$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431343a3a2f34362d3438203d3e20323135393536.roa File: 326131343a373538303a656431343a3a2f34362d3438203d3e20323135393536.roa (raw, json) Hash identifier: CBinVNP14p3fJKjz8cJdLh4NiErv8Lc4GRjI4Fj+49U= Subject key identifier: 1B:34:72:4F:7F:55:8C:8C:F3:5D:AA:35:8F:A7:20:3F:DA:9C:5C:5C Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 64D87B2EA2544F0F831F907E4419F278E4A811E3 Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431343a3a2f34362d3438203d3e20323135393536.roa Signing time: Sat 08 Mar 2025 00:06:15 +0000 ROA not before: Sat 08 Mar 2025 00:01:15 +0000 ROA not after: Sat 07 Mar 2026 00:06:15 +0000 asID: 215956 IP address blocks: 2a14:7580:ed14::/46 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d8:7b:2e:a2:54:4f:0f:83:1f:90:7e:44:19:f2:78:e4:a8:11:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Mar 8 00:01:15 2025 GMT Not After : Mar 7 00:06:15 2026 GMT Subject: CN=1B34724F7F558C8CF35DAA358FA7203FDA9C5C5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c0:08:af:3d:1e:e1:4b:bc:e0:13:33:df:e4: 18:12:cc:a6:24:74:4c:a5:76:3e:22:3a:ca:ce:9e: 0e:09:75:b7:26:47:fa:ea:53:f2:a1:9c:86:fe:f2: 45:a6:2c:75:64:b2:ab:5e:2b:5d:a0:b5:c6:d9:3c: 65:bf:fc:69:83:f8:84:60:1a:7e:cc:61:a2:a6:8b: de:09:43:44:17:99:e7:4a:c5:12:37:f0:ab:71:03: c2:da:cf:c7:03:25:fc:21:d2:62:73:4d:f1:0d:3f: 20:89:0f:d2:de:e8:3d:f4:c4:a5:bb:b5:58:15:ab: 3f:ba:68:76:fb:fc:41:a0:ca:f0:4d:2e:e5:f7:95: 76:37:c4:d5:c8:a6:f5:ff:b6:06:bf:46:45:33:4f: 36:01:35:df:58:eb:b6:53:11:33:85:f7:bc:fa:16: a0:22:a3:09:9a:bc:b5:e7:24:4c:6f:b7:79:b9:ee: fe:20:24:96:3a:ab:e5:cf:f0:ac:c8:f5:c9:06:ba: 37:94:68:75:02:8b:10:3e:c3:69:93:dd:49:a5:2c: 5c:05:4b:02:59:4d:04:a5:ac:37:ad:86:5f:65:87: d2:85:68:e6:26:67:33:d9:6e:8f:f9:2a:b8:8e:ca: e0:f8:82:ef:82:8a:d5:7e:b1:32:4b:db:19:72:fd: 39:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:34:72:4F:7F:55:8C:8C:F3:5D:AA:35:8F:A7:20:3F:DA:9C:5C:5C X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431343a3a2f34362d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ed14::/46 Signature Algorithm: sha256WithRSAEncryption 4f:d4:f1:7f:ed:af:3e:d2:03:08:56:30:fe:16:91:f7:7e:4a: 97:04:d2:45:49:a9:3f:f8:30:36:db:e3:9c:01:5e:e4:06:0b: f0:bb:95:21:79:5e:06:f4:ef:e4:05:bd:a9:84:82:28:ae:f3: f1:60:d0:21:62:dc:b1:cd:f6:07:e0:32:af:86:4f:a2:05:82: c9:da:31:3f:1b:36:83:46:c2:30:31:07:89:70:55:91:f4:c0: 70:a2:06:f8:b1:05:54:10:17:19:2c:e8:a9:cf:9a:59:53:68: ca:03:89:a8:57:5d:47:1f:3f:6e:44:b1:59:64:f1:ba:a9:5b: e0:fe:c2:63:5d:bd:5b:06:39:8a:a7:98:d7:fb:31:7d:07:99: 14:bb:bc:10:e2:17:ae:9d:3b:d8:62:11:7c:50:b4:17:62:02: 09:9e:6a:50:d4:fb:e3:fe:fb:25:42:3e:81:37:87:05:6b:27: 58:c9:0e:54:5b:6c:57:26:da:46:c7:b8:44:6c:33:37:82:97: 6b:f9:3d:b3:6d:4f:3a:4f:ef:61:48:b0:ee:0b:cd:d0:1f:73: a0:d4:52:dd:b3:e4:dd:64:55:69:f8:1a:63:b2:8c:ec:59:15: 3d:5c:15:38:57:48:51:10:df:e2:6e:06:45:ce:7b:01:69:a7: 38:99:63:0f -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUZNh7LqJUTw+DH5B+RBnyeOSoEeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAzMDgwMDAxMTVaFw0yNjAzMDcwMDA2MTVaMDMxMTAvBgNV BAMTKDFCMzQ3MjRGN0Y1NThDOENGMzVEQUEzNThGQTcyMDNGREE5QzVDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVwAivPR7hS7zgEzPf5BgSzKYk dEyldj4iOsrOng4JdbcmR/rqU/KhnIb+8kWmLHVksqteK12gtcbZPGW//GmD+IRg Gn7MYaKmi94JQ0QXmedKxRI38KtxA8Laz8cDJfwh0mJzTfENPyCJD9Le6D30xKW7 tVgVqz+6aHb7/EGgyvBNLuX3lXY3xNXIpvX/tga/RkUzTzYBNd9Y67ZTETOF97z6 FqAiowmavLXnJExvt3m57v4gJJY6q+XP8KzI9ckGujeUaHUCixA+w2mT3UmlLFwF SwJZTQSlrDethl9lh9KFaOYmZzPZbo/5KriOyuD4gu+CitV+sTJL2xly/TkPAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUGzRyT39VjIzzXao1j6cgP9qcXFwwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjQzMTM0M2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcCKhR1gO0UMA0GCSqGSIb3DQEBCwUAA4IBAQBP 1PF/7a8+0gMIVjD+FpH3fkqXBNJFSak/+DA22+OcAV7kBgvwu5UheV4G9O/kBb2p hIIorvPxYNAhYtyxzfYH4DKvhk+iBYLJ2jE/GzaDRsIwMQeJcFWR9MBwogb4sQVU EBcZLOipz5pZU2jKA4moV11HHz9uRLFZZPG6qVvg/sJjXb1bBjmKp5jX+zF9B5kU u7wQ4heunTvYYhF8ULQXYgIJnmpQ1Pvj/vslQj6BN4cFaydYyQ5UW2xXJtpGx7hE bDM3gpdr+T2zbU86T+9hSLDuC83QH3Og1FLds+TdZFVp+BpjsozsWRU9XBU4V0hR EN/ibgZFznsBaac4mWMP -----END CERTIFICATE-----Generated at Fri May 9 08:27:23 2025 by rpki-client