$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa File: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (raw, json) Hash identifier: suIl/3chBmz4SE6S2JNws6yO1vlc1iZKVLvbUUyDaA0= Subject key identifier: 68:FE:62:90:78:89:D2:11:BC:A0:DF:F1:99:BA:55:C5:D6:91:0E:E8 Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 29862C2B8C750167C16DA7D44973143FAC1AB40B Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa Signing time: Tue 25 Jun 2024 12:33:56 +0000 ROA not before: Tue 25 Jun 2024 12:28:56 +0000 ROA not after: Tue 24 Jun 2025 12:33:56 +0000 asID: 37988 IP address blocks: 2a14:7581:d000::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 03:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:86:2c:2b:8c:75:01:67:c1:6d:a7:d4:49:73:14:3f:ac:1a:b4:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Jun 25 12:28:56 2024 GMT Not After : Jun 24 12:33:56 2025 GMT Subject: CN=68FE62907889D211BCA0DFF199BA55C5D6910EE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2a:69:0c:a4:78:a1:3e:5c:d7:b7:87:1f:76: 19:ca:b7:d5:f8:6e:aa:e1:c1:af:a6:0a:e3:a7:21: d1:d8:f8:25:ef:72:7c:64:8f:ce:3b:90:77:78:b0: 2f:73:1f:46:a6:07:ce:ac:7f:29:f0:e9:9c:5a:58: 8d:e9:bc:d8:87:4a:6f:ee:ae:5e:69:8d:47:13:fe: a7:63:03:cb:b5:0e:d9:74:0f:54:3d:4b:51:2b:58: bc:0f:e8:77:d2:f2:08:05:d7:8f:9e:44:65:0b:73: 7a:49:7c:61:6c:4b:55:e8:8a:b2:f3:91:97:e5:da: 4c:26:da:88:b5:20:80:0e:81:72:ab:24:4f:12:de: 82:52:1a:fe:df:b0:03:6f:8b:d9:2f:40:b8:39:b7: 4c:ae:c8:41:5a:a4:3f:47:20:71:34:b1:bb:19:e7: 6d:7d:34:3f:95:50:36:d5:b1:f4:24:84:d7:66:23: 22:4c:4c:fa:8d:ad:47:24:13:4b:be:60:be:4e:ef: 98:ed:7e:25:fa:d6:cc:c9:63:d1:70:7f:31:23:5f: 4b:ec:0a:76:bb:50:7c:ef:19:42:5c:ed:3b:6a:8f: 94:07:1f:e8:25:ba:7c:4f:91:12:e1:0e:46:e4:83: 52:41:77:da:19:6e:11:42:a7:b2:01:d1:17:52:39: 51:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FE:62:90:78:89:D2:11:BC:A0:DF:F1:99:BA:55:C5:D6:91:0E:E8 X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:d000::/40 Signature Algorithm: sha256WithRSAEncryption 84:67:da:2d:46:ec:27:10:07:4f:0a:fc:28:59:3d:0f:f8:d8: 41:c3:c6:60:44:13:6f:eb:ae:fb:60:eb:e0:39:0b:ab:22:d3: fb:63:d1:86:ed:6c:13:64:42:77:98:20:f6:d1:29:c7:18:52: 84:2a:21:6f:46:c5:b4:cf:bf:62:81:e4:33:67:1a:06:6b:9d: 8f:d4:f2:90:0b:ee:96:75:ce:ab:40:b8:21:0b:a9:8f:fc:77: 9c:86:0c:2f:58:67:9d:92:00:10:af:f7:63:d5:c8:f8:3f:ea: 7a:93:9f:0f:10:3c:ec:29:cb:fb:46:30:60:c8:9a:83:4d:cb: 6a:1e:b2:89:0f:f4:be:c3:85:97:17:36:9e:cd:97:7c:7e:85: 88:39:12:bb:1e:83:b2:8e:2e:21:ba:b8:9c:72:24:4c:79:21: 7c:04:2d:cb:c7:bf:37:f3:1f:c4:ae:50:26:f6:5e:e8:5a:23: 4f:ac:2a:aa:a0:32:1c:71:0f:e4:c5:30:b3:f1:14:91:11:e0: fc:89:b2:2f:03:ed:8f:b7:28:2a:05:83:27:47:6b:23:51:d6: 03:5b:f6:7d:b8:e9:06:81:54:67:64:25:9c:27:10:09:31:2e: 8d:87:33:27:ac:8b:52:2b:f5:1e:61:be:b7:f3:4c:c6:e8:c9: e1:d5:f9:9c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKYYsK4x1AWfBbafUSXMUP6watAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNDA2MjUxMjI4NTZaFw0yNTA2MjQxMjMzNTZaMDMxMTAvBgNV BAMTKDY4RkU2MjkwNzg4OUQyMTFCQ0EwREZGMTk5QkE1NUM1RDY5MTBFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmKmkMpHihPlzXt4cfdhnKt9X4 bqrhwa+mCuOnIdHY+CXvcnxkj847kHd4sC9zH0amB86sfynw6ZxaWI3pvNiHSm/u rl5pjUcT/qdjA8u1Dtl0D1Q9S1ErWLwP6HfS8ggF14+eRGULc3pJfGFsS1XoirLz kZfl2kwm2oi1IIAOgXKrJE8S3oJSGv7fsANvi9kvQLg5t0yuyEFapD9HIHE0sbsZ 5219ND+VUDbVsfQkhNdmIyJMTPqNrUckE0u+YL5O75jtfiX61szJY9FwfzEjX0vs Cna7UHzvGUJc7Ttqj5QHH+glunxPkRLhDkbkg1JBd9oZbhFCp7IB0RdSOVHlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUaP5ikHiJ0hG8oN/xmbpVxdaRDugwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iNTljMTA2Yy01M2I0LTRlOTItOWZiYS1kNjA4MjdiNWJkYjgvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTY0MzAzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzMz NzM5MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYHQMA0GCSqGSIb3DQEBCwUAA4IBAQCEZ9ot RuwnEAdPCvwoWT0P+NhBw8ZgRBNv6677YOvgOQurItP7Y9GG7WwTZEJ3mCD20SnH GFKEKiFvRsW0z79igeQzZxoGa52P1PKQC+6Wdc6rQLghC6mP/HechgwvWGedkgAQ r/dj1cj4P+p6k58PEDzsKcv7RjBgyJqDTctqHrKJD/S+w4WXFzaezZd8foWIORK7 HoOyji4huricciRMeSF8BC3Lx7838x/ErlAm9l7oWiNPrCqqoDIccQ/kxTCz8RSR EeD8ibIvA+2PtygqBYMnR2sjUdYDW/Z9uOkGgVRnZCWcJxAJMS6NhzMnrItSK/Ue Yb6380zG6Mnh1fmc -----END CERTIFICATE-----Generated at Tue May 6 15:07:40 2025 by rpki-client