$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530663a3a2f34382d3438203d3e20323135393536.roa File: 326131343a373538303a656530663a3a2f34382d3438203d3e20323135393536.roa (raw, json) Hash identifier: xQQdjDkSH738D1uz/GkR+yuqVH7Jd7OCJyN7cr6AbfI= Subject key identifier: 50:11:80:90:23:85:EA:56:3C:DA:9D:79:13:93:19:EB:17:94:75:42 Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 43EE06616C7B4DC7BC5DFECB4A0F7A5303AE81FE Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530663a3a2f34382d3438203d3e20323135393536.roa Signing time: Fri 07 Mar 2025 23:47:06 +0000 ROA not before: Fri 07 Mar 2025 23:42:06 +0000 ROA not after: Fri 06 Mar 2026 23:47:06 +0000 asID: 215956 IP address blocks: 2a14:7580:ee0f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ee:06:61:6c:7b:4d:c7:bc:5d:fe:cb:4a:0f:7a:53:03:ae:81:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Mar 7 23:42:06 2025 GMT Not After : Mar 6 23:47:06 2026 GMT Subject: CN=501180902385EA563CDA9D79139319EB17947542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:35:61:36:1b:37:17:b4:c2:f4:2d:9c:32:f1: 07:de:e9:28:2c:6e:6e:1c:e7:d8:91:33:f4:33:55: 67:da:75:9d:b2:81:cc:ea:ce:4e:77:7d:b1:d1:32: 1f:e4:a1:ca:cf:2b:ec:0b:c8:e5:fc:5e:81:98:3c: 34:47:fc:58:3e:aa:67:a8:84:e0:90:78:f2:6d:dd: c4:fc:5c:5a:26:5e:88:fe:6d:17:a9:62:ad:bd:17: de:27:fa:b4:4a:21:8d:35:94:33:10:c2:bb:e2:45: c4:3f:61:2a:9d:b4:fa:db:96:7e:4b:9b:7a:08:54: ca:f5:fe:aa:2b:ec:d0:bc:a2:b9:5c:6a:e2:67:f4: cd:98:f6:95:d5:e8:44:4d:8e:e3:36:97:a8:e0:99: d6:20:ed:da:dd:67:f8:10:70:a3:39:72:c8:b5:cd: f8:05:90:c4:83:46:c4:c3:44:b1:74:96:49:b3:64: 03:2e:f5:56:0f:d2:d3:00:d3:81:3c:55:0d:f7:60: 2c:19:1d:6c:bf:65:ae:e5:77:f2:14:44:72:ef:65: 2b:f3:a3:38:fb:7e:c9:d5:73:68:15:34:19:12:03: 9e:66:ba:a3:72:45:ea:f6:b4:a7:92:20:a5:c8:98: 37:f3:04:82:e7:53:a0:ca:04:35:44:9f:94:ea:22: dd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:11:80:90:23:85:EA:56:3C:DA:9D:79:13:93:19:EB:17:94:75:42 X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530663a3a2f34382d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ee0f::/48 Signature Algorithm: sha256WithRSAEncryption 9e:6a:66:83:05:18:ae:36:6e:23:c1:96:1d:bf:c6:d4:ea:ab: a0:b3:10:77:9c:db:3e:4d:b8:fd:4e:e6:c8:e7:7e:05:c6:c2: d6:83:c9:bb:34:07:21:f6:c9:b7:72:51:dc:1e:41:64:dd:53: 6a:24:23:63:34:31:48:97:5e:fb:b2:8c:05:10:8a:ad:1f:1f: 73:f1:a9:42:b2:de:8b:7f:cb:d2:1d:8a:d4:fb:c9:07:dd:df: 62:7b:d7:a7:3c:1a:13:7f:7a:36:ca:61:aa:12:39:4e:44:c5: c5:37:16:ac:56:98:15:4f:e3:85:20:db:eb:04:e3:d9:cd:f9: b9:02:99:67:92:22:ed:4e:04:c5:55:d4:c0:4c:b9:cc:e9:84: c1:1e:2a:f0:a4:7d:88:37:cc:c9:ab:8b:33:1f:63:e2:00:1d: a6:9a:20:4b:fe:50:18:2b:7d:f7:9e:84:22:fb:55:1e:42:3c: 1e:48:a4:00:d8:74:13:8a:e2:15:38:c1:8b:2e:76:a1:49:49: 1f:02:ff:d4:55:29:3c:01:f2:4d:e0:28:bb:aa:ef:5d:11:e0: 46:36:8f:e2:ed:2b:73:5a:c9:e4:63:d6:2f:e8:6c:20:8c:a2: 7c:3b:6a:cb:ba:c6:67:7c:f5:71:f6:4d:23:0b:39:ce:2f:18: 2d:92:d2:99 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUQ+4GYWx7Tce8Xf7LSg96UwOugf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAzMDcyMzQyMDZaFw0yNjAzMDYyMzQ3MDZaMDMxMTAvBgNV BAMTKDUwMTE4MDkwMjM4NUVBNTYzQ0RBOUQ3OTEzOTMxOUVCMTc5NDc1NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkNWE2GzcXtML0LZwy8Qfe6Sgs bm4c59iRM/QzVWfadZ2ygczqzk53fbHRMh/kocrPK+wLyOX8XoGYPDRH/Fg+qmeo hOCQePJt3cT8XFomXoj+bRepYq29F94n+rRKIY01lDMQwrviRcQ/YSqdtPrbln5L m3oIVMr1/qor7NC8orlcauJn9M2Y9pXV6ERNjuM2l6jgmdYg7drdZ/gQcKM5csi1 zfgFkMSDRsTDRLF0lkmzZAMu9VYP0tMA04E8VQ33YCwZHWy/Za7ld/IURHLvZSvz ozj7fsnVc2gVNBkSA55muqNyRer2tKeSIKXImDfzBILnU6DKBDVEn5TqIt3FAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUUBGAkCOF6lY82p15E5MZ6xeUdUIwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjUzMDY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gO4PMA0GCSqGSIb3DQEBCwUAA4IBAQCe amaDBRiuNm4jwZYdv8bU6qugsxB3nNs+Tbj9TubI534FxsLWg8m7NAch9sm3clHc HkFk3VNqJCNjNDFIl177sowFEIqtHx9z8alCst6Lf8vSHYrU+8kH3d9ie9enPBoT f3o2ymGqEjlORMXFNxasVpgVT+OFINvrBOPZzfm5AplnkiLtTgTFVdTATLnM6YTB HirwpH2IN8zJq4szH2PiAB2mmiBL/lAYK333noQi+1UeQjweSKQA2HQTiuIVOMGL LnahSUkfAv/UVSk8AfJN4Ci7qu9dEeBGNo/i7StzWsnkY9Yv6GwgjKJ8O2rLusZn fPVx9k0jCznOLxgtktKZ -----END CERTIFICATE-----Generated at Fri May 9 08:31:56 2025 by rpki-client