$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463303a3a2f34372d3438203d3e20323135393536.roa File: 326131343a373538303a656463303a3a2f34372d3438203d3e20323135393536.roa (raw, json) Hash identifier: AQQOMxbyHdi/QRQwL8IjR0uC20BOBfCMyVbTLYDkWm4= Subject key identifier: 96:09:12:62:1C:85:50:D1:E3:89:00:53:70:F8:5F:8B:1F:C0:A9:06 Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 77279E789AB6218E9E989C0F6428FA9F51294C40 Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463303a3a2f34372d3438203d3e20323135393536.roa Signing time: Sat 08 Mar 2025 00:16:55 +0000 ROA not before: Sat 08 Mar 2025 00:11:55 +0000 ROA not after: Sat 07 Mar 2026 00:16:55 +0000 asID: 215956 IP address blocks: 2a14:7580:edc0::/47 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 02:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:27:9e:78:9a:b6:21:8e:9e:98:9c:0f:64:28:fa:9f:51:29:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Mar 8 00:11:55 2025 GMT Not After : Mar 7 00:16:55 2026 GMT Subject: CN=960912621C8550D1E389005370F85F8B1FC0A906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:43:9e:91:7c:16:5c:8a:d5:9c:a2:0b:6b:fb: 2c:c7:c5:98:0a:71:18:72:95:fc:c7:4e:51:5e:86: 2c:5a:d2:d3:ec:45:62:fb:91:ae:7e:b7:27:4d:9f: ef:02:ba:7b:f2:9b:3c:d2:7e:b9:72:e0:3e:c9:0c: 24:fa:95:a5:0d:c0:99:20:7a:b3:82:3b:15:0b:b8: 04:35:2b:db:d1:ac:37:35:a6:55:df:23:df:51:48: 4d:ba:96:4f:b7:03:77:91:f6:74:ac:db:4d:ca:e5: 35:8c:f9:85:dc:d9:ea:7f:1d:8c:a0:68:34:d7:ba: 4c:98:49:4a:c9:48:4e:42:de:58:c5:eb:3a:2a:a9: ce:e2:e2:e4:f7:83:9c:db:d8:5f:ad:4b:74:f8:bb: 66:ad:a6:24:52:da:04:a1:50:4c:26:37:4a:6f:30: f2:9c:6a:87:50:4a:22:90:e5:c6:fb:f8:e2:4f:e9: cd:90:64:84:9d:2c:c9:0a:58:85:d6:ed:d5:5d:2d: 03:37:d8:11:32:ee:c4:85:35:b0:cf:33:2b:a5:65: 2c:8c:54:67:8e:85:5b:7a:6d:d1:79:6d:76:06:8e: 51:eb:0a:f8:36:c7:da:33:b3:71:35:8f:db:54:2d: aa:df:08:57:9f:9a:34:09:a1:5c:bf:2f:f4:e0:01: c7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:09:12:62:1C:85:50:D1:E3:89:00:53:70:F8:5F:8B:1F:C0:A9:06 X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463303a3a2f34372d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:edc0::/47 Signature Algorithm: sha256WithRSAEncryption 8f:8b:0f:81:bd:d9:3b:00:d7:66:47:18:93:07:a9:0f:8d:c7: e1:27:89:bc:8a:5b:7d:4d:0a:98:e1:33:4e:d1:03:17:c8:0a: a1:ba:d9:da:6d:0d:24:cb:90:49:30:18:11:7b:b6:dc:d2:2a: 65:fa:67:20:b8:43:1f:24:2a:f9:c3:ea:e6:df:5d:2e:e4:f2: 6d:7d:ff:3f:0d:d3:89:f7:68:82:84:fb:f9:83:7f:ee:ad:54: 63:ed:c4:22:fa:8c:d8:b3:13:b8:7e:5b:a5:9e:f2:f2:98:e1: 57:2e:fe:35:c4:d0:31:c0:a2:58:e7:30:86:53:bd:21:c5:ad: 07:97:eb:a7:2d:a6:db:bb:e0:fc:c7:c2:ca:30:77:c4:06:b1: 11:5c:1e:8d:ab:74:b7:a9:f0:81:61:f5:45:40:95:6e:b1:19: 68:c8:59:d9:4c:77:f5:db:a4:79:05:66:32:d7:4f:18:a1:af: 87:de:f9:1f:6e:b7:a5:4b:a0:d4:74:b2:6a:28:5e:60:b0:50: e4:79:df:42:c4:32:5e:a2:14:69:1d:dd:fc:d0:f2:e5:75:c3: 20:85:e0:7d:2c:a9:2e:e9:88:8f:35:13:13:fa:8b:03:f5:eb: 81:0b:6d:31:10:98:89:b1:b3:1e:00:ae:30:66:8a:37:4e:65: 79:6a:e0:7b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUdyeeeJq2IY6emJwPZCj6n1EpTEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAzMDgwMDExNTVaFw0yNjAzMDcwMDE2NTVaMDMxMTAvBgNV BAMTKDk2MDkxMjYyMUM4NTUwRDFFMzg5MDA1MzcwRjg1RjhCMUZDMEE5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQ56RfBZcitWcogtr+yzHxZgK cRhylfzHTlFehixa0tPsRWL7ka5+tydNn+8CunvymzzSfrly4D7JDCT6laUNwJkg erOCOxULuAQ1K9vRrDc1plXfI99RSE26lk+3A3eR9nSs203K5TWM+YXc2ep/HYyg aDTXukyYSUrJSE5C3ljF6zoqqc7i4uT3g5zb2F+tS3T4u2atpiRS2gShUEwmN0pv MPKcaodQSiKQ5cb7+OJP6c2QZISdLMkKWIXW7dVdLQM32BEy7sSFNbDPMyulZSyM VGeOhVt6bdF5bXYGjlHrCvg2x9ozs3E1j9tULarfCFefmjQJoVy/L/TgAccrAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUlgkSYhyFUNHjiQBTcPhfix/AqQYwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjQ2MzMwM2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcBKhR1gO3AMA0GCSqGSIb3DQEBCwUAA4IBAQCP iw+Bvdk7ANdmRxiTB6kPjcfhJ4m8ilt9TQqY4TNO0QMXyAqhutnabQ0ky5BJMBgR e7bc0ipl+mcguEMfJCr5w+rm310u5PJtff8/DdOJ92iChPv5g3/urVRj7cQi+ozY sxO4flulnvLymOFXLv41xNAxwKJY5zCGU70hxa0Hl+unLabbu+D8x8LKMHfEBrER XB6Nq3S3qfCBYfVFQJVusRloyFnZTHf126R5BWYy108Yoa+H3vkfbrelS6DUdLJq KF5gsFDked9CxDJeohRpHd380PLldcMgheB9LKku6YiPNRMT+osD9euBC20xEJiJ sbMeAK4wZoo3TmV5auB7 -----END CERTIFICATE-----Generated at Fri May 9 14:12:06 2025 by rpki-client