b9:2d:eb:df:84:ef:72:05: ae:91:c9:9d:47:b1:6c:04:bc:22:2c:72:ac:60:44:d0:77:ff: 8b:59:5a:98:47:22:a2:a0:31:7a:6d:51:d8:3d:e1:45:db:f7: 05:fa:81:a8:03:bc:5d:87:12:25:87:f5:2e:52:34:e2:66:fb: 20:86:51:04:7e:6c:19:87:a5:8c:f6:1e:14:ad:f9:09:db:d4: 74:23:c4:12:9b:aa:4e:f2:f4:33:d4:ef:58:fc:ba:03:bb:00: 7d:f5:2d:1f:4d:54:c5:b4:61:58:93:c6:84:40:5a:52:34:f9: 13:ef:f1:2c:0c:6c:31:e4:49:01:df:97:7e:6a:be:54:0e:9e: 80:f4:44:19:ce:a4:f8:65:66:03:90:0b:03:da:eb:e2:0d:77: fc:b8:f9:84:c1:b0:45:59:db:56:68:08:c5:fd:8f:70:b6:7d: d4:c6:db:91:fa:f8:bf:41:b0:92:03:db:52:32:72:9f:2b:6d: 2a:ea:77:0c:86:cc:44:cf:fb:54:f7:a9:b8:12:1e:40:19:bf: 3b:a5:26:9b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUcoXvCyDMb2ZjdOkUB3chZYkREBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA1MjgxODEyMTVaFw0yNjA1MjcxODE3MTVaMDMxMTAvBgNV BAMTKDgzOTA4NTAwN0RDQjkxMTNBNDdFRDlFODU2REJDMTEyNjE5NzZGQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyqbQRLLpt9vDXNiK/dRlxPyno J0BC9XvCbvuVPpDviNMyXv22BP/JXpiinO3S3S3dMV9RtHsUH05UBpHOnhzKzuZ5 I8PWl1Tgjv/3N0as5WAcNs/eIOgM/q2YqtGiQGz9yyH7ijjEAFQqQogh/gM9Sl8P Sjoc5ecqwO1ucXqvuxcgguVeT7PPXp8zLWQhaXkFCAwzvol/kTSbG9AstKj0tPDW Kcxy3LTV5nhHt/ojDjaINR1SEJvmQfFm3srrdSYa0HliANIaoY+Vxvbb7QQMdinD YxkvKlje/Z2crcVJiuvd/NSusbGfMtHsBTnvz7Lskpwx10+f+IZRgLTAPBJXAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUg5CFAH3LkROkftnoVtvBEmGXb7cwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbkGCCsGAQUFBwELBIGsMIGpMIGmBggrBgEFBQcwC4aBmXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzkzYTM1MzQ2MzM3 M2EzMjMwMzAzMDNhM2EyZjMzMzgyZDMxMzIzODIwM2QzZTIwMzIzMTM0MzAzNzM5 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAOBAIAAjAIAwYCKglUxyAwDQYJKoZIhvcNAQELBQADggEBAJBknE+w0eyw1DO4 hlNxxe7olR1jyPGg/DChm8v6NbeyTBfgBhk23BloLVqiCw65LevfhO9yBa6RyZ1H sWwEvCIscqxgRNB3/4tZWphHIqKgMXptUdg94UXb9wX6gagDvF2HEiWH9S5SNOJm +yCGUQR+bBmHpYz2HhSt+Qnb1HQjxBKbqk7y9DPU71j8ugO7AH31LR9NVMW0YViT xoRAWlI0+RPv8SwMbDHkSQHfl35qvlQOnoD0RBnOpPhlZgOQCwPa6+INd/y4+YTB sEVZ21ZoCMX9j3C2fdTG25H6+L9BsJID21Iycp8rbSrqdwyGzETP+1T3qbgSHkAZ vzulJps= -----END CERTIFICATE-----Generated at Tue Jun 3 10:22:17 2025 by rpki-client