$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530343a3a2f34382d3438203d3e20323135393536.roa File: 326131343a373538303a656530343a3a2f34382d3438203d3e20323135393536.roa (raw, json) Hash identifier: qFn0d4vgZpr42MvH9npN3Ed4JlO5bGVpqsApKnKzWjc= Subject key identifier: AD:65:B0:6A:E5:94:08:D0:4E:73:BB:62:72:AE:CE:FA:55:46:95:04 Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 7CC930CF319CE067A156C8E567F8103BC96FCFFB Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530343a3a2f34382d3438203d3e20323135393536.roa Signing time: Mon 03 Mar 2025 00:07:04 +0000 ROA not before: Mon 03 Mar 2025 00:02:04 +0000 ROA not after: Mon 02 Mar 2026 00:07:04 +0000 asID: 215956 IP address blocks: 2a14:7580:ee04::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c9:30:cf:31:9c:e0:67:a1:56:c8:e5:67:f8:10:3b:c9:6f:cf:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Mar 3 00:02:04 2025 GMT Not After : Mar 2 00:07:04 2026 GMT Subject: CN=AD65B06AE59408D04E73BB6272AECEFA55469504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:fd:d8:14:20:8f:9b:07:33:a7:12:ea:b8: 31:aa:07:f5:e7:d0:e2:36:a0:9b:f4:7b:32:f8:12: 90:3e:37:df:b4:71:a1:cf:82:15:63:e9:ed:b9:22: 1b:4f:69:c0:9e:4e:af:e6:42:33:e4:bd:d9:cb:ea: f7:b2:e1:3c:ec:ac:87:7d:27:5b:47:e3:e5:03:61: 8f:c1:ca:98:79:68:c2:be:c3:38:2d:f4:50:dc:b3: ed:1c:0b:c1:01:a0:c3:64:41:40:3a:10:87:f8:e2: 52:5f:1c:82:6b:13:b3:c6:bd:ef:f0:7c:d3:30:a5: 2e:07:8a:b6:ef:91:aa:6d:64:4d:e2:28:b8:87:61: c5:4d:05:e0:f0:c3:99:7f:62:88:43:f0:85:1d:4b: e0:ee:42:c0:f3:ef:36:a4:6c:79:bf:78:51:36:4e: 8d:09:7b:17:bc:26:81:c3:1f:b5:22:ad:16:f0:4d: b6:ed:9e:9b:2a:7e:9f:77:90:a5:99:8e:a8:2b:6b: df:0b:f9:f9:87:c9:7a:12:cd:0b:fd:a1:0b:b4:25: 89:4a:3f:c1:42:90:01:35:89:3a:e0:01:ec:f0:a5: c9:07:1b:41:02:c1:b8:e1:f7:f0:17:5a:9b:8e:17: b5:7f:03:e6:da:0b:e4:fe:79:ad:e1:ff:b5:10:41: b5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:65:B0:6A:E5:94:08:D0:4E:73:BB:62:72:AE:CE:FA:55:46:95:04 X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530343a3a2f34382d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ee04::/48 Signature Algorithm: sha256WithRSAEncryption 7d:0e:31:59:8a:e2:a9:dc:bc:a4:e0:85:bb:9e:80:96:8d:84: 5a:af:52:dd:0f:fb:78:e1:ba:48:0b:9c:06:eb:da:03:75:5f: 66:61:8a:1f:11:35:1c:ae:fc:db:d1:2e:c4:13:e4:73:51:57: 43:ce:7d:5a:b6:4f:0f:c3:6f:d4:bf:a2:18:e4:56:bc:24:05: 4d:ec:36:d8:62:f7:82:67:88:fb:53:e8:4c:83:2e:83:a8:d9: da:78:c1:e9:75:8c:de:54:9b:72:44:2e:92:eb:08:93:50:4a: e5:36:31:af:ee:57:4c:04:87:c7:74:c8:24:d4:ca:97:14:a2: 04:63:bc:a6:a6:f8:f9:44:73:92:71:19:3b:fc:5e:24:ce:35: 19:d7:4b:fc:f4:4d:42:26:04:dc:9f:7b:3b:c6:00:b9:bc:d1: b8:7e:a5:93:1c:fe:6e:56:bd:27:2d:a4:c2:19:6d:5a:ac:dd: 7f:99:76:0e:4d:15:61:91:aa:c8:1c:21:6e:3e:20:71:34:e1: 71:a6:3a:4f:61:ba:c8:07:98:b1:fb:a8:0f:cc:c7:c6:18:78: d8:17:3e:9b:57:c5:7d:cb:2c:10:b9:6b:14:39:ef:69:07:30: 5f:bf:9e:c0:76:ae:34:28:46:9e:b6:d5:9d:ef:8f:bd:27:21: 68:ce:a3:f0 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUfMkwzzGc4GehVsjlZ/gQO8lvz/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAzMDMwMDAyMDRaFw0yNjAzMDIwMDA3MDRaMDMxMTAvBgNV BAMTKEFENjVCMDZBRTU5NDA4RDA0RTczQkI2MjcyQUVDRUZBNTU0Njk1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGv3YFCCPmwczpxLquDGqB/Xn 0OI2oJv0ezL4EpA+N9+0caHPghVj6e25IhtPacCeTq/mQjPkvdnL6vey4TzsrId9 J1tH4+UDYY/Byph5aMK+wzgt9FDcs+0cC8EBoMNkQUA6EIf44lJfHIJrE7PGve/w fNMwpS4HirbvkaptZE3iKLiHYcVNBeDww5l/YohD8IUdS+DuQsDz7zakbHm/eFE2 To0Jexe8JoHDH7UirRbwTbbtnpsqfp93kKWZjqgra98L+fmHyXoSzQv9oQu0JYlK P8FCkAE1iTrgAezwpckHG0ECwbjh9/AXWpuOF7V/A+baC+T+ea3h/7UQQbW/AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUrWWwauWUCNBOc7ticq7O+lVGlQQwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjUzMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gO4EMA0GCSqGSIb3DQEBCwUAA4IBAQB9 DjFZiuKp3Lyk4IW7noCWjYRar1LdD/t44bpIC5wG69oDdV9mYYofETUcrvzb0S7E E+RzUVdDzn1atk8Pw2/Uv6IY5Fa8JAVN7DbYYveCZ4j7U+hMgy6DqNnaeMHpdYze VJtyRC6S6wiTUErlNjGv7ldMBIfHdMgk1MqXFKIEY7ympvj5RHOScRk7/F4kzjUZ 10v89E1CJgTcn3s7xgC5vNG4fqWTHP5uVr0nLaTCGW1arN1/mXYOTRVhkarIHCFu PiBxNOFxpjpPYbrIB5ix+6gPzMfGGHjYFz6bV8V9yywQuWsUOe9pBzBfv57Adq40 KEaettWd74+9JyFozqPw -----END CERTIFICATE-----Generated at Fri May 9 08:31:45 2025 by rpki-client