$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436343a3a2f34372d3438203d3e20323135393536.roa File: 326131343a373538303a656436343a3a2f34372d3438203d3e20323135393536.roa (raw, json) Hash identifier: dtCHKVVK8KAOqV/eycsypDEDUcEZAIfXsuNiLq8uz9U= Subject key identifier: 03:15:F8:A6:4D:59:A0:BC:7F:42:11:12:CB:F1:63:EC:FC:07:71:63 Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 09E1AD1E850EDE0855EFFD449ACA0136A427D840 Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436343a3a2f34372d3438203d3e20323135393536.roa Signing time: Sat 08 Mar 2025 00:09:48 +0000 ROA not before: Sat 08 Mar 2025 00:04:48 +0000 ROA not after: Sat 07 Mar 2026 00:09:48 +0000 asID: 215956 IP address blocks: 2a14:7580:ed64::/47 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e1:ad:1e:85:0e:de:08:55:ef:fd:44:9a:ca:01:36:a4:27:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Mar 8 00:04:48 2025 GMT Not After : Mar 7 00:09:48 2026 GMT Subject: CN=0315F8A64D59A0BC7F421112CBF163ECFC077163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5c:fb:c6:32:3c:43:ae:28:4e:86:78:89:69: 30:a4:24:ee:0b:57:7d:7b:eb:f3:09:79:bd:c5:3f: 8b:d9:c3:02:df:c5:ab:22:76:ee:64:d3:0d:a9:93: 7f:0c:e7:b0:49:5f:74:f8:26:3f:7f:0f:2e:29:f6: e9:cd:8f:c4:15:5c:bd:1e:d2:29:a6:7b:14:40:fe: 44:dd:73:6f:62:c5:3b:39:88:46:0f:36:0f:54:c9: 2b:86:32:fd:07:cd:b0:22:b7:3e:3c:d8:a0:96:cb: 9b:a8:fb:37:3e:34:2c:23:34:d3:16:15:25:46:c5: 1b:c2:db:bd:32:2d:91:b6:95:a5:44:36:c1:28:fe: 70:6c:03:fa:37:43:38:ac:c8:03:38:25:e2:8c:c5: 69:38:8b:6d:19:4d:cd:6b:b4:14:6c:21:81:09:27: 38:70:44:03:d8:19:40:85:39:44:0b:64:10:6b:9e: 67:97:3e:59:15:f1:18:1e:a7:5e:9f:04:fd:eb:89: 09:88:60:92:a1:5c:b0:86:42:00:b1:64:22:4a:fe: 9c:fb:ae:d9:e8:5f:78:c3:8a:4c:5b:32:06:65:13: da:da:62:b9:ac:23:f1:92:7d:cb:c8:45:27:8a:71: 27:31:e4:8d:3f:df:3d:f8:08:52:7f:70:e7:c5:0c: 79:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:15:F8:A6:4D:59:A0:BC:7F:42:11:12:CB:F1:63:EC:FC:07:71:63 X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436343a3a2f34372d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ed64::/47 Signature Algorithm: sha256WithRSAEncryption a6:1c:b8:d3:dd:bb:76:94:0f:a2:49:08:32:f0:81:88:0e:e0: 6e:8f:25:f0:03:a7:70:ed:3d:12:4a:c7:f7:d6:0e:e3:30:7c: 32:39:7c:13:2f:07:23:f8:07:7c:42:09:f6:37:7f:3f:c5:99: 53:f1:54:eb:45:49:64:52:e6:07:55:cb:ca:78:0b:ea:32:10: 29:4b:85:d5:b8:7d:53:22:21:a7:32:cb:c9:b3:17:50:8f:4f: e6:92:40:98:59:62:03:a4:4c:39:3e:80:df:0a:47:e4:df:de: 96:1a:9b:00:f1:77:c0:72:9e:57:82:c9:52:06:c6:ac:ea:17: ef:56:f3:01:3e:ed:fd:90:e8:f7:4e:39:8e:81:6b:9c:e2:ee: 5a:72:7f:b1:d1:8c:e1:02:20:d0:7a:85:74:79:a0:6a:56:92: 66:7c:46:b4:46:f5:4a:f6:fa:e0:5d:a4:36:2b:ee:a0:c7:8b: fb:bc:79:21:c7:ff:d2:e0:18:dd:73:6f:17:97:f6:64:3c:4c: 87:6a:d0:43:5e:2b:3c:33:34:f5:15:7e:a0:b7:bc:11:f4:40: 2d:bd:7e:88:14:25:0e:67:3b:c2:0e:2a:d5:1a:09:85:b0:0b: 14:fe:0f:56:6a:1d:61:ac:ea:08:86:5e:7e:92:88:73:3e:a6: a4:5f:ea:fe -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUCeGtHoUO3ghV7/1EmsoBNqQn2EAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAzMDgwMDA0NDhaFw0yNjAzMDcwMDA5NDhaMDMxMTAvBgNV BAMTKDAzMTVGOEE2NEQ1OUEwQkM3RjQyMTExMkNCRjE2M0VDRkMwNzcxNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPXPvGMjxDrihOhniJaTCkJO4L V3176/MJeb3FP4vZwwLfxasidu5k0w2pk38M57BJX3T4Jj9/Dy4p9unNj8QVXL0e 0immexRA/kTdc29ixTs5iEYPNg9UySuGMv0HzbAitz482KCWy5uo+zc+NCwjNNMW FSVGxRvC270yLZG2laVENsEo/nBsA/o3QzisyAM4JeKMxWk4i20ZTc1rtBRsIYEJ JzhwRAPYGUCFOUQLZBBrnmeXPlkV8Rgep16fBP3riQmIYJKhXLCGQgCxZCJK/pz7 rtnoX3jDikxbMgZlE9raYrmsI/GSfcvIRSeKcScx5I0/3z34CFJ/cOfFDHnLAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUAxX4pk1ZoLx/QhESy/Fj7PwHcWMwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjQzNjM0M2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcBKhR1gO1kMA0GCSqGSIb3DQEBCwUAA4IBAQCm HLjT3bt2lA+iSQgy8IGIDuBujyXwA6dw7T0SSsf31g7jMHwyOXwTLwcj+Ad8Qgn2 N38/xZlT8VTrRUlkUuYHVcvKeAvqMhApS4XVuH1TIiGnMsvJsxdQj0/mkkCYWWID pEw5PoDfCkfk396WGpsA8XfAcp5XgslSBsas6hfvVvMBPu39kOj3TjmOgWuc4u5a cn+x0YzhAiDQeoV0eaBqVpJmfEa0RvVK9vrgXaQ2K+6gx4v7vHkhx//S4Bjdc28X l/ZkPEyHatBDXis8MzT1FX6gt7wR9EAtvX6IFCUOZzvCDirVGgmFsAsU/g9Wah1h rOoIhl5+kohzPqakX+r+ -----END CERTIFICATE-----Generated at Fri May 9 08:29:58 2025 by rpki-client