$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530303a3a2f34382d3438203d3e20323135393536.roa File: 326131343a373538303a656530303a3a2f34382d3438203d3e20323135393536.roa (raw, json) Hash identifier: 5a8j2++17nNiorsFJpHeqHz8EMAsvxoBsPo3lbx1QS4= Subject key identifier: 06:82:97:A2:AF:B6:65:F2:C9:A0:F5:2A:C6:41:96:FB:63:69:CA:B9 Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 110358B23FEDD43ADB61A0FC20A0A1F8CD7B3546 Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530303a3a2f34382d3438203d3e20323135393536.roa Signing time: Mon 03 Mar 2025 00:05:07 +0000 ROA not before: Mon 03 Mar 2025 00:00:07 +0000 ROA not after: Mon 02 Mar 2026 00:05:07 +0000 asID: 215956 IP address blocks: 2a14:7580:ee00::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:03:58:b2:3f:ed:d4:3a:db:61:a0:fc:20:a0:a1:f8:cd:7b:35:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Mar 3 00:00:07 2025 GMT Not After : Mar 2 00:05:07 2026 GMT Subject: CN=068297A2AFB665F2C9A0F52AC64196FB6369CAB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a5:a8:66:29:8e:7b:63:6c:8a:e9:8c:c7:af: 2a:cc:f2:a0:25:df:22:0c:4c:b5:fb:53:81:da:53: 4c:0f:21:0e:78:eb:ef:fc:19:99:3b:8e:ae:77:27: fc:c4:57:ba:64:b7:99:c9:15:0b:c9:3b:8e:d3:b9: 08:65:a5:89:ca:ff:95:8f:72:29:d4:95:9b:14:4e: 21:fd:f7:cf:84:75:c7:8b:cb:2a:89:30:2a:b5:47: 66:10:43:f8:e7:7d:a1:a4:92:aa:e9:bb:09:13:a6: a9:b7:2b:25:06:9f:75:76:16:7b:6d:c5:40:a1:75: 20:e0:53:39:99:ce:3f:c8:8b:fe:c3:4f:84:e3:20: 58:ef:df:ee:82:56:8c:f5:c9:61:19:bc:a0:f5:a2: 99:ae:9a:ca:58:90:96:fb:6f:6c:91:37:f3:a2:48: 4c:07:c1:72:f8:32:3b:4c:70:a4:2d:87:76:90:65: 15:9e:db:6b:52:4a:0e:70:6f:bc:c0:46:2f:f4:cf: 72:16:83:d5:8d:2c:f3:0f:f6:45:87:5f:49:5f:43: 98:64:58:d4:58:99:d4:8a:82:fe:08:fe:6c:60:a9: 38:4d:25:03:ff:fa:97:fd:db:00:7c:b9:38:b9:40: 0e:1b:80:aa:c2:cc:31:68:cc:a5:16:5e:a4:83:20: 32:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:82:97:A2:AF:B6:65:F2:C9:A0:F5:2A:C6:41:96:FB:63:69:CA:B9 X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530303a3a2f34382d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ee00::/48 Signature Algorithm: sha256WithRSAEncryption 7c:f5:71:18:49:82:ff:62:15:d4:f1:d5:15:73:c7:cf:7d:e9: df:33:16:06:80:e3:8a:84:fd:fb:3a:c6:88:11:ad:24:0c:ed: c3:ad:0b:96:a8:a6:1e:e9:cb:37:71:b9:01:a5:dc:d7:8e:94: 1c:8a:97:4b:e5:e6:af:30:3b:61:3b:1a:28:7f:77:84:91:70: 85:62:3a:11:c1:39:09:7d:62:9e:ad:e9:d6:1f:69:19:ff:f4: 59:f1:64:16:19:12:85:12:da:fd:80:ee:8a:b8:f2:3b:d5:10: 9b:60:a1:6c:05:c0:db:c7:64:d6:63:40:15:fc:1d:c8:71:2b: 34:d6:82:9e:3e:4e:78:1c:5f:3a:75:f1:1e:01:60:f3:9a:59: 92:cc:98:a0:e8:5e:74:94:e7:2e:22:c0:9a:68:f1:44:35:b7: 22:3b:cb:0b:c3:4a:61:d6:1d:db:1e:f7:c1:9b:5b:4a:4b:53: 46:23:e4:df:06:c3:f6:db:cc:02:9b:b1:84:17:1a:f4:96:62: 4b:d6:35:c3:74:14:bb:8f:9c:0d:70:85:cc:9e:bc:2d:40:45: c2:6f:fd:99:ce:f4:32:69:50:5c:f3:1b:91:f5:90:e1:0a:b7: 48:e3:7c:07:88:e3:fc:51:97:1c:f3:1a:dc:23:8c:08:56:92: ca:6c:33:ac -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUEQNYsj/t1DrbYaD8IKCh+M17NUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAzMDMwMDAwMDdaFw0yNjAzMDIwMDA1MDdaMDMxMTAvBgNV BAMTKDA2ODI5N0EyQUZCNjY1RjJDOUEwRjUyQUM2NDE5NkZCNjM2OUNBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkpahmKY57Y2yK6YzHryrM8qAl 3yIMTLX7U4HaU0wPIQ546+/8GZk7jq53J/zEV7pkt5nJFQvJO47TuQhlpYnK/5WP cinUlZsUTiH998+EdceLyyqJMCq1R2YQQ/jnfaGkkqrpuwkTpqm3KyUGn3V2Fntt xUChdSDgUzmZzj/Ii/7DT4TjIFjv3+6CVoz1yWEZvKD1opmumspYkJb7b2yRN/Oi SEwHwXL4MjtMcKQth3aQZRWe22tSSg5wb7zARi/0z3IWg9WNLPMP9kWHX0lfQ5hk WNRYmdSKgv4I/mxgqThNJQP/+pf92wB8uTi5QA4bgKrCzDFozKUWXqSDIDIDAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUBoKXoq+2ZfLJoPUqxkGW+2NpyrkwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjUzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gO4AMA0GCSqGSIb3DQEBCwUAA4IBAQB8 9XEYSYL/YhXU8dUVc8fPfenfMxYGgOOKhP37OsaIEa0kDO3DrQuWqKYe6cs3cbkB pdzXjpQcipdL5eavMDthOxoof3eEkXCFYjoRwTkJfWKerenWH2kZ//RZ8WQWGRKF Etr9gO6KuPI71RCbYKFsBcDbx2TWY0AV/B3IcSs01oKePk54HF86dfEeAWDzmlmS zJig6F50lOcuIsCaaPFENbciO8sLw0ph1h3bHvfBm1tKS1NGI+TfBsP228wCm7GE Fxr0lmJL1jXDdBS7j5wNcIXMnrwtQEXCb/2ZzvQyaVBc8xuR9ZDhCrdI43wHiOP8 UZcc8xrcI4wIVpLKbDOs -----END CERTIFICATE-----Generated at Fri May 9 08:34:25 2025 by rpki-client