$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa File: 326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa (raw, json) Hash identifier: d85Du7DNvyLWzCRKR6UAK4BxtZR8aY0O/ltb7NM7kI0= Subject key identifier: C9:4A:89:5A:75:33:A2:1B:E5:8A:E6:60:24:5D:76:9E:37:0A:93:09 Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Certificate serial: 603E7DB44A039D71A8C9345311786E701AA0DF22 Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa Signing time: Sat 08 Mar 2025 15:48:59 +0000 ROA not before: Sat 08 Mar 2025 15:43:59 +0000 ROA not after: Sat 07 Mar 2026 15:48:59 +0000 asID: 199310 IP address blocks: 2a14:7580:d10::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 13:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:3e:7d:b4:4a:03:9d:71:a8:c9:34:53:11:78:6e:70:1a:a0:df:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Validity Not Before: Mar 8 15:43:59 2025 GMT Not After : Mar 7 15:48:59 2026 GMT Subject: CN=C94A895A7533A21BE58AE660245D769E370A9309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d4:1e:93:1a:15:b0:a3:25:06:45:38:a6:6f: f6:cb:4f:bd:a8:ef:90:a1:e9:b6:de:6c:11:24:06: 50:64:5c:81:ba:ea:1d:6e:d6:09:2f:c7:2d:68:1e: 7a:9f:23:ac:e5:23:87:ea:c4:59:93:8d:93:fd:f7: bd:85:7f:a8:e7:1a:75:21:bd:6e:c2:8d:d0:8f:42: 0b:c5:52:08:30:68:0e:22:b2:c4:7c:8c:5b:e0:91: d4:c1:d9:2f:eb:70:97:0b:66:d7:91:16:41:dd:8f: 13:29:c2:70:64:14:c9:82:e1:a2:20:ae:c8:19:ca: e8:5b:cf:cc:c4:01:87:6c:29:48:7d:a0:ce:93:49: 80:a4:8e:48:b7:db:ef:d1:ef:b1:11:ec:fb:0e:0f: 15:4d:bc:35:a3:f1:f1:75:c5:18:6a:e3:9e:c0:8d: e8:c9:55:e6:48:da:64:35:60:55:fa:e2:3b:b1:80: 16:23:d7:52:f8:b8:1a:6a:9f:be:ba:f8:19:ed:78: 00:37:c9:a4:eb:e5:d6:d9:b3:a1:49:74:37:2f:0b: 7c:40:3f:90:fc:37:c3:67:34:ea:68:f9:40:51:26: b9:20:1b:f3:fb:28:78:b8:2a:3f:13:38:65:2d:f7: 56:a6:58:7b:92:b5:7c:96:e8:34:17:55:ff:6c:b9: e2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4A:89:5A:75:33:A2:1B:E5:8A:E6:60:24:5D:76:9E:37:0A:93:09 X509v3 Authority Key Identifier: keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:d10::/44 Signature Algorithm: sha256WithRSAEncryption 3f:22:31:a1:12:48:aa:1f:4c:e1:c1:cb:d0:19:59:26:18:99: 68:d9:e9:08:67:50:31:90:49:8d:f3:7e:b0:a7:56:02:b6:db: 2f:aa:3f:11:f8:2d:c0:5b:61:e0:27:14:d5:62:c8:e3:92:89: 7d:36:17:38:a9:e8:d5:25:26:af:c4:65:61:c5:02:4a:3c:d1: 89:1b:bc:85:ef:12:d1:7c:c7:3f:e0:d2:c4:3d:58:6d:92:2d: d1:a7:ba:76:e5:df:65:50:36:81:f3:ee:8b:c2:87:ff:1d:d2: 6f:71:de:bc:b3:b7:d5:71:ee:eb:49:81:c4:86:ba:d7:a6:eb: d5:db:f3:9e:2f:86:25:07:96:c8:58:95:3f:78:9f:d1:9a:91: 34:83:aa:ef:b4:aa:48:4e:ba:1f:be:09:22:85:a4:0f:00:b5: 12:59:ea:fb:4f:f4:41:30:05:9a:11:ec:3a:6f:32:52:2d:96: eb:b1:38:3c:0a:4f:34:ee:3a:e3:c5:ea:c9:0b:2b:f1:62:88: 85:fe:15:79:d8:c7:ec:b3:44:b8:68:b9:4e:37:7e:7a:b0:f0: ce:5c:33:c6:e5:c1:ba:2f:ca:b7:31:44:24:44:cc:ec:0c:b2: 09:37:e9:72:a5:f1:dd:cf:c2:5c:bb:f2:70:77:98:93:63:dd: 43:6d:28:1f -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUYD59tEoDnXGoyTRTEXhucBqg3yIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUw RjgxOTZFQjAeFw0yNTAzMDgxNTQzNTlaFw0yNjAzMDcxNTQ4NTlaMDMxMTAvBgNV BAMTKEM5NEE4OTVBNzUzM0EyMUJFNThBRTY2MDI0NUQ3NjlFMzcwQTkzMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN1B6TGhWwoyUGRTimb/bLT72o 75Ch6bbebBEkBlBkXIG66h1u1gkvxy1oHnqfI6zlI4fqxFmTjZP9972Ff6jnGnUh vW7CjdCPQgvFUggwaA4issR8jFvgkdTB2S/rcJcLZteRFkHdjxMpwnBkFMmC4aIg rsgZyuhbz8zEAYdsKUh9oM6TSYCkjki32+/R77ER7PsODxVNvDWj8fF1xRhq457A jejJVeZI2mQ1YFX64juxgBYj11L4uBpqn766+BnteAA3yaTr5dbZs6FJdDcvC3xA P5D8N8NnNOpo+UBRJrkgG/P7KHi4Kj8TOGUt91amWHuStXyW6DQXVf9sueI5AgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUyUqJWnUzohvliuZgJF12njcKkwkwHwYDVR0j BBgwFoAUE+GpmPd9fB/ylVwLaI/r/g+BluswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFm YWIyLzEvMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUwRjgxOTZFQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2 ODhGRUJGRTBGODE5NkVCLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMTU3NjQ3Yy05MWQ2LTRhMDQtOGE5MS1kMTUzODVkMWZhYjIvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY0MzEzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMxMzkz OTMzMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHBCoUdYANEDANBgkqhkiG9w0BAQsFAAOCAQEAPyIx oRJIqh9M4cHL0BlZJhiZaNnpCGdQMZBJjfN+sKdWArbbL6o/EfgtwFth4CcU1WLI 45KJfTYXOKno1SUmr8RlYcUCSjzRiRu8he8S0XzHP+DSxD1YbZIt0ae6duXfZVA2 gfPui8KH/x3Sb3HevLO31XHu60mBxIa616br1dvzni+GJQeWyFiVP3if0ZqRNIOq 77SqSE66H74JIoWkDwC1Elnq+0/0QTAFmhHsOm8yUi2W67E4PApPNO4648XqyQsr 8WKIhf4VedjH7LNEuGi5Tjd+erDwzlwzxuXBui/KtzFEJETM7AyyCTfpcqXx3c/C XLvycHeYk2PdQ20oHw== -----END CERTIFICATE-----Generated at Thu May 8 02:28:26 2025 by rpki-client