$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa File: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (raw, json) Hash identifier: SLj141CGncsBb5vfud/Xh4MbUscTfgukNtFTpVVNYzk= Subject key identifier: BE:D1:4D:92:0F:BF:9B:02:12:5B:E9:84:34:AD:03:5E:65:B1:B0:DB Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 2FA10B6CB76CF17A8177D6570928E830CCCCA3E3 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa Signing time: Wed 22 Jan 2025 15:03:28 +0000 ROA not before: Wed 22 Jan 2025 14:58:28 +0000 ROA not after: Wed 21 Jan 2026 15:03:28 +0000 asID: 401386 IP address blocks: 2a14:7581:2f01::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 08:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a1:0b:6c:b7:6c:f1:7a:81:77:d6:57:09:28:e8:30:cc:cc:a3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Jan 22 14:58:28 2025 GMT Not After : Jan 21 15:03:28 2026 GMT Subject: CN=BED14D920FBF9B02125BE98434AD035E65B1B0DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4e:49:01:f4:43:8e:5d:8c:2a:75:fe:ea:47: bf:56:09:02:f8:18:cc:60:9f:0a:c2:f3:72:78:4e: e4:91:33:33:2c:58:13:f4:51:26:01:1b:3b:78:d2: 1c:4c:52:a8:28:66:92:c8:49:d2:ae:db:b5:0d:66: 93:aa:f0:91:15:27:4b:bd:78:7e:bb:7b:f3:cd:a1: a1:91:3a:c9:e0:e3:9f:af:d0:f8:88:ad:ef:0f:0f: ae:47:de:af:94:f8:09:ff:1b:5b:68:08:4f:71:e8: 2a:6d:42:50:58:e4:d9:a9:e2:33:c8:f6:9a:b6:06: ca:9c:0c:e7:7c:3c:3a:60:ce:df:b2:f9:b2:a0:c3: 8a:ef:ff:5a:c3:0f:8e:84:2e:47:8d:1a:b8:3c:fb: 38:c2:f4:b7:86:3e:55:ee:66:9a:69:5e:27:cb:af: 23:7b:c9:12:1b:74:ac:bd:ab:e5:94:6b:bb:e5:7d: a1:2d:12:ad:12:b6:c6:00:b4:e9:14:98:45:6d:1f: 00:4b:94:03:4b:4d:2c:ee:ca:4a:4f:6b:55:46:85: 0d:77:e5:03:50:c8:07:56:16:ec:c9:9b:98:0c:44: 40:61:42:95:0c:b3:28:57:cd:05:6b:fc:3e:bb:db: bc:52:fb:bf:7b:3e:f6:76:88:7a:6e:35:af:89:2a: d2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D1:4D:92:0F:BF:9B:02:12:5B:E9:84:34:AD:03:5E:65:B1:B0:DB X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2f01::/48 Signature Algorithm: sha256WithRSAEncryption 20:8a:2f:97:9c:f6:27:70:94:8b:a7:1e:55:77:7d:57:83:b7: f8:29:cd:41:aa:bf:8e:ec:c5:3d:4c:79:58:45:7f:90:39:81: 3a:c9:e7:fd:66:e5:ec:2e:a8:42:dd:d6:0d:ef:30:75:cb:50: 92:4f:b0:96:6a:aa:db:eb:06:c5:31:2b:39:72:41:6d:02:1b: 0e:99:63:58:af:f0:82:69:72:8e:cf:a8:79:f7:94:42:b7:7c: d9:89:9a:05:16:4c:61:87:32:f6:b8:6a:74:ca:43:f1:78:c2: 1c:f6:c7:c2:22:95:d9:3f:96:39:06:66:37:0e:5a:47:6c:0a: cf:9e:79:4a:6f:d4:96:9d:79:42:f2:c1:c7:af:b0:30:dc:b4: f6:4f:32:e3:f4:69:e7:08:e0:65:14:c2:8f:a5:92:d6:5b:32: dc:f3:a5:b2:d9:91:f3:e6:c1:65:71:33:9b:c1:4a:d3:e3:69: ab:08:e5:48:08:f2:4b:2a:22:74:a1:3e:3c:66:11:1e:0a:d4: ca:1b:54:75:a6:2e:38:10:5a:7d:18:df:22:3f:26:03:80:fe: d4:3a:5a:31:76:e4:23:8f:f6:bf:83:10:08:d2:cf:70:64:00: 5e:3e:bc:b2:8c:99:9a:41:1e:ac:36:84:85:52:66:14:51:9c: 09:ec:d0:bc -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUL6ELbLds8XqBd9ZXCSjoMMzMo+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTAxMjIxNDU4MjhaFw0yNjAxMjExNTAzMjhaMDMxMTAvBgNV BAMTKEJFRDE0RDkyMEZCRjlCMDIxMjVCRTk4NDM0QUQwMzVFNjVCMUIwREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYTkkB9EOOXYwqdf7qR79WCQL4 GMxgnwrC83J4TuSRMzMsWBP0USYBGzt40hxMUqgoZpLISdKu27UNZpOq8JEVJ0u9 eH67e/PNoaGROsng45+v0PiIre8PD65H3q+U+An/G1toCE9x6CptQlBY5Nmp4jPI 9pq2BsqcDOd8PDpgzt+y+bKgw4rv/1rDD46ELkeNGrg8+zjC9LeGPlXuZpppXifL ryN7yRIbdKy9q+WUa7vlfaEtEq0StsYAtOkUmEVtHwBLlANLTSzuykpPa1VGhQ13 5QNQyAdWFuzJm5gMREBhQpUMsyhXzQVr/D6727xS+797PvZ2iHpuNa+JKtLXAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUvtFNkg+/mwISW+mENK0DXmWxsNswHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYWRlYmI5ZC0zM2NjLTQyOWItYWEzNS0xMDYzNGE4YjFkZDQvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMyNjYzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQz MDMxMzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gS8BMA0GCSqGSIb3DQEBCwUAA4IBAQAg ii+XnPYncJSLpx5Vd31Xg7f4Kc1Bqr+O7MU9THlYRX+QOYE6yef9ZuXsLqhC3dYN 7zB1y1CST7CWaqrb6wbFMSs5ckFtAhsOmWNYr/CCaXKOz6h595RCt3zZiZoFFkxh hzL2uGp0ykPxeMIc9sfCIpXZP5Y5BmY3DlpHbArPnnlKb9SWnXlC8sHHr7Aw3LT2 TzLj9GnnCOBlFMKPpZLWWzLc86Wy2ZHz5sFlcTObwUrT42mrCOVICPJLKiJ0oT48 ZhEeCtTKG1R1pi44EFp9GN8iPyYDgP7UOloxduQjj/a/gxAI0s9wZABePryyjJma QR6sNoSFUmYUUZwJ7NC8 -----END CERTIFICATE-----Generated at Fri Jun 6 22:56:01 2025 by rpki-client