$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa File: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (raw, json) Hash identifier: DJIGVPPFdKw8WztsRwxSv88N7qWJk5uvTreoiT8psfU= Subject key identifier: 37:5C:C9:DE:AD:4E:9E:58:92:96:B4:97:61:21:C8:37:05:6D:E9:34 Certificate issuer: /CN=178395FF98E8AEA645CFCD7DF742855D46457BAF Certificate serial: 3F7F9F388CCDC78207EC551DCEFB2E47844B9685 Authority key identifier: 17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa Signing time: Fri 14 Feb 2025 13:57:59 +0000 ROA not before: Fri 14 Feb 2025 13:52:59 +0000 ROA not after: Fri 13 Feb 2026 13:57:59 +0000 asID: 214723 IP address blocks: 2a0a:6044:ba02::/47 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 04:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:7f:9f:38:8c:cd:c7:82:07:ec:55:1d:ce:fb:2e:47:84:4b:96:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=178395FF98E8AEA645CFCD7DF742855D46457BAF Validity Not Before: Feb 14 13:52:59 2025 GMT Not After : Feb 13 13:57:59 2026 GMT Subject: CN=375CC9DEAD4E9E589296B4976121C837056DE934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7c:75:db:6b:37:17:4a:1e:02:17:fe:7a:e0: cd:0c:56:6f:dd:6f:01:f9:9c:3c:dc:82:66:4f:bd: 2f:f4:48:75:40:db:40:22:7c:ef:1e:f6:ca:5b:35: 9e:86:25:9c:18:fa:12:59:8e:8c:e8:a3:35:c4:7b: de:e1:e5:4c:02:10:e0:5d:74:1f:05:dc:30:d5:c8: e9:fe:5a:19:2b:17:41:fc:e3:5d:ee:1b:31:4a:b1: 3e:ed:55:81:5d:59:1e:bd:b1:bb:b7:16:32:cb:41: d5:c7:49:59:e8:27:35:d5:37:5b:44:73:d8:10:db: 85:82:3b:ba:40:67:9e:c8:1b:3d:f2:bf:1a:b4:2c: f9:f8:97:8d:66:f6:25:de:12:9e:34:88:35:ca:e5: 85:f2:76:6e:73:f1:9e:39:ac:eb:31:0c:5e:f5:b8: 29:06:11:d8:4c:6b:93:e9:39:08:11:3f:b1:54:6c: e5:eb:34:11:fd:09:0a:ce:7a:46:05:65:13:39:3a: d3:41:32:7d:a3:36:c3:e1:1a:b6:59:ab:50:7b:bd: ed:1b:58:b8:d1:78:ff:58:c7:51:ed:15:05:cc:c5: 14:26:e4:25:eb:08:e1:2c:86:d2:e4:59:af:91:18: 48:dc:70:66:10:2f:b8:e9:80:f8:ee:c6:e0:2d:95: 02:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5C:C9:DE:AD:4E:9E:58:92:96:B4:97:61:21:C8:37:05:6D:E9:34 X509v3 Authority Key Identifier: keyid:17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ba02::/47 Signature Algorithm: sha256WithRSAEncryption 69:cf:52:fc:71:07:6d:25:05:3c:4e:63:d5:17:b6:64:76:de: 11:a1:ea:ec:2c:3a:b4:aa:ea:42:4c:37:d5:bf:49:06:a0:c4: 59:e4:9b:e1:d3:94:9c:33:1b:8f:9b:b7:f7:ef:4f:b2:12:46: b4:2b:45:2a:9c:b1:27:da:7a:b4:4f:d8:6e:e9:24:ef:2d:f0: 64:72:b3:87:a3:67:23:4b:3d:37:37:53:d7:2a:c7:10:53:91: 55:d0:60:8c:2e:9f:a5:c1:1d:07:d6:1d:9c:e0:0d:e0:26:75: 98:c2:65:c5:ac:17:f7:93:3e:97:25:05:54:19:70:7f:87:87: e6:00:f6:5d:7e:b9:2f:2c:b1:e3:12:9a:6c:5e:c8:50:f1:b4: 4a:8e:9f:5a:3c:20:1b:cf:40:3f:3c:4c:34:73:ed:df:8e:8c: 41:ad:83:17:9c:f5:0f:62:6b:33:ea:5f:a7:d8:45:73:99:a0: cd:f4:ac:3f:e6:1b:f3:31:f3:a9:45:12:ab:f1:37:75:a6:32: bf:17:5b:ae:d2:54:d8:75:ac:cf:06:c1:8d:71:a3:f3:3b:fd: 9d:59:51:fa:4e:ba:e4:78:5e:97:c8:d1:ab:eb:e6:52:5c:34: 58:a7:07:d7:f6:51:91:03:c2:62:ec:ef:49:3a:5c:69:d3:a6: 61:d6:c6:fe -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUP3+fOIzNx4IH7FUdzvsuR4RLloUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc4Mzk1RkY5OEU4QUVBNjQ1Q0ZDRDdERjc0Mjg1NUQ0 NjQ1N0JBRjAeFw0yNTAyMTQxMzUyNTlaFw0yNjAyMTMxMzU3NTlaMDMxMTAvBgNV BAMTKDM3NUNDOURFQUQ0RTlFNTg5Mjk2QjQ5NzYxMjFDODM3MDU2REU5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDofHXbazcXSh4CF/564M0MVm/d bwH5nDzcgmZPvS/0SHVA20AifO8e9spbNZ6GJZwY+hJZjozoozXEe97h5UwCEOBd dB8F3DDVyOn+WhkrF0H8413uGzFKsT7tVYFdWR69sbu3FjLLQdXHSVnoJzXVN1tE c9gQ24WCO7pAZ57IGz3yvxq0LPn4l41m9iXeEp40iDXK5YXydm5z8Z45rOsxDF71 uCkGEdhMa5PpOQgRP7FUbOXrNBH9CQrOekYFZRM5OtNBMn2jNsPhGrZZq1B7ve0b WLjReP9Yx1HtFQXMxRQm5CXrCOEshtLkWa+RGEjccGYQL7jpgPjuxuAtlQIRAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUN1zJ3q1OnliSlrSXYSHINwVt6TQwHwYDVR0j BBgwFoAUF4OV/5jorqZFz81990KFXUZFe68wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzIvMTc4Mzk1RkY5OEU4QUVBNjQ1Q0ZDRDdERjc0Mjg1NUQ0NjQ1N0JBRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy8xNzgzOTVGRjk4RThBRUE2NDVDRkNEN0RG NzQyODU1RDQ2NDU3QkFGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kN2U0NTkyZS0yM2MwLTRjY2MtOTRkYS02Yzk1ODA3ZjgzZTcvMi8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYyNjEzMDMyM2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIz MTM0MzczMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcBKgpgRLoCMA0GCSqGSIb3DQEBCwUAA4IBAQBp z1L8cQdtJQU8TmPVF7Zkdt4RoersLDq0qupCTDfVv0kGoMRZ5Jvh05ScMxuPm7f3 70+yEka0K0UqnLEn2nq0T9hu6STvLfBkcrOHo2cjSz03N1PXKscQU5FV0GCMLp+l wR0H1h2c4A3gJnWYwmXFrBf3kz6XJQVUGXB/h4fmAPZdfrkvLLHjEppsXshQ8bRK jp9aPCAbz0A/PEw0c+3fjoxBrYMXnPUPYmsz6l+n2EVzmaDN9Kw/5hvzMfOpRRKr 8Td1pjK/F1uu0lTYdazPBsGNcaPzO/2dWVH6TrrkeF6XyNGr6+ZSXDRYpwfX9lGR A8Ji7O9JOlxp06Zh1sb+ -----END CERTIFICATE-----Generated at Fri May 9 16:49:01 2025 by rpki-client