$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373330303a3a2f34302d3430203d3e20323133343437.roa File: 326130613a363034343a373330303a3a2f34302d3430203d3e20323133343437.roa (raw, json) Hash identifier: oTaHlusJxWzyyyeBHcsHJGRpOO58IEbqi1uEzalha1w= Subject key identifier: 87:5E:4C:E6:3F:69:22:D2:E9:D9:D2:CA:D2:02:8F:A4:9C:56:46:9C Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 5DD3E258EEA845D3C77A75A117CAADB027356862 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373330303a3a2f34302d3430203d3e20323133343437.roa Signing time: Tue 11 Feb 2025 09:12:54 +0000 ROA not before: Tue 11 Feb 2025 09:07:54 +0000 ROA not after: Tue 10 Feb 2026 09:12:54 +0000 asID: 213447 IP address blocks: 2a0a:6044:7300::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d3:e2:58:ee:a8:45:d3:c7:7a:75:a1:17:ca:ad:b0:27:35:68:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 11 09:07:54 2025 GMT Not After : Feb 10 09:12:54 2026 GMT Subject: CN=875E4CE63F6922D2E9D9D2CAD2028FA49C56469C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3a:46:32:c8:b3:c0:80:90:fa:c9:07:b6:6c: 65:ee:52:dc:2c:44:27:00:37:ec:e0:91:2b:cc:f3: 16:4d:8b:80:f1:df:68:97:0c:14:1d:5f:ce:f8:8a: 37:2b:98:10:5b:f2:57:f2:00:5b:0a:bb:1a:69:72: 17:bf:07:db:a5:b2:0f:d3:cc:a1:fd:e9:e5:55:76: ba:c1:3d:22:b3:94:f2:b7:e4:e3:94:e3:22:2c:55: 50:c4:64:d7:62:25:9b:3c:6d:bb:72:f8:98:ab:a4: ab:b0:99:a4:12:ad:c7:db:22:82:b3:67:69:ba:0a: 29:7c:b4:ff:ef:39:ce:06:e9:b2:27:2e:b6:f4:41: bd:d7:a7:0e:2c:7a:06:5e:c3:a7:85:fe:ce:d9:7c: 32:db:39:28:5b:fb:1f:fc:3f:52:51:e3:89:ff:03: b4:be:e7:e3:16:6e:fe:8e:eb:3f:b4:ce:65:9e:ea: 33:84:78:6a:02:bd:32:5a:73:87:fb:92:2d:17:ff: ca:65:d4:6b:f8:14:69:ad:44:8d:fc:d4:73:e2:bb: 02:fe:f0:1e:b5:02:64:b9:2a:70:26:0c:13:fc:a1: f5:c1:4a:d1:d3:c4:5d:65:70:f4:07:a3:b8:fc:b3: 51:43:64:db:c5:4e:b3:cc:a2:88:17:ea:35:48:89: da:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5E:4C:E6:3F:69:22:D2:E9:D9:D2:CA:D2:02:8F:A4:9C:56:46:9C X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373330303a3a2f34302d3430203d3e20323133343437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7300::/40 Signature Algorithm: sha256WithRSAEncryption 2d:90:3c:54:0c:1a:99:60:c0:a6:83:09:32:87:ff:05:7b:3d: 89:11:ce:ad:52:99:fa:fb:d9:dd:15:5d:53:e6:57:4f:6c:48: 04:02:f4:a6:52:ab:e4:b3:fd:d8:9f:65:30:49:fb:eb:ba:6a: c8:3b:94:a1:91:60:60:08:8d:69:18:16:26:fb:00:de:da:c5: b7:70:a7:48:ef:f2:18:63:e0:d0:ed:e9:67:c5:2d:4a:87:a0: d2:e5:6e:a0:d2:1d:6f:51:62:57:19:90:1f:78:c0:d8:b9:ae: 77:2a:c0:17:1a:3b:a5:3f:30:c4:27:f0:65:f8:f2:a6:36:29: c3:f8:e4:f0:ab:43:15:70:4a:89:29:b9:74:f9:b5:cb:a0:91: 55:e0:62:84:2f:56:6f:fa:8f:f3:79:49:b4:04:f6:45:87:21: e7:08:12:c4:de:0c:42:b0:b7:74:9d:d9:96:db:9e:53:34:dc: 91:fe:cb:77:7f:88:c9:3a:23:66:83:37:32:61:b1:02:1a:dd: c5:f8:7f:22:f3:f5:fb:2a:d2:c6:29:80:a8:dd:d6:d1:e4:f4: 3f:a8:c0:82:67:9e:bf:76:0d:ab:a2:6d:b6:c5:61:0e:b3:4c: c3:d4:e6:57:e5:1e:76:f1:a1:46:de:7a:88:bf:2f:21:07:26: 2f:46:2c:d0 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUXdPiWO6oRdPHenWhF8qtsCc1aGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMTEwOTA3NTRaFw0yNjAyMTAwOTEyNTRaMDMxMTAvBgNV BAMTKDg3NUU0Q0U2M0Y2OTIyRDJFOUQ5RDJDQUQyMDI4RkE0OUM1NjQ2OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbOkYyyLPAgJD6yQe2bGXuUtws RCcAN+zgkSvM8xZNi4Dx32iXDBQdX874ijcrmBBb8lfyAFsKuxppche/B9ulsg/T zKH96eVVdrrBPSKzlPK35OOU4yIsVVDEZNdiJZs8bbty+JirpKuwmaQSrcfbIoKz Z2m6Cil8tP/vOc4G6bInLrb0Qb3Xpw4segZew6eF/s7ZfDLbOShb+x/8P1JR44n/ A7S+5+MWbv6O6z+0zmWe6jOEeGoCvTJac4f7ki0X/8pl1Gv4FGmtRI381HPiuwL+ 8B61AmS5KnAmDBP8ofXBStHTxF1lcPQHo7j8s1FDZNvFTrPMoogX6jVIidqLAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUh15M5j9pItLp2dLK0gKPpJxWRpwwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2EzNzMzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEzMzM0MzQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoKYERzMA0GCSqGSIb3DQEBCwUAA4IBAQAtkDxUDBqZYMCmgwky h/8Fez2JEc6tUpn6+9ndFV1T5ldPbEgEAvSmUqvks/3Yn2UwSfvrumrIO5ShkWBg CI1pGBYm+wDe2sW3cKdI7/IYY+DQ7elnxS1Kh6DS5W6g0h1vUWJXGZAfeMDYua53 KsAXGjulPzDEJ/Bl+PKmNinD+OTwq0MVcEqJKbl0+bXLoJFV4GKEL1Zv+o/zeUm0 BPZFhyHnCBLE3gxCsLd0ndmW255TNNyR/st3f4jJOiNmgzcyYbECGt3F+H8i8/X7 KtLGKYCo3dbR5PQ/qMCCZ56/dg2rom22xWEOs0zD1OZX5R528aFG3nqIvy8hByYv RizQ -----END CERTIFICATE-----Generated at Sat Apr 5 04:42:08 2025 by rpki-client