$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436323a3a2f34372d3438203d3e20323135393536.roa File: 326131343a373538303a656436323a3a2f34372d3438203d3e20323135393536.roa (raw, json) Hash identifier: Kqzub2qIs1qegd52eIRw8Wsd7KmqqBpaDbntybnXZCs= Subject key identifier: CB:C9:A9:82:21:63:46:B1:3D:97:60:E8:03:6E:F7:DC:76:F8:81:3B Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 2C5A97BAD70572C88361CE6477134A385C461249 Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436323a3a2f34372d3438203d3e20323135393536.roa Signing time: Sat 08 Mar 2025 00:10:29 +0000 ROA not before: Sat 08 Mar 2025 00:05:29 +0000 ROA not after: Sat 07 Mar 2026 00:10:29 +0000 asID: 215956 IP address blocks: 2a14:7580:ed62::/47 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 11:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5a:97:ba:d7:05:72:c8:83:61:ce:64:77:13:4a:38:5c:46:12:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Mar 8 00:05:29 2025 GMT Not After : Mar 7 00:10:29 2026 GMT Subject: CN=CBC9A982216346B13D9760E8036EF7DC76F8813B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:77:f7:c8:ad:ab:ec:09:ae:56:a1:4f:5b: a5:5d:a7:ce:b5:29:20:57:69:29:21:e2:0a:d4:49: ec:bb:6a:f1:86:54:ee:a7:12:95:06:c4:a8:17:f9: 83:56:44:53:53:38:ab:1c:0e:36:8f:c7:07:b6:88: 28:3f:9b:b1:ca:e7:75:00:55:3c:3e:f5:6b:38:72: d0:95:85:31:2c:0c:7e:71:66:12:24:4e:7e:75:6f: 1d:43:b0:85:13:f6:45:49:ce:75:aa:03:eb:a1:64: 64:6b:75:f6:8f:7b:b4:b4:8c:72:e6:08:d6:72:8b: 24:cb:76:a6:b5:fb:87:9f:28:4c:be:5b:be:8f:36: 8d:ba:1a:d0:10:f4:bf:4a:81:25:22:93:fa:0f:51: f1:c3:e9:ec:69:a2:ae:d2:bb:0f:ab:fd:14:56:a1: b2:3b:76:28:23:70:61:01:4f:8c:66:00:5f:d1:02: 91:fa:80:26:ae:5c:89:1b:ab:dc:c2:a6:17:8a:92: 92:40:73:de:fa:cf:d5:2d:23:73:90:88:c7:7c:b2: 6a:7f:98:b7:4a:5e:4d:21:98:4e:36:6c:ab:7d:36: 07:41:b9:d7:e3:6f:44:a5:3c:90:d8:13:7d:85:c5: b4:99:b2:4f:9b:48:cc:ea:e4:c0:13:11:cd:a5:dd: ce:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C9:A9:82:21:63:46:B1:3D:97:60:E8:03:6E:F7:DC:76:F8:81:3B X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436323a3a2f34372d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ed62::/47 Signature Algorithm: sha256WithRSAEncryption 80:81:57:79:d0:13:1e:ae:dc:6b:a6:c7:09:34:13:90:85:cd: 61:ba:ec:cd:68:74:7b:a4:c7:13:61:24:7e:98:8c:63:70:c2: 07:bb:f5:51:be:80:ce:68:37:08:37:ef:69:e0:90:7d:f2:7f: 89:8a:5a:be:b9:ad:94:75:00:a1:ba:ed:08:58:e3:55:0a:64: 21:18:f2:a5:fe:9a:af:bc:b7:40:f4:5d:82:51:d6:32:65:c8: e1:86:b4:2f:e1:66:dd:f3:bf:4a:11:0c:3a:95:1e:4d:fa:dd: c2:4e:33:69:7a:8f:c3:0c:69:e3:b1:1f:db:b5:05:5c:7c:63: 5a:01:fe:59:c4:0a:a2:05:29:ec:ac:78:de:a3:6e:b8:40:8b: c7:76:a8:87:36:e6:1d:7d:fd:cb:67:e2:38:21:06:c6:f0:96: b2:8a:36:f3:5c:f0:bc:2c:a1:57:e4:d8:9f:76:ac:80:18:01: ad:7f:02:26:f8:13:f0:06:af:d3:cc:84:2f:34:e6:a5:b7:18: d4:bf:42:56:be:a8:02:10:2a:b9:ed:08:fe:e1:d8:27:32:02: ed:2c:38:68:eb:e2:84:b3:56:6e:aa:67:39:91:c6:76:29:49: ff:05:a2:a5:05:ab:7c:a9:c1:ba:00:ce:48:ac:ab:6b:12:f3: a7:b1:0e:d2 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIULFqXutcFcsiDYc5kdxNKOFxGEkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAzMDgwMDA1MjlaFw0yNjAzMDcwMDEwMjlaMDMxMTAvBgNV BAMTKENCQzlBOTgyMjE2MzQ2QjEzRDk3NjBFODAzNkVGN0RDNzZGODgxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSUHf3yK2r7AmuVqFPW6Vdp861 KSBXaSkh4grUSey7avGGVO6nEpUGxKgX+YNWRFNTOKscDjaPxwe2iCg/m7HK53UA VTw+9Ws4ctCVhTEsDH5xZhIkTn51bx1DsIUT9kVJznWqA+uhZGRrdfaPe7S0jHLm CNZyiyTLdqa1+4efKEy+W76PNo26GtAQ9L9KgSUik/oPUfHD6expoq7Suw+r/RRW obI7digjcGEBT4xmAF/RApH6gCauXIkbq9zCpheKkpJAc976z9UtI3OQiMd8smp/ mLdKXk0hmE42bKt9NgdBudfjb0SlPJDYE32FxbSZsk+bSMzq5MATEc2l3c4XAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUy8mpgiFjRrE9l2DoA2733Hb4gTswHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjQzNjMyM2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcBKhR1gO1iMA0GCSqGSIb3DQEBCwUAA4IBAQCA gVd50BMertxrpscJNBOQhc1huuzNaHR7pMcTYSR+mIxjcMIHu/VRvoDOaDcIN+9p 4JB98n+Jilq+ua2UdQChuu0IWONVCmQhGPKl/pqvvLdA9F2CUdYyZcjhhrQv4Wbd 879KEQw6lR5N+t3CTjNpeo/DDGnjsR/btQVcfGNaAf5ZxAqiBSnsrHjeo264QIvH dqiHNuYdff3LZ+I4IQbG8JayijbzXPC8LKFX5NifdqyAGAGtfwIm+BPwBq/TzIQv NOaltxjUv0JWvqgCECq57Qj+4dgnMgLtLDho6+KEs1Zuqmc5kcZ2KUn/BaKlBat8 qcG6AM5IrKtrEvOnsQ7S -----END CERTIFICATE-----Generated at Fri May 9 03:25:43 2025 by rpki-client