$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a393a3a2f34382d3438203d3e203437323732.roa File: 326130613a363034343a393a3a2f34382d3438203d3e203437323732.roa (raw, json) Hash identifier: VQ/TTMno7mUIfc2/GgEvfrRpNRAdt+lGqG4h1G9UzgM= Subject key identifier: D8:AA:5D:D4:22:B2:46:30:4D:19:E7:E1:DF:C1:B3:B0:CC:8E:94:31 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 26A7399A38C37BF6B77DAF5054B42F7C8A812B7A Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a393a3a2f34382d3438203d3e203437323732.roa Signing time: Fri 07 Feb 2025 19:13:21 +0000 ROA not before: Fri 07 Feb 2025 19:08:21 +0000 ROA not after: Fri 06 Feb 2026 19:13:21 +0000 asID: 47272 IP address blocks: 2a0a:6044:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Apr 2025 15:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:a7:39:9a:38:c3:7b:f6:b7:7d:af:50:54:b4:2f:7c:8a:81:2b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 7 19:08:21 2025 GMT Not After : Feb 6 19:13:21 2026 GMT Subject: CN=D8AA5DD422B246304D19E7E1DFC1B3B0CC8E9431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:93:3f:51:ef:d0:d4:37:59:85:2c:d6:8f: 99:52:3b:7b:9e:df:d4:25:12:3e:f8:ad:05:1e:d6: 8b:d9:2b:7b:a2:85:b0:e6:77:28:57:2a:d7:53:9d: 09:51:36:45:6e:93:78:a4:b8:c5:60:ae:da:84:98: 8b:7a:f0:ee:43:31:41:97:c1:ab:d2:f2:1c:1d:85: 71:77:92:59:4b:6d:97:15:fc:fd:27:c1:e7:5b:d9: 70:39:33:da:24:fd:f7:eb:ca:ea:19:99:97:da:3f: 55:fd:bf:b1:3e:d8:3d:3c:1d:25:92:45:71:7b:fa: 3f:04:de:db:d3:84:91:8c:00:3f:a7:b1:28:f0:fc: f3:40:27:94:58:d4:32:b2:4b:10:04:ce:32:f8:2d: 1f:a3:1a:3d:d2:8b:47:24:aa:83:4a:4f:1b:98:e0: 71:76:68:46:c6:5c:58:fa:df:8f:82:4d:f0:84:96: 28:26:b4:cf:36:49:db:d8:54:05:e5:be:34:58:51: 3a:42:a3:2e:c8:6f:47:bf:8c:07:28:b1:5d:aa:0c: db:61:60:85:eb:ea:46:4a:99:a3:51:91:a3:80:58: 37:35:15:62:8d:d4:29:c7:54:d0:a1:1c:40:6f:76: c9:76:c1:26:46:0d:53:c4:bb:7b:c5:7a:87:64:e1: 10:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AA:5D:D4:22:B2:46:30:4D:19:E7:E1:DF:C1:B3:B0:CC:8E:94:31 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a393a3a2f34382d3438203d3e203437323732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:9::/48 Signature Algorithm: sha256WithRSAEncryption 1d:4a:8a:d3:69:a4:93:fe:d6:a5:91:27:9e:da:67:2d:53:21: 0b:12:8a:68:23:fb:d0:5a:b3:ce:4a:8e:66:a8:69:f1:e1:58: 16:41:0f:04:16:c0:e6:bc:ed:12:ec:a4:17:de:bd:aa:0f:a8: b8:04:6b:63:d5:9d:a3:01:5c:4a:5c:e3:38:c7:7e:2b:63:28: f9:0f:22:20:db:0b:10:e7:73:fa:6c:fa:ff:09:55:29:d1:72: 38:a9:62:3c:e4:c1:ac:f1:75:5f:85:cb:a3:99:9b:a2:0f:45: e9:e0:6b:bc:02:3f:52:86:9d:0d:84:20:1f:18:34:a3:4e:4d: 65:a8:1c:62:27:ba:c5:ee:9c:8c:10:08:cf:a6:a9:db:ec:3b: 98:07:48:bb:cd:ac:2d:1a:93:c3:cd:55:0f:1f:f4:e9:d5:4d: 2c:5c:fe:87:db:a7:0b:a3:5f:7a:c4:76:2b:0a:fa:e8:d4:0b: 32:f4:2a:f5:dd:29:33:8d:11:bd:ce:38:a4:4c:89:dc:28:ee: 6a:b7:f4:ad:7c:3e:16:ef:0b:cb:a2:32:28:48:08:af:b3:59: c0:63:41:06:73:4e:b1:31:e4:78:35:19:6a:36:1d:78:e5:ca: a7:4c:b3:30:72:4d:d6:d1:09:70:28:22:97:29:f9:fb:33:62: 01:6a:07:e5 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIUJqc5mjjDe/a3fa9QVLQvfIqBK3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMDcxOTA4MjFaFw0yNjAyMDYxOTEzMjFaMDMxMTAvBgNV BAMTKEQ4QUE1REQ0MjJCMjQ2MzA0RDE5RTdFMURGQzFCM0IwQ0M4RTk0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCrZM/Ue/Q1DdZhSzWj5lSO3ue 39QlEj74rQUe1ovZK3uihbDmdyhXKtdTnQlRNkVuk3ikuMVgrtqEmIt68O5DMUGX wavS8hwdhXF3kllLbZcV/P0nwedb2XA5M9ok/ffryuoZmZfaP1X9v7E+2D08HSWS RXF7+j8E3tvThJGMAD+nsSjw/PNAJ5RY1DKySxAEzjL4LR+jGj3Si0ckqoNKTxuY 4HF2aEbGXFj634+CTfCEligmtM82SdvYVAXlvjRYUTpCoy7Ib0e/jAcosV2qDNth YIXr6kZKmaNRkaOAWDc1FWKN1CnHVNChHEBvdsl2wSZGDVPEu3vFeodk4RB1AgMB AAGjggJyMIICbjAdBgNVHQ4EFgQU2Kpd1CKyRjBNGefh38GzsMyOlDEwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2EzOTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczMjM3MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAqCmBEAAkwDQYJKoZIhvcNAQELBQADggEBAB1KitNppJP+1qWRJ57aZy1TIQsS imgj+9Bas85KjmaoafHhWBZBDwQWwOa87RLspBfevaoPqLgEa2PVnaMBXEpc4zjH fitjKPkPIiDbCxDnc/ps+v8JVSnRcjipYjzkwazxdV+Fy6OZm6IPRenga7wCP1KG nQ2EIB8YNKNOTWWoHGInusXunIwQCM+mqdvsO5gHSLvNrC0ak8PNVQ8f9OnVTSxc /ofbpwujX3rEdisK+ujUCzL0KvXdKTONEb3OOKRMidwo7mq39K18PhbvC8uiMihI CK+zWcBjQQZzTrEx5Hg1GWo2HXjlyqdMszByTdbRCXAoIpcp+fszYgFqB+U= -----END CERTIFICATE-----Generated at Thu Apr 3 07:11:06 2025 by rpki-client