$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613530303a3a2f34362d3438203d3e20323135393536.roa File: 326130613a363034343a613530303a3a2f34362d3438203d3e20323135393536.roa (raw, json) Hash identifier: wMhaQeQzHFzlfUB6q98Ifh7F1Zx3oQXok0tgZrkTEdc= Subject key identifier: 62:69:C9:71:7A:2B:5C:B8:01:C0:40:67:D2:D6:31:80:06:4A:DA:8E Certificate issuer: /CN=D7D838DED871774D2E875C9CB99B810DC1B38301 Certificate serial: 42FCEE7837D4D6B5E910B46FD5C52BF190BEB83E Authority key identifier: D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613530303a3a2f34362d3438203d3e20323135393536.roa Signing time: Sun 28 Apr 2024 23:44:44 +0000 ROA not before: Sun 28 Apr 2024 23:39:44 +0000 ROA not after: Sun 27 Apr 2025 23:44:44 +0000 asID: 215956 IP address blocks: 2a0a:6044:a500::/46 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.crl rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 02 Jun 2024 07:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:fc:ee:78:37:d4:d6:b5:e9:10:b4:6f:d5:c5:2b:f1:90:be:b8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7D838DED871774D2E875C9CB99B810DC1B38301 Validity Not Before: Apr 28 23:39:44 2024 GMT Not After : Apr 27 23:44:44 2025 GMT Subject: CN=6269C9717A2B5CB801C04067D2D63180064ADA8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:eb:ae:34:78:c0:cf:14:d2:7f:90:6b:e5:13: 92:8e:9d:a4:08:24:4a:69:56:e2:ad:24:df:e7:bc: f8:f3:ea:c5:7a:c6:7b:1c:50:74:8c:25:09:a0:06: b6:c7:79:dd:e0:0c:88:fe:81:ee:70:a2:4e:49:f9: 3e:d0:27:b1:34:36:92:cc:51:b3:13:0a:5e:2d:20: 01:e2:12:7d:e7:dd:8a:d7:92:0e:49:90:e3:d8:4c: 7f:28:93:56:6e:38:34:e0:ba:a7:04:25:94:66:4a: e8:fa:f8:2b:4c:c0:9a:c8:1d:c7:26:a1:a2:d5:de: 77:85:b6:57:50:2f:cc:2c:db:a9:a0:3b:a7:fe:1f: 07:00:bf:1e:7f:51:29:16:7b:4c:a5:09:b7:ef:12: fd:3d:ad:42:d2:e3:47:55:0e:da:07:8f:a3:11:2c: 93:3d:f8:41:54:2e:07:e3:ae:3b:5f:76:15:ea:79: 91:72:8d:ce:96:2d:9f:98:6b:97:cc:32:70:6f:3f: 8a:22:ef:d3:9d:7d:c5:9f:ad:17:5e:0a:4a:4b:90: e7:16:cb:b5:a3:12:94:6d:8d:60:34:0f:a0:14:fd: c9:0b:c4:d8:c5:2d:41:0c:15:31:a6:c9:ae:ed:0a: da:a0:36:f3:77:d6:78:49:e5:04:3a:dc:f3:d0:13: 9c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:69:C9:71:7A:2B:5C:B8:01:C0:40:67:D2:D6:31:80:06:4A:DA:8E X509v3 Authority Key Identifier: keyid:D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613530303a3a2f34362d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a500::/46 Signature Algorithm: sha256WithRSAEncryption 4b:88:e2:6d:d0:a8:76:1c:90:43:12:11:ba:8f:bc:af:2a:9d: 6e:3b:c2:07:8e:f9:d8:bd:d1:c0:5e:7f:47:a8:96:c7:4f:f2: b1:f5:7f:47:54:eb:f8:ab:a8:6f:5b:e5:b8:93:df:6a:45:90: 57:b8:16:8a:d6:56:9e:9b:54:b2:b5:aa:67:56:61:c2:6b:a5: b5:ae:71:f5:91:b2:3d:c9:37:01:d8:0e:a1:87:a0:ee:6c:b8: 51:0d:01:f9:e5:65:b0:07:0f:94:6b:82:ae:f7:b2:34:8b:6e: 18:5f:3a:d4:9e:d0:4f:bb:84:f2:5c:d0:fa:66:1d:ce:0f:ce: 11:a8:21:fc:db:13:9f:d6:db:88:e5:52:21:ce:aa:d1:f1:aa: 69:0b:8c:52:cc:ba:1e:54:8e:df:ae:25:f2:cf:5a:60:ef:5a: a4:a4:78:5c:da:b3:2b:c2:7a:f6:29:e5:02:3b:e3:e7:0b:b7: 03:6a:82:96:82:8f:00:66:6b:70:68:89:25:c6:01:e7:66:e8: f8:30:1a:8d:78:2a:48:f4:e6:aa:5a:f5:d9:d2:5e:26:af:b3: 73:d4:7a:63:8d:8b:78:96:bb:15:ee:3e:71:bb:d4:03:0a:8e: 7e:59:c3:7e:33:39:70:d3:ad:ea:82:f2:66:ba:dc:10:ce:d4: 10:3e:f5:3b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUQvzueDfU1rXpELRv1cUr8ZC+uD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdEODM4REVEODcxNzc0RDJFODc1QzlDQjk5QjgxMERD MUIzODMwMTAeFw0yNDA0MjgyMzM5NDRaFw0yNTA0MjcyMzQ0NDRaMDMxMTAvBgNV BAMTKDYyNjlDOTcxN0EyQjVDQjgwMUMwNDA2N0QyRDYzMTgwMDY0QURBOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi6640eMDPFNJ/kGvlE5KOnaQI JEppVuKtJN/nvPjz6sV6xnscUHSMJQmgBrbHed3gDIj+ge5wok5J+T7QJ7E0NpLM UbMTCl4tIAHiEn3n3YrXkg5JkOPYTH8ok1ZuODTguqcEJZRmSuj6+CtMwJrIHccm oaLV3neFtldQL8ws26mgO6f+HwcAvx5/USkWe0ylCbfvEv09rULS40dVDtoHj6MR LJM9+EFULgfjrjtfdhXqeZFyjc6WLZ+Ya5fMMnBvP4oi79OdfcWfrRdeCkpLkOcW y7WjEpRtjWA0D6AU/ckLxNjFLUEMFTGmya7tCtqgNvN31nhJ5QQ63PPQE5znAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUYmnJcXorXLgBwEBn0tYxgAZK2o4wHwYDVR0j BBgwFoAU19g43thxd00uh1ycuZuBDcGzgwEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM2MTVlYmQtNWMyOC00MzM0LThkMmMtZWMzMTU4YWZk YzhjLzAvRDdEODM4REVEODcxNzc0RDJFODc1QzlDQjk5QjgxMERDMUIzODMwMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9EN0Q4MzhERUQ4NzE3NzREMkU4NzVDOUNC OTlCODEwREMxQjM4MzAxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYzYxNWViZC01YzI4LTQzMzQtOGQyYy1lYzMxNThhZmRjOGMvMC8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYxMzUzMDMwM2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcCKgpgRKUAMA0GCSqGSIb3DQEBCwUAA4IBAQBL iOJt0Kh2HJBDEhG6j7yvKp1uO8IHjvnYvdHAXn9HqJbHT/Kx9X9HVOv4q6hvW+W4 k99qRZBXuBaK1laem1SytapnVmHCa6W1rnH1kbI9yTcB2A6hh6DubLhRDQH55WWw Bw+Ua4Ku97I0i24YXzrUntBPu4TyXND6Zh3OD84RqCH82xOf1tuI5VIhzqrR8app C4xSzLoeVI7friXyz1pg71qkpHhc2rMrwnr2KeUCO+PnC7cDaoKWgo8AZmtwaIkl xgHnZuj4MBqNeCpI9OaqWvXZ0l4mr7Nz1HpjjYt4lrsV7j5xu9QDCo5+WcN+Mzlw 063qgvJmutwQztQQPvU7 -----END CERTIFICATE-----Generated at Sat Jun 1 19:28:59 2024 by rpki-client on console-fra.rpki-client.org