$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a376330303a3a2f34302d3438203d3e20323135363035.roa File: 326130613a363034343a376330303a3a2f34302d3438203d3e20323135363035.roa (raw, json) Hash identifier: STLbIU2E6K8aEVmq3Eaz/iAzj34KUWEVdVMpoMtv1ac= Subject key identifier: B8:94:E1:1F:16:7D:DB:80:4E:BB:A3:A9:6A:97:42:A2:FA:64:BA:FE Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 4AA301F85EB878954745216CEFB0E52782E30D76 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a376330303a3a2f34302d3438203d3e20323135363035.roa Signing time: Fri 14 Feb 2025 18:04:34 +0000 ROA not before: Fri 14 Feb 2025 17:59:34 +0000 ROA not after: Fri 13 Feb 2026 18:04:34 +0000 asID: 215605 IP address blocks: 2a0a:6044:7c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 22:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a3:01:f8:5e:b8:78:95:47:45:21:6c:ef:b0:e5:27:82:e3:0d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 14 17:59:34 2025 GMT Not After : Feb 13 18:04:34 2026 GMT Subject: CN=B894E11F167DDB804EBBA3A96A9742A2FA64BAFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:23:81:0d:37:e3:9c:36:ea:d8:9a:69:1e:08: 40:45:11:e6:c0:60:e3:10:79:c2:21:8b:1b:2d:2e: 8e:51:6f:8b:4e:f8:a1:b8:3c:27:8b:6d:6e:c1:0f: 19:fe:69:89:35:1c:1d:c2:4c:0e:f5:e8:bd:b4:1a: 15:d8:c7:5f:91:a9:49:a9:e5:3e:f7:9e:14:5d:79: 56:8f:1e:5c:fb:ca:3f:63:3a:bf:1a:b7:66:1a:fe: 66:78:07:8a:2e:e7:74:21:75:35:cf:6d:c5:b7:92: aa:ac:3e:c7:b0:1b:26:b2:30:2c:03:5c:d7:08:11: e1:b8:60:ec:6e:5e:50:89:09:32:e5:42:fd:51:15: 68:10:ba:c5:f6:7c:fa:3b:81:94:7f:c4:0f:e4:5d: bb:bc:02:69:f8:5b:d5:f7:71:3a:90:40:cd:8a:e9: 86:3d:7e:8f:3e:ce:96:de:6e:3a:19:c4:44:65:1e: 6e:78:0c:46:4f:6f:d6:e4:2d:ae:97:a8:2b:55:cd: 19:44:85:40:32:2a:c9:8b:96:1b:0d:4a:7c:68:b1: ac:bd:d3:31:c5:15:b3:02:a2:01:90:aa:f8:ad:5d: 55:d8:cf:8d:0b:df:6e:f5:51:95:59:32:d8:47:f3: 07:54:f1:75:2d:a1:b3:30:5c:4e:66:87:99:0a:81: 31:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:94:E1:1F:16:7D:DB:80:4E:BB:A3:A9:6A:97:42:A2:FA:64:BA:FE X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a376330303a3a2f34302d3438203d3e20323135363035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7c00::/40 Signature Algorithm: sha256WithRSAEncryption 2c:05:07:2b:49:0b:3f:9c:53:ea:fc:46:a5:0c:43:06:87:59: a3:74:33:0e:6c:d3:a7:35:1b:dd:5a:c4:da:bd:2a:68:02:27: 03:be:2d:4c:af:f0:68:fb:ec:2e:e0:36:76:e9:10:78:ba:47: 51:b0:62:ae:23:f5:de:6b:5f:e7:1e:d6:e3:61:c7:49:30:65: 38:7a:54:c5:54:16:b1:86:62:37:f0:81:b6:28:b0:d4:9d:d9: e6:a9:43:a1:02:00:c3:ed:95:12:64:5a:c4:8f:06:56:d6:12: 7d:26:65:af:96:f4:69:50:7e:eb:32:1c:c9:ad:f2:4b:c0:00: da:db:dc:6f:71:f9:0a:12:f3:ca:b1:de:ec:b4:49:a2:72:91: 42:b8:b3:1f:28:e6:87:e0:63:c8:00:ce:4e:e6:7e:2e:d9:81: 48:7d:93:1f:73:7d:d0:02:f2:69:dd:4a:3a:1e:96:5b:db:ee: 5c:94:9a:75:b0:fb:18:62:20:fa:7b:d3:b0:ca:dc:ec:ef:40: b7:d8:3b:cf:c6:1e:8d:99:4e:c5:71:d1:2f:4a:e2:a1:40:03: 01:fa:a4:ed:ec:50:8f:a8:2a:fe:0d:fe:2f:35:24:fc:50:ee: fa:8d:21:b5:e4:16:a8:45:dc:a5:5a:cd:63:e6:b8:77:ab:a5: 7a:9c:c2:bb -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUSqMB+F64eJVHRSFs77DlJ4LjDXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMTQxNzU5MzRaFw0yNjAyMTMxODA0MzRaMDMxMTAvBgNV BAMTKEI4OTRFMTFGMTY3RERCODA0RUJCQTNBOTZBOTc0MkEyRkE2NEJBRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1I4ENN+OcNurYmmkeCEBFEebA YOMQecIhixstLo5Rb4tO+KG4PCeLbW7BDxn+aYk1HB3CTA716L20GhXYx1+RqUmp 5T73nhRdeVaPHlz7yj9jOr8at2Ya/mZ4B4ou53QhdTXPbcW3kqqsPsewGyayMCwD XNcIEeG4YOxuXlCJCTLlQv1RFWgQusX2fPo7gZR/xA/kXbu8Amn4W9X3cTqQQM2K 6YY9fo8+zpbebjoZxERlHm54DEZPb9bkLa6XqCtVzRlEhUAyKsmLlhsNSnxosay9 0zHFFbMCogGQqvitXVXYz40L3271UZVZMthH8wdU8XUtobMwXE5mh5kKgTH3AgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUuJThHxZ924BOu6OpapdCovpkuv4wHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2EzNzYzMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNTM2MzAzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoKYER8MA0GCSqGSIb3DQEBCwUAA4IBAQAsBQcrSQs/nFPq/Eal DEMGh1mjdDMObNOnNRvdWsTavSpoAicDvi1Mr/Bo++wu4DZ26RB4ukdRsGKuI/Xe a1/nHtbjYcdJMGU4elTFVBaxhmI38IG2KLDUndnmqUOhAgDD7ZUSZFrEjwZW1hJ9 JmWvlvRpUH7rMhzJrfJLwADa29xvcfkKEvPKsd7stEmicpFCuLMfKOaH4GPIAM5O 5n4u2YFIfZMfc33QAvJp3Uo6HpZb2+5clJp1sPsYYiD6e9Owytzs70C32DvPxh6N mU7FcdEvSuKhQAMB+qTt7FCPqCr+Df4vNST8UO76jSG15BaoRdylWs1j5rh3q6V6 nMK7 -----END CERTIFICATE-----Generated at Tue Jun 3 10:14:32 2025 by rpki-client