$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656466373a3a2f34382d3438203d3e20323135393536.roa File: 326131343a373538303a656466373a3a2f34382d3438203d3e20323135393536.roa (raw, json) Hash identifier: pHloe8YosfoBBrVMhHLgUb2VMCQe36k5f7JvBPjf+4g= Subject key identifier: CB:49:D3:4F:6C:48:60:05:91:15:5A:3E:BA:21:C4:87:3A:02:F8:E3 Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 4BE2802CAB8498D6DE82AB69D5B0E0E4A5B795A4 Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656466373a3a2f34382d3438203d3e20323135393536.roa Signing time: Thu 13 Feb 2025 22:27:13 +0000 ROA not before: Thu 13 Feb 2025 22:22:13 +0000 ROA not after: Thu 12 Feb 2026 22:27:13 +0000 asID: 215956 IP address blocks: 2a14:7580:edf7::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e2:80:2c:ab:84:98:d6:de:82:ab:69:d5:b0:e0:e4:a5:b7:95:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Feb 13 22:22:13 2025 GMT Not After : Feb 12 22:27:13 2026 GMT Subject: CN=CB49D34F6C48600591155A3EBA21C4873A02F8E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:16:bd:e1:84:da:2a:f7:85:c5:f6:c2:00: 3e:89:fd:ec:d6:b3:57:1b:ab:3a:8f:c3:7e:fb:50: 57:40:1a:ef:35:7f:98:6c:bd:6a:df:3a:9e:e6:b6: 9b:17:e7:1f:c6:80:2e:ac:f6:53:2f:6f:e0:0d:64: 2a:35:aa:0f:1d:c6:74:6e:bb:30:0b:9d:2f:bd:88: 80:03:e1:90:c3:7c:de:9f:c2:50:d8:29:df:d3:f0: 3a:66:aa:1b:ae:c9:e3:ae:a0:ab:39:27:19:8f:be: 52:e4:08:eb:6f:9a:16:a6:09:f8:64:40:d1:61:20: 05:47:65:cf:f3:81:1f:4b:5d:2c:13:23:e1:5c:fb: 12:eb:e3:63:eb:54:00:13:4b:e9:ae:89:4e:22:2b: 3f:88:bc:7d:9b:83:4f:fa:3b:0d:d7:e9:f6:c8:c9: 08:7f:ca:36:69:0d:59:3b:d5:19:84:11:97:15:38: fb:64:dc:05:4e:4b:30:1a:a2:5f:54:5d:93:04:92: cf:cb:06:c0:79:1d:f4:de:b0:61:ad:15:8e:7c:7c: 8e:b8:e6:d1:d0:be:6a:19:37:a7:05:b0:99:72:01: eb:43:9d:ac:29:66:26:3d:4d:65:26:06:d9:3f:fc: 60:4a:06:c7:36:68:a4:8e:3d:09:72:92:7a:6d:83: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:49:D3:4F:6C:48:60:05:91:15:5A:3E:BA:21:C4:87:3A:02:F8:E3 X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656466373a3a2f34382d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:edf7::/48 Signature Algorithm: sha256WithRSAEncryption 93:11:ba:c6:00:4b:e7:85:4a:ad:0a:d5:6b:1f:66:31:b5:df: 80:5e:1d:7d:31:e0:a3:3c:9d:6e:81:28:64:c3:b4:c4:92:17: 62:e2:56:52:76:a9:74:87:3d:a4:d4:ba:ae:7f:2f:50:5a:0b: b1:82:9c:1e:02:c4:66:31:e1:ce:bf:1a:a3:ba:ed:6d:ea:74: 6f:0d:37:ca:86:f6:2e:b1:16:08:5c:8f:cc:d8:9c:3f:4a:af: ea:61:79:6b:de:95:cf:fc:80:a5:05:80:b9:e3:0c:72:74:6f: b5:70:6e:be:cf:a5:39:5e:7d:09:7f:6e:29:64:8b:17:00:76: 13:d2:c1:6c:b8:52:fd:64:f8:2b:fc:53:8d:27:ce:58:82:ae: 85:7c:d7:b5:9b:59:c5:99:1e:dc:2b:33:5e:9e:a8:42:3d:ea: c9:02:3e:ab:e9:10:2a:c7:39:58:3b:03:24:d5:0a:50:ee:d1: e3:93:e0:f6:48:04:ec:29:6f:4e:d0:bd:c6:c1:d7:8e:af:7c: 1a:da:02:10:e3:74:64:0e:ee:1a:8b:f7:a4:59:2f:4c:27:56: 9c:e7:7e:eb:39:3a:ea:7b:90:be:ce:b0:d3:60:53:f8:ff:7a: 1f:cf:e9:36:06:61:18:ab:6d:3a:90:43:aa:20:3f:5a:a2:dc: 09:5d:e4:19 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUS+KALKuEmNbegqtp1bDg5KW3laQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAyMTMyMjIyMTNaFw0yNjAyMTIyMjI3MTNaMDMxMTAvBgNV BAMTKENCNDlEMzRGNkM0ODYwMDU5MTE1NUEzRUJBMjFDNDg3M0EwMkY4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15ha94YTaKveFxfbCAD6J/ezW s1cbqzqPw377UFdAGu81f5hsvWrfOp7mtpsX5x/GgC6s9lMvb+ANZCo1qg8dxnRu uzALnS+9iIAD4ZDDfN6fwlDYKd/T8DpmqhuuyeOuoKs5JxmPvlLkCOtvmhamCfhk QNFhIAVHZc/zgR9LXSwTI+Fc+xLr42PrVAATS+muiU4iKz+IvH2bg0/6Ow3X6fbI yQh/yjZpDVk71RmEEZcVOPtk3AVOSzAaol9UXZMEks/LBsB5HfTesGGtFY58fI64 5tHQvmoZN6cFsJlyAetDnawpZiY9TWUmBtk//GBKBsc2aKSOPQlyknptgw+vAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUy0nTT2xIYAWRFVo+uiHEhzoC+OMwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjQ2NjM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gO33MA0GCSqGSIb3DQEBCwUAA4IBAQCT EbrGAEvnhUqtCtVrH2Yxtd+AXh19MeCjPJ1ugShkw7TEkhdi4lZSdql0hz2k1Lqu fy9QWguxgpweAsRmMeHOvxqjuu1t6nRvDTfKhvYusRYIXI/M2Jw/Sq/qYXlr3pXP /IClBYC54wxydG+1cG6+z6U5Xn0Jf24pZIsXAHYT0sFsuFL9ZPgr/FONJ85Ygq6F fNe1m1nFmR7cKzNenqhCPerJAj6r6RAqxzlYOwMk1QpQ7tHjk+D2SATsKW9O0L3G wdeOr3wa2gIQ43RkDu4ai/ekWS9MJ1ac537rOTrqe5C+zrDTYFP4/3ofz+k2BmEY q206kEOqID9aotwJXeQZ -----END CERTIFICATE-----Generated at Fri May 9 08:34:29 2025 by rpki-client