$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530313a3a2f34382d3438203d3e20323135393536.roa File: 326131343a373538303a656530313a3a2f34382d3438203d3e20323135393536.roa (raw, json) Hash identifier: vBl7IXwFBo4Sxmx2SsyJCIVYCQUo0Q3xRTpMUdJLInY= Subject key identifier: BD:24:F4:3C:FB:AF:47:75:BE:BD:CD:FB:B8:1B:35:98:F0:E4:93:48 Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 520BD0DF37CD5E3672245998A0C659B3B30381B6 Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530313a3a2f34382d3438203d3e20323135393536.roa Signing time: Mon 03 Mar 2025 00:05:50 +0000 ROA not before: Mon 03 Mar 2025 00:00:50 +0000 ROA not after: Mon 02 Mar 2026 00:05:50 +0000 asID: 215956 IP address blocks: 2a14:7580:ee01::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:0b:d0:df:37:cd:5e:36:72:24:59:98:a0:c6:59:b3:b3:03:81:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Mar 3 00:00:50 2025 GMT Not After : Mar 2 00:05:50 2026 GMT Subject: CN=BD24F43CFBAF4775BEBDCDFBB81B3598F0E49348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cd:d4:e4:55:ef:9d:96:d6:bc:7f:81:5c:f1: d7:57:74:36:01:76:9d:02:96:7f:11:7d:19:41:54: 1d:6d:a2:bc:c4:f8:ec:e8:b2:50:e6:dc:75:1a:cd: df:98:38:37:02:2c:5b:e8:ab:84:a8:a8:86:b0:cb: 47:62:11:f4:ab:e6:aa:8c:73:ed:6c:e3:17:0c:8f: f3:98:7c:64:53:fd:b7:86:9c:a4:0e:e9:e4:0e:8c: d8:e8:35:84:82:ed:32:24:97:cc:f1:51:fc:a8:5e: 4d:a3:1d:ba:93:3f:5a:63:65:35:0c:99:95:03:54: 2a:88:af:90:1a:d9:96:dd:b8:58:60:26:56:a3:0e: 10:20:d3:13:2c:b4:f1:90:96:e5:be:b4:c1:cb:f0: 84:2c:be:e3:a8:8c:f9:f1:e6:01:83:98:fe:32:88: f2:0d:55:77:97:5c:70:09:fe:9f:50:7d:f9:1b:da: 36:e3:db:93:9c:03:f8:df:21:57:c4:8f:2a:09:62: ce:b1:6e:87:c5:38:b7:28:ce:db:02:64:2c:e5:fc: 4d:5b:31:a9:e3:a9:25:6a:ec:84:8a:7e:3e:1a:75: d4:08:69:e7:06:4f:3d:f8:2c:99:3b:83:7f:ed:b3: be:a2:80:fe:a7:32:7b:3d:1e:47:4a:58:9a:18:03: 3a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:24:F4:3C:FB:AF:47:75:BE:BD:CD:FB:B8:1B:35:98:F0:E4:93:48 X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530313a3a2f34382d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ee01::/48 Signature Algorithm: sha256WithRSAEncryption 40:a4:54:46:84:30:9f:98:ae:82:83:6d:49:9d:a6:f0:4a:4b: 03:e3:c8:49:8e:ec:a0:db:89:0d:6c:37:5e:a7:4d:05:c4:bd: 81:b0:12:7a:c0:15:ad:49:f6:a3:4e:43:ac:46:f3:fe:ee:be: b6:3a:fb:33:1f:40:ae:a9:4d:27:12:2e:1c:02:7c:8c:a4:40: 4b:ed:30:31:35:fa:37:f6:aa:a0:d8:8f:b0:bd:d2:2d:8f:75: cf:ab:48:b2:4b:bf:4c:7b:44:83:42:35:60:7c:e1:90:20:03: 5d:22:d3:08:a7:24:8c:86:3e:41:79:6e:33:d4:94:4d:12:79: 11:39:96:1d:10:f8:e4:bb:41:1e:d9:47:00:a1:94:91:6a:b9: 96:37:c4:5b:c2:44:d2:36:d9:e1:8f:8e:45:dd:60:3d:ae:b9: e8:86:07:06:e6:4a:e0:6a:27:11:47:88:13:0c:cc:3d:e3:4d: b6:b1:30:48:ba:ae:06:57:69:94:8d:7e:8e:d7:5c:f5:fd:f5: 74:00:bb:12:a3:de:e1:2f:a5:55:44:80:92:ec:90:b2:19:a6: f1:31:e4:79:86:8b:3e:3c:cf:8b:ce:f2:4b:ff:6a:95:c7:98: fe:26:ab:d0:b9:f4:49:48:b9:22:2a:1c:4a:6d:53:f2:f1:25: fa:1a:be:e7 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUUgvQ3zfNXjZyJFmYoMZZs7MDgbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAzMDMwMDAwNTBaFw0yNjAzMDIwMDA1NTBaMDMxMTAvBgNV BAMTKEJEMjRGNDNDRkJBRjQ3NzVCRUJEQ0RGQkI4MUIzNTk4RjBFNDkzNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zdTkVe+dlta8f4Fc8ddXdDYB dp0Cln8RfRlBVB1torzE+OzoslDm3HUazd+YODcCLFvoq4SoqIawy0diEfSr5qqM c+1s4xcMj/OYfGRT/beGnKQO6eQOjNjoNYSC7TIkl8zxUfyoXk2jHbqTP1pjZTUM mZUDVCqIr5Aa2ZbduFhgJlajDhAg0xMstPGQluW+tMHL8IQsvuOojPnx5gGDmP4y iPINVXeXXHAJ/p9Qffkb2jbj25OcA/jfIVfEjyoJYs6xbofFOLcoztsCZCzl/E1b ManjqSVq7ISKfj4addQIaecGTz34LJk7g3/ts76igP6nMns9HkdKWJoYAzqlAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUvST0PPuvR3W+vc37uBs1mPDkk0gwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjUzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gO4BMA0GCSqGSIb3DQEBCwUAA4IBAQBA pFRGhDCfmK6Cg21JnabwSksD48hJjuyg24kNbDdep00FxL2BsBJ6wBWtSfajTkOs RvP+7r62OvszH0CuqU0nEi4cAnyMpEBL7TAxNfo39qqg2I+wvdItj3XPq0iyS79M e0SDQjVgfOGQIANdItMIpySMhj5BeW4z1JRNEnkROZYdEPjku0Ee2UcAoZSRarmW N8RbwkTSNtnhj45F3WA9rrnohgcG5krgaicRR4gTDMw94022sTBIuq4GV2mUjX6O 11z1/fV0ALsSo97hL6VVRICS7JCyGabxMeR5hos+PM+LzvJL/2qVx5j+JqvQufRJ SLkiKhxKbVPy8SX6Gr7n -----END CERTIFICATE-----Generated at Fri May 9 08:29:02 2025 by rpki-client