$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530353a3a2f34382d3438203d3e20323135393536.roa File: 326131343a373538303a656530353a3a2f34382d3438203d3e20323135393536.roa (raw, json) Hash identifier: XEeNqK7YkE14OYGoH5IsFHLKrbY3feuKy7Y5ww9fcA0= Subject key identifier: 42:9C:EA:46:17:DF:A4:43:2F:EA:89:B7:4E:B0:8C:94:C4:3F:6A:74 Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 33F9EB96532762F042FCBCEDDE10444886BE33B5 Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530353a3a2f34382d3438203d3e20323135393536.roa Signing time: Mon 03 Mar 2025 00:07:21 +0000 ROA not before: Mon 03 Mar 2025 00:02:21 +0000 ROA not after: Mon 02 Mar 2026 00:07:21 +0000 asID: 215956 IP address blocks: 2a14:7580:ee05::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f9:eb:96:53:27:62:f0:42:fc:bc:ed:de:10:44:48:86:be:33:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Mar 3 00:02:21 2025 GMT Not After : Mar 2 00:07:21 2026 GMT Subject: CN=429CEA4617DFA4432FEA89B74EB08C94C43F6A74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ed:75:1f:35:86:74:3e:b9:de:c8:30:0c:84: 18:04:38:9e:4a:e9:71:24:a5:f6:8f:98:3b:50:eb: 4f:9b:0d:f2:98:40:11:81:48:fb:0a:cd:88:b8:7f: d1:7b:16:35:7b:c2:20:11:d9:03:31:17:f9:2b:17: 84:34:9e:63:13:3a:7a:69:30:03:ae:ed:7f:85:b8: e1:e8:35:5a:87:6a:c8:48:0e:b9:cd:3c:b3:78:27: 65:75:1d:ea:e3:28:6f:60:be:25:bc:ae:da:5c:a9: ca:2f:53:71:ea:69:e9:df:88:b4:27:f6:40:63:35: 4d:c0:48:2d:0e:8d:07:a1:01:58:f8:3b:b3:7a:e6: d6:7c:c1:21:53:4a:ca:84:a8:fb:68:2c:ba:86:e9: 30:01:6c:65:bd:3b:8a:26:40:66:49:fb:35:05:b1: b9:99:e0:ed:29:ee:19:c2:3e:d5:3b:31:de:08:5d: 4f:4f:20:47:26:86:eb:0f:4b:3c:c1:d9:53:97:0f: 5b:15:cf:63:f8:de:f5:89:e4:aa:02:18:be:67:5c: ab:a0:c5:a9:30:18:0b:75:ff:4c:1d:2d:c7:3e:c9: e8:87:6b:71:ac:be:ef:82:35:75:2f:f9:b2:4e:38: 44:ad:3c:1a:c1:4d:12:8d:a8:03:ac:fb:cf:b4:58: db:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9C:EA:46:17:DF:A4:43:2F:EA:89:B7:4E:B0:8C:94:C4:3F:6A:74 X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530353a3a2f34382d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ee05::/48 Signature Algorithm: sha256WithRSAEncryption 70:19:b2:d1:1c:06:bb:57:85:aa:9b:6c:29:13:0b:ec:23:64: f0:37:66:f4:2d:ce:a7:d7:5d:89:d2:6a:c6:86:ab:e4:e0:f9: fd:60:b7:55:ad:63:73:30:5e:09:06:af:a7:2e:b3:0f:ce:42: 09:2d:4b:fe:33:fc:c6:3f:5f:ef:8d:04:46:2f:dc:a9:2e:e1: f9:d8:8d:92:dc:5d:3b:a9:be:c5:d5:41:ea:36:12:4d:de:d1: 4f:23:63:28:73:ac:e8:e6:b3:ae:d5:43:be:9b:6f:5b:ec:41: a8:a5:f5:34:95:15:29:79:4c:74:a4:01:e7:dd:07:6b:43:08: fe:77:b5:28:8d:57:5c:df:50:cd:b0:48:4f:fc:5e:fe:b4:cf: fe:bc:07:be:c3:7f:4f:2b:09:bd:c3:ec:59:68:ef:cf:68:5b: f5:93:24:96:e1:34:67:ef:7d:a6:52:05:f7:25:be:c0:09:43: f9:4b:90:2e:68:c4:32:2f:36:e3:e7:aa:17:38:56:db:d6:b7: f0:fe:a1:5b:27:8f:a5:34:2b:98:47:27:28:97:60:f6:1d:1b: fc:ba:a7:1e:68:a1:ab:17:57:b5:1d:9f:67:a8:2e:fd:48:9d: 4c:0e:af:3d:a7:65:10:fd:b6:87:c2:58:37:a6:82:99:a9:60: 92:20:e9:0f -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUM/nrllMnYvBC/Lzt3hBESIa+M7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAzMDMwMDAyMjFaFw0yNjAzMDIwMDA3MjFaMDMxMTAvBgNV BAMTKDQyOUNFQTQ2MTdERkE0NDMyRkVBODlCNzRFQjA4Qzk0QzQzRjZBNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn7XUfNYZ0PrneyDAMhBgEOJ5K 6XEkpfaPmDtQ60+bDfKYQBGBSPsKzYi4f9F7FjV7wiAR2QMxF/krF4Q0nmMTOnpp MAOu7X+FuOHoNVqHashIDrnNPLN4J2V1HerjKG9gviW8rtpcqcovU3HqaenfiLQn 9kBjNU3ASC0OjQehAVj4O7N65tZ8wSFTSsqEqPtoLLqG6TABbGW9O4omQGZJ+zUF sbmZ4O0p7hnCPtU7Md4IXU9PIEcmhusPSzzB2VOXD1sVz2P43vWJ5KoCGL5nXKug xakwGAt1/0wdLcc+yeiHa3Gsvu+CNXUv+bJOOEStPBrBTRKNqAOs+8+0WNu/AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUQpzqRhffpEMv6om3TrCMlMQ/anQwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjUzMDM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gO4FMA0GCSqGSIb3DQEBCwUAA4IBAQBw GbLRHAa7V4Wqm2wpEwvsI2TwN2b0Lc6n112J0mrGhqvk4Pn9YLdVrWNzMF4JBq+n LrMPzkIJLUv+M/zGP1/vjQRGL9ypLuH52I2S3F07qb7F1UHqNhJN3tFPI2Moc6zo 5rOu1UO+m29b7EGopfU0lRUpeUx0pAHn3QdrQwj+d7UojVdc31DNsEhP/F7+tM/+ vAe+w39PKwm9w+xZaO/PaFv1kySW4TRn732mUgX3Jb7ACUP5S5AuaMQyLzbj56oX OFbb1rfw/qFbJ4+lNCuYRycol2D2HRv8uqceaKGrF1e1HZ9nqC79SJ1MDq89p2UQ /baHwlg3poKZqWCSIOkP -----END CERTIFICATE-----Generated at Fri May 9 08:32:39 2025 by rpki-client