$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a363730303a3a2f34302d3438203d3e20323134323033.roa File: 326130613a363034343a363730303a3a2f34302d3438203d3e20323134323033.roa (raw, json) Hash identifier: E1mtoTPHuViNBu8R5BA7kfCTIqQJTInUf/uiIFEbAKY= Subject key identifier: 56:DE:7F:3B:74:C7:D2:87:81:C7:38:F0:C5:89:17:43:2D:BE:A2:3A Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 1C868318ED98A212CB1052346CDD9A25FF7995F9 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a363730303a3a2f34302d3438203d3e20323134323033.roa Signing time: Fri 14 Feb 2025 12:46:25 +0000 ROA not before: Fri 14 Feb 2025 12:41:25 +0000 ROA not after: Fri 13 Feb 2026 12:46:25 +0000 asID: 214203 IP address blocks: 2a0a:6044:6700::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 00:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:86:83:18:ed:98:a2:12:cb:10:52:34:6c:dd:9a:25:ff:79:95:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 14 12:41:25 2025 GMT Not After : Feb 13 12:46:25 2026 GMT Subject: CN=56DE7F3B74C7D28781C738F0C58917432DBEA23A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:ca:de:21:0a:4a:75:7f:e7:f4:23:67:1b: b0:33:2f:90:6c:ca:dc:54:d2:51:17:21:26:91:bb: d6:5a:9c:83:3e:37:ae:26:ca:49:fc:34:b3:2f:15: a5:3b:16:02:61:35:23:fb:76:f9:4e:42:dd:b0:ff: 3a:30:8c:94:30:3b:87:8d:14:bb:d1:d1:99:be:34: c9:0c:8c:7c:cb:f4:79:fd:8b:e9:38:4a:4f:bb:cb: ec:d9:11:10:8c:f6:3a:01:bd:1e:a3:8d:dc:76:90: 67:f4:78:ba:ab:55:b2:c8:32:6d:94:c1:95:ca:03: b2:be:44:0b:1a:87:d8:3a:12:2d:a9:9a:4d:b4:f3: 3b:f9:13:86:06:4c:62:22:9d:c2:cb:46:f1:a4:69: 82:d3:64:a2:35:f0:c9:0b:60:3d:ad:4c:27:60:be: ac:7b:f9:69:54:d9:fb:ac:b8:6b:ed:ad:c7:03:21: 21:47:a4:d3:a6:ef:92:cb:4c:73:9c:6c:51:11:6c: b5:07:57:64:17:98:70:93:62:e3:60:13:be:2c:a8: 16:46:8d:1f:b7:e7:99:2e:d0:d1:14:b2:f3:11:57: a4:dc:34:86:4e:4e:0f:61:68:5b:12:fc:3d:35:5e: 22:a4:77:cf:19:5e:3e:3e:3e:b5:43:f6:c6:c2:ac: 14:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DE:7F:3B:74:C7:D2:87:81:C7:38:F0:C5:89:17:43:2D:BE:A2:3A X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a363730303a3a2f34302d3438203d3e20323134323033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6700::/40 Signature Algorithm: sha256WithRSAEncryption 14:d4:59:11:78:90:91:c8:3e:55:c0:13:cb:16:45:57:08:d6: 64:49:14:a2:4b:65:62:92:02:73:97:39:55:02:1c:5c:b6:95: b7:68:bc:f4:40:45:91:b2:00:96:98:59:42:cc:d4:24:e3:53: 77:48:e6:4c:46:ac:ea:4d:bf:a3:1e:56:f4:65:b1:10:c6:fe: f1:35:f1:1e:49:0f:d0:0e:c3:19:7c:ad:ff:bc:ab:7d:6d:0b: 95:2a:5a:08:69:bf:fa:f3:e3:85:79:c1:c1:6c:f8:6f:e6:a5: 17:44:e7:ad:f5:b1:5d:f1:9d:ea:62:d0:b9:b4:36:37:6d:59: 51:57:1f:49:ea:64:0a:bc:ec:3e:cd:f6:b1:26:50:3b:17:54: 00:08:d7:19:22:fd:8b:7c:1c:93:96:22:0f:1b:6a:e2:e2:9a: 52:3b:c3:fb:d7:80:d8:7b:5e:9a:5f:0d:35:48:83:d8:3c:0c: 61:27:bf:d6:5d:2f:56:54:e4:4b:5c:12:0f:49:be:b7:b5:a7: 7d:3c:be:14:4b:e5:6a:c7:18:32:24:7b:e5:1d:42:e9:79:07: f7:d9:6e:3d:f4:84:7d:46:a1:b0:19:65:81:23:18:82:1f:cc: 62:84:90:20:8f:11:f1:aa:f4:12:31:40:64:c5:bf:bb:6e:86: 81:c7:a0:14 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUHIaDGO2YohLLEFI0bN2aJf95lfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMTQxMjQxMjVaFw0yNjAyMTMxMjQ2MjVaMDMxMTAvBgNV BAMTKDU2REU3RjNCNzRDN0QyODc4MUM3MzhGMEM1ODkxNzQzMkRCRUEyM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xsreIQpKdX/n9CNnG7AzL5Bs ytxU0lEXISaRu9ZanIM+N64mykn8NLMvFaU7FgJhNSP7dvlOQt2w/zowjJQwO4eN FLvR0Zm+NMkMjHzL9Hn9i+k4Sk+7y+zZERCM9joBvR6jjdx2kGf0eLqrVbLIMm2U wZXKA7K+RAsah9g6Ei2pmk208zv5E4YGTGIincLLRvGkaYLTZKI18MkLYD2tTCdg vqx7+WlU2fusuGvtrccDISFHpNOm75LLTHOcbFERbLUHV2QXmHCTYuNgE74sqBZG jR+355ku0NEUsvMRV6TcNIZOTg9haFsS/D01XiKkd88ZXj4+PrVD9sbCrBSBAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUVt5/O3TH0oeBxzjwxYkXQy2+ojowHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2EzNjM3MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNDMyMzAzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoKYERnMA0GCSqGSIb3DQEBCwUAA4IBAQAU1FkReJCRyD5VwBPL FkVXCNZkSRSiS2VikgJzlzlVAhxctpW3aLz0QEWRsgCWmFlCzNQk41N3SOZMRqzq Tb+jHlb0ZbEQxv7xNfEeSQ/QDsMZfK3/vKt9bQuVKloIab/68+OFecHBbPhv5qUX ROet9bFd8Z3qYtC5tDY3bVlRVx9J6mQKvOw+zfaxJlA7F1QACNcZIv2LfByTliIP G2ri4ppSO8P714DYe16aXw01SIPYPAxhJ7/WXS9WVORLXBIPSb63tad9PL4US+Vq xxgyJHvlHULpeQf32W499IR9RqGwGWWBIxiCH8xihJAgjxHxqvQSMUBkxb+7boaB x6AU -----END CERTIFICATE-----Generated at Sat Apr 5 07:54:20 2025 by rpki-client