$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a623130303a3a2f34302d3438203d3e203437353039.roa File: 326130613a363034343a623130303a3a2f34302d3438203d3e203437353039.roa (raw, json) Hash identifier: JHwKs93C7R1pQTHNlhAgQs+SdxL/89RRAOUa1mYVxJM= Subject key identifier: 55:C2:43:7F:91:8C:9A:BC:9B:C3:CE:70:2F:F8:17:6F:C3:35:87:C6 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 6ECDDFDEE44ACFA30FA8C902D054D8E89977CAAC Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a623130303a3a2f34302d3438203d3e203437353039.roa Signing time: Fri 07 Feb 2025 18:28:25 +0000 ROA not before: Fri 07 Feb 2025 18:23:25 +0000 ROA not after: Fri 06 Feb 2026 18:28:25 +0000 asID: 47509 IP address blocks: 2a0a:6044:b100::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:cd:df:de:e4:4a:cf:a3:0f:a8:c9:02:d0:54:d8:e8:99:77:ca:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 7 18:23:25 2025 GMT Not After : Feb 6 18:28:25 2026 GMT Subject: CN=55C2437F918C9ABC9BC3CE702FF8176FC33587C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b7:c8:d6:b0:0b:53:2d:99:d2:2f:b8:ec:25: 6c:f3:a2:73:6b:c1:a0:fc:0c:66:c6:f5:08:6c:88: ad:55:6b:d3:b7:a7:6d:5e:b4:8a:c5:45:a1:23:a2: 9b:a4:a6:b0:46:5c:5d:51:85:7b:5e:ff:95:ea:20: 3f:28:0c:7f:45:a7:29:72:5b:d3:e5:02:2b:c6:5e: 0b:b5:ac:9e:2d:f5:a4:7d:a8:41:36:cc:f7:bc:d2: 55:73:84:a8:5e:4c:c6:f6:9a:e3:ce:3e:18:ff:4e: f7:0a:55:df:3a:ba:e4:ad:b4:86:6c:09:15:af:0e: b7:00:07:70:ed:6f:fa:00:04:7f:6c:38:8f:57:d6: fc:1b:c5:b1:b1:44:cc:60:fd:f9:a9:fb:22:cb:64: 50:f6:62:5d:a4:25:5e:48:79:e6:5e:19:3f:67:bd: d6:53:46:ef:4a:0a:ed:38:84:06:7d:f2:a4:11:6d: 19:f5:17:60:50:7a:a6:c7:e5:12:78:1f:5d:92:75: 23:25:f4:af:02:8a:52:a3:62:04:0b:f7:d1:29:f7: aa:9f:d6:b0:7f:1f:23:f0:94:67:7e:fc:f6:ce:2e: e4:56:9c:1c:ae:76:18:2c:08:87:6b:4b:55:60:03: 1d:f6:d8:e5:1e:5d:42:72:75:87:4f:e4:4c:c0:82: 94:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C2:43:7F:91:8C:9A:BC:9B:C3:CE:70:2F:F8:17:6F:C3:35:87:C6 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a623130303a3a2f34302d3438203d3e203437353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:b100::/40 Signature Algorithm: sha256WithRSAEncryption 37:84:6c:7f:cf:f9:10:b0:6f:89:c6:47:ea:93:a8:33:fe:08: 28:db:b3:2a:09:72:8e:40:1b:5d:b9:5f:d9:f3:50:34:b3:63: 03:c5:dd:97:6b:d8:eb:4a:f8:29:1c:d7:71:f3:49:c5:76:03: 24:c7:44:56:9c:4e:be:fa:21:26:55:e5:7a:ab:92:dc:d2:1a: 0b:96:9f:f7:fa:cb:42:0d:ca:36:af:77:d7:0a:19:e2:95:a2: 20:22:79:0e:29:28:75:63:f5:0b:46:59:f3:ae:6d:8f:2a:46: 8e:41:67:63:b6:d1:2f:41:25:c7:07:78:2e:d2:e5:7e:3b:fb: c8:7e:c8:f6:d1:22:47:20:27:aa:ad:3e:5b:2b:47:82:c5:9b: aa:43:bb:e6:c2:8a:0a:31:2a:95:d3:33:e7:a3:b5:38:37:71: e5:aa:de:e9:5e:e9:63:b7:b4:4b:c0:8a:3c:f2:f7:a5:1d:69: 05:14:ce:b2:2c:4d:cb:73:da:b7:ff:1e:9d:f3:cf:81:27:18: bf:4b:2c:11:81:b3:62:27:27:af:86:40:9c:a8:10:9a:c2:0e: d9:92:a8:57:a8:22:61:19:c9:77:95:52:30:81:4c:af:c2:b2: 54:89:03:65:71:82:b5:46:d3:d3:7d:c2:b2:97:5a:66:d8:28: 60:8c:97:8c -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUbs3f3uRKz6MPqMkC0FTY6Jl3yqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMDcxODIzMjVaFw0yNjAyMDYxODI4MjVaMDMxMTAvBgNV BAMTKDU1QzI0MzdGOTE4QzlBQkM5QkMzQ0U3MDJGRjgxNzZGQzMzNTg3QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtt8jWsAtTLZnSL7jsJWzzonNr waD8DGbG9QhsiK1Va9O3p21etIrFRaEjopukprBGXF1RhXte/5XqID8oDH9Fpyly W9PlAivGXgu1rJ4t9aR9qEE2zPe80lVzhKheTMb2muPOPhj/TvcKVd86uuSttIZs CRWvDrcAB3Dtb/oABH9sOI9X1vwbxbGxRMxg/fmp+yLLZFD2Yl2kJV5IeeZeGT9n vdZTRu9KCu04hAZ98qQRbRn1F2BQeqbH5RJ4H12SdSMl9K8CilKjYgQL99Ep96qf 1rB/HyPwlGd+/PbOLuRWnByudhgsCIdrS1VgAx322OUeXUJydYdP5EzAgpSxAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUVcJDf5GMmrybw85wL/gXb8M1h8YwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2E2MjMxMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDM0MzczNTMwMzkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqCmBEsTANBgkqhkiG9w0BAQsFAAOCAQEAN4Rsf8/5ELBvicZH6pOo M/4IKNuzKglyjkAbXblf2fNQNLNjA8Xdl2vY60r4KRzXcfNJxXYDJMdEVpxOvvoh JlXlequS3NIaC5af9/rLQg3KNq931woZ4pWiICJ5DikodWP1C0ZZ865tjypGjkFn Y7bRL0Elxwd4LtLlfjv7yH7I9tEiRyAnqq0+WytHgsWbqkO75sKKCjEqldMz56O1 ODdx5are6V7pY7e0S8CKPPL3pR1pBRTOsixNy3Pat/8enfPPgScYv0ssEYGzYicn r4ZAnKgQmsIO2ZKoV6giYRnJd5VSMIFMr8KyVIkDZXGCtUbT033CspdaZtgoYIyX jA== -----END CERTIFICATE-----Generated at Sat Apr 5 04:31:20 2025 by rpki-client