$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666432303a3a2f34342d3532203d3e20323131373830.roa File: 326130353a646663333a666432303a3a2f34342d3532203d3e20323131373830.roa (raw, json) Hash identifier: CWRFk1dX28lIMn2/MWyyJ/tySsp6V6wJ+A0/5zRex+Q= Subject key identifier: 4D:98:DE:9F:A5:DE:3C:42:1F:3B:22:CC:69:36:67:8E:F1:4B:E0:4C Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 10BB3AF7C95A38F32D8FF36AC903354F88E5454A Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666432303a3a2f34342d3532203d3e20323131373830.roa Signing time: Tue 11 Mar 2025 16:34:18 +0000 ROA not before: Tue 11 Mar 2025 16:29:18 +0000 ROA not after: Tue 10 Mar 2026 16:34:18 +0000 asID: 211780 IP address blocks: 2a05:dfc3:fd20::/44 maxlen: 52 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 12:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:bb:3a:f7:c9:5a:38:f3:2d:8f:f3:6a:c9:03:35:4f:88:e5:45:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Mar 11 16:29:18 2025 GMT Not After : Mar 10 16:34:18 2026 GMT Subject: CN=4D98DE9FA5DE3C421F3B22CC6936678EF14BE04C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e1:f7:13:89:b2:30:7c:83:cd:d0:41:ea:b8: 83:17:b1:dd:53:1d:28:fb:e1:2b:79:c0:b8:7b:1d: 8e:63:4d:69:01:23:8b:68:19:fb:3a:e7:08:53:58: ab:24:49:fb:83:e0:6f:94:21:25:7d:d9:02:a1:13: e4:01:12:0f:ad:78:52:e3:6f:4d:34:c2:ab:ca:29: 49:53:97:cf:38:dd:61:92:19:43:69:6b:1f:27:85: 43:a9:68:42:18:6d:c5:ef:39:e0:89:8a:1f:60:49: c1:ba:62:cf:e9:0e:27:9c:9a:a9:c3:e9:90:3f:3b: 67:b2:58:76:50:95:d0:f1:bf:48:4b:5c:f5:1e:bc: f3:47:d4:36:67:80:37:04:cf:66:4b:a9:ce:f7:71: 0a:dd:74:dc:68:c3:e9:63:70:9b:69:04:38:7a:ee: d4:d4:c8:0a:9b:28:e5:f9:87:52:e8:ea:4e:e3:aa: ba:29:03:7d:c6:bc:cf:c7:31:46:24:fd:4d:ad:22: 8e:ee:9b:2e:06:0b:8e:11:4c:9b:f0:96:1a:ed:f4: 8e:b9:02:24:aa:f9:45:69:12:10:67:85:79:61:27: 51:ce:65:17:e8:61:bf:03:b8:fc:e9:21:75:fd:99: ea:2c:6e:09:3d:7a:ae:84:b8:ff:07:bb:19:1d:6b: 79:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:98:DE:9F:A5:DE:3C:42:1F:3B:22:CC:69:36:67:8E:F1:4B:E0:4C X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666432303a3a2f34342d3532203d3e20323131373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd20::/44 Signature Algorithm: sha256WithRSAEncryption 2b:82:8f:12:cc:5e:dd:19:7c:78:50:ab:d1:69:8b:e4:8b:17: d3:a7:09:93:1d:77:db:bf:2c:e2:fe:5e:b8:18:1b:71:92:46: 16:64:de:c9:e1:77:6b:77:74:5f:f8:dc:43:88:28:69:db:ea: f6:f5:26:d1:d5:0a:85:20:b8:e9:b0:6f:e0:a9:89:23:04:97: da:75:db:75:e5:31:3a:0a:73:bb:ac:08:3e:db:50:a9:6f:77: 9c:f7:65:03:6d:50:80:23:41:3b:65:8b:9d:2c:9d:14:b6:3f: b3:6d:09:a2:9b:c3:44:a6:e5:17:00:6a:24:f8:1c:60:19:ef: a4:d3:a0:4d:af:af:5e:cf:cd:77:95:27:ec:c3:14:53:e2:d8: 4a:68:0a:34:59:c6:8a:b3:29:4c:c3:97:6a:e1:cf:3f:65:a7: 76:07:3c:5e:17:27:71:93:9a:26:30:6e:ed:39:c7:a8:43:cb: 00:eb:1b:05:03:47:d2:21:8e:9a:c6:3f:ce:bb:4b:11:2c:6a: 61:82:1a:a8:b6:47:60:8a:b9:4a:82:59:cc:af:87:62:9a:8f: b1:58:a0:59:57:e4:07:57:d1:28:b9:ba:08:11:02:f3:09:49: 83:a7:35:b5:ca:eb:b9:7e:a3:fe:56:96:63:5c:35:5d:22:70: ac:6d:08:8a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUELs698laOPMtj/NqyQM1T4jlRUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAzMTExNjI5MThaFw0yNjAzMTAxNjM0MThaMDMxMTAvBgNV BAMTKDREOThERTlGQTVERTNDNDIxRjNCMjJDQzY5MzY2NzhFRjE0QkUwNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa4fcTibIwfIPN0EHquIMXsd1T HSj74St5wLh7HY5jTWkBI4toGfs65whTWKskSfuD4G+UISV92QKhE+QBEg+teFLj b000wqvKKUlTl8843WGSGUNpax8nhUOpaEIYbcXvOeCJih9gScG6Ys/pDiecmqnD 6ZA/O2eyWHZQldDxv0hLXPUevPNH1DZngDcEz2ZLqc73cQrddNxow+ljcJtpBDh6 7tTUyAqbKOX5h1Lo6k7jqropA33GvM/HMUYk/U2tIo7umy4GC44RTJvwlhrt9I65 AiSq+UVpEhBnhXlhJ1HOZRfoYb8DuPzpIXX9meosbgk9eq6EuP8Huxkda3mxAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUTZjen6XePEIfOyLMaTZnjvFL4EwwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzUzYTY0NjY2MzMz M2E2NjY0MzIzMDNhM2EyZjM0MzQyZDM1MzIyMDNkM2UyMDMyMzEzMTM3MzgzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHBCoF38P9IDANBgkqhkiG9w0BAQsFAAOCAQEAK4KPEsxe3Rl8eFCr 0WmL5IsX06cJkx13278s4v5euBgbcZJGFmTeyeF3a3d0X/jcQ4goadvq9vUm0dUK hSC46bBv4KmJIwSX2nXbdeUxOgpzu6wIPttQqW93nPdlA21QgCNBO2WLnSydFLY/ s20JopvDRKblFwBqJPgcYBnvpNOgTa+vXs/Nd5Un7MMUU+LYSmgKNFnGirMpTMOX auHPP2Wndgc8XhcncZOaJjBu7TnHqEPLAOsbBQNH0iGOmsY/zrtLESxqYYIaqLZH YIq5SoJZzK+HYpqPsVigWVfkB1fRKLm6CBEC8wlJg6c1tcrruX6j/laWY1w1XSJw rG0Iig== -----END CERTIFICATE-----Generated at Sat May 10 05:12:44 2025 by rpki-client