$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa File: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (raw, json) Hash identifier: v+wGdsPoD53cB+FPJFplibwWU1IDMTKf0BLLWvOrDJw= Subject key identifier: 19:1F:95:50:1A:99:BD:8F:00:CA:2C:9C:5B:42:96:60:B4:9E:1B:1D Certificate issuer: /CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Certificate serial: 08BBAA1D08914915DE735D2BB809C666E53930A8 Authority key identifier: 89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa Signing time: Sat 12 Apr 2025 16:47:00 +0000 ROA not before: Sat 12 Apr 2025 16:42:00 +0000 ROA not after: Sat 11 Apr 2026 16:47:00 +0000 asID: 204844 IP address blocks: 2a14:7581:6000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:bb:aa:1d:08:91:49:15:de:73:5d:2b:b8:09:c6:66:e5:39:30:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Validity Not Before: Apr 12 16:42:00 2025 GMT Not After : Apr 11 16:47:00 2026 GMT Subject: CN=191F95501A99BD8F00CA2C9C5B429660B49E1B1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:90:13:0e:15:a1:1d:b6:09:ca:12:a8:ac:dc: 5f:26:5f:a0:fc:5a:16:e1:4c:e1:6f:24:c5:11:e7: f6:8a:5d:2b:3f:ac:99:c2:6b:2b:3c:c6:9b:9a:80: 23:ab:fd:37:b6:b7:b8:86:44:8b:ad:cf:bc:f4:77: fe:99:fc:f9:6b:5b:e9:f7:fb:cd:69:3f:b8:59:0e: f7:58:d7:fd:24:b5:07:09:65:8d:e4:00:da:6a:85: 80:88:07:21:cf:f9:2f:23:d4:a1:0a:55:a3:7f:9d: e4:f8:ae:b9:2c:b8:4a:f6:3a:be:94:c9:af:ac:74: 26:00:c8:d1:57:2f:b3:5b:82:31:6f:ee:e7:de:53: 9b:31:32:52:98:ee:33:54:08:e7:a0:f4:f0:25:3d: 95:17:af:aa:60:93:4d:f6:55:bd:c9:5b:7f:d8:21: d8:35:98:63:9c:b3:c2:86:94:0c:f6:9f:d0:0f:02: 6a:2d:c6:67:ec:f0:f4:e1:df:2f:04:c7:8d:e1:83: 28:d7:15:4d:46:98:cf:05:01:e7:3a:89:f7:dd:5e: 0a:4d:22:b0:60:14:a4:12:d7:95:52:6c:95:cd:17: 47:ee:78:f6:f3:a2:52:14:5f:0a:01:e8:a9:fb:ac: 7f:e7:34:a4:79:3e:5a:32:2b:cb:98:f7:20:4d:f9: 33:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1F:95:50:1A:99:BD:8F:00:CA:2C:9C:5B:42:96:60:B4:9E:1B:1D X509v3 Authority Key Identifier: keyid:89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:6000::/36 Signature Algorithm: sha256WithRSAEncryption 4d:03:33:c5:8d:12:26:57:fe:30:d3:70:0b:35:19:5e:b4:5a: 38:99:dd:55:88:29:88:3f:6e:a2:85:55:e8:d5:13:e1:5a:c9: 8a:2a:90:1e:94:9a:63:0c:ca:a5:48:25:97:11:e5:8a:d3:de: 96:2d:75:4e:52:d1:b7:f3:77:c3:c0:18:be:c5:c3:14:60:b9: ba:1a:90:29:62:82:b0:78:3e:75:52:2a:a0:4f:4a:15:29:4f: 5a:41:73:84:d8:05:b2:4a:f9:89:23:5a:15:8b:13:28:f2:03: 2f:f5:7d:5d:22:ec:38:15:09:5c:3c:70:5a:d3:03:51:eb:9a: e0:a4:38:6b:be:a5:9b:89:c1:3e:50:62:20:54:f9:38:d3:57: 33:4e:ce:01:c4:14:7f:c3:ff:11:6c:38:00:8d:c3:07:02:fd: 71:f4:2f:59:06:a3:86:df:df:f4:c3:e7:c1:84:bb:69:e0:da: cf:f7:43:ff:c3:61:c2:c1:42:87:7f:3c:a9:cd:3e:1e:d1:ba: 4b:c2:f5:52:2c:ff:87:98:a4:6f:d4:08:b3:f1:14:23:43:24: fd:cd:b4:f8:dc:ea:7f:17:18:a1:94:93:4f:e0:12:2c:43:23: 10:8e:a1:d2:11:6d:fb:88:14:d4:42:34:ba:d7:d2:ca:9d:a3: a0:f9:85:ff -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUCLuqHQiRSRXec10ruAnGZuU5MKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBC OEYxMjA2QjAeFw0yNTA0MTIxNjQyMDBaFw0yNjA0MTExNjQ3MDBaMDMxMTAvBgNV BAMTKDE5MUY5NTUwMUE5OUJEOEYwMENBMkM5QzVCNDI5NjYwQjQ5RTFCMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVkBMOFaEdtgnKEqis3F8mX6D8 WhbhTOFvJMUR5/aKXSs/rJnCays8xpuagCOr/Te2t7iGRIutz7z0d/6Z/PlrW+n3 +81pP7hZDvdY1/0ktQcJZY3kANpqhYCIByHP+S8j1KEKVaN/neT4rrksuEr2Or6U ya+sdCYAyNFXL7NbgjFv7ufeU5sxMlKY7jNUCOeg9PAlPZUXr6pgk032Vb3JW3/Y Idg1mGOcs8KGlAz2n9APAmotxmfs8PTh3y8Ex43hgyjXFU1GmM8FAec6iffdXgpN IrBgFKQS15VSbJXNF0fuePbzolIUXwoB6Kn7rH/nNKR5PloyK8uY9yBN+TMPAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUGR+VUBqZvY8AyiycW0KWYLSeGx0wHwYDVR0j BBgwFoAUiT/UG94ibFTyrSs92hnBoLjxIGswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFjZmEzMTgtMmE1Yy00MjQxLWFmYmItMzg3ZDcxZThj NTk2LzEvODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBCOEYxMjA2Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTNGRDQxQkRFMjI2QzU0RjJBRDJCM0RE QTE5QzFBMEI4RjEyMDZCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS84YWNmYTMxOC0yYTVjLTQyNDEtYWZiYi0zODdkNzFlOGM1OTYvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM2MzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIz MDM0MzgzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1gWAwDQYJKoZIhvcNAQELBQADggEBAE0D M8WNEiZX/jDTcAs1GV60WjiZ3VWIKYg/bqKFVejVE+FayYoqkB6UmmMMyqVIJZcR 5YrT3pYtdU5S0bfzd8PAGL7FwxRguboakCligrB4PnVSKqBPShUpT1pBc4TYBbJK +YkjWhWLEyjyAy/1fV0i7DgVCVw8cFrTA1HrmuCkOGu+pZuJwT5QYiBU+TjTVzNO zgHEFH/D/xFsOACNwwcC/XH0L1kGo4bf3/TD58GEu2ng2s/3Q//DYcLBQod/PKnN Ph7RukvC9VIs/4eYpG/UCLPxFCNDJP3NtPjc6n8XGKGUk0/gEixDIxCOodIRbfuI FNRCNLrX0sqdo6D5hf8= -----END CERTIFICATE-----Generated at Thu May 8 14:12:45 2025 by rpki-client