$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431303a3a2f34362d3438203d3e20323135393536.roa File: 326131343a373538303a656431303a3a2f34362d3438203d3e20323135393536.roa (raw, json) Hash identifier: excrlDWSPl4YwX4GrZXWpcrM9BUCiV9b1rbaeAdMSnQ= Subject key identifier: 78:AD:5A:29:8A:E0:8F:21:EB:38:49:21:B7:3D:30:B2:E4:A7:D9:50 Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 78AC2F705E4955FB024122343278301C5B90A11A Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431303a3a2f34362d3438203d3e20323135393536.roa Signing time: Sun 02 Mar 2025 23:54:41 +0000 ROA not before: Sun 02 Mar 2025 23:49:41 +0000 ROA not after: Sun 01 Mar 2026 23:54:41 +0000 asID: 215956 IP address blocks: 2a14:7580:ed10::/46 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ac:2f:70:5e:49:55:fb:02:41:22:34:32:78:30:1c:5b:90:a1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Mar 2 23:49:41 2025 GMT Not After : Mar 1 23:54:41 2026 GMT Subject: CN=78AD5A298AE08F21EB384921B73D30B2E4A7D950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6e:70:e7:0c:93:6a:6b:46:54:b0:66:a5:70: 5f:17:fb:90:ef:21:20:46:e8:c4:b9:b8:01:a0:99: 3a:07:bb:97:47:f9:5c:23:f8:c1:e6:99:18:1d:ee: 60:f3:03:32:a7:65:3d:e8:3d:7f:a5:5f:c8:05:15: 1a:81:db:22:01:cd:e3:c0:6c:64:a1:ff:d7:bf:72: f6:64:0b:15:20:c5:5e:ee:4a:2a:21:37:7b:1a:27: f2:91:93:eb:04:07:ab:7a:56:e1:f3:3b:3e:27:a6: 84:f9:50:68:72:49:7d:79:10:59:54:1a:4e:52:da: 3d:09:e0:0b:99:2c:ec:26:76:92:64:de:ba:b9:73: 18:4d:69:7b:83:6b:d9:53:12:3d:80:45:ad:5f:83: a8:84:89:fa:7d:3f:5a:e4:fc:34:80:5f:b5:fb:7e: a5:ee:96:c1:90:0b:69:ce:4e:6b:33:3d:5d:e6:fd: 01:33:45:ec:f9:86:ce:5b:00:ef:6c:d2:d7:db:45: 9a:6d:06:70:1d:63:22:50:2b:91:90:eb:26:f8:15: 7e:6c:95:4e:28:0b:3e:29:e1:56:97:f1:51:02:8d: 3b:b3:12:89:e7:3e:66:92:ae:06:f7:54:b4:e1:f9: 75:39:62:45:ae:f4:50:4f:ff:31:ba:a4:5a:5c:00: ed:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AD:5A:29:8A:E0:8F:21:EB:38:49:21:B7:3D:30:B2:E4:A7:D9:50 X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431303a3a2f34362d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ed10::/46 Signature Algorithm: sha256WithRSAEncryption 23:ae:a1:2c:55:5c:f3:31:7f:38:f4:0c:0e:66:70:88:41:14: a6:82:8b:aa:cd:63:94:dc:b5:6c:73:54:3f:66:37:eb:08:ac: 92:da:90:4c:8e:28:38:2e:bd:49:15:f8:5d:fd:a4:3e:f2:94: a6:a4:6f:cf:86:83:fe:71:49:66:bf:d4:01:cf:5b:a5:4b:e3: fc:bd:03:17:69:d5:dd:06:cf:5b:2e:3a:19:85:77:aa:57:5e: 3e:05:65:76:2e:14:24:1c:c6:43:6e:1d:6b:f3:3a:1f:c9:29: 83:9e:f6:26:48:47:3f:e1:c7:f4:b5:d1:f4:3a:a8:64:c8:c9: 73:9e:e1:b7:60:96:78:7a:12:ca:10:9b:bb:d9:eb:b8:21:a1: 18:0e:c0:40:f9:a6:54:7c:ed:dc:45:d8:0c:48:5f:3a:e6:6b: ea:59:ee:43:42:e4:35:ab:c9:a3:71:a8:0d:9d:a2:74:e9:bd: 43:89:ad:a1:a8:dc:7a:37:16:5b:1a:97:4b:11:0c:34:99:d4: d2:36:34:05:34:98:e6:7b:88:26:55:7c:bd:f9:3b:c0:af:93: a6:b8:51:89:97:10:59:b8:a4:85:2e:e7:ab:2d:a9:ef:b1:92: 31:4f:28:39:a1:42:2e:2f:46:f9:d2:52:52:c9:4c:da:1c:87: ad:e6:71:8c -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUeKwvcF5JVfsCQSI0MngwHFuQoRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAzMDIyMzQ5NDFaFw0yNjAzMDEyMzU0NDFaMDMxMTAvBgNV BAMTKDc4QUQ1QTI5OEFFMDhGMjFFQjM4NDkyMUI3M0QzMEIyRTRBN0Q5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGbnDnDJNqa0ZUsGalcF8X+5Dv ISBG6MS5uAGgmToHu5dH+Vwj+MHmmRgd7mDzAzKnZT3oPX+lX8gFFRqB2yIBzePA bGSh/9e/cvZkCxUgxV7uSiohN3saJ/KRk+sEB6t6VuHzOz4npoT5UGhySX15EFlU Gk5S2j0J4AuZLOwmdpJk3rq5cxhNaXuDa9lTEj2ARa1fg6iEifp9P1rk/DSAX7X7 fqXulsGQC2nOTmszPV3m/QEzRez5hs5bAO9s0tfbRZptBnAdYyJQK5GQ6yb4FX5s lU4oCz4p4VaX8VECjTuzEonnPmaSrgb3VLTh+XU5YkWu9FBP/zG6pFpcAO1bAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUeK1aKYrgjyHrOEkhtz0wsuSn2VAwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjQzMTMwM2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcCKhR1gO0QMA0GCSqGSIb3DQEBCwUAA4IBAQAj rqEsVVzzMX849AwOZnCIQRSmgouqzWOU3LVsc1Q/ZjfrCKyS2pBMjig4Lr1JFfhd /aQ+8pSmpG/PhoP+cUlmv9QBz1ulS+P8vQMXadXdBs9bLjoZhXeqV14+BWV2LhQk HMZDbh1r8zofySmDnvYmSEc/4cf0tdH0OqhkyMlznuG3YJZ4ehLKEJu72eu4IaEY DsBA+aZUfO3cRdgMSF865mvqWe5DQuQ1q8mjcagNnaJ06b1Dia2hqNx6NxZbGpdL EQw0mdTSNjQFNJjme4gmVXy9+TvAr5OmuFGJlxBZuKSFLuerLanvsZIxTyg5oUIu L0b50lJSyUzaHIet5nGM -----END CERTIFICATE-----Generated at Fri May 9 08:31:37 2025 by rpki-client