$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538303a356666663a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538303a356666663a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: pH1DpsNoBXAL0l4o2dyKb1VUo6J4k0AUCBSFbohk97k= Subject key identifier: 7E:21:16:A9:95:74:F3:42:13:12:91:4D:0C:5E:4D:39:78:A5:86:8A Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Certificate serial: 2CE8F7D496132821AF24A8D1D4B9C17B97E9653E Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538303a356666663a3a2f34382d3438203d3e20323134333434.roa Signing time: Mon 28 Apr 2025 16:31:01 +0000 ROA not before: Mon 28 Apr 2025 16:26:01 +0000 ROA not after: Mon 27 Apr 2026 16:31:01 +0000 asID: 214344 IP address blocks: 2a14:7580:5fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 13:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e8:f7:d4:96:13:28:21:af:24:a8:d1:d4:b9:c1:7b:97:e9:65:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Validity Not Before: Apr 28 16:26:01 2025 GMT Not After : Apr 27 16:31:01 2026 GMT Subject: CN=7E2116A99574F3421312914D0C5E4D3978A5868A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:11:18:f3:71:dd:3c:58:17:36:a3:9d:cc:b7: e6:a9:c1:f6:0d:16:29:14:35:55:78:c9:08:c0:a3: d1:f3:94:49:cf:4e:4d:46:5a:0e:ab:69:36:d7:60: e0:69:1b:88:08:bf:12:41:64:7f:8a:45:c6:4a:b3: 8f:ba:c3:3c:44:dd:2b:b5:49:db:6a:81:41:39:f2: 51:11:8f:5d:b9:e1:b9:bb:6e:7d:ca:f4:60:00:4a: 25:43:07:e4:60:18:92:b7:27:ec:6e:71:b9:40:69: 76:84:85:51:74:74:e4:6a:0c:31:04:5b:22:df:62: 51:1b:8b:38:e8:02:66:b9:7c:12:43:9b:c0:b3:b5: 64:88:31:2c:d6:85:39:78:88:32:7c:b5:16:a4:af: d5:c1:47:bb:22:5f:29:73:ff:d1:24:4a:c4:6d:64: d0:d4:22:be:a7:72:e2:33:69:0f:6c:d1:fd:8b:85: 73:d6:ba:44:07:f0:6d:02:c1:34:6d:14:43:26:21: 80:58:a9:a9:0f:9f:cc:2b:ce:e3:93:e3:87:84:ad: de:f5:3b:36:3e:f8:ea:51:be:93:b7:7a:8d:3c:ee: d6:d3:9a:66:fc:90:1f:a9:ea:b0:8d:ef:c6:5c:89: 69:b8:63:da:cf:2d:f0:8c:32:00:79:27:5b:df:fa: 67:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:21:16:A9:95:74:F3:42:13:12:91:4D:0C:5E:4D:39:78:A5:86:8A X509v3 Authority Key Identifier: keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538303a356666663a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:5fff::/48 Signature Algorithm: sha256WithRSAEncryption 21:1f:52:55:ab:16:57:26:ca:8a:90:3d:90:2d:2b:64:74:d6: 84:b6:e9:18:a2:6b:76:a6:67:76:97:45:94:6a:9e:17:af:4b: 57:29:72:91:91:a6:15:23:f9:2d:45:57:e8:ee:16:7b:49:8a: cb:78:a3:40:5c:86:84:6e:7f:63:4d:95:fa:ac:f2:63:fb:38: ab:8e:64:5b:17:d7:9e:db:92:ce:6b:27:e1:00:78:30:ce:eb: 66:db:a7:55:35:d1:28:6a:b0:03:20:53:bf:02:fa:5f:4d:da: 4f:38:46:89:d9:26:e6:75:49:c1:63:2e:90:85:57:c5:7e:2e: 0f:5c:7a:5c:77:6d:85:3d:ee:a2:7b:f4:2d:58:92:20:95:b6: d7:39:0d:80:cc:1d:be:11:2e:7a:2a:6a:79:14:46:4c:01:5e: 7b:30:f1:c0:9f:b1:99:5a:69:76:7d:29:9e:98:b4:7a:1f:8e: ad:ea:a7:4a:b1:da:25:a6:3f:69:05:70:cc:31:bc:72:52:b3: d1:10:5a:0b:b0:f1:80:ca:f1:a9:da:3f:2b:1b:2f:75:8d:e6: 90:d2:17:f1:8a:73:82:43:25:71:32:4b:e3:de:0d:05:53:17: fa:79:12:1e:8a:0c:39:7b:54:34:7e:51:19:cb:f5:b2:2e:df: 3a:6a:34:da -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIULOj31JYTKCGvJKjR1LnBe5fpZT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJB ODcyMzk0NTAeFw0yNTA0MjgxNjI2MDFaFw0yNjA0MjcxNjMxMDFaMDMxMTAvBgNV BAMTKDdFMjExNkE5OTU3NEYzNDIxMzEyOTE0RDBDNUU0RDM5NzhBNTg2OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChERjzcd08WBc2o53Mt+apwfYN FikUNVV4yQjAo9HzlEnPTk1GWg6raTbXYOBpG4gIvxJBZH+KRcZKs4+6wzxE3Su1 SdtqgUE58lERj1254bm7bn3K9GAASiVDB+RgGJK3J+xucblAaXaEhVF0dORqDDEE WyLfYlEbizjoAma5fBJDm8CztWSIMSzWhTl4iDJ8tRakr9XBR7siXylz/9EkSsRt ZNDUIr6ncuIzaQ9s0f2LhXPWukQH8G0CwTRtFEMmIYBYqakPn8wrzuOT44eErd71 OzY++OpRvpO3eo087tbTmmb8kB+p6rCN78ZciWm4Y9rPLfCMMgB5J1vf+mdXAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUfiEWqZV080ITEpFNDF5NOXilhoowHwYDVR0j BBgwFoAUh6TITUNm27FakJClWqLc66hyOUUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzEvODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJBODcyMzk0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1 QUEyRENFQkE4NzIzOTQ1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hNWQ0YzAwYi1kMTA1LTQ5MDYtYjk4MS0xZDAzNDNlMzAxZGEvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTM1NjY2NjY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gF//MA0GCSqGSIb3DQEBCwUAA4IBAQAh H1JVqxZXJsqKkD2QLStkdNaEtukYomt2pmd2l0WUap4Xr0tXKXKRkaYVI/ktRVfo 7hZ7SYrLeKNAXIaEbn9jTZX6rPJj+zirjmRbF9ee25LOayfhAHgwzutm26dVNdEo arADIFO/AvpfTdpPOEaJ2SbmdUnBYy6QhVfFfi4PXHpcd22FPe6ie/QtWJIglbbX OQ2AzB2+ES56Kmp5FEZMAV57MPHAn7GZWml2fSmemLR6H46t6qdKsdolpj9pBXDM MbxyUrPREFoLsPGAyvGp2j8rGy91jeaQ0hfxinOCQyVxMkvj3g0FUxf6eRIeigw5 e1Q0flEZy/WyLt86ajTa -----END CERTIFICATE-----Generated at Wed May 7 22:03:52 2025 by rpki-client