$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa File: 326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa (raw, json) Hash identifier: viX/3SQM4nfUuWRAgbcq7qnkCzLamDSQbyAAFuwSt0E= Subject key identifier: 66:73:E4:9B:16:21:53:67:0B:C9:B6:6A:74:BB:AC:24:D8:5D:49:F9 Certificate issuer: /CN=B6366F3DD14AC5399103961C30642E6779892C6C Certificate serial: 335619AF0850CAF47AAE265ECFFB8B727700B245 Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa Signing time: Wed 02 Apr 2025 19:35:01 +0000 ROA not before: Wed 02 Apr 2025 19:30:01 +0000 ROA not after: Wed 01 Apr 2026 19:35:01 +0000 asID: 211066 IP address blocks: 2a06:1283:8d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 01:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:56:19:af:08:50:ca:f4:7a:ae:26:5e:cf:fb:8b:72:77:00:b2:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C Validity Not Before: Apr 2 19:30:01 2025 GMT Not After : Apr 1 19:35:01 2026 GMT Subject: CN=6673E49B162153670BC9B66A74BBAC24D85D49F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:b0:c5:ca:01:8a:ef:03:45:5b:86:9d:42: de:0d:d2:a1:b2:20:4c:22:a0:a5:32:88:82:63:4c: 15:14:b2:e3:38:a2:ed:81:ea:03:2b:3f:71:8e:3f: 42:4c:a4:41:d8:67:ab:ed:8b:38:65:33:11:c1:1b: 0e:07:e2:a9:1f:50:b6:de:5a:12:d1:ee:68:e6:03: 0f:eb:ba:ad:6e:53:58:89:55:fa:ae:2e:96:f4:fd: c2:16:f1:26:ed:af:82:a8:df:ac:18:c8:55:ad:cc: 30:81:fe:6e:8c:f6:a4:4c:c2:97:ff:1b:5d:85:62: ee:ab:04:1f:8f:18:ba:bf:e7:ea:89:2e:5f:74:01: ec:79:ea:e2:5f:45:e5:04:d4:5c:e0:ea:4e:f3:34: 92:72:ce:d3:db:00:10:07:22:d6:57:f6:2f:12:a3: 9a:ec:2e:9f:f5:c9:55:f4:f9:8a:2e:3d:a8:88:23: 82:2b:52:f2:aa:c8:6d:25:d0:1d:7d:55:b9:d4:fb: 11:2d:6d:eb:d1:34:50:c4:40:40:f8:3f:f0:d2:bf: fd:8f:31:ce:1a:b0:8b:f8:6b:d8:eb:ab:65:10:26: 43:ad:8e:69:86:81:c5:cb:4a:54:b1:2c:f4:b9:50: d2:6f:f1:c7:73:da:07:3e:b3:3f:3e:76:0d:11:a1: ad:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:73:E4:9B:16:21:53:67:0B:C9:B6:6A:74:BB:AC:24:D8:5D:49:F9 X509v3 Authority Key Identifier: keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8d00::/40 Signature Algorithm: sha256WithRSAEncryption 05:a3:f3:2b:32:bd:8e:df:73:c9:9c:83:09:4c:d3:fe:bf:56: ed:09:9a:cf:a9:7a:a4:6a:fc:95:cc:fa:d6:be:b6:61:45:9b: bd:da:d1:38:e1:6f:a0:c7:e1:f0:b6:4e:3f:36:33:79:49:1b: 1f:ef:13:ce:a3:8d:e9:28:bd:7e:6b:7a:d7:c2:a5:ff:b1:35: 07:69:93:32:32:b3:cc:90:74:35:87:f0:9d:3b:89:a8:d2:93: 0e:a4:d2:63:d1:7c:f1:72:3a:84:2f:09:da:c0:38:6e:a5:d2: 2d:0d:2c:af:36:aa:e5:21:ea:14:b2:e2:3a:ff:db:22:41:a3: 77:74:12:3a:37:3c:05:fa:6f:c7:fe:27:d0:64:f5:77:aa:17: fb:5d:a4:b5:53:35:13:bf:3d:ef:66:0a:5e:98:56:35:cb:f9: da:a4:71:65:36:4f:d1:a5:f9:73:28:08:72:6a:99:7b:f1:43: b6:32:de:df:67:84:19:b6:88:4b:33:9c:0f:69:44:e9:c6:09: d5:9b:68:4a:f7:f9:1f:2e:68:f6:b7:73:c2:e0:47:b2:19:41: 96:69:04:0b:31:4c:39:84:98:b1:01:c2:d5:9e:fc:2a:66:46: 86:52:fb:d5:17:33:b8:5b:44:4d:c2:3e:bb:35:9d:74:b6:6b: fe:17:4a:b9 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUM1YZrwhQyvR6riZez/uLcncAskUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3 OTg5MkM2QzAeFw0yNTA0MDIxOTMwMDFaFw0yNjA0MDExOTM1MDFaMDMxMTAvBgNV BAMTKDY2NzNFNDlCMTYyMTUzNjcwQkM5QjY2QTc0QkJBQzI0RDg1RDQ5RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrdLDFygGK7wNFW4adQt4N0qGy IEwioKUyiIJjTBUUsuM4ou2B6gMrP3GOP0JMpEHYZ6vtizhlMxHBGw4H4qkfULbe WhLR7mjmAw/ruq1uU1iJVfquLpb0/cIW8Sbtr4Ko36wYyFWtzDCB/m6M9qRMwpf/ G12FYu6rBB+PGLq/5+qJLl90Aex56uJfReUE1Fzg6k7zNJJyztPbABAHItZX9i8S o5rsLp/1yVX0+YouPaiII4IrUvKqyG0l0B19VbnU+xEtbevRNFDEQED4P/DSv/2P Mc4asIv4a9jrq2UQJkOtjmmGgcXLSlSxLPS5UNJv8cdz2gc+sz8+dg0Roa2rAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUZnPkmxYhU2cLybZqdLusJNhdSfkwHwYDVR0j BBgwFoAUtjZvPdFKxTmRA5YcMGQuZ3mJLGwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzIvQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3OTg5MkM2Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvMS9CNjM2NkYzREQxNEFDNTM5OTEwMzk2MUMz MDY0MkU2Nzc5ODkyQzZDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjQzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MTMxMzAzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgYSg40wDQYJKoZIhvcNAQELBQADggEBAAWj 8ysyvY7fc8mcgwlM0/6/Vu0Jms+peqRq/JXM+ta+tmFFm73a0Tjhb6DH4fC2Tj82 M3lJGx/vE86jjekovX5retfCpf+xNQdpkzIys8yQdDWH8J07iajSkw6k0mPRfPFy OoQvCdrAOG6l0i0NLK82quUh6hSy4jr/2yJBo3d0Ejo3PAX6b8f+J9Bk9XeqF/td pLVTNRO/Pe9mCl6YVjXL+dqkcWU2T9Gl+XMoCHJqmXvxQ7Yy3t9nhBm2iEsznA9p ROnGCdWbaEr3+R8uaPa3c8LgR7IZQZZpBAsxTDmEmLEBwtWe/CpmRoZS+9UXM7hb RE3CPrs1nXS2a/4XSrk= -----END CERTIFICATE-----Generated at Sun May 11 14:35:56 2025 by rpki-client