$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a323030303a3a2f33362d3336203d3e20323135313038.roa File: 326130613a363034343a323030303a3a2f33362d3336203d3e20323135313038.roa (raw, json) Hash identifier: QkWTGlxX1yLPiFmF1ltzJFmiO7GCjGv1cXiFZJjceIs= Subject key identifier: 6E:DC:B8:73:E5:45:3A:2F:8D:ED:BA:61:EE:17:F2:4D:DF:A7:A4:4C Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 6252A5408AEDF10939021A9B1CEB5B0DDABBD181 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a323030303a3a2f33362d3336203d3e20323135313038.roa Signing time: Sat 08 Feb 2025 03:18:30 +0000 ROA not before: Sat 08 Feb 2025 03:13:30 +0000 ROA not after: Sat 07 Feb 2026 03:18:30 +0000 asID: 215108 IP address blocks: 2a0a:6044:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 00:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:52:a5:40:8a:ed:f1:09:39:02:1a:9b:1c:eb:5b:0d:da:bb:d1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 8 03:13:30 2025 GMT Not After : Feb 7 03:18:30 2026 GMT Subject: CN=6EDCB873E5453A2F8DEDBA61EE17F24DDFA7A44C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f6:11:03:72:08:d8:1f:f3:c8:27:d6:77:75: 4b:cd:42:07:9b:ad:d7:22:75:35:06:cc:48:7f:c5: a6:fc:ce:4c:86:9f:89:18:74:c6:90:6c:23:a7:33: ec:d1:17:6a:c6:ef:e1:fc:be:14:1a:91:70:ed:d3: 8a:89:71:79:d3:d1:b2:e2:a6:60:ec:22:49:57:d9: b6:20:7e:06:da:13:b3:34:79:f7:0e:13:4f:d8:12: 59:87:19:4d:3e:89:91:87:53:d0:24:96:f6:be:17: 53:e6:a0:84:b0:cf:46:5c:1f:f6:32:ac:c8:f2:a0: 2d:bc:59:9a:89:d1:f5:c3:da:83:82:b4:f4:ec:7b: 53:a6:f3:74:74:92:3e:fb:eb:91:d0:ca:7b:4c:66: 68:07:f3:c1:8c:6f:b3:a1:dc:13:6c:2a:43:6c:01: 52:47:ff:94:c5:4c:45:78:97:08:2b:3d:bf:7f:9e: f4:cf:2f:17:67:38:b1:07:ab:77:5d:69:95:f5:90: 6b:36:c5:fa:93:02:06:44:00:80:27:08:69:0c:4d: 08:93:20:70:94:3e:91:7a:ee:3a:42:b4:cf:4c:07: 18:1b:72:41:4f:1e:7d:f8:b7:df:9c:aa:9b:7b:05: da:ad:df:7d:94:f7:09:ac:88:53:31:c6:52:59:ab: 4c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DC:B8:73:E5:45:3A:2F:8D:ED:BA:61:EE:17:F2:4D:DF:A7:A4:4C X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a323030303a3a2f33362d3336203d3e20323135313038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:2000::/36 Signature Algorithm: sha256WithRSAEncryption 24:2b:fc:9c:e4:31:c2:54:01:31:e1:13:16:5d:4b:7f:eb:d7: 00:73:cd:8b:4a:1b:23:9b:f3:cf:cf:87:df:4a:08:ee:05:31: 79:49:8a:b6:e1:17:d2:61:d1:03:9a:dc:74:2e:98:1c:92:e5: 8d:cb:06:c8:8c:e9:da:51:81:21:94:8f:69:82:df:6b:81:e3: da:3d:91:9e:b3:3a:66:1c:03:80:17:a2:f1:42:c9:50:96:d9: 3f:00:30:1a:c0:86:09:9e:80:36:e4:7e:44:e3:44:5b:78:b2: 6c:97:50:c9:d6:ad:2c:4a:a0:0d:dd:b2:06:ad:a6:9f:db:62: ab:33:9c:f8:b5:9e:60:37:64:d0:61:21:97:65:79:bd:d0:0d: 10:67:81:f0:76:8f:ed:08:c6:30:9d:10:28:a8:11:9a:d7:88: 71:cc:7d:94:84:e9:f6:70:2d:00:b8:c3:9f:00:a3:cc:68:6a: 13:8a:01:36:ea:2c:06:ae:75:fa:fe:ae:f1:82:e9:6e:89:bd: 3d:1f:5d:82:1f:76:e9:6d:b4:82:a7:4b:8a:6b:28:1c:8c:11: 53:cd:d7:09:4a:bb:f6:99:d4:73:e7:2a:f2:cd:6c:05:a1:d6: 2c:d3:d6:ad:89:f2:ef:d9:3a:5b:09:ba:ef:63:21:ee:02:53: 95:01:3c:ac -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUYlKlQIrt8Qk5AhqbHOtbDdq70YEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMDgwMzEzMzBaFw0yNjAyMDcwMzE4MzBaMDMxMTAvBgNV BAMTKDZFRENCODczRTU0NTNBMkY4REVEQkE2MUVFMTdGMjREREZBN0E0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN9hEDcgjYH/PIJ9Z3dUvNQgeb rdcidTUGzEh/xab8zkyGn4kYdMaQbCOnM+zRF2rG7+H8vhQakXDt04qJcXnT0bLi pmDsIklX2bYgfgbaE7M0efcOE0/YElmHGU0+iZGHU9Aklva+F1PmoISwz0ZcH/Yy rMjyoC28WZqJ0fXD2oOCtPTse1Om83R0kj7765HQyntMZmgH88GMb7Oh3BNsKkNs AVJH/5TFTEV4lwgrPb9/nvTPLxdnOLEHq3ddaZX1kGs2xfqTAgZEAIAnCGkMTQiT IHCUPpF67jpCtM9MBxgbckFPHn34t9+cqpt7Bdqt332U9wmsiFMxxlJZq0wxAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUbty4c+VFOi+N7bph7hfyTd+npEwwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzEzNTMxMzAzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGBCoKYEQgMA0GCSqGSIb3DQEBCwUAA4IBAQAkK/yc5DHCVAEx4RMW XUt/69cAc82LShsjm/PPz4ffSgjuBTF5SYq24RfSYdEDmtx0LpgckuWNywbIjOna UYEhlI9pgt9rgePaPZGeszpmHAOAF6LxQslQltk/ADAawIYJnoA25H5E40RbeLJs l1DJ1q0sSqAN3bIGraaf22KrM5z4tZ5gN2TQYSGXZXm90A0QZ4Hwdo/tCMYwnRAo qBGa14hxzH2UhOn2cC0AuMOfAKPMaGoTigE26iwGrnX6/q7xguluib09H12CH3bp bbSCp0uKaygcjBFTzdcJSrv2mdRz5yryzWwFodYs09atifLv2TpbCbrvYyHuAlOV ATys -----END CERTIFICATE-----Generated at Sat Apr 5 07:51:26 2025 by rpki-client