$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa File: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (raw, json) Hash identifier: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk= Subject key identifier: 61:D4:2C:F5:7D:6F:76:88:C2:4A:82:14:78:47:82:57:B2:49:0F:B5 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 79464C32F6F28CC4D6C569AD66C4C4ABF66B3D43 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa Signing time: Sat 08 Feb 2025 01:37:58 +0000 ROA not before: Sat 08 Feb 2025 01:32:58 +0000 ROA not after: Sat 07 Feb 2026 01:37:58 +0000 asID: 215242 IP address blocks: 2a0f:85c1:7f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 02:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:46:4c:32:f6:f2:8c:c4:d6:c5:69:ad:66:c4:c4:ab:f6:6b:3d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Feb 8 01:32:58 2025 GMT Not After : Feb 7 01:37:58 2026 GMT Subject: CN=61D42CF57D6F7688C24A821478478257B2490FB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:f6:d2:bd:1d:64:74:7b:30:c5:cf:98:80: 61:0d:bc:51:c9:76:27:40:45:6f:ce:c2:7c:ef:60: 7c:de:0e:06:3d:8a:25:cb:e9:5f:7b:6b:90:23:e7: 2f:29:01:f0:a4:c2:18:1a:ee:75:0c:1e:5e:99:af: 28:cc:ae:1c:1d:03:c9:42:af:b5:34:ce:5c:8f:5a: a8:26:8a:0f:ae:30:7b:59:6b:b2:18:94:f3:73:2a: da:b7:92:f0:94:8a:7a:9e:77:9f:f9:ff:29:e5:d0: ef:69:1d:f7:88:9f:3d:0b:0a:70:f6:10:75:db:85: 7e:0c:ee:20:c7:dd:1b:1c:35:ab:29:c4:0c:09:d9: 02:2b:97:17:fd:16:b4:ee:d8:c3:ea:9a:8f:89:7b: e3:57:ef:f3:0a:6f:dc:c2:26:56:4e:3f:9e:4c:5a: 25:00:47:60:bf:4e:30:92:18:ed:37:ac:8d:ce:fb: 79:6e:92:53:10:83:f3:85:66:50:af:b0:64:c1:82: 84:bd:a5:a5:af:8c:3a:e2:3f:29:06:b5:40:4d:73: ff:d6:49:fe:1a:6c:3f:09:dc:4e:78:ce:46:43:91: a7:a0:12:61:6b:1a:a8:57:82:4b:a1:d9:37:6e:36: 8a:9c:04:75:a8:a5:e7:49:0e:1b:bf:f6:fd:bd:33: b6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D4:2C:F5:7D:6F:76:88:C2:4A:82:14:78:47:82:57:B2:49:0F:B5 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:7f9::/48 Signature Algorithm: sha256WithRSAEncryption 4b:fe:ae:e0:ff:55:a8:55:ec:a5:c7:3e:12:77:e6:2d:bc:25: 92:9c:fd:26:1f:4f:bc:92:7e:66:73:85:21:1f:59:1d:70:d5: 1f:26:9d:03:14:0e:80:af:64:60:f2:48:70:52:3c:c9:d7:f2: f7:ab:55:4a:93:02:52:d3:9b:f6:49:65:f0:0d:cb:73:98:90: 5c:94:25:c9:c2:96:cb:97:99:90:4a:61:e9:05:22:f4:09:4d: 0e:cb:cc:01:5f:67:3b:5a:fe:1d:47:9a:63:41:da:0b:9a:2d: 02:89:75:6d:f4:a9:00:e8:09:a2:7b:0e:3d:9d:4d:e6:63:fb: f5:6a:c7:91:6d:ef:d1:c0:65:65:30:f1:d7:e7:a5:e3:d3:a2: 8a:f6:b1:54:56:f5:b7:4c:a5:8a:22:5e:d0:91:4d:e0:ed:3c: be:26:07:1f:44:4c:16:72:fc:a3:31:e8:37:76:de:92:b6:8d: 14:e1:eb:ed:85:a2:17:69:55:2b:f6:cf:2a:ba:c6:ef:2e:bb: 3b:db:70:34:31:c2:4d:a3:e3:57:31:e8:41:6e:af:5f:74:cd: 5e:50:52:09:38:91:be:86:a9:f9:7c:b4:c7:6b:48:b5:21:f7: 14:b1:2d:51:6d:d4:d3:21:f0:e5:df:54:cc:48:fc:d5:08:ea: 32:47:bd:b5 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUeUZMMvbyjMTWxWmtZsTEq/ZrPUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTAyMDgwMTMyNThaFw0yNjAyMDcwMTM3NThaMDMxMTAvBgNV BAMTKDYxRDQyQ0Y1N0Q2Rjc2ODhDMjRBODIxNDc4NDc4MjU3QjI0OTBGQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLTfbSvR1kdHswxc+YgGENvFHJ didARW/OwnzvYHzeDgY9iiXL6V97a5Aj5y8pAfCkwhga7nUMHl6ZryjMrhwdA8lC r7U0zlyPWqgmig+uMHtZa7IYlPNzKtq3kvCUinqed5/5/ynl0O9pHfeInz0LCnD2 EHXbhX4M7iDH3RscNaspxAwJ2QIrlxf9FrTu2MPqmo+Je+NX7/MKb9zCJlZOP55M WiUAR2C/TjCSGO03rI3O+3luklMQg/OFZlCvsGTBgoS9paWvjDriPykGtUBNc//W Sf4abD8J3E54zkZDkaegEmFrGqhXgkuh2TduNoqcBHWopedJDhu/9v29M7aFAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUYdQs9X1vdojCSoIUeEeCV7JJD7UwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTM3NjYzOTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEH+TANBgkqhkiG9w0BAQsFAAOCAQEAS/6u 4P9VqFXspcc+EnfmLbwlkpz9Jh9PvJJ+ZnOFIR9ZHXDVHyadAxQOgK9kYPJIcFI8 ydfy96tVSpMCUtOb9kll8A3Lc5iQXJQlycKWy5eZkEph6QUi9AlNDsvMAV9nO1r+ HUeaY0HaC5otAol1bfSpAOgJonsOPZ1N5mP79WrHkW3v0cBlZTDx1+el49Oiivax VFb1t0yliiJe0JFN4O08viYHH0RMFnL8ozHoN3bekraNFOHr7YWiF2lVK/bPKrrG 7y67O9twNDHCTaPjVzHoQW6vX3TNXlBSCTiRvoap+Xy0x2tItSH3FLEtUW3U0yHw 5d9UzEj81QjqMke9tQ== -----END CERTIFICATE-----Generated at Sat May 10 17:02:12 2025 by rpki-client