$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa File: 326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa (raw, json) Hash identifier: aLNGjeKxhB+lb52UO94MmUGLP8+twH+NGpyj/wZMn3g= Subject key identifier: 62:82:50:6E:F9:D4:74:42:B8:BB:51:B4:0F:D1:70:E8:30:43:ED:A8 Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Certificate serial: 5B9CD6B9E00A12040177B1F9CB437E970F788C92 Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa Signing time: Sat 08 Mar 2025 15:49:24 +0000 ROA not before: Sat 08 Mar 2025 15:44:24 +0000 ROA not after: Sat 07 Mar 2026 15:49:24 +0000 asID: 199310 IP address blocks: 2a14:7580:d00::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9c:d6:b9:e0:0a:12:04:01:77:b1:f9:cb:43:7e:97:0f:78:8c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Validity Not Before: Mar 8 15:44:24 2025 GMT Not After : Mar 7 15:49:24 2026 GMT Subject: CN=6282506EF9D47442B8BB51B40FD170E83043EDA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f9:3a:60:61:2d:ee:c4:26:7a:a7:b0:23:ae: e5:f6:2b:0e:73:72:38:39:c5:59:83:e3:42:4b:9e: be:76:aa:14:44:13:a2:48:6b:2e:4d:a5:56:4d:d6: 32:ff:d1:0d:8f:b9:1b:e8:37:09:ed:9e:3c:ef:4a: ce:21:48:d2:76:16:63:cb:c2:da:1f:72:b6:63:92: 4f:a5:05:d5:ea:af:fa:48:3d:03:5d:94:3f:a4:1a: 2e:d7:8b:7c:4f:fa:78:0b:40:74:64:31:f5:ed:0d: 1f:74:df:b3:a1:ce:4e:6f:49:3f:0e:09:2a:a3:6f: 29:34:36:03:d0:54:1a:a4:aa:34:5b:8a:f4:ea:42: 79:a0:29:40:f8:a5:d3:59:4c:06:03:6c:2b:b8:70: 8d:8b:4f:a6:56:0f:0d:26:5b:32:26:51:b5:f0:a5: 71:74:8c:cb:31:08:67:56:0e:f6:28:5d:c7:91:5c: dc:44:2d:e4:8a:dd:25:ab:bc:74:3b:db:f7:a3:cd: 04:6c:9b:f6:12:61:38:36:b0:b6:82:f6:45:dd:86: 2c:e8:3b:2c:3e:f6:ac:b2:60:2b:59:9b:db:0a:0b: c5:86:a1:7e:64:d8:f8:d8:50:0e:e0:dd:f2:9f:cb: b8:a6:69:04:dd:ad:fe:71:d0:05:b8:17:b2:a7:8e: ed:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:82:50:6E:F9:D4:74:42:B8:BB:51:B4:0F:D1:70:E8:30:43:ED:A8 X509v3 Authority Key Identifier: keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:d00::/44 Signature Algorithm: sha256WithRSAEncryption 2c:98:6d:3f:3d:5b:3b:72:89:a7:57:58:44:9b:d2:7c:6b:a6: df:90:e4:d8:c3:65:62:a7:a1:11:23:f1:12:7b:0e:b0:99:fe: fb:3e:a5:2f:29:8e:cf:b0:62:41:a9:b4:5a:38:02:d0:55:7d: ef:c0:fc:10:c0:1a:69:23:df:6b:3b:d1:83:b3:cf:5d:54:83: 94:a4:19:03:7e:05:77:d6:18:a6:0a:a4:90:cd:2a:11:bb:23: db:04:6b:a2:02:16:d4:f5:10:1c:0c:59:90:6d:da:d2:88:52: f4:1a:31:ab:9b:3c:ab:c2:cc:cf:db:cd:4a:d7:81:8f:bb:63: 20:e7:0f:ab:d2:15:67:6c:9d:1f:2d:f1:ce:e3:44:16:8e:27: 5b:c7:ff:a2:d9:a7:c1:08:7a:78:07:ca:34:d2:b0:f3:6a:6d: f1:41:0b:5f:bb:f1:13:9c:c0:db:a0:22:26:a7:f2:f6:cb:e6: 40:af:b5:72:0f:82:f4:1d:ba:49:39:de:1b:6b:4b:a4:fc:e1: 3b:0c:d5:f6:da:d3:27:87:50:fd:04:cf:59:2d:c5:b8:75:4c: 51:8c:67:02:93:fd:08:19:f5:ff:d4:f9:21:07:19:83:fd:36: 98:5f:43:bd:f7:a3:88:aa:7e:83:64:e8:0f:5b:22:7c:b3:23: 41:a6:51:86 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUW5zWueAKEgQBd7H5y0N+lw94jJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUw RjgxOTZFQjAeFw0yNTAzMDgxNTQ0MjRaFw0yNjAzMDcxNTQ5MjRaMDMxMTAvBgNV BAMTKDYyODI1MDZFRjlENDc0NDJCOEJCNTFCNDBGRDE3MEU4MzA0M0VEQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb+TpgYS3uxCZ6p7AjruX2Kw5z cjg5xVmD40JLnr52qhREE6JIay5NpVZN1jL/0Q2PuRvoNwntnjzvSs4hSNJ2FmPL wtofcrZjkk+lBdXqr/pIPQNdlD+kGi7Xi3xP+ngLQHRkMfXtDR9037Ohzk5vST8O CSqjbyk0NgPQVBqkqjRbivTqQnmgKUD4pdNZTAYDbCu4cI2LT6ZWDw0mWzImUbXw pXF0jMsxCGdWDvYoXceRXNxELeSK3SWrvHQ72/ejzQRsm/YSYTg2sLaC9kXdhizo Oyw+9qyyYCtZm9sKC8WGoX5k2PjYUA7g3fKfy7imaQTdrf5x0AW4F7Knju0PAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUYoJQbvnUdEK4u1G0D9Fw6DBD7agwHwYDVR0j BBgwFoAUE+GpmPd9fB/ylVwLaI/r/g+BluswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFm YWIyLzEvMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUwRjgxOTZFQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2 ODhGRUJGRTBGODE5NkVCLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMTU3NjQ3Yy05MWQ2LTRhMDQtOGE5MS1kMTUzODVkMWZhYjIvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY0MzAzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMxMzkz OTMzMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHBCoUdYANADANBgkqhkiG9w0BAQsFAAOCAQEALJht Pz1bO3KJp1dYRJvSfGum35Dk2MNlYqehESPxEnsOsJn++z6lLymOz7BiQam0WjgC 0FV978D8EMAaaSPfazvRg7PPXVSDlKQZA34Fd9YYpgqkkM0qEbsj2wRrogIW1PUQ HAxZkG3a0ohS9Boxq5s8q8LMz9vNSteBj7tjIOcPq9IVZ2ydHy3xzuNEFo4nW8f/ otmnwQh6eAfKNNKw82pt8UELX7vxE5zA26AiJqfy9svmQK+1cg+C9B26STneG2tL pPzhOwzV9trTJ4dQ/QTPWS3FuHVMUYxnApP9CBn1/9T5IQcZg/02mF9DvfejiKp+ g2ToD1sifLMjQaZRhg== -----END CERTIFICATE-----Generated at Wed May 7 08:29:59 2025 by rpki-client