$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa File: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (raw, json) Hash identifier: PQEJzzZkaWaRihPz0qFSxn/fBL9FvQBY7Es5NvynDQM= Subject key identifier: 68:5F:9F:3E:67:05:B2:50:9D:C1:0A:BE:92:7A:B0:30:BE:C2:BD:58 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 3F71DED96C04A8A766B7B79467DB9F5BC8CB2188 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa Signing time: Wed 22 Jan 2025 15:03:27 +0000 ROA not before: Wed 22 Jan 2025 14:58:27 +0000 ROA not after: Wed 21 Jan 2026 15:03:27 +0000 asID: 401386 IP address blocks: 2a14:7581:2f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 08:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:71:de:d9:6c:04:a8:a7:66:b7:b7:94:67:db:9f:5b:c8:cb:21:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Jan 22 14:58:27 2025 GMT Not After : Jan 21 15:03:27 2026 GMT Subject: CN=685F9F3E6705B2509DC10ABE927AB030BEC2BD58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:71:61:55:fc:e8:cf:67:85:15:81:79:80: ad:e0:2a:50:87:be:e6:61:7a:f8:c5:03:69:45:d9: cf:6c:ba:4c:1a:88:1c:0f:8c:50:61:49:95:0b:ac: 01:ad:66:03:22:db:f1:83:0c:67:b7:be:08:98:1e: b6:08:dc:33:a4:ac:e0:6d:b4:34:2d:07:84:3c:49: 29:80:b3:81:ef:72:fc:71:e8:a9:36:89:97:13:97: df:01:ce:c7:0b:4a:52:b9:9b:f3:90:1b:e3:1f:c3: e9:3b:c6:bb:29:51:89:23:74:be:56:fa:47:6f:3b: 55:91:f1:9f:a1:fe:af:02:97:20:9a:80:25:41:a1: 84:5a:9a:bf:32:a6:ff:2d:a2:fa:46:39:00:72:bd: 45:75:66:41:34:1c:00:9d:4e:5e:2e:ab:8b:16:73: 42:cc:fa:4e:af:e2:74:85:a2:b6:d5:e1:89:16:b4: f8:97:6a:7a:ff:e4:ac:36:b8:e5:71:78:0c:6e:7c: fb:fd:a5:6d:6b:d9:a0:be:5c:8f:16:2d:c0:f4:2b: dc:e5:f7:3f:5c:02:94:11:bf:72:e6:df:81:00:69: 3c:b5:e3:8f:78:9e:39:dc:e6:f3:8a:42:8a:77:14: f3:74:06:ee:d2:57:03:9b:23:e5:94:a5:a4:d3:f7: bc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5F:9F:3E:67:05:B2:50:9D:C1:0A:BE:92:7A:B0:30:BE:C2:BD:58 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2f00::/48 Signature Algorithm: sha256WithRSAEncryption 44:ad:00:ca:03:23:ac:20:75:5f:74:7f:ff:c2:1d:29:5b:99: ea:bc:96:65:7a:70:53:79:92:9b:f2:ff:65:20:cd:ea:89:47: 45:fa:4e:03:b8:1e:e5:ad:f9:56:8b:07:04:2e:fe:5d:c3:2c: ba:49:b4:8c:65:30:83:fe:f0:8d:b8:13:a6:1f:6e:05:d1:6a: 55:53:11:85:b1:83:15:7a:b6:4c:8d:81:4d:51:15:1d:f9:91: 2f:21:04:20:7c:52:ba:20:66:38:6b:f8:ad:31:b1:75:c4:36: 9f:be:3f:d6:32:5e:62:04:82:19:ee:1d:b3:2c:03:27:f3:0a: e8:db:81:36:c3:55:f1:40:75:12:93:ba:8d:b4:f7:28:45:86: 22:0e:09:bc:ec:ca:11:cb:81:62:0e:f8:1b:6a:90:00:74:2d: e0:09:09:1d:a1:23:6e:cc:e9:1a:c9:29:3b:e9:1e:da:55:14: 32:00:49:a2:a3:22:4a:49:7d:c9:a6:3b:aa:f6:81:a9:46:00: d0:43:0e:bb:24:75:80:da:24:df:56:af:0f:fa:a9:87:81:8f: cc:7f:7e:d9:4c:2c:a1:78:c6:15:a7:6f:99:bf:56:6e:60:d0: 1e:83:89:3e:2d:26:7f:27:3c:73:96:01:15:2d:fa:26:27:2c: cb:24:4a:58 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUP3He2WwEqKdmt7eUZ9ufW8jLIYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTAxMjIxNDU4MjdaFw0yNjAxMjExNTAzMjdaMDMxMTAvBgNV BAMTKDY4NUY5RjNFNjcwNUIyNTA5REMxMEFCRTkyN0FCMDMwQkVDMkJENTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2DnFhVfzoz2eFFYF5gK3gKlCH vuZhevjFA2lF2c9sukwaiBwPjFBhSZULrAGtZgMi2/GDDGe3vgiYHrYI3DOkrOBt tDQtB4Q8SSmAs4Hvcvxx6Kk2iZcTl98BzscLSlK5m/OQG+Mfw+k7xrspUYkjdL5W +kdvO1WR8Z+h/q8ClyCagCVBoYRamr8ypv8tovpGOQByvUV1ZkE0HACdTl4uq4sW c0LM+k6v4nSForbV4YkWtPiXanr/5Kw2uOVxeAxufPv9pW1r2aC+XI8WLcD0K9zl 9z9cApQRv3Lm34EAaTy14494njnc5vOKQop3FPN0Bu7SVwObI+WUpaTT97ypAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUaF+fPmcFslCdwQq+knqwML7CvVgwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYWRlYmI5ZC0zM2NjLTQyOWItYWEzNS0xMDYzNGE4YjFkZDQvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMyNjYzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQz MDMxMzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gS8AMA0GCSqGSIb3DQEBCwUAA4IBAQBE rQDKAyOsIHVfdH//wh0pW5nqvJZlenBTeZKb8v9lIM3qiUdF+k4DuB7lrflWiwcE Lv5dwyy6SbSMZTCD/vCNuBOmH24F0WpVUxGFsYMVerZMjYFNURUd+ZEvIQQgfFK6 IGY4a/itMbF1xDafvj/WMl5iBIIZ7h2zLAMn8wro24E2w1XxQHUSk7qNtPcoRYYi Dgm87MoRy4FiDvgbapAAdC3gCQkdoSNuzOkaySk76R7aVRQyAEmioyJKSX3Jpjuq 9oGpRgDQQw67JHWA2iTfVq8P+qmHgY/Mf37ZTCyheMYVp2+Zv1ZuYNAeg4k+LSZ/ JzxzlgEVLfomJyzLJEpY -----END CERTIFICATE-----Generated at Fri Jun 6 23:02:23 2025 by rpki-client