$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430383a3a2f34362d3438203d3e20323135393536.roa File: 326131343a373538303a656430383a3a2f34362d3438203d3e20323135393536.roa (raw, json) Hash identifier: I7/hoAr63LhpXqLplSqJknUsgybSvD4+7U40EM7iCdw= Subject key identifier: A1:4F:37:41:6E:39:D4:01:E0:26:26:DB:EC:1F:9C:9A:F2:B2:70:46 Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 6FCFBE8FA68C1B298FAA3C55B0C7F8711BDA9439 Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430383a3a2f34362d3438203d3e20323135393536.roa Signing time: Thu 13 Feb 2025 23:36:06 +0000 ROA not before: Thu 13 Feb 2025 23:31:06 +0000 ROA not after: Thu 12 Feb 2026 23:36:06 +0000 asID: 215956 IP address blocks: 2a14:7580:ed08::/46 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:cf:be:8f:a6:8c:1b:29:8f:aa:3c:55:b0:c7:f8:71:1b:da:94:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Feb 13 23:31:06 2025 GMT Not After : Feb 12 23:36:06 2026 GMT Subject: CN=A14F37416E39D401E02626DBEC1F9C9AF2B27046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1a:0b:6e:37:28:32:dc:1b:b7:f9:39:eb:1f: fa:ab:2f:27:b6:53:a7:11:e2:11:b9:07:76:51:96: 83:60:04:88:8d:8d:82:54:1e:af:51:a7:c5:00:b8: 3a:6e:71:11:ad:68:d1:e6:17:1f:b1:2d:9c:f5:7d: 2f:26:62:59:79:3a:fa:16:26:10:74:01:78:3e:cd: 11:0e:50:8c:de:9b:56:df:ec:f9:9c:5b:63:a4:dd: 55:51:21:29:8c:2c:c4:fb:d8:8c:4d:d6:e3:06:89: 83:84:b6:7f:84:2b:3b:55:f2:8b:a1:4f:c3:ed:3c: 81:f9:d5:53:8c:8b:92:73:54:21:8b:64:c0:ae:36: 43:aa:36:f7:dd:08:11:45:c8:67:20:ca:46:7f:b4: f1:ca:c8:b5:be:b1:85:d1:9a:e3:22:1b:af:6f:1e: a2:1d:b1:94:40:f4:f3:a3:b8:b3:80:b2:f1:29:3d: a1:ed:17:0b:74:2e:57:8f:d3:1a:5a:54:5e:ba:75: ea:3e:27:9e:e5:ff:fa:61:d3:d4:b6:71:e2:e9:3d: ef:df:b9:19:1c:ea:58:f5:57:d8:be:53:6d:a3:e3: 73:d3:a2:07:13:28:79:c4:40:2b:9e:c7:45:8c:12: 73:fd:b1:ad:36:63:0c:33:e0:12:ef:9c:a7:8a:15: be:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4F:37:41:6E:39:D4:01:E0:26:26:DB:EC:1F:9C:9A:F2:B2:70:46 X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656430383a3a2f34362d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ed08::/46 Signature Algorithm: sha256WithRSAEncryption 1c:14:86:80:09:f2:6e:cd:38:39:2f:81:f8:63:9b:ec:39:fc: 3d:a5:b9:38:fa:be:93:ed:a5:c9:b9:e4:72:97:0f:22:24:84: b1:85:7a:df:74:09:9c:dd:5e:20:99:d6:8b:2e:b9:7f:3c:94: 6b:5f:7f:58:ff:4b:fe:77:23:ea:65:09:82:8d:40:c4:bf:25: b6:a3:5c:3f:0d:15:36:fa:40:74:66:f1:9d:0d:ae:0b:4c:9b: a9:5c:55:e4:f7:14:32:df:48:1f:c0:08:65:98:bf:20:01:68: 55:5a:8d:be:f9:93:2d:82:98:49:2a:77:de:27:b7:57:79:50: 59:f0:0f:7c:28:05:bf:f4:dc:38:b5:7c:01:c8:db:40:ed:ed: 1f:f6:37:d5:eb:8d:a6:ed:a0:09:7f:13:52:0b:16:f1:cc:1f: 42:54:b2:b7:e6:13:e4:76:c1:03:5c:52:5f:e0:67:49:1f:6d: de:c7:d0:4f:d8:00:04:d5:17:c9:59:ef:4b:ca:4f:e2:7f:07: bd:53:35:f8:60:a9:46:d5:4d:9b:09:59:af:cd:bb:ec:6f:73: c5:83:24:7f:ce:03:6b:90:d0:32:45:6e:45:11:21:d6:dc:1f: e9:25:ef:e1:03:f8:ea:de:00:b0:23:11:9f:3c:27:de:94:39: 69:9e:fe:76 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUb8++j6aMGymPqjxVsMf4cRvalDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAyMTMyMzMxMDZaFw0yNjAyMTIyMzM2MDZaMDMxMTAvBgNV BAMTKEExNEYzNzQxNkUzOUQ0MDFFMDI2MjZEQkVDMUY5QzlBRjJCMjcwNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGGgtuNygy3Bu3+TnrH/qrLye2 U6cR4hG5B3ZRloNgBIiNjYJUHq9Rp8UAuDpucRGtaNHmFx+xLZz1fS8mYll5OvoW JhB0AXg+zREOUIzem1bf7PmcW2Ok3VVRISmMLMT72IxN1uMGiYOEtn+EKztV8ouh T8PtPIH51VOMi5JzVCGLZMCuNkOqNvfdCBFFyGcgykZ/tPHKyLW+sYXRmuMiG69v HqIdsZRA9POjuLOAsvEpPaHtFwt0LleP0xpaVF66deo+J57l//ph09S2ceLpPe/f uRkc6lj1V9i+U22j43PTogcTKHnEQCuex0WMEnP9sa02Ywwz4BLvnKeKFb6/AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUoU83QW451AHgJibb7B+cmvKycEYwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjQzMDM4M2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcCKhR1gO0IMA0GCSqGSIb3DQEBCwUAA4IBAQAc FIaACfJuzTg5L4H4Y5vsOfw9pbk4+r6T7aXJueRylw8iJISxhXrfdAmc3V4gmdaL Lrl/PJRrX39Y/0v+dyPqZQmCjUDEvyW2o1w/DRU2+kB0ZvGdDa4LTJupXFXk9xQy 30gfwAhlmL8gAWhVWo2++ZMtgphJKnfeJ7dXeVBZ8A98KAW/9Nw4tXwByNtA7e0f 9jfV642m7aAJfxNSCxbxzB9CVLK35hPkdsEDXFJf4GdJH23ex9BP2AAE1RfJWe9L yk/ifwe9UzX4YKlG1U2bCVmvzbvsb3PFgyR/zgNrkNAyRW5FESHW3B/pJe/hA/jq 3gCwIxGfPCfelDlpnv52 -----END CERTIFICATE-----Generated at Fri May 9 08:29:05 2025 by rpki-client