$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616630303a3a2f34302d3438203d3e203633313530.roa File: 326130613a363034343a616630303a3a2f34302d3438203d3e203633313530.roa (raw, json) Hash identifier: ayVG7WauW5Y8WZMShGC1GtllySydtMfF0NCUSb9dfUE= Subject key identifier: D4:B8:3D:FA:AF:E8:41:2E:53:7E:60:83:0E:28:82:38:D7:29:6D:EC Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 7ED919D109E5277FC8982CB83426476910FAC8D8 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616630303a3a2f34302d3438203d3e203633313530.roa Signing time: Thu 13 Feb 2025 13:49:56 +0000 ROA not before: Thu 13 Feb 2025 13:44:56 +0000 ROA not after: Thu 12 Feb 2026 13:49:56 +0000 asID: 63150 IP address blocks: 2a0a:6044:af00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 21:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d9:19:d1:09:e5:27:7f:c8:98:2c:b8:34:26:47:69:10:fa:c8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 13 13:44:56 2025 GMT Not After : Feb 12 13:49:56 2026 GMT Subject: CN=D4B83DFAAFE8412E537E60830E288238D7296DEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e5:c3:ff:db:0f:93:bf:8d:74:d3:f7:44:89: 73:57:97:9e:dc:9f:38:58:45:f0:71:f4:f9:d3:78: 53:cf:55:d3:bb:66:05:78:c2:99:ff:f8:80:b6:21: cc:b2:74:e4:c4:78:7f:a9:d6:da:89:ca:ee:e5:08: c5:a9:db:7a:f5:d6:1a:16:ab:59:86:8c:9d:d3:6f: f0:49:04:43:ff:ed:ca:87:a9:62:e9:67:e6:8a:48: b9:b0:77:74:05:70:ac:ca:68:47:e7:39:74:fe:aa: bd:a9:4d:e0:db:3b:aa:32:22:53:29:d7:fa:68:5a: e0:f3:64:d9:b0:4e:9f:ab:88:3a:46:ee:43:96:ca: 4b:5f:35:1a:f2:ff:df:0d:a1:21:4e:f9:42:11:2a: 01:fc:85:4d:43:e3:6f:f7:8f:3c:3c:06:9f:1a:96: d5:63:d9:eb:85:22:63:d0:9a:a1:78:0d:03:4b:a1: 3e:f8:17:51:ea:76:51:40:d9:01:35:2d:bc:08:54: 68:91:11:fd:86:ef:13:ce:80:bc:cd:0a:f4:b2:52: 69:13:ca:00:47:79:ae:b7:18:70:4f:0e:45:93:96: bc:48:da:5d:62:a1:47:29:44:34:78:7f:4d:6d:90: ef:4a:2b:16:39:73:42:47:82:00:d4:32:e1:f3:40: d6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B8:3D:FA:AF:E8:41:2E:53:7E:60:83:0E:28:82:38:D7:29:6D:EC X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616630303a3a2f34302d3438203d3e203633313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:af00::/40 Signature Algorithm: sha256WithRSAEncryption 68:36:f2:1e:df:b1:8e:d7:bf:59:13:d0:fe:e7:fc:6e:1f:55: 88:63:fc:ee:68:a5:aa:e0:05:dc:5c:68:26:58:6f:89:12:7e: 39:8d:69:c2:16:8a:27:6a:f0:c2:8f:04:a7:35:34:18:b7:e6: c4:9a:2c:22:ae:64:ec:68:d4:3f:ea:6d:b8:db:b8:51:45:2b: 5e:73:82:5f:b1:14:da:90:0f:20:6a:49:73:50:7e:d7:25:30: 00:e6:f6:cd:16:ed:47:67:21:bf:df:7e:b0:ed:bb:e1:f9:66: 4b:0f:e2:a2:b2:90:ea:94:3f:e1:b9:c3:58:d5:d4:d9:a0:07: d8:21:72:39:5d:31:f2:af:85:9c:23:15:8d:f6:d9:b4:f6:c3: 67:76:03:3b:f2:2e:3c:9a:33:b6:f2:2a:84:11:25:cb:b7:e3: bd:42:6a:9d:cb:31:09:ba:e8:6c:88:28:5c:03:91:9a:08:d2: e5:c4:21:72:d6:50:ab:45:bf:e0:61:61:40:63:a3:46:10:3b: d9:ad:d7:8d:61:05:2d:08:77:b5:ec:7e:d6:0d:b8:60:76:29: 8d:70:af:6d:e5:92:81:bb:96:c9:09:d8:b2:f5:d4:06:b4:03: 1a:df:fd:84:ff:cf:0e:6b:3b:cf:28:2b:ed:7e:70:0e:8d:b2: e2:55:44:20 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUftkZ0QnlJ3/ImCy4NCZHaRD6yNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMTMxMzQ0NTZaFw0yNjAyMTIxMzQ5NTZaMDMxMTAvBgNV BAMTKEQ0QjgzREZBQUZFODQxMkU1MzdFNjA4MzBFMjg4MjM4RDcyOTZERUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5cP/2w+Tv4100/dEiXNXl57c nzhYRfBx9PnTeFPPVdO7ZgV4wpn/+IC2IcyydOTEeH+p1tqJyu7lCMWp23r11hoW q1mGjJ3Tb/BJBEP/7cqHqWLpZ+aKSLmwd3QFcKzKaEfnOXT+qr2pTeDbO6oyIlMp 1/poWuDzZNmwTp+riDpG7kOWyktfNRry/98NoSFO+UIRKgH8hU1D42/3jzw8Bp8a ltVj2euFImPQmqF4DQNLoT74F1HqdlFA2QE1LbwIVGiREf2G7xPOgLzNCvSyUmkT ygBHea63GHBPDkWTlrxI2l1ioUcpRDR4f01tkO9KKxY5c0JHggDUMuHzQNbZAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU1Lg9+q/oQS5TfmCDDiiCONcpbewwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2E2MTY2MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDM2MzMzMTM1MzAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqCmBErzANBgkqhkiG9w0BAQsFAAOCAQEAaDbyHt+xjte/WRPQ/uf8 bh9ViGP87milquAF3FxoJlhviRJ+OY1pwhaKJ2rwwo8EpzU0GLfmxJosIq5k7GjU P+ptuNu4UUUrXnOCX7EU2pAPIGpJc1B+1yUwAOb2zRbtR2chv99+sO274flmSw/i orKQ6pQ/4bnDWNXU2aAH2CFyOV0x8q+FnCMVjfbZtPbDZ3YDO/IuPJoztvIqhBEl y7fjvUJqncsxCbrobIgoXAORmgjS5cQhctZQq0W/4GFhQGOjRhA72a3XjWEFLQh3 tex+1g24YHYpjXCvbeWSgbuWyQnYsvXUBrQDGt/9hP/PDms7zygr7X5wDo2y4lVE IA== -----END CERTIFICATE-----Generated at Sat Apr 5 06:36:48 2025 by rpki-client