$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa File: 326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa (raw, json) Hash identifier: 7YCpwymksWPwg5ziGzmWS9FgFbgvTAl7aySk1Jpj/x4= Subject key identifier: BC:82:32:D3:CA:99:A6:2D:77:AE:82:34:86:73:F9:9F:EA:F1:5E:66 Certificate issuer: /CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E Certificate serial: 16932056ED26FD570F676B9412F03A17A3E6FBEA Authority key identifier: DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa Signing time: Tue 18 Mar 2025 16:43:18 +0000 ROA not before: Tue 18 Mar 2025 16:38:18 +0000 ROA not after: Tue 17 Mar 2026 16:43:18 +0000 asID: 199763 IP address blocks: 2a0a:6044:bcff::/48 maxlen: 64 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.crl rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:93:20:56:ed:26:fd:57:0f:67:6b:94:12:f0:3a:17:a3:e6:fb:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E Validity Not Before: Mar 18 16:38:18 2025 GMT Not After : Mar 17 16:43:18 2026 GMT Subject: CN=BC8232D3CA99A62D77AE82348673F99FEAF15E66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:0e:78:17:db:0d:76:95:85:c6:56:2b:2b: 50:de:56:5d:1c:04:9a:90:2e:fa:28:50:3b:6c:fc: 97:36:8a:94:e1:bc:18:3f:36:2a:db:c0:85:ba:b5: f9:75:2a:27:e8:ee:b8:93:95:9f:13:20:9a:f0:46: f4:c0:eb:66:63:a3:1e:44:e8:84:d4:a6:d7:05:a9: 66:28:64:5e:8d:66:eb:93:55:2f:52:59:36:3a:7d: e4:30:a3:29:b8:9a:f1:9d:8e:89:b6:88:c5:ca:23: 0b:2a:50:4e:7f:00:71:04:8e:ad:fc:70:7b:b7:85: 61:b9:6d:01:22:a3:2b:64:6e:e8:33:e6:78:e9:f8: 55:ed:d1:9c:86:f9:53:11:97:25:5d:f3:a9:8e:39: db:9c:5f:51:a6:4d:3b:d3:60:18:64:68:72:df:cc: 13:b5:79:6c:b9:27:46:65:ab:c5:4a:f2:5c:d2:6f: 48:2e:c3:18:68:3d:10:90:a4:0b:7b:ee:d1:ed:be: c0:88:bb:bf:b0:23:25:c5:b6:4a:6b:c0:4a:be:d7: cc:16:45:fe:cf:1d:3c:48:5a:5c:6d:40:da:b5:f4: 9c:47:56:c0:15:6f:64:c7:ba:67:f5:e7:d0:5c:b5: 37:47:fa:9a:71:99:bf:ac:61:08:6f:06:f9:4f:e0: 48:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:82:32:D3:CA:99:A6:2D:77:AE:82:34:86:73:F9:9F:EA:F1:5E:66 X509v3 Authority Key Identifier: keyid:DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:bcff::/48 Signature Algorithm: sha256WithRSAEncryption 80:5d:84:1c:d2:0e:49:df:ea:68:ed:fa:ab:79:21:5a:d9:62: 9b:18:ef:1c:84:a7:5f:93:93:b8:d7:b6:f1:19:13:79:35:30: 24:d1:6e:c1:f9:b5:cc:c1:84:12:d8:a0:29:60:d8:51:1b:dc: a2:4d:bf:8c:bd:36:7c:c8:0c:d9:7d:78:ef:02:03:0a:e0:10: be:1a:57:39:2a:42:fd:89:d2:c3:cf:ed:4b:c1:97:13:f6:94: a9:ed:b0:07:b2:44:f0:d7:ed:65:70:a1:14:05:76:d2:8c:f3: 5b:c0:66:1e:12:b5:77:7e:44:a2:65:94:30:2e:c0:96:ff:0e: 33:2c:ed:13:fd:45:b4:30:ad:d5:37:38:59:b7:c4:e1:23:62: ca:f8:2a:9c:58:6e:0c:f4:7d:5f:7d:0c:8e:70:c7:ad:00:76: cf:ca:24:d2:13:43:95:d5:b0:47:b1:db:68:8e:89:44:49:43: 67:0e:c2:d9:b3:fb:fc:67:f6:79:62:1b:06:7b:f7:65:9c:ef: b5:26:20:be:dc:22:e6:10:19:86:64:93:7e:27:ef:83:4c:6f: 3f:75:5f:94:28:78:46:80:4d:d5:8e:0d:61:98:73:91:3e:e6: 25:cc:39:6d:a7:1d:a8:a2:f1:f4:3e:da:f3:2b:2c:6e:4d:59: fc:f3:52:cc -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUFpMgVu0m/VcPZ2uUEvA6F6Pm++owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4Q0IzNTgxMkNBMUZBM0ExQkQ2RDM4NjkzODUwNzI3 OTNFQzUwRTAeFw0yNTAzMTgxNjM4MThaFw0yNjAzMTcxNjQzMThaMDMxMTAvBgNV BAMTKEJDODIzMkQzQ0E5OUE2MkQ3N0FFODIzNDg2NzNGOTlGRUFGMTVFNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8A54F9sNdpWFxlYrK1DeVl0c BJqQLvooUDts/Jc2ipThvBg/NirbwIW6tfl1Kifo7riTlZ8TIJrwRvTA62Zjox5E 6ITUptcFqWYoZF6NZuuTVS9SWTY6feQwoym4mvGdjom2iMXKIwsqUE5/AHEEjq38 cHu3hWG5bQEioytkbugz5njp+FXt0ZyG+VMRlyVd86mOOducX1GmTTvTYBhkaHLf zBO1eWy5J0Zlq8VK8lzSb0guwxhoPRCQpAt77tHtvsCIu7+wIyXFtkprwEq+18wW Rf7PHTxIWlxtQNq19JxHVsAVb2THumf159BctTdH+ppxmb+sYQhvBvlP4EiTAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUvIIy08qZpi13roI0hnP5n+rxXmYwHwYDVR0j BBgwFoAU2oyzWBLKH6OhvW04aThQcnk+xQ4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM4ZDE5ZDAtZDIyMS00NDQ4LTgxMWEtMGUxNjExYTQ2 NDQyLzEvREE4Q0IzNTgxMkNBMUZBM0ExQkQ2RDM4NjkzODUwNzI3OTNFQzUwRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9EQThDQjM1ODEyQ0ExRkEzQTFCRDZEMzg2 OTM4NTA3Mjc5M0VDNTBFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYzhkMTlkMC1kMjIxLTQ0NDgtODExYS0wZTE2MTFhNDY0NDIvMS8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYyNjM2NjY2M2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzEz OTM5MzczNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRLz/MA0GCSqGSIb3DQEBCwUAA4IBAQCA XYQc0g5J3+po7fqreSFa2WKbGO8chKdfk5O417bxGRN5NTAk0W7B+bXMwYQS2KAp YNhRG9yiTb+MvTZ8yAzZfXjvAgMK4BC+Glc5KkL9idLDz+1LwZcT9pSp7bAHskTw 1+1lcKEUBXbSjPNbwGYeErV3fkSiZZQwLsCW/w4zLO0T/UW0MK3VNzhZt8ThI2LK +CqcWG4M9H1ffQyOcMetAHbPyiTSE0OV1bBHsdtojolESUNnDsLZs/v8Z/Z5YhsG e/dlnO+1JiC+3CLmEBmGZJN+J++DTG8/dV+UKHhGgE3Vjg1hmHORPuYlzDltpx2o ovH0PtrzKyxuTVn881LM -----END CERTIFICATE-----Generated at Sat Apr 5 04:41:07 2025 by rpki-client