$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: apRB5OfhlgNP9CjlOyLXHwJtDJcG7Ul2o20dXFYOVFQ= Subject key identifier: 2F:20:92:42:90:97:65:51:EC:01:1F:0F:A5:21:92:C4:8B:9C:4F:91 Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Certificate serial: 7AFDBB8D31113A0B8765DCC68AA64533B7788CB4 Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa Signing time: Thu 01 May 2025 06:30:45 +0000 ROA not before: Thu 01 May 2025 06:25:45 +0000 ROA not after: Thu 30 Apr 2026 06:30:45 +0000 asID: 214344 IP address blocks: 2a14:7580:ff43::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 07:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:fd:bb:8d:31:11:3a:0b:87:65:dc:c6:8a:a6:45:33:b7:78:8c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Validity Not Before: May 1 06:25:45 2025 GMT Not After : Apr 30 06:30:45 2026 GMT Subject: CN=2F20924290976551EC011F0FA52192C48B9C4F91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b2:dd:83:72:7f:93:60:a9:55:6b:99:ad:c3: 06:10:a1:4b:b5:d2:9a:ce:67:13:c1:d6:d7:31:a9: 4c:d4:d3:f1:14:cf:8d:06:58:80:20:f3:2b:5c:24: 75:1f:67:25:cb:58:9e:97:70:14:85:5a:88:36:13: 1a:c9:ed:13:9d:c9:f2:99:11:ff:dd:07:78:a1:d7: 8f:fc:51:95:20:52:9a:61:da:60:b6:0f:07:cb:72: 78:4f:d6:e7:8f:a7:91:8f:ad:72:1a:99:90:f4:ee: ab:46:e5:18:3e:cb:45:4a:64:1d:c9:47:c1:3d:69: 68:52:b4:8d:40:0e:1e:a5:d0:6d:4d:a5:96:7c:e1: 28:10:72:00:16:9f:f7:ba:7c:0c:95:f4:b7:c0:ee: cd:26:93:68:ab:a9:f2:01:e5:a2:ce:8b:8e:42:6a: 95:b0:be:62:3e:0e:47:80:48:78:ff:7a:e9:a5:0f: 09:c8:9f:03:0f:8f:62:f9:c9:c5:0e:ac:4a:86:9d: 6f:2d:35:1d:85:91:8e:6c:ab:61:ad:c5:a5:4c:6c: 6e:bd:7b:a2:ab:04:88:3e:ab:b8:03:40:0e:91:8f: e7:a0:de:e4:38:05:9b:be:4b:8e:84:33:a0:aa:87: 8e:0b:f9:d0:fd:4e:92:99:b7:48:73:0c:32:63:5f: fd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:20:92:42:90:97:65:51:EC:01:1F:0F:A5:21:92:C4:8B:9C:4F:91 X509v3 Authority Key Identifier: keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff43::/48 Signature Algorithm: sha256WithRSAEncryption 52:e8:a1:db:d1:76:64:12:ce:fc:41:b4:62:4e:ef:6d:d3:ef: ea:57:45:8d:3e:45:43:30:23:cb:43:aa:58:77:af:94:30:98: ac:bd:fc:fa:93:a0:30:60:f6:3b:ea:c1:76:ef:28:fc:a6:9f: 43:99:30:05:64:d4:b9:85:66:18:fb:d8:d4:d0:88:29:67:f0: 32:2a:ba:3c:1a:d4:0a:6e:c5:36:c1:c1:aa:5a:94:27:44:9e: f3:5b:d6:e9:dc:75:01:04:17:ed:eb:76:03:70:e2:69:b0:e2: f1:41:35:20:8c:c8:21:5f:b7:b2:eb:a6:ad:7e:44:e7:40:7a: 1a:d5:14:cc:4d:56:1e:b4:be:74:ee:ef:dc:36:50:55:0c:a9: 27:e4:3c:42:f5:95:53:3a:93:57:08:3e:5d:81:f6:af:4e:a8: 77:63:06:dd:91:84:11:69:d7:a5:38:76:5b:17:d2:f2:fa:7d: 10:96:e1:60:c6:b2:f7:ac:d0:71:92:6b:09:f7:9f:5b:18:4f: 5a:ee:bd:7d:6e:61:a8:f8:75:d6:7d:a0:e9:5f:cf:99:e3:02: c0:1f:67:0c:60:d4:59:cd:7d:cb:89:75:79:cf:31:9c:19:69: b8:bd:03:b3:e2:70:91:81:4b:b0:19:5d:90:1d:10:4e:5c:aa: f0:1d:23:9d -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUev27jTEROguHZdzGiqZFM7d4jLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJB ODcyMzk0NTAeFw0yNTA1MDEwNjI1NDVaFw0yNjA0MzAwNjMwNDVaMDMxMTAvBgNV BAMTKDJGMjA5MjQyOTA5NzY1NTFFQzAxMUYwRkE1MjE5MkM0OEI5QzRGOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdst2Dcn+TYKlVa5mtwwYQoUu1 0prOZxPB1tcxqUzU0/EUz40GWIAg8ytcJHUfZyXLWJ6XcBSFWog2ExrJ7ROdyfKZ Ef/dB3ih14/8UZUgUpph2mC2DwfLcnhP1uePp5GPrXIamZD07qtG5Rg+y0VKZB3J R8E9aWhStI1ADh6l0G1NpZZ84SgQcgAWn/e6fAyV9LfA7s0mk2irqfIB5aLOi45C apWwvmI+DkeASHj/eumlDwnInwMPj2L5ycUOrEqGnW8tNR2FkY5sq2GtxaVMbG69 e6KrBIg+q7gDQA6Rj+eg3uQ4BZu+S46EM6Cqh44L+dD9TpKZt0hzDDJjX/2nAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQULyCSQpCXZVHsAR8PpSGSxIucT5EwHwYDVR0j BBgwFoAUh6TITUNm27FakJClWqLc66hyOUUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzEvODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJBODcyMzk0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1 QUEyRENFQkE4NzIzOTQ1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hNWQ0YzAwYi1kMTA1LTQ5MDYtYjk4MS0xZDAzNDNlMzAxZGEvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9DMA0GCSqGSIb3DQEBCwUAA4IBAQBS 6KHb0XZkEs78QbRiTu9t0+/qV0WNPkVDMCPLQ6pYd6+UMJisvfz6k6AwYPY76sF2 7yj8pp9DmTAFZNS5hWYY+9jU0IgpZ/AyKro8GtQKbsU2wcGqWpQnRJ7zW9bp3HUB BBft63YDcOJpsOLxQTUgjMghX7ey66atfkTnQHoa1RTMTVYetL507u/cNlBVDKkn 5DxC9ZVTOpNXCD5dgfavTqh3YwbdkYQRadelOHZbF9Ly+n0QluFgxrL3rNBxkmsJ 959bGE9a7r19bmGo+HXWfaDpX8+Z4wLAH2cMYNRZzX3LiXV5zzGcGWm4vQOz4nCR gUuwGV2QHRBOXKrwHSOd -----END CERTIFICATE-----Generated at Thu May 8 19:55:39 2025 by rpki-client