$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656434303a3a2f34372d3438203d3e20323135393536.roa File: 326131343a373538303a656434303a3a2f34372d3438203d3e20323135393536.roa (raw, json) Hash identifier: cpW5X2LGDWGO3Mq6IWFoKq0AVmcqV72j0ReYB8HWc6A= Subject key identifier: 12:62:24:46:DD:44:B4:75:EB:14:E4:F6:AA:ED:59:C4:B6:FF:F3:EB Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 1399ABA28026FFA0D81D1C5B37E996418ED46E08 Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656434303a3a2f34372d3438203d3e20323135393536.roa Signing time: Sat 08 Mar 2025 00:14:53 +0000 ROA not before: Sat 08 Mar 2025 00:09:53 +0000 ROA not after: Sat 07 Mar 2026 00:14:53 +0000 asID: 215956 IP address blocks: 2a14:7580:ed40::/47 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 11:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:99:ab:a2:80:26:ff:a0:d8:1d:1c:5b:37:e9:96:41:8e:d4:6e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Mar 8 00:09:53 2025 GMT Not After : Mar 7 00:14:53 2026 GMT Subject: CN=12622446DD44B475EB14E4F6AAED59C4B6FFF3EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:af:14:44:2c:c4:3d:d7:f4:03:a5:c2:1d:f4: 3f:91:05:d7:12:fb:de:47:ee:71:2f:1a:cf:d4:e7: bd:45:0f:ca:80:ed:8d:45:07:9d:93:4f:e5:5d:9b: 30:7c:3d:73:26:e6:ae:76:e2:9e:2a:ef:42:59:4c: d1:34:5d:bc:e4:e2:09:76:aa:9e:61:9f:f5:63:eb: 6b:28:ef:28:f1:61:69:6b:05:d8:83:dd:0a:6b:be: 2c:35:51:97:e2:d0:90:0a:8b:1b:d1:39:4f:17:8a: 0f:a1:54:35:87:46:4b:61:a8:03:89:98:4d:77:32: 58:e9:ed:34:6a:7f:49:75:84:b8:01:cc:fc:bc:7d: 3c:4f:49:77:91:58:ce:13:4b:09:50:e6:6d:b8:cd: de:67:6b:b5:4e:68:34:a6:0b:33:cd:a9:30:46:17: b7:a6:44:6d:50:0c:2e:7e:59:e8:50:e5:c1:d3:55: a7:f4:b1:43:a4:54:ec:43:b6:7d:f6:92:5e:64:8e: c5:84:11:4b:7c:ec:0a:f5:38:22:74:7a:8d:e1:87: 0f:f7:d2:af:70:0c:05:18:2f:ac:7f:e5:84:b0:ee: db:21:87:c6:06:ea:3f:7f:dd:21:2a:ab:59:0b:b7: de:a1:9b:48:5f:cc:59:91:27:66:2f:36:89:fe:eb: e2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:62:24:46:DD:44:B4:75:EB:14:E4:F6:AA:ED:59:C4:B6:FF:F3:EB X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656434303a3a2f34372d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ed40::/47 Signature Algorithm: sha256WithRSAEncryption a8:f0:d0:15:38:a1:b5:e4:30:2e:15:7d:f0:44:60:79:4d:0c: ba:1e:6d:8c:56:15:40:98:b7:ff:39:be:d8:56:15:c3:32:c5: 72:21:db:af:00:14:ea:de:c9:e4:7c:68:86:05:f3:52:a2:a7: 3b:00:31:96:70:bb:b1:ad:ee:a8:de:58:41:46:46:36:45:99: 4f:d9:d3:fb:88:1a:5e:67:e3:f5:29:99:99:c6:79:7d:e6:21: e3:8d:a2:fd:b8:69:21:25:0c:20:4f:a5:14:66:2e:62:d9:ea: 1e:d6:52:b8:2a:e5:b6:c3:86:a7:c2:d5:52:40:17:f8:9b:01: 77:5e:89:39:06:b3:c9:1a:b4:d7:b5:55:56:79:39:9a:7b:57: 79:77:84:b4:e3:78:f6:2c:2d:cf:60:ee:34:ab:70:9c:c5:f1: a2:a9:e8:31:fd:58:6c:cf:0a:a4:ef:53:c9:a4:3a:88:47:ee: bc:f9:26:57:dc:07:44:e7:e2:d3:85:85:dc:17:3e:61:ed:cb: a1:97:4c:1b:43:16:cd:34:ed:25:5b:0c:c7:88:b5:71:65:7c: 97:4e:47:d1:51:2a:21:ca:6b:41:75:d0:1c:97:51:4c:75:36: 28:00:0e:e5:bf:ec:e4:69:15:ab:d4:5b:d4:cd:6a:70:23:c8: de:0c:1b:d6 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUE5mrooAm/6DYHRxbN+mWQY7UbggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAzMDgwMDA5NTNaFw0yNjAzMDcwMDE0NTNaMDMxMTAvBgNV BAMTKDEyNjIyNDQ2REQ0NEI0NzVFQjE0RTRGNkFBRUQ1OUM0QjZGRkYzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rxRELMQ91/QDpcId9D+RBdcS +95H7nEvGs/U571FD8qA7Y1FB52TT+VdmzB8PXMm5q524p4q70JZTNE0Xbzk4gl2 qp5hn/Vj62so7yjxYWlrBdiD3Qprviw1UZfi0JAKixvROU8Xig+hVDWHRkthqAOJ mE13Mljp7TRqf0l1hLgBzPy8fTxPSXeRWM4TSwlQ5m24zd5na7VOaDSmCzPNqTBG F7emRG1QDC5+WehQ5cHTVaf0sUOkVOxDtn32kl5kjsWEEUt87Ar1OCJ0eo3hhw/3 0q9wDAUYL6x/5YSw7tshh8YG6j9/3SEqq1kLt96hm0hfzFmRJ2YvNon+6+LLAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUEmIkRt1EtHXrFOT2qu1ZxLb/8+swHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjQzNDMwM2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcBKhR1gO1AMA0GCSqGSIb3DQEBCwUAA4IBAQCo 8NAVOKG15DAuFX3wRGB5TQy6Hm2MVhVAmLf/Ob7YVhXDMsVyIduvABTq3snkfGiG BfNSoqc7ADGWcLuxre6o3lhBRkY2RZlP2dP7iBpeZ+P1KZmZxnl95iHjjaL9uGkh JQwgT6UUZi5i2eoe1lK4KuW2w4anwtVSQBf4mwF3Xok5BrPJGrTXtVVWeTmae1d5 d4S043j2LC3PYO40q3CcxfGiqegx/Vhszwqk71PJpDqIR+68+SZX3AdE5+LThYXc Fz5h7cuhl0wbQxbNNO0lWwzHiLVxZXyXTkfRUSohymtBddAcl1FMdTYoAA7lv+zk aRWr1FvUzWpwI8jeDBvW -----END CERTIFICATE-----Generated at Fri May 9 03:28:35 2025 by rpki-client