$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030373a3a2f34382d3438203d3e20323135333634.roa File: 326131343a373538313a313030373a3a2f34382d3438203d3e20323135333634.roa (raw, json) Hash identifier: wqeE5nh7JbnsQnlIfSuErABB8uVketpTJgfWTfxeIvg= Subject key identifier: D3:5A:83:E0:C2:15:8F:56:75:7D:9E:5A:82:EE:4D:E3:3B:08:60:3D Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 687D7F978CDDB264E42AD4C9BBD25BD36C084849 Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030373a3a2f34382d3438203d3e20323135333634.roa Signing time: Wed 05 Mar 2025 16:02:18 +0000 ROA not before: Wed 05 Mar 2025 15:57:18 +0000 ROA not after: Wed 04 Mar 2026 16:02:18 +0000 asID: 215364 IP address blocks: 2a14:7581:1007::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 13:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7d:7f:97:8c:dd:b2:64:e4:2a:d4:c9:bb:d2:5b:d3:6c:08:48:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Mar 5 15:57:18 2025 GMT Not After : Mar 4 16:02:18 2026 GMT Subject: CN=D35A83E0C2158F56757D9E5A82EE4DE33B08603D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:64:27:62:cc:32:aa:30:76:85:aa:ed:af: d0:d5:49:78:a4:0f:a1:2d:ce:d6:f1:b7:bc:14:8c: 8e:e7:b0:d7:0c:ae:aa:4a:e1:54:6f:9d:06:a4:96: 7a:2b:cb:73:fa:44:4d:15:65:72:d8:d2:ec:2a:f4: b4:48:3e:41:18:ff:98:24:64:18:98:2e:36:2a:77: 31:e5:57:08:2d:56:7c:b1:d8:22:da:54:df:be:13: 1e:c8:fa:63:0d:eb:fe:e8:3b:f1:19:b5:5f:1d:72: 65:d9:4a:00:5a:cb:56:6b:0a:d9:23:84:c0:32:e6: f7:6a:af:a7:c6:f1:54:92:e7:da:48:fd:af:c2:f8: d0:10:a6:6b:00:8b:75:fe:38:d1:f2:ce:11:56:77: 10:2b:7c:be:29:74:6d:fc:c3:ec:30:1a:7c:8f:02: 80:0d:74:40:ef:0c:3b:18:5d:f4:29:64:d8:e9:bb: 40:e5:b8:e7:1b:22:d4:83:76:64:94:a9:67:f2:7f: 9c:7a:bc:55:7c:fb:22:3e:e4:fd:77:2e:01:7f:ab: 12:1f:79:f7:45:72:01:fc:e5:de:48:0a:e2:c7:2c: a5:8a:3a:cb:02:9c:73:30:d6:81:04:21:cc:cc:76: 23:99:28:f3:22:98:39:e7:2c:73:3d:b0:c6:a3:e1: 2d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5A:83:E0:C2:15:8F:56:75:7D:9E:5A:82:EE:4D:E3:3B:08:60:3D X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030373a3a2f34382d3438203d3e20323135333634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:1007::/48 Signature Algorithm: sha256WithRSAEncryption 0e:e2:20:a5:69:58:58:f6:59:eb:e0:db:84:e8:66:34:aa:1b: bb:3e:75:b5:42:39:de:4c:37:30:9f:fa:32:ae:95:03:36:2e: d7:2f:c4:b8:06:03:eb:36:c2:a9:0b:5e:5d:b8:fd:4f:2f:1c: af:c1:20:54:13:52:e1:02:ff:6e:d1:c3:11:74:2c:f5:a0:f4: 55:36:4e:a2:7d:5e:05:6a:10:86:1e:b2:d5:1d:71:79:f2:64: 68:08:c0:8a:65:81:d1:4d:b3:2d:5d:df:af:d1:fa:5f:79:78: 1c:01:a4:ce:95:8e:3f:f8:87:df:bd:ea:7a:0d:6f:72:50:15: 92:0e:db:88:b8:fe:22:6f:be:05:d3:74:e2:c5:0c:90:a4:3f: 7e:a9:a8:9d:ae:ab:e7:30:2d:5d:59:24:d2:13:66:ad:4d:52: db:04:bf:00:79:21:bc:4e:0a:a9:60:34:a0:ee:55:6d:32:a9: cb:66:5c:ad:32:04:b3:df:c2:b5:65:d5:35:84:15:c8:9c:28: 46:16:f0:9d:c9:85:d2:93:b9:18:20:ea:87:da:cc:c8:58:25: 03:1e:fc:15:b4:2f:1d:44:f5:2c:05:75:6e:dd:cc:72:6b:cd: fc:22:d6:c2:da:e6:42:19:fe:62:74:9c:66:10:84:eb:e0:79: 61:db:9a:96 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUaH1/l4zdsmTkKtTJu9Jb02wISEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNTAzMDUxNTU3MThaFw0yNjAzMDQxNjAyMThaMDMxMTAvBgNV BAMTKEQzNUE4M0UwQzIxNThGNTY3NTdEOUU1QTgyRUU0REUzM0IwODYwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGvmQnYswyqjB2hartr9DVSXik D6Etztbxt7wUjI7nsNcMrqpK4VRvnQaklnory3P6RE0VZXLY0uwq9LRIPkEY/5gk ZBiYLjYqdzHlVwgtVnyx2CLaVN++Ex7I+mMN6/7oO/EZtV8dcmXZSgBay1ZrCtkj hMAy5vdqr6fG8VSS59pI/a/C+NAQpmsAi3X+ONHyzhFWdxArfL4pdG38w+wwGnyP AoANdEDvDDsYXfQpZNjpu0DluOcbItSDdmSUqWfyf5x6vFV8+yI+5P13LgF/qxIf efdFcgH85d5ICuLHLKWKOssCnHMw1oEEIczMdiOZKPMimDnnLHM9sMaj4S1bAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU01qD4MIVj1Z1fZ5agu5N4zsIYD0wHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMxMzAzMDM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzMzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gRAHMA0GCSqGSIb3DQEBCwUAA4IBAQAO 4iClaVhY9lnr4NuE6GY0qhu7PnW1QjneTDcwn/oyrpUDNi7XL8S4BgPrNsKpC15d uP1PLxyvwSBUE1LhAv9u0cMRdCz1oPRVNk6ifV4FahCGHrLVHXF58mRoCMCKZYHR TbMtXd+v0fpfeXgcAaTOlY4/+Iffvep6DW9yUBWSDtuIuP4ib74F03TixQyQpD9+ qaidrqvnMC1dWSTSE2atTVLbBL8AeSG8TgqpYDSg7lVtMqnLZlytMgSz38K1ZdU1 hBXInChGFvCdyYXSk7kYIOqH2szIWCUDHvwVtC8dRPUsBXVu3cxya838ItbC2uZC Gf5idJxmEITr4Hlh25qW -----END CERTIFICATE-----Generated at Wed May 7 18:22:59 2025 by rpki-client