$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435323a3a2f34372d3438203d3e20323135393536.roa File: 326131343a373538303a656435323a3a2f34372d3438203d3e20323135393536.roa (raw, json) Hash identifier: 5LBsCAzjASb6G1ME+AJzOffwvS3wGMpN+GN7+FO3R7Q= Subject key identifier: 32:3E:C6:D8:10:3B:D2:7A:60:15:B4:39:34:E0:09:14:39:29:92:2A Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 2626AF0A49AD9BA860D9FD6A92FD905583D6DB41 Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435323a3a2f34372d3438203d3e20323135393536.roa Signing time: Sat 08 Mar 2025 00:13:05 +0000 ROA not before: Sat 08 Mar 2025 00:08:05 +0000 ROA not after: Sat 07 Mar 2026 00:13:05 +0000 asID: 215956 IP address blocks: 2a14:7580:ed52::/47 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:26:af:0a:49:ad:9b:a8:60:d9:fd:6a:92:fd:90:55:83:d6:db:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Mar 8 00:08:05 2025 GMT Not After : Mar 7 00:13:05 2026 GMT Subject: CN=323EC6D8103BD27A6015B43934E009143929922A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:5b:c2:50:fe:e1:a1:c7:dc:c9:98:b4:9f: b2:27:02:81:73:7d:a6:e0:12:38:56:1e:dd:ae:12: be:fd:11:04:ba:84:44:a0:f2:33:3b:19:62:25:9b: 93:6a:46:c4:b5:09:c0:c8:bb:91:0e:e8:98:b9:5c: 49:0a:41:d0:4f:3a:cd:50:17:71:63:3b:89:42:22: 06:9c:c8:cd:80:a5:15:1f:9a:64:c4:8a:b7:30:f6: fd:ac:32:a3:73:4d:fc:1a:85:cf:6c:f7:ee:0f:09: 9f:11:b6:49:bc:06:12:df:41:1c:c7:ba:d1:86:72: 0b:3f:7e:ce:5f:a4:1f:e7:2c:30:0f:ef:3a:46:5f: f0:13:d8:68:b9:96:7a:fa:2b:25:68:a7:de:44:da: 82:04:1e:46:ba:f8:66:7b:15:51:35:1f:8a:c2:6e: ae:14:48:6f:08:c9:a5:2b:b2:c5:bb:fd:87:2f:b5: 72:4e:de:4c:e0:91:2f:e2:27:4e:66:ab:00:ea:94: 46:d2:32:58:1a:bb:e1:57:53:69:be:00:1c:51:39: 07:2a:5d:2a:74:62:55:5f:9c:5f:e3:e7:75:e9:e6: 60:f0:de:3d:97:df:22:0a:ef:2f:56:af:bb:b6:d6: a6:ef:b0:13:f1:88:8c:ea:2e:2a:92:95:4f:d5:ef: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3E:C6:D8:10:3B:D2:7A:60:15:B4:39:34:E0:09:14:39:29:92:2A X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435323a3a2f34372d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ed52::/47 Signature Algorithm: sha256WithRSAEncryption a5:26:93:99:21:72:ed:2c:d4:b8:e7:9e:72:a5:8f:3c:bd:54: 50:ec:5c:c7:a1:85:2d:f4:1f:c5:d9:ce:a1:4e:ff:35:02:cc: 3c:83:4d:dd:50:19:ad:5d:03:a5:f1:52:e2:bb:f2:02:c8:73: f3:af:af:a3:d5:57:8c:4a:a0:f5:04:94:7c:43:05:f5:0a:a4: 81:f8:9b:e0:e9:37:85:95:d8:ef:ff:c9:53:de:59:a4:0a:fd: 5f:2d:31:cb:b2:b9:d7:eb:0d:64:30:af:94:74:6c:2f:71:3b: 4d:9b:af:05:5a:85:04:7a:cf:aa:96:d3:94:91:16:cb:11:f1: 1c:7d:f9:bc:80:0a:90:ee:f7:0e:c2:77:b0:b1:9d:ac:59:af: b9:e5:11:bf:2b:7f:92:ca:d0:82:5c:24:d5:f0:15:36:d3:ec: 5c:78:0f:97:6d:70:cd:b5:10:05:a6:d3:db:c9:02:73:d5:3d: f5:65:e2:a2:34:49:d2:99:34:cb:f4:a6:65:ca:28:27:45:45: 30:7e:44:af:9d:20:94:1b:2b:86:24:b7:7d:5b:e4:a4:37:f1: 0f:62:12:f2:77:b2:d4:e3:cb:f3:b7:d6:93:8a:af:b7:2b:2e: b0:d1:ff:11:d7:fe:ff:41:08:7b:1d:be:f6:d1:84:73:2f:46: 68:37:36:76 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUJiavCkmtm6hg2f1qkv2QVYPW20EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAzMDgwMDA4MDVaFw0yNjAzMDcwMDEzMDVaMDMxMTAvBgNV BAMTKDMyM0VDNkQ4MTAzQkQyN0E2MDE1QjQzOTM0RTAwOTE0MzkyOTkyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TFvCUP7hocfcyZi0n7InAoFz fabgEjhWHt2uEr79EQS6hESg8jM7GWIlm5NqRsS1CcDIu5EO6Ji5XEkKQdBPOs1Q F3FjO4lCIgacyM2ApRUfmmTEircw9v2sMqNzTfwahc9s9+4PCZ8Rtkm8BhLfQRzH utGGcgs/fs5fpB/nLDAP7zpGX/AT2Gi5lnr6KyVop95E2oIEHka6+GZ7FVE1H4rC bq4USG8IyaUrssW7/YcvtXJO3kzgkS/iJ05mqwDqlEbSMlgau+FXU2m+ABxROQcq XSp0YlVfnF/j53Xp5mDw3j2X3yIK7y9Wr7u21qbvsBPxiIzqLiqSlU/V71l7AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUMj7G2BA70npgFbQ5NOAJFDkpkiowHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjQzNTMyM2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcBKhR1gO1SMA0GCSqGSIb3DQEBCwUAA4IBAQCl JpOZIXLtLNS4555ypY88vVRQ7FzHoYUt9B/F2c6hTv81Asw8g03dUBmtXQOl8VLi u/ICyHPzr6+j1VeMSqD1BJR8QwX1CqSB+Jvg6TeFldjv/8lT3lmkCv1fLTHLsrnX 6w1kMK+UdGwvcTtNm68FWoUEes+qltOUkRbLEfEcffm8gAqQ7vcOwnewsZ2sWa+5 5RG/K3+SytCCXCTV8BU20+xceA+XbXDNtRAFptPbyQJz1T31ZeKiNEnSmTTL9KZl yignRUUwfkSvnSCUGyuGJLd9W+SkN/EPYhLyd7LU48vzt9aTiq+3Ky6w0f8R1/7/ QQh7Hb720YRzL0ZoNzZ2 -----END CERTIFICATE-----Generated at Fri May 9 08:29:03 2025 by rpki-client