$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363431303a3a2f34382d3438203d3e20323134323233.roa File: 326130613a363034343a363431303a3a2f34382d3438203d3e20323134323233.roa (raw, json) Hash identifier: 9lwecFjUgWAR1jqPOIwIBIuw9i2A3sNTOuf6ZF50tpM= Subject key identifier: DF:B6:F2:88:35:3E:D8:EA:89:ED:7E:AA:DC:E5:EA:40:FE:E8:9D:00 Certificate issuer: /CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429 Certificate serial: 6FFC3E39B82AF5540BA3CFFA395E95E6EFC1D8D4 Authority key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363431303a3a2f34382d3438203d3e20323134323233.roa Signing time: Sun 06 Apr 2025 20:03:38 +0000 ROA not before: Sun 06 Apr 2025 19:58:38 +0000 ROA not after: Sun 05 Apr 2026 20:03:38 +0000 asID: 214223 IP address blocks: 2a0a:6044:6410::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 22:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:fc:3e:39:b8:2a:f5:54:0b:a3:cf:fa:39:5e:95:e6:ef:c1:d8:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429 Validity Not Before: Apr 6 19:58:38 2025 GMT Not After : Apr 5 20:03:38 2026 GMT Subject: CN=DFB6F288353ED8EA89ED7EAADCE5EA40FEE89D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b8:69:e7:00:75:b3:4a:73:a7:b6:5c:7a:9f: cf:07:8c:34:97:b1:07:a6:6d:18:74:a8:3c:cf:67: 9e:04:ec:e1:72:64:d3:4c:4a:07:b4:63:1a:55:11: 01:5d:e4:fd:ed:08:49:f9:bf:35:dc:ce:8c:49:66: 06:e1:87:37:ac:49:cd:42:ce:52:a0:d8:61:05:27: 49:c3:88:8a:24:aa:2d:bd:bf:32:e6:7e:f4:0c:01: 74:56:72:41:45:f5:7a:9c:37:6b:b6:16:25:e2:a3: 3d:03:14:84:24:c8:c9:0e:69:f2:e9:54:8b:f8:52: ea:6f:e1:6c:2e:4f:52:2d:bf:f8:20:c6:99:42:83: ca:f9:0d:65:6c:b3:04:e4:30:09:2a:ca:a4:6f:79: b8:94:bb:6f:d7:94:b1:93:97:7e:e5:ba:7d:ac:93: 71:10:30:bc:b8:0f:24:3c:2c:82:1d:2a:51:f0:7f: 7c:ae:61:44:82:4f:5e:ce:25:61:f4:07:2d:4b:9d: 5d:d6:9a:02:b0:52:23:b2:ba:86:91:ee:54:62:39: 3c:ce:eb:1f:42:35:31:b0:ec:0b:5f:57:65:7d:73: d3:a2:df:24:68:a2:f4:f3:a2:fe:11:d0:d5:2c:77: 8b:d1:9b:8b:a2:07:73:32:6c:ef:70:be:c9:96:81: 19:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B6:F2:88:35:3E:D8:EA:89:ED:7E:AA:DC:E5:EA:40:FE:E8:9D:00 X509v3 Authority Key Identifier: keyid:ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363431303a3a2f34382d3438203d3e20323134323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6410::/48 Signature Algorithm: sha256WithRSAEncryption 33:20:a2:4e:1f:5b:cd:cb:fb:ed:45:37:3e:48:38:c7:a7:5e: 6b:ea:1a:b1:88:67:e0:f6:f2:0c:dc:ef:7b:45:47:40:16:96: 77:16:56:8e:b6:88:b7:02:32:d0:15:d5:e7:41:85:65:ad:b9: 1d:0e:ab:7c:23:77:94:c6:03:ee:49:c7:41:3e:2e:ff:44:70: 0f:c5:18:aa:c9:83:a5:77:c1:6b:3d:47:7b:83:c4:df:ac:68: e7:cc:be:00:bb:fd:e4:ab:b5:9b:c0:81:dc:59:3f:17:d7:80: f4:49:ed:b4:09:8b:d9:45:79:f4:f8:8a:16:b6:e2:38:79:6d: ea:d7:ab:1b:69:a2:c2:f3:51:f4:5a:10:fe:10:fa:0c:b9:1c: 95:a5:ce:4a:00:ee:a8:d6:b6:ed:a4:d7:5b:6a:e3:f5:83:eb: 29:cf:df:28:40:3b:0b:e7:5f:91:2d:e3:a5:38:a6:1e:4f:08: f4:1b:29:59:a7:51:e4:6c:73:58:10:89:3e:ea:dd:12:42:5a: 44:b7:a3:5e:24:2c:7c:a3:4b:ed:ee:b7:91:05:b1:c8:84:6e: f1:f7:4c:c4:14:fb:9f:14:b1:f3:09:d2:ca:55:72:b5:51:54: 23:25:74:40:53:bf:fc:46:7e:0c:06:ee:13:27:96:5a:6c:ab: 29:6e:89:df -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUb/w+Obgq9VQLo8/6OV6V5u/B2NQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQwQjhBRTAzRDYyNTBENTlFRjhFN0JFNTU2RDk0RUI0 OTQxNTQyOTAeFw0yNTA0MDYxOTU4MzhaFw0yNjA0MDUyMDAzMzhaMDMxMTAvBgNV BAMTKERGQjZGMjg4MzUzRUQ4RUE4OUVEN0VBQURDRTVFQTQwRkVFODlEMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkuGnnAHWzSnOntlx6n88HjDSX sQembRh0qDzPZ54E7OFyZNNMSge0YxpVEQFd5P3tCEn5vzXczoxJZgbhhzesSc1C zlKg2GEFJ0nDiIokqi29vzLmfvQMAXRWckFF9XqcN2u2FiXioz0DFIQkyMkOafLp VIv4Uupv4WwuT1Itv/ggxplCg8r5DWVsswTkMAkqyqRvebiUu2/XlLGTl37lun2s k3EQMLy4DyQ8LIIdKlHwf3yuYUSCT17OJWH0By1LnV3WmgKwUiOyuoaR7lRiOTzO 6x9CNTGw7AtfV2V9c9Oi3yRoovTzov4R0NUsd4vRm4uiB3MybO9wvsmWgRkpAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU37byiDU+2OqJ7X6q3OXqQP7onQAwHwYDVR0j BBgwFoAU7QuK4D1iUNWe+Oe+VW2U60lBVCkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmYwZDRiNGUtOWY3NC00ZGY0LWJmNWUtMDkyOTA5NmRi ZTA0LzMvRUQwQjhBRTAzRDYyNTBENTlFRjhFN0JFNTU2RDk0RUI0OTQxNTQyOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9FRDBCOEFFMDNENjI1MEQ1OUVGOEU3QkU1 NTZEOTRFQjQ5NDE1NDI5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yZjBkNGI0ZS05Zjc0LTRkZjQtYmY1ZS0wOTI5MDk2ZGJlMDQvMy8zMjYxMzA2 MTNhMzYzMDM0MzQzYTM2MzQzMTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRGQQMA0GCSqGSIb3DQEBCwUAA4IBAQAz IKJOH1vNy/vtRTc+SDjHp15r6hqxiGfg9vIM3O97RUdAFpZ3FlaOtoi3AjLQFdXn QYVlrbkdDqt8I3eUxgPuScdBPi7/RHAPxRiqyYOld8FrPUd7g8TfrGjnzL4Au/3k q7WbwIHcWT8X14D0Se20CYvZRXn0+IoWtuI4eW3q16sbaaLC81H0WhD+EPoMuRyV pc5KAO6o1rbtpNdbauP1g+spz98oQDsL51+RLeOlOKYeTwj0GylZp1HkbHNYEIk+ 6t0SQlpEt6NeJCx8o0vt7reRBbHIhG7x90zEFPufFLHzCdLKVXK1UVQjJXRAU7/8 Rn4MBu4TJ5ZabKspbonf -----END CERTIFICATE-----Generated at Thu May 8 11:00:35 2025 by rpki-client