$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa File: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (raw, json) Hash identifier: 0Augomo0JPTrdfBB/3ITj/ZgfSBftNdAdE/vOPCbcS0= Subject key identifier: 83:DA:C3:F9:2F:64:CD:99:24:5A:64:BE:28:BD:DA:DD:92:88:30:62 Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 15ED372291C6B3329A5FDF8A50BB68C3F65D07F3 Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa Signing time: Thu 19 Dec 2024 05:12:46 +0000 ROA not before: Thu 19 Dec 2024 05:07:46 +0000 ROA not after: Thu 18 Dec 2025 05:12:46 +0000 asID: 204291 IP address blocks: 2a13:9644:40ae::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 02:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ed:37:22:91:c6:b3:32:9a:5f:df:8a:50:bb:68:c3:f6:5d:07:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Dec 19 05:07:46 2024 GMT Not After : Dec 18 05:12:46 2025 GMT Subject: CN=83DAC3F92F64CD99245A64BE28BDDADD92883062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:cc:b2:85:46:09:d7:ed:c5:78:35:78:d5: 7c:85:91:b9:6b:bb:04:7a:d0:d0:88:72:c0:e8:04: 9d:13:4d:09:a2:6a:a8:15:07:a4:48:82:5b:a5:c5: bc:58:10:f7:fb:57:67:06:65:e5:68:4f:3a:f4:84: bb:4d:24:08:00:62:01:00:13:ce:d2:fd:44:34:f6: 5d:d8:c9:9f:a9:bd:b3:00:db:a0:ff:f8:4f:26:ce: 1f:22:a4:5e:b9:85:2f:b8:8f:bc:34:1d:6a:8a:65: 84:18:04:4d:76:4f:d8:71:fd:c5:7f:51:f2:9f:7d: 7a:19:bf:92:ac:15:04:a0:4d:dd:8e:f7:03:e7:7d: ef:57:65:68:c0:08:13:8b:f4:00:9e:13:6a:b8:b8: 3b:e8:a6:32:cf:fa:58:36:60:0e:13:ad:94:65:9b: 9b:ac:c0:f9:60:f0:7d:87:b9:e4:e8:a2:ca:3a:c3: b9:68:9a:9e:c4:0c:87:1c:c0:c5:af:e1:a0:38:ef: 25:86:e3:57:3f:77:20:1f:41:8e:34:07:15:05:b1: ef:7f:ad:7c:09:a8:bd:d1:03:be:79:27:05:5a:b8: ee:59:62:63:41:a5:29:82:7b:2d:55:01:50:c9:6c: e9:5e:de:bf:a1:a0:30:28:b1:f4:55:df:29:bf:e1: 2e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DA:C3:F9:2F:64:CD:99:24:5A:64:BE:28:BD:DA:DD:92:88:30:62 X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9644:40ae::/48 Signature Algorithm: sha256WithRSAEncryption 4f:35:b7:cd:ca:6a:c1:b1:7f:a2:d0:c4:aa:a9:a8:fd:c9:46: 7c:20:17:1e:54:a5:10:b9:e3:80:97:8b:28:f5:ba:1b:62:51: f6:56:a6:5a:17:67:4c:8c:4d:b3:05:ff:a7:86:7a:73:af:20: b0:9c:71:a7:18:cd:8d:6d:1e:73:2a:88:eb:ca:a9:22:95:a9: 62:e0:11:7d:5c:ce:34:72:29:15:2e:6a:9c:54:14:a9:12:83: d5:23:bc:cb:b9:22:66:51:9b:54:b5:da:2e:6e:68:ef:b9:b1: 23:99:fd:fa:8d:73:1a:3f:39:f7:8e:de:97:e8:4d:5f:d5:e8: aa:2b:2e:6f:35:65:eb:a7:de:a5:56:ba:ae:28:1f:0c:ed:15: 25:69:0b:48:98:a9:3d:09:0b:28:0f:0a:ab:18:ce:23:13:9b: 49:e0:d9:c7:c1:9a:03:d3:b6:2a:df:ea:41:72:3c:3c:a3:9f: a2:ba:86:dc:4a:d2:d5:01:2f:17:28:d5:1c:51:d3:00:5c:5e: 49:8e:84:b8:b9:73:ae:e9:c8:25:e4:8e:69:e2:4f:7d:a6:4e: 04:31:42:d5:89:1c:48:38:40:b2:bf:b9:b0:51:34:b4:94:78: 4a:4e:5e:e6:46:d2:40:c1:1a:a8:c7:58:6f:08:23:87:f9:1e: fc:76:21:cb -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUFe03IpHGszKaX9+KULtow/ZdB/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNDEyMTkwNTA3NDZaFw0yNTEyMTgwNTEyNDZaMDMxMTAvBgNV BAMTKDgzREFDM0Y5MkY2NENEOTkyNDVBNjRCRTI4QkREQUREOTI4ODMwNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC948yyhUYJ1+3FeDV41XyFkblr uwR60NCIcsDoBJ0TTQmiaqgVB6RIglulxbxYEPf7V2cGZeVoTzr0hLtNJAgAYgEA E87S/UQ09l3YyZ+pvbMA26D/+E8mzh8ipF65hS+4j7w0HWqKZYQYBE12T9hx/cV/ UfKffXoZv5KsFQSgTd2O9wPnfe9XZWjACBOL9ACeE2q4uDvopjLP+lg2YA4TrZRl m5uswPlg8H2HueTooso6w7lomp7EDIccwMWv4aA47yWG41c/dyAfQY40BxUFse9/ rXwJqL3RA755JwVauO5ZYmNBpSmCey1VAVDJbOle3r+hoDAosfRV3ym/4S6DAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUg9rD+S9kzZkkWmS+KL3a3ZKIMGIwHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82NWVhZTc0NS04YWM5LTRlNzEtYmM5NC1mY2IyNjE3MDNmOTYvMS8zMjYxMzEz MzNhMzkzNjM0MzQzYTM0MzA2MTY1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhOWRECuMA0GCSqGSIb3DQEBCwUAA4IBAQBP NbfNymrBsX+i0MSqqaj9yUZ8IBceVKUQueOAl4so9bobYlH2VqZaF2dMjE2zBf+n hnpzryCwnHGnGM2NbR5zKojryqkilali4BF9XM40cikVLmqcVBSpEoPVI7zLuSJm UZtUtdoubmjvubEjmf36jXMaPzn3jt6X6E1f1eiqKy5vNWXrp96lVrquKB8M7RUl aQtImKk9CQsoDwqrGM4jE5tJ4NnHwZoD07Yq3+pBcjw8o5+iuobcStLVAS8XKNUc UdMAXF5JjoS4uXOu6cgl5I5p4k99pk4EMULViRxIOECyv7mwUTS0lHhKTl7mRtJA wRqox1hvCCOH+R78diHL -----END CERTIFICATE-----Generated at Sat May 10 18:52:57 2025 by rpki-client