$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a343030303a3a2f33362d3434203d3e20323134303136.roa File: 326130393a353463363a343030303a3a2f33362d3434203d3e20323134303136.roa (raw, json) Hash identifier: 2aZ15w/eT/zcaOAPPFLGXzozeqGTWXb8TmAgok5JwJo= Subject key identifier: 8D:DD:6C:D9:A0:33:61:82:46:D0:C1:16:53:A2:FF:35:C7:FA:6B:CB Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 493419EEACADE8EA0F3378EF21CF912AE06D877F Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a343030303a3a2f33362d3434203d3e20323134303136.roa Signing time: Thu 10 Apr 2025 17:20:26 +0000 ROA not before: Thu 10 Apr 2025 17:15:26 +0000 ROA not after: Thu 09 Apr 2026 17:20:26 +0000 asID: 214016 IP address blocks: 2a09:54c6:4000::/36 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 12:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:34:19:ee:ac:ad:e8:ea:0f:33:78:ef:21:cf:91:2a:e0:6d:87:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Apr 10 17:15:26 2025 GMT Not After : Apr 9 17:20:26 2026 GMT Subject: CN=8DDD6CD9A033618246D0C11653A2FF35C7FA6BCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:63:0a:fe:81:83:e8:62:91:2f:9d:6d:49: 76:9b:59:1b:3c:d6:60:2d:15:08:57:9f:8c:7c:05: 11:35:4c:e4:98:50:fd:2b:2c:ec:0c:59:20:2a:36: b5:15:44:09:95:c6:3e:27:12:7e:5d:44:50:5a:0e: 75:d9:9d:ea:22:6c:2b:2b:e1:78:44:c2:c2:fe:ce: db:73:98:05:d8:29:c6:5d:16:fa:0e:5b:f9:d5:ba: 64:1b:cc:79:71:2f:91:af:30:dd:78:fd:df:c1:40: 37:c1:bd:4c:cf:08:b2:33:15:c7:80:d9:4c:1f:8d: e1:d4:85:b3:7d:2b:87:cf:24:8a:5b:4b:07:1d:83: 09:74:ff:b2:bc:4a:31:09:0f:4b:71:8b:bc:ed:fe: d8:9c:aa:3d:c7:85:4b:0e:92:b3:f0:ad:f4:bc:6f: 0f:2e:4a:c8:07:ce:45:b7:3d:c2:65:60:30:eb:36: d6:3d:aa:32:b5:42:03:f2:99:3d:f6:81:f9:f4:86: de:19:de:07:7b:56:4e:1d:96:fe:e6:40:7d:38:21: 69:c5:16:bf:97:47:a9:28:35:6d:28:ed:53:a1:df: 61:4b:c4:84:e7:5d:15:79:48:cd:fe:c4:7e:7f:77: 0f:50:82:4b:a6:bf:ad:6e:fe:19:e9:67:e5:f5:4b: f1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DD:6C:D9:A0:33:61:82:46:D0:C1:16:53:A2:FF:35:C7:FA:6B:CB X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a343030303a3a2f33362d3434203d3e20323134303136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:4000::/36 Signature Algorithm: sha256WithRSAEncryption 60:d0:93:bf:76:74:be:08:d4:eb:28:3c:a4:aa:3a:82:b7:87: 87:fc:a9:83:2c:2b:2c:0c:8c:38:5a:c4:f2:86:c4:97:4f:86: c6:12:da:48:fc:9f:ba:d5:51:e0:51:7a:b9:63:86:5e:44:cd: 2f:af:8e:78:8e:bc:0b:e3:2a:5f:de:2b:6c:b6:b2:01:06:ac: 6a:da:11:d8:a3:ec:1f:8c:e9:38:65:39:9f:fa:3d:7b:f8:0a: ce:49:39:29:d2:b0:1f:3d:65:2b:7e:e4:83:c1:63:cc:14:be: d9:29:20:79:ed:50:10:8e:3b:2b:31:6d:8c:19:a7:8b:0d:1f: 4f:b4:00:c3:08:87:5e:4c:1f:8d:f2:c2:fb:63:0d:cd:af:61: 09:47:e2:83:49:7b:0a:4f:8a:6c:2e:d6:16:27:3f:e9:0f:ba: 51:d3:55:eb:6b:af:83:e7:6f:6b:14:aa:d1:c3:4e:7c:cb:25: 1d:14:55:ff:21:2b:05:09:90:31:d7:73:19:31:8f:8c:44:d9: 34:d1:98:96:b4:69:70:5b:27:13:f5:99:32:21:36:26:3d:1b: 86:54:2d:8d:4b:c7:6a:71:a3:cf:59:e6:fb:2c:af:d8:9b:2d: 38:59:b7:60:32:b3:9f:0c:e9:3f:30:b5:ae:9b:10:11:40:20: 2d:23:c9:6c -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUSTQZ7qyt6OoPM3jvIc+RKuBth38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA0MTAxNzE1MjZaFw0yNjA0MDkxNzIwMjZaMDMxMTAvBgNV BAMTKDhEREQ2Q0Q5QTAzMzYxODI0NkQwQzExNjUzQTJGRjM1QzdGQTZCQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGfGMK/oGD6GKRL51tSXabWRs8 1mAtFQhXn4x8BRE1TOSYUP0rLOwMWSAqNrUVRAmVxj4nEn5dRFBaDnXZneoibCsr 4XhEwsL+zttzmAXYKcZdFvoOW/nVumQbzHlxL5GvMN14/d/BQDfBvUzPCLIzFceA 2UwfjeHUhbN9K4fPJIpbSwcdgwl0/7K8SjEJD0txi7zt/ticqj3HhUsOkrPwrfS8 bw8uSsgHzkW3PcJlYDDrNtY9qjK1QgPymT32gfn0ht4Z3gd7Vk4dlv7mQH04IWnF Fr+XR6koNW0o7VOh32FLxITnXRV5SM3+xH5/dw9Qgkumv61u/hnpZ+X1S/EXAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUjd1s2aAzYYJG0MEWU6L/Ncf6a8swHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzkzYTM1MzQ2MzM2 M2EzNDMwMzAzMDNhM2EyZjMzMzYyZDM0MzQyMDNkM2UyMDMyMzEzNDMwMzEzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGBCoJVMZAMA0GCSqGSIb3DQEBCwUAA4IBAQBg0JO/dnS+CNTrKDyk qjqCt4eH/KmDLCssDIw4WsTyhsSXT4bGEtpI/J+61VHgUXq5Y4ZeRM0vr454jrwL 4ypf3itstrIBBqxq2hHYo+wfjOk4ZTmf+j17+ArOSTkp0rAfPWUrfuSDwWPMFL7Z KSB57VAQjjsrMW2MGaeLDR9PtADDCIdeTB+N8sL7Yw3Nr2EJR+KDSXsKT4psLtYW Jz/pD7pR01Xra6+D529rFKrRw058yyUdFFX/ISsFCZAx13MZMY+MRNk00ZiWtGlw WycT9ZkyITYmPRuGVC2NS8dqcaPPWeb7LK/Ymy04WbdgMrOfDOk/MLWumxARQCAt I8ls -----END CERTIFICATE-----Generated at Sat May 10 04:41:13 2025 by rpki-client