$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: 3uRQGY7O+ZvtbHNtgC5MF4VJ4PR1W0vGtZuXeGQdfrI= Subject key identifier: EA:85:58:48:FD:3B:20:11:53:A9:E1:66:EF:99:90:16:CE:90:7E:5B Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Certificate serial: 2EEF9EE18559DEC866406CAB3AB5850970A84C75 Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa Signing time: Mon 28 Apr 2025 16:23:21 +0000 ROA not before: Mon 28 Apr 2025 16:18:21 +0000 ROA not after: Mon 27 Apr 2026 16:23:21 +0000 asID: 214344 IP address blocks: 2a14:7581:9902::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ef:9e:e1:85:59:de:c8:66:40:6c:ab:3a:b5:85:09:70:a8:4c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Validity Not Before: Apr 28 16:18:21 2025 GMT Not After : Apr 27 16:23:21 2026 GMT Subject: CN=EA855848FD3B201153A9E166EF999016CE907E5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:95:e2:9c:4e:0b:4d:65:4f:29:d8:24:2b:c5: 5b:d9:23:d5:29:7d:14:11:a6:0b:16:d0:f8:18:ca: 21:c0:3a:d6:db:38:2f:d0:5c:75:99:93:7c:26:80: 6e:81:ff:9a:76:ca:e9:7f:38:10:34:74:44:da:7e: 33:b0:72:07:4a:8e:6a:07:c3:9c:36:ac:76:f7:a2: 08:29:95:a1:6e:39:b8:60:65:27:72:84:48:8c:05: 9c:fe:e0:61:05:29:22:c0:59:e5:c6:8a:b6:d7:49: 04:16:99:18:f1:de:8d:f2:e5:26:e0:c9:d8:64:dc: f4:d8:41:42:08:13:bd:91:9f:92:5e:08:8b:cc:d1: ae:7c:f8:4e:a8:f4:91:b4:89:93:78:17:4c:13:95: 68:44:c4:c7:44:b1:e1:02:e6:6e:9d:f5:25:82:94: eb:b3:f5:c5:60:ce:cd:ce:d0:33:78:61:7c:85:b8: 8b:28:ab:4f:f7:28:30:31:0a:4a:9f:60:a2:11:6f: 4b:d5:5f:44:49:1c:8b:65:c1:f4:ad:94:8c:c0:6b: d6:05:29:4b:dd:bb:61:c0:11:38:4e:8d:02:f4:d0: 45:66:45:da:68:56:42:af:78:8d:9c:ae:cd:bd:46: 25:1b:5b:10:6e:bc:08:96:a0:98:fa:db:f2:fe:50: 9f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:85:58:48:FD:3B:20:11:53:A9:E1:66:EF:99:90:16:CE:90:7E:5B X509v3 Authority Key Identifier: keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9902::/48 Signature Algorithm: sha256WithRSAEncryption 0f:93:80:cb:25:79:b0:ae:47:28:3d:33:aa:af:e9:c3:63:37: fb:3e:a7:cb:4c:58:6a:7d:bd:db:7c:74:be:1f:65:1b:3d:07: e2:1f:1b:3c:d6:2c:6e:d8:81:ea:4d:13:9a:e5:85:dc:71:f9: 6e:6f:f8:1c:45:d1:eb:d4:22:d2:35:4e:c3:c3:3f:3a:31:52: 58:a8:a6:a6:3d:00:f5:27:35:43:4d:ea:4a:23:7c:a8:fc:e9: ba:67:26:cf:9a:9b:e5:24:81:df:70:8e:ca:b3:11:13:05:2f: 0a:35:be:f1:93:0d:3c:83:11:a0:60:ea:6d:1c:cd:dd:00:e5: a6:65:7b:94:d7:e7:64:27:46:a4:d2:ad:d2:a2:41:1a:ef:8b: 6b:a0:d4:26:b0:4a:59:4e:36:8d:6f:68:89:c1:33:97:74:25: 6a:f4:2f:5b:01:2b:5e:9b:88:2f:dd:8f:97:ab:e0:ad:a5:be: 69:d1:10:ca:fc:25:a3:d1:e2:07:6c:9a:1e:b2:8c:e6:04:5b: 79:c1:3e:bf:26:17:6f:9f:99:00:6b:9f:11:c3:cb:10:97:21: 48:91:a2:eb:d1:0c:33:11:4d:0a:4b:e5:18:69:5c:f6:1d:5b: f9:6e:2d:d6:48:6e:62:ed:46:92:ba:ee:21:38:4f:70:39:47: 17:90:8b:f1 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIULu+e4YVZ3shmQGyrOrWFCXCoTHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJB ODcyMzk0NTAeFw0yNTA0MjgxNjE4MjFaFw0yNjA0MjcxNjIzMjFaMDMxMTAvBgNV BAMTKEVBODU1ODQ4RkQzQjIwMTE1M0E5RTE2NkVGOTk5MDE2Q0U5MDdFNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXleKcTgtNZU8p2CQrxVvZI9Up fRQRpgsW0PgYyiHAOtbbOC/QXHWZk3wmgG6B/5p2yul/OBA0dETafjOwcgdKjmoH w5w2rHb3oggplaFuObhgZSdyhEiMBZz+4GEFKSLAWeXGirbXSQQWmRjx3o3y5Sbg ydhk3PTYQUIIE72Rn5JeCIvM0a58+E6o9JG0iZN4F0wTlWhExMdEseEC5m6d9SWC lOuz9cVgzs3O0DN4YXyFuIsoq0/3KDAxCkqfYKIRb0vVX0RJHItlwfStlIzAa9YF KUvdu2HAEThOjQL00EVmRdpoVkKveI2crs29RiUbWxBuvAiWoJj62/L+UJ+HAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU6oVYSP07IBFTqeFm75mQFs6QflswHwYDVR0j BBgwFoAUh6TITUNm27FakJClWqLc66hyOUUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzEvODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJBODcyMzk0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1 QUEyRENFQkE4NzIzOTQ1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hNWQ0YzAwYi1kMTA1LTQ5MDYtYjk4MS0xZDAzNDNlMzAxZGEvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM5MzkzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZkCMA0GCSqGSIb3DQEBCwUAA4IBAQAP k4DLJXmwrkcoPTOqr+nDYzf7PqfLTFhqfb3bfHS+H2UbPQfiHxs81ixu2IHqTROa 5YXccflub/gcRdHr1CLSNU7Dwz86MVJYqKamPQD1JzVDTepKI3yo/Om6ZybPmpvl JIHfcI7KsxETBS8KNb7xkw08gxGgYOptHM3dAOWmZXuU1+dkJ0ak0q3SokEa74tr oNQmsEpZTjaNb2iJwTOXdCVq9C9bAStem4gv3Y+Xq+Ctpb5p0RDK/CWj0eIHbJoe sozmBFt5wT6/Jhdvn5kAa58Rw8sQlyFIkaLr0QwzEU0KS+UYaVz2HVv5bi3WSG5i 7UaSuu4hOE9wOUcXkIvx -----END CERTIFICATE-----Generated at Thu May 8 11:19:34 2025 by rpki-client