$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613531343a3a2f34362d3438203d3e20323135393536.roa File: 326130613a363034343a613531343a3a2f34362d3438203d3e20323135393536.roa (raw, json) Hash identifier: pOOK05ExVjmg/IvROy8S5ajO+yNEfS9kDc4x//g7LdU= Subject key identifier: 84:88:16:61:B9:14:73:1E:5F:85:3A:35:5E:03:CF:AF:7A:32:DB:B9 Certificate issuer: /CN=D7D838DED871774D2E875C9CB99B810DC1B38301 Certificate serial: 356A42B5B21AE9D6222ECFA374661D0EE8EB9698 Authority key identifier: D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613531343a3a2f34362d3438203d3e20323135393536.roa Signing time: Sat 04 May 2024 20:44:25 +0000 ROA not before: Sat 04 May 2024 20:39:25 +0000 ROA not after: Sat 03 May 2025 20:44:25 +0000 asID: 215956 IP address blocks: 2a0a:6044:a514::/46 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.crl rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 02 Jun 2024 07:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:6a:42:b5:b2:1a:e9:d6:22:2e:cf:a3:74:66:1d:0e:e8:eb:96:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7D838DED871774D2E875C9CB99B810DC1B38301 Validity Not Before: May 4 20:39:25 2024 GMT Not After : May 3 20:44:25 2025 GMT Subject: CN=84881661B914731E5F853A355E03CFAF7A32DBB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c4:cf:a8:70:5a:cf:93:2d:92:c0:bc:84:c5: cc:4b:22:e1:b1:91:4b:8d:6f:f5:a7:25:3c:7d:42: 51:59:4c:21:d7:ae:6f:15:e7:0e:c8:f9:51:60:a1: 4c:51:7d:1a:3d:57:47:e1:db:bb:5d:14:38:c9:9a: fe:f6:aa:1e:d1:ae:70:5b:06:4f:12:08:3f:e8:93: 76:86:eb:a6:39:ec:08:12:57:e0:76:17:d3:43:bc: 06:e0:c6:0a:58:5e:61:01:71:8e:4b:e9:37:f4:ee: 4c:06:ec:69:6c:7e:c0:34:4d:2a:69:7f:8c:12:4b: 42:93:48:4c:24:b8:3b:90:74:c1:8a:72:03:57:89: 68:b6:01:9d:b7:e9:27:8e:34:6b:8d:52:90:e2:26: e0:2e:c4:4d:7b:7f:27:8e:96:6d:6e:5f:2e:0e:a0: c6:31:0b:dd:33:6b:8f:65:8f:75:4f:0d:fb:c7:a3: de:a8:4b:26:a5:1d:29:b3:a3:42:ad:d2:a3:da:41: 3b:3f:6c:ac:46:48:d2:f3:8c:51:0a:58:14:e1:1f: 96:35:35:7a:66:ce:33:2c:34:f5:4d:c6:83:d6:53: 0c:a4:4e:65:67:42:19:27:c6:f7:2e:0a:e0:fc:5b: 78:3b:52:02:35:61:d9:8f:cd:75:23:b9:72:a8:72: 52:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:88:16:61:B9:14:73:1E:5F:85:3A:35:5E:03:CF:AF:7A:32:DB:B9 X509v3 Authority Key Identifier: keyid:D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613531343a3a2f34362d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a514::/46 Signature Algorithm: sha256WithRSAEncryption 84:c5:56:c4:87:3a:e5:01:b1:19:85:0a:3a:35:4e:91:86:22: 76:36:cf:e1:24:99:d7:5f:d6:68:4d:6d:e4:80:19:39:87:d0: cc:0d:a2:cb:0a:fc:6b:b1:9b:5b:be:f3:70:a0:c5:b0:29:b5: 41:f2:f7:3a:2f:3d:38:34:05:5b:42:1a:b0:cf:e3:ed:25:7e: 80:22:14:df:53:25:3e:be:0d:53:ca:fa:e5:f3:3c:b2:b4:1e: 4e:93:2f:6e:b9:ac:15:1f:a6:a6:3c:5e:78:14:5d:5f:d3:86: eb:cc:ef:a3:e6:c8:7d:90:16:f1:c4:b6:b2:57:06:4c:28:31: b2:ce:dd:ab:fb:43:f2:58:33:6a:38:88:89:f5:b2:c6:cf:c4: 31:d3:30:43:42:4d:2b:71:9f:a8:3f:eb:97:2f:e7:b0:62:c9: 7b:d6:f0:44:cd:81:e8:ff:9d:c6:e0:72:cc:60:22:96:85:9f: e8:77:59:0f:a5:9b:fd:a4:5b:28:18:9c:59:98:17:4e:2f:bc: 6a:e6:f9:6d:75:b0:5f:43:0e:2f:f4:e0:63:06:c1:9c:d5:1d: d8:ad:7d:48:4a:3b:e1:f3:86:31:0f:41:d2:52:27:c0:8d:2b: 64:4d:b0:86:c7:98:8b:a1:73:89:ec:59:c3:fb:1b:4c:be:ed: 01:67:86:98 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUNWpCtbIa6dYiLs+jdGYdDujrlpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdEODM4REVEODcxNzc0RDJFODc1QzlDQjk5QjgxMERD MUIzODMwMTAeFw0yNDA1MDQyMDM5MjVaFw0yNTA1MDMyMDQ0MjVaMDMxMTAvBgNV BAMTKDg0ODgxNjYxQjkxNDczMUU1Rjg1M0EzNTVFMDNDRkFGN0EzMkRCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVxM+ocFrPky2SwLyExcxLIuGx kUuNb/WnJTx9QlFZTCHXrm8V5w7I+VFgoUxRfRo9V0fh27tdFDjJmv72qh7RrnBb Bk8SCD/ok3aG66Y57AgSV+B2F9NDvAbgxgpYXmEBcY5L6Tf07kwG7GlsfsA0TSpp f4wSS0KTSEwkuDuQdMGKcgNXiWi2AZ236SeONGuNUpDiJuAuxE17fyeOlm1uXy4O oMYxC90za49lj3VPDfvHo96oSyalHSmzo0Kt0qPaQTs/bKxGSNLzjFEKWBThH5Y1 NXpmzjMsNPVNxoPWUwykTmVnQhknxvcuCuD8W3g7UgI1YdmPzXUjuXKoclLjAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUhIgWYbkUcx5fhTo1XgPPr3oy27kwHwYDVR0j BBgwFoAU19g43thxd00uh1ycuZuBDcGzgwEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM2MTVlYmQtNWMyOC00MzM0LThkMmMtZWMzMTU4YWZk YzhjLzAvRDdEODM4REVEODcxNzc0RDJFODc1QzlDQjk5QjgxMERDMUIzODMwMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9EN0Q4MzhERUQ4NzE3NzREMkU4NzVDOUNC OTlCODEwREMxQjM4MzAxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYzYxNWViZC01YzI4LTQzMzQtOGQyYy1lYzMxNThhZmRjOGMvMC8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYxMzUzMTM0M2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcCKgpgRKUUMA0GCSqGSIb3DQEBCwUAA4IBAQCE xVbEhzrlAbEZhQo6NU6RhiJ2Ns/hJJnXX9ZoTW3kgBk5h9DMDaLLCvxrsZtbvvNw oMWwKbVB8vc6Lz04NAVbQhqwz+PtJX6AIhTfUyU+vg1Tyvrl8zyytB5Oky9uuawV H6amPF54FF1f04brzO+j5sh9kBbxxLayVwZMKDGyzt2r+0PyWDNqOIiJ9bLGz8Qx 0zBDQk0rcZ+oP+uXL+ewYsl71vBEzYHo/53G4HLMYCKWhZ/od1kPpZv9pFsoGJxZ mBdOL7xq5vltdbBfQw4v9OBjBsGc1R3YrX1ISjvh84YxD0HSUifAjStkTbCGx5iL oXOJ7FnD+xtMvu0BZ4aY -----END CERTIFICATE-----Generated at Sat Jun 1 19:28:59 2024 by rpki-client on console-fra.rpki-client.org