$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663330303a3a2f34302d3430203d3e20323135343730.roa File: 326131343a373538303a663330303a3a2f34302d3430203d3e20323135343730.roa (raw, json) Hash identifier: NYjufeU5nji5tNLR9669xX3/zAC6IxnZWFE8KHjLm6Y= Subject key identifier: 56:71:08:11:82:5B:DB:B9:EF:3B:F9:32:25:36:A0:F9:12:79:41:05 Certificate issuer: /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Certificate serial: 4F9BD2E4A5553106776A72BD80508A6E3D207FAF Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663330303a3a2f34302d3430203d3e20323135343730.roa Signing time: Thu 27 Feb 2025 06:14:48 +0000 ROA not before: Thu 27 Feb 2025 06:09:48 +0000 ROA not after: Thu 26 Feb 2026 06:14:48 +0000 asID: 215470 IP address blocks: 2a14:7580:f300::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9b:d2:e4:a5:55:31:06:77:6a:72:bd:80:50:8a:6e:3d:20:7f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Validity Not Before: Feb 27 06:09:48 2025 GMT Not After : Feb 26 06:14:48 2026 GMT Subject: CN=56710811825BDBB9EF3BF9322536A0F912794105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:82:9c:2e:bc:50:79:0a:61:33:16:4d:f7: 05:dc:f5:ea:c5:7f:1a:63:83:b4:4e:93:90:d8:97: 3e:92:d2:a3:33:48:50:3a:e7:f3:4a:79:1c:9f:e3: 99:0b:9f:10:40:66:80:57:52:a5:63:ef:56:5c:23: 81:b0:0f:ae:37:ee:f1:06:df:b9:5f:3c:ee:a4:79: 5e:4b:05:4b:f5:95:d2:88:ba:13:61:92:3f:2f:1e: 4a:6a:30:94:90:d8:03:29:42:6f:97:6d:2f:7b:9e: ca:86:f8:ce:c3:37:82:ae:e6:10:d8:d8:ca:d7:58: ab:df:28:82:a8:04:3d:09:b7:b0:9d:13:09:eb:33: fe:ad:15:2e:62:81:ac:1e:d8:b1:32:70:fa:cb:f5: ff:4d:8d:90:7c:ab:04:42:1d:bd:cb:9d:1a:46:03: 9e:30:c6:af:e5:55:8a:84:e8:15:b7:89:35:e7:99: 9e:f4:b6:b8:77:64:db:b1:c6:c1:81:9d:2d:c2:2f: f0:ea:a7:92:f3:24:55:f7:91:8b:03:df:11:67:81: 39:de:08:dc:e0:29:c3:77:3a:e1:37:21:d8:70:41: 0a:24:a4:40:f6:32:09:fe:14:49:d1:99:48:8f:a5: 1f:6f:c0:91:53:4c:d0:75:77:05:8c:e1:2b:7e:dc: 95:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:71:08:11:82:5B:DB:B9:EF:3B:F9:32:25:36:A0:F9:12:79:41:05 X509v3 Authority Key Identifier: keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663330303a3a2f34302d3430203d3e20323135343730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:f300::/40 Signature Algorithm: sha256WithRSAEncryption 0f:30:49:a6:ee:77:a3:7b:41:22:a5:07:ab:e7:d7:f4:65:bd: a3:4c:a7:f0:23:ce:92:08:3d:45:7e:6f:50:9a:0a:24:75:b9: 25:ff:8b:82:ba:3a:0c:71:59:24:06:35:05:34:e6:5d:94:27: d0:88:bb:5e:c2:2e:ab:fe:92:c2:5f:b6:91:e6:83:a3:f1:ed: 2e:6d:63:9a:11:a2:84:43:2b:6c:eb:9a:4d:76:1f:6a:16:e0: 14:2c:bf:d7:d6:d5:d8:a0:25:ec:48:10:f4:8c:42:3f:6c:7f: 53:30:54:61:fb:de:99:1d:dc:99:07:01:be:35:c3:83:fa:bc: dd:9d:59:66:61:45:28:ff:22:e4:e3:08:1c:9f:5e:3d:cc:20: 10:e0:46:9c:63:89:06:33:15:89:4f:f8:21:92:3d:46:91:53: 4b:04:0b:71:10:d8:f7:67:72:ea:91:38:83:5d:dc:34:56:ba: 4c:e3:35:13:72:72:9b:33:1a:7b:63:72:f0:0a:9f:a3:ac:64: 40:ca:9c:fa:5a:35:c0:51:0e:35:ae:79:95:f6:e6:06:ef:22: d0:df:d1:87:62:b2:c0:5a:67:a8:b1:24:08:83:18:72:14:d1: 00:27:e0:27:27:94:33:11:4a:33:83:f6:05:4d:12:36:95:a8: e1:f9:87:5f -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUT5vS5KVVMQZ3anK9gFCKbj0gf68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENG OTM5RjRGNDAeFw0yNTAyMjcwNjA5NDhaFw0yNjAyMjYwNjE0NDhaMDMxMTAvBgNV BAMTKDU2NzEwODExODI1QkRCQjlFRjNCRjkzMjI1MzZBMEY5MTI3OTQxMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxb4KcLrxQeQphMxZN9wXc9erF fxpjg7ROk5DYlz6S0qMzSFA65/NKeRyf45kLnxBAZoBXUqVj71ZcI4GwD6437vEG 37lfPO6keV5LBUv1ldKIuhNhkj8vHkpqMJSQ2AMpQm+XbS97nsqG+M7DN4Ku5hDY 2MrXWKvfKIKoBD0Jt7CdEwnrM/6tFS5igawe2LEycPrL9f9NjZB8qwRCHb3LnRpG A54wxq/lVYqE6BW3iTXnmZ70trh3ZNuxxsGBnS3CL/Dqp5LzJFX3kYsD3xFngTne CNzgKcN3OuE3IdhwQQokpED2Mgn+FEnRmUiPpR9vwJFTTNB1dwWM4St+3JWFAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUVnEIEYJb27nvO/kyJTag+RJ5QQUwHwYDVR0j BBgwFoAU9ABy/9wPGxWmnlvHmi9YjPk59PQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzAvRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNDAwNzJGRkRDMEYxQjE1QTY5RTVCQzc5 QTJGNTg4Q0Y5MzlGNEY0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xOWFhOWRhNy1mMWU0LTRkOTgtYmY5NS05ZmRmY2Y0NDhmNzcvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2MzMzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz MTM1MzQzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gPMwDQYJKoZIhvcNAQELBQADggEBAA8w Sabud6N7QSKlB6vn1/RlvaNMp/AjzpIIPUV+b1CaCiR1uSX/i4K6OgxxWSQGNQU0 5l2UJ9CIu17CLqv+ksJftpHmg6Px7S5tY5oRooRDK2zrmk12H2oW4BQsv9fW1dig JexIEPSMQj9sf1MwVGH73pkd3JkHAb41w4P6vN2dWWZhRSj/IuTjCByfXj3MIBDg RpxjiQYzFYlP+CGSPUaRU0sEC3EQ2PdncuqROINd3DRWukzjNRNycpszGntjcvAK n6OsZEDKnPpaNcBRDjWueZX25gbvItDf0YdissBaZ6ixJAiDGHIU0QAn4CcnlDMR SjOD9gVNEjaVqOH5h18= -----END CERTIFICATE-----Generated at Sun Jun 29 19:22:31 2025 by rpki-client