$ rpki-client -vvf repo.rpki.space/repo/Netiface/2/326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa File: 326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa (raw, json) Hash identifier: 6hK9q77m3cXn1f2v739O4COK8hlFw46UVQfmstfEaGI= Subject key identifier: 5D:CD:A2:7A:09:1F:4E:F2:76:76:81:47:BA:38:7F:C3:69:72:2D:10 Certificate issuer: /CN=67D62A55D09A0E54797A7BAD5C400454D5529546 Certificate serial: 4CF3E706DFF58EB1C7DD4501E81ABE5662A90BBE Authority key identifier: 67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46 Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer Subject info access: rsync://repo.rpki.space/repo/Netiface/2/326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa Signing time: Wed 30 Apr 2025 14:19:21 +0000 ROA not before: Wed 30 Apr 2025 14:14:21 +0000 ROA not after: Wed 29 Apr 2026 14:19:21 +0000 asID: 60223 IP address blocks: 2a14:7c0:3900::/40 maxlen: 40 Validation: OK Signature path: rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.crl rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 08:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f3:e7:06:df:f5:8e:b1:c7:dd:45:01:e8:1a:be:56:62:a9:0b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67D62A55D09A0E54797A7BAD5C400454D5529546 Validity Not Before: Apr 30 14:14:21 2025 GMT Not After : Apr 29 14:19:21 2026 GMT Subject: CN=5DCDA27A091F4EF276768147BA387FC369722D10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:21:82:85:8c:0c:bc:58:e4:e1:90:57:18:f3: ff:61:b3:02:e8:e3:87:55:aa:20:23:50:77:c3:24: fe:05:94:d8:7b:15:1a:14:e5:46:4d:f2:b2:78:29: b9:e1:38:01:34:b1:bd:24:80:c5:e4:77:f7:c2:6b: 34:75:12:e4:f3:18:9e:59:05:20:c1:17:1d:f6:1a: 5c:39:30:6f:64:1a:0c:06:f4:df:3e:f9:ef:c5:ef: 84:c1:f7:f3:52:54:46:80:5d:79:2b:92:8f:7d:aa: af:95:43:99:22:e1:c9:22:21:10:10:d3:52:33:8b: 90:31:39:5b:3e:45:32:4c:22:15:fd:99:30:a2:88: d9:50:64:13:bd:72:58:d3:79:fd:17:e7:12:4f:cb: 77:69:9b:cc:28:76:fb:33:4f:64:4e:29:58:61:1c: 6f:a6:fb:d0:ce:05:34:61:53:30:fd:e3:9a:f4:ed: 58:be:26:37:54:f1:6c:12:e2:9a:d4:e2:5b:c3:77: 62:74:5a:3e:45:50:5d:49:42:b0:59:75:10:15:2b: f1:d2:1f:27:7d:60:e1:b5:11:7f:97:b6:42:d2:03: 8d:d6:7e:8e:dc:37:6f:9c:5d:aa:29:4d:97:12:b7: 3d:1d:f4:6f:bf:c8:c6:a4:a0:bc:fb:ba:27:74:c1: ab:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CD:A2:7A:09:1F:4E:F2:76:76:81:47:BA:38:7F:C3:69:72:2D:10 X509v3 Authority Key Identifier: keyid:67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/2/326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7c0:3900::/40 Signature Algorithm: sha256WithRSAEncryption ac:10:67:47:e8:6e:fb:f1:e4:ce:61:fe:cc:0b:6e:3e:45:94: 82:ca:55:aa:d4:0a:2c:54:97:70:f9:1c:64:96:d0:70:13:72: c6:4e:d8:0e:5e:51:54:29:c1:ef:28:8e:2f:3e:00:ea:dd:83: 10:59:6a:d0:97:5b:3d:d4:8c:b8:64:c8:71:e5:16:7a:a1:83: 05:a9:f0:d8:b9:33:a9:6a:d6:6f:09:e2:01:6a:f5:c9:60:2e: 70:d0:81:f0:e1:70:6d:72:6f:cd:fe:88:b2:f3:03:eb:e8:96: 9d:62:33:8a:2c:f2:04:ac:59:30:a4:4d:47:f2:55:d6:88:a9: 1d:a9:24:7d:06:c7:67:73:48:60:b0:94:c7:3a:27:39:00:a5: d8:c5:14:c3:89:44:bf:c1:74:6b:f8:8c:e0:e2:54:16:64:56: 1c:8d:d1:e1:5a:ec:48:e1:c2:1b:a6:d1:66:d5:bb:42:3c:03: 7d:f8:7b:10:5a:6c:ef:bd:60:33:79:40:55:02:f2:b5:eb:96: fd:a0:6f:41:ae:c8:df:e5:4b:5f:cb:17:d0:cc:c8:20:38:d6: 79:50:9c:67:f6:f4:88:fa:f9:0c:6a:55:29:e7:c4:e2:36:b1: 5e:3d:17:b1:97:7c:6e:f1:61:65:0c:14:96:54:cf:08:8d:9f: f3:88:03:cc -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUTPPnBt/1jrHH3UUB6Bq+VmKpC74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdENjJBNTVEMDlBMEU1NDc5N0E3QkFENUM0MDA0NTRE NTUyOTU0NjAeFw0yNTA0MzAxNDE0MjFaFw0yNjA0MjkxNDE5MjFaMDMxMTAvBgNV BAMTKDVEQ0RBMjdBMDkxRjRFRjI3Njc2ODE0N0JBMzg3RkMzNjk3MjJEMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUIYKFjAy8WOThkFcY8/9hswLo 44dVqiAjUHfDJP4FlNh7FRoU5UZN8rJ4KbnhOAE0sb0kgMXkd/fCazR1EuTzGJ5Z BSDBFx32Glw5MG9kGgwG9N8++e/F74TB9/NSVEaAXXkrko99qq+VQ5ki4ckiIRAQ 01Izi5AxOVs+RTJMIhX9mTCiiNlQZBO9cljTef0X5xJPy3dpm8wodvszT2ROKVhh HG+m+9DOBTRhUzD945r07Vi+JjdU8WwS4prU4lvDd2J0Wj5FUF1JQrBZdRAVK/HS Hyd9YOG1EX+XtkLSA43Wfo7cN2+cXaopTZcStz0d9G+/yMakoLz7uid0watpAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUXc2iegkfTvJ2doFHujh/w2lyLRAwHwYDVR0j BBgwFoAUZ9YqVdCaDlR5enutXEAEVNVSlUYwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vTmV0aWZh Y2UvMi82N0Q2MkE1NUQwOUEwRTU0Nzk3QTdCQUQ1QzQwMDQ1NEQ1NTI5NTQ2LmNy bDBzBggrBgEFBQcBAQRnMGUwYwYIKwYBBQUHMAKGV3JzeW5jOi8vcmVwby5ycGtp LnNwYWNlL3JlcG8vSW5maW5pcm91dGUvMS82N0Q2MkE1NUQwOUEwRTU0Nzk3QTdC QUQ1QzQwMDQ1NEQ1NTI5NTQ2LmNlcjCBhAYIKwYBBQUHAQsEeDB2MHQGCCsGAQUF BzALhmhyc3luYzovL3JlcG8ucnBraS5zcGFjZS9yZXBvL05ldGlmYWNlLzIvMzI2 MTMxMzQzYTM3NjMzMDNhMzMzOTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAz NjMwMzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhQHwDkwDQYJKoZIhvcNAQELBQADggEBAKwQ Z0fobvvx5M5h/swLbj5FlILKVarUCixUl3D5HGSW0HATcsZO2A5eUVQpwe8oji8+ AOrdgxBZatCXWz3UjLhkyHHlFnqhgwWp8Ni5M6lq1m8J4gFq9clgLnDQgfDhcG1y b83+iLLzA+volp1iM4os8gSsWTCkTUfyVdaIqR2pJH0Gx2dzSGCwlMc6JzkApdjF FMOJRL/BdGv4jODiVBZkVhyN0eFa7Ejhwhum0WbVu0I8A334exBabO+9YDN5QFUC 8rXrlv2gb0GuyN/lS1/LF9DMyCA41nlQnGf29Ij6+QxqVSnnxOI2sV49F7GXfG7x YWUMFJZUzwiNn/OIA8w= -----END CERTIFICATE-----Generated at Tue May 6 21:23:23 2025 by rpki-client