$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435633a3a2f34362d3438203d3e20323135393536.roa File: 326131343a373538303a656435633a3a2f34362d3438203d3e20323135393536.roa (raw, json) Hash identifier: jevL3d6TTOzkxi3ZNaZX4Cgq0RHHKBz0nBQrG1EMVtQ= Subject key identifier: 2C:46:2E:F4:0B:2F:9E:7D:8B:11:15:44:4E:0E:A7:BA:99:2E:06:EF Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 1078768D010EE4F66652E4132748D145F1E4E8C2 Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435633a3a2f34362d3438203d3e20323135393536.roa Signing time: Sat 08 Mar 2025 00:11:33 +0000 ROA not before: Sat 08 Mar 2025 00:06:33 +0000 ROA not after: Sat 07 Mar 2026 00:11:33 +0000 asID: 215956 IP address blocks: 2a14:7580:ed5c::/46 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:78:76:8d:01:0e:e4:f6:66:52:e4:13:27:48:d1:45:f1:e4:e8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Mar 8 00:06:33 2025 GMT Not After : Mar 7 00:11:33 2026 GMT Subject: CN=2C462EF40B2F9E7D8B1115444E0EA7BA992E06EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4b:a3:46:11:a4:a8:2a:ed:0a:4b:5c:b1:6c: 5f:d3:25:39:ae:83:50:bc:80:c6:80:48:4a:c8:61: 4f:0f:60:ef:70:2c:cb:0a:8d:a3:a1:90:a8:2b:3b: 78:16:62:e4:8d:3e:05:f0:74:27:20:ca:0a:4b:6f: c3:c3:4c:6a:ea:e7:f0:b4:c6:14:51:70:82:07:00: 0b:67:55:f4:95:bf:13:03:37:92:56:19:c8:61:8b: 77:c4:59:f0:ba:2f:a3:1c:25:c1:1a:d4:f6:25:35: 3c:e3:66:8e:8c:03:65:a2:a9:0c:74:bc:ea:6d:52: c9:ce:d2:a0:e1:f4:b6:99:63:4f:62:4b:b5:db:c8: 0f:d5:d4:7b:8e:6c:3b:6c:6e:2d:07:d0:1b:42:ac: 00:90:79:43:68:51:ad:be:b3:0f:1b:49:1b:d4:d9: b8:0e:88:57:d5:c9:82:c1:9c:29:a8:7e:6f:67:96: 48:db:4a:b3:c1:6c:76:97:3b:05:b9:46:87:e3:8e: 34:f3:3b:69:74:72:04:f5:c9:dd:91:6a:21:a0:5f: b9:ef:49:b8:41:66:d0:32:c7:87:ad:61:66:ab:c9: 30:dc:03:c8:38:ab:5b:b6:cb:f0:21:93:e1:8e:ca: 72:11:fe:2c:8e:54:a0:5b:30:f0:6e:b7:a5:51:7e: ae:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:46:2E:F4:0B:2F:9E:7D:8B:11:15:44:4E:0E:A7:BA:99:2E:06:EF X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435633a3a2f34362d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ed5c::/46 Signature Algorithm: sha256WithRSAEncryption 51:c4:a8:c0:08:08:1d:a6:c3:67:ea:ea:64:8d:b4:3a:26:4f: be:80:ca:47:f5:ee:f7:bb:9a:70:fd:7a:b2:29:d7:bf:f7:81: a2:a9:0d:51:2b:39:56:d9:c1:c5:f4:c2:34:64:e6:3a:c2:13: f8:e5:5c:c8:89:ae:92:64:19:30:d4:e8:c1:be:53:16:c8:41: 96:60:3f:5b:6a:fd:c2:b0:33:ba:54:42:11:ac:65:58:3a:c8: 43:33:52:bf:30:99:0f:a8:36:bf:eb:15:54:6b:e7:ee:14:44: a8:ba:d5:8f:31:0f:53:b1:5a:95:a3:68:65:a9:22:59:98:e7: e3:d5:ef:9e:b8:f4:3c:67:8f:a2:2c:85:78:0f:09:56:43:07: 6c:55:9e:b2:eb:14:fd:32:2b:ce:75:3b:26:c6:15:e2:bd:61: ce:07:3b:d3:8e:a2:81:14:96:32:08:58:5f:4e:1f:04:42:64: 6a:1a:1e:fc:f4:42:7d:9f:29:b0:28:52:ad:c2:0c:a2:37:49: 49:cc:a6:54:51:f6:f0:1b:f4:05:a1:25:99:f7:a0:37:37:91: c0:69:d4:a8:00:bc:e5:10:d3:6e:43:a5:84:ce:83:7e:a3:26: 6e:4a:01:3e:1d:20:f5:c9:8e:17:1b:ec:d7:51:b9:8f:00:45: ea:25:49:62 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUEHh2jQEO5PZmUuQTJ0jRRfHk6MIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAzMDgwMDA2MzNaFw0yNjAzMDcwMDExMzNaMDMxMTAvBgNV BAMTKDJDNDYyRUY0MEIyRjlFN0Q4QjExMTU0NDRFMEVBN0JBOTkyRTA2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDS6NGEaSoKu0KS1yxbF/TJTmu g1C8gMaASErIYU8PYO9wLMsKjaOhkKgrO3gWYuSNPgXwdCcgygpLb8PDTGrq5/C0 xhRRcIIHAAtnVfSVvxMDN5JWGchhi3fEWfC6L6McJcEa1PYlNTzjZo6MA2WiqQx0 vOptUsnO0qDh9LaZY09iS7XbyA/V1HuObDtsbi0H0BtCrACQeUNoUa2+sw8bSRvU 2bgOiFfVyYLBnCmofm9nlkjbSrPBbHaXOwW5RofjjjTzO2l0cgT1yd2RaiGgX7nv SbhBZtAyx4etYWaryTDcA8g4q1u2y/Ahk+GOynIR/iyOVKBbMPBut6VRfq6nAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQULEYu9Asvnn2LERVETg6nupkuBu8wHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjQzNTYzM2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcCKhR1gO1cMA0GCSqGSIb3DQEBCwUAA4IBAQBR xKjACAgdpsNn6upkjbQ6Jk++gMpH9e73u5pw/XqyKde/94GiqQ1RKzlW2cHF9MI0 ZOY6whP45VzIia6SZBkw1OjBvlMWyEGWYD9bav3CsDO6VEIRrGVYOshDM1K/MJkP qDa/6xVUa+fuFESoutWPMQ9TsVqVo2hlqSJZmOfj1e+euPQ8Z4+iLIV4DwlWQwds VZ6y6xT9MivOdTsmxhXivWHOBzvTjqKBFJYyCFhfTh8EQmRqGh789EJ9nymwKFKt wgyiN0lJzKZUUfbwG/QFoSWZ96A3N5HAadSoALzlENNuQ6WEzoN+oyZuSgE+HSD1 yY4XG+zXUbmPAEXqJUli -----END CERTIFICATE-----Generated at Fri May 9 08:26:11 2025 by rpki-client