$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616337303a3a2f34342d3438203d3e20323134373537.roa File: 326130613a363034343a616337303a3a2f34342d3438203d3e20323134373537.roa (raw, json) Hash identifier: yOc4UkMlLLfE6KrccWuQDd1bkT21VbFcM9Cwi4iFxow= Subject key identifier: 55:69:47:D4:F1:B3:F6:EA:02:CB:4B:8A:F0:FF:B2:3D:19:EF:B3:96 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 5F5340045F3EF55B7888CD7A5754F905B20386B3 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616337303a3a2f34342d3438203d3e20323134373537.roa Signing time: Sat 15 Mar 2025 18:22:28 +0000 ROA not before: Sat 15 Mar 2025 18:17:28 +0000 ROA not after: Sat 14 Mar 2026 18:22:28 +0000 asID: 214757 IP address blocks: 2a0a:6044:ac70::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 12:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:53:40:04:5f:3e:f5:5b:78:88:cd:7a:57:54:f9:05:b2:03:86:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Mar 15 18:17:28 2025 GMT Not After : Mar 14 18:22:28 2026 GMT Subject: CN=556947D4F1B3F6EA02CB4B8AF0FFB23D19EFB396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:00:dc:67:8b:6e:d4:48:7f:61:41:8e:52:39: 97:c9:94:36:22:dc:60:1a:c1:ec:8a:f2:c3:3f:a2: 24:4f:e5:d1:99:d7:96:48:02:af:54:ea:76:aa:3a: e1:ba:c9:eb:d9:98:a4:f5:8b:a9:2f:e5:db:fd:98: 55:94:9a:c9:da:c1:a6:bd:82:26:95:f0:bf:af:c7: 3b:1c:92:bc:de:1c:25:ca:0b:99:0a:6f:a3:09:3b: 3a:31:97:1d:4a:7e:6d:81:e9:b1:b6:c5:4b:d2:29: 60:cc:28:d7:4f:aa:13:f2:48:85:be:12:d6:ea:43: 97:0b:03:5d:6c:cd:a9:a5:2d:ec:29:aa:7a:70:b8: 32:db:ac:89:42:10:92:80:c8:3b:55:8a:57:e8:2d: a7:56:5f:72:dc:b7:0d:50:d6:53:36:23:e2:4e:f0: 7f:83:53:c5:d8:e8:56:57:eb:6e:8b:d6:bc:e9:ee: 8a:ed:2e:69:2c:12:16:47:cd:d4:04:50:14:8c:b3: ff:bc:78:e5:49:bb:f5:0f:05:c4:2c:11:93:8f:69: 40:b4:da:95:6a:12:ab:17:b2:9b:c4:01:ce:a1:a1: 82:87:1d:e3:3a:5e:b9:a4:59:bc:6e:ae:f1:03:b2: d2:16:fb:fb:14:6e:d2:19:44:b0:cc:46:b8:8a:d1: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:69:47:D4:F1:B3:F6:EA:02:CB:4B:8A:F0:FF:B2:3D:19:EF:B3:96 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616337303a3a2f34342d3438203d3e20323134373537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ac70::/44 Signature Algorithm: sha256WithRSAEncryption 8a:49:1a:f2:c6:f4:f6:56:7d:11:a3:33:4a:fa:13:7e:74:2d: 54:5d:f6:aa:c2:24:84:7d:02:32:c2:d4:4e:fe:a4:38:61:24: 04:dd:83:9d:85:bf:02:3a:eb:e9:40:cb:00:96:79:ad:02:06: e5:e3:f7:17:b2:8e:0b:60:1f:24:be:bb:38:a3:64:96:f4:46: 4c:53:46:f7:dc:d3:f8:90:d7:9c:2c:cc:bd:10:65:ba:98:c4: a9:11:d8:5f:b4:1d:f8:c8:a7:f2:30:d4:c2:20:50:3c:ba:5a: cd:bc:f0:99:2e:dc:b1:7b:84:aa:d0:52:5f:b6:42:6d:07:c5: 5a:4a:cc:fc:5a:3d:68:25:48:94:bd:0a:11:8d:d6:f7:e2:3c: 2e:81:a8:da:6c:72:a6:03:d1:e3:fc:b3:05:8c:07:90:d7:78: 4b:e5:53:43:ac:f7:41:2a:21:ff:cc:46:65:82:de:eb:09:dd: 09:40:88:fa:a2:0d:01:8a:19:4e:b2:cb:d1:cc:76:db:64:79: 88:e1:20:91:f1:1e:0e:85:79:c3:d3:2d:5c:a2:82:3f:12:29: d9:8d:d8:4e:69:b3:87:c3:6b:02:47:0b:b0:3c:2c:2b:d1:eb: ac:1f:e0:50:d4:bb:fb:ae:6f:0a:6e:3c:aa:0e:68:a9:d5:8e: 99:ba:b9:b7 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUX1NABF8+9Vt4iM16V1T5BbIDhrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAzMTUxODE3MjhaFw0yNjAzMTQxODIyMjhaMDMxMTAvBgNV BAMTKDU1Njk0N0Q0RjFCM0Y2RUEwMkNCNEI4QUYwRkZCMjNEMTlFRkIzOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdANxni27USH9hQY5SOZfJlDYi 3GAaweyK8sM/oiRP5dGZ15ZIAq9U6naqOuG6yevZmKT1i6kv5dv9mFWUmsnawaa9 giaV8L+vxzsckrzeHCXKC5kKb6MJOzoxlx1Kfm2B6bG2xUvSKWDMKNdPqhPySIW+ EtbqQ5cLA11szamlLewpqnpwuDLbrIlCEJKAyDtVilfoLadWX3Lctw1Q1lM2I+JO 8H+DU8XY6FZX626L1rzp7ortLmksEhZHzdQEUBSMs/+8eOVJu/UPBcQsEZOPaUC0 2pVqEqsXspvEAc6hoYKHHeM6XrmkWbxurvEDstIW+/sUbtIZRLDMRriK0WpPAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUVWlH1PGz9uoCy0uK8P+yPRnvs5YwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0 M2E2MTYzMzczMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzEzNDM3MzUzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHBCoKYESscDANBgkqhkiG9w0BAQsFAAOCAQEAikka8sb09lZ9EaMz SvoTfnQtVF32qsIkhH0CMsLUTv6kOGEkBN2DnYW/Ajrr6UDLAJZ5rQIG5eP3F7KO C2AfJL67OKNklvRGTFNG99zT+JDXnCzMvRBlupjEqRHYX7Qd+Min8jDUwiBQPLpa zbzwmS7csXuEqtBSX7ZCbQfFWkrM/Fo9aCVIlL0KEY3W9+I8LoGo2mxypgPR4/yz BYwHkNd4S+VTQ6z3QSoh/8xGZYLe6wndCUCI+qINAYoZTrLL0cx222R5iOEgkfEe DoV5w9MtXKKCPxIp2Y3YTmmzh8NrAkcLsDwsK9HrrB/gUNS7+65vCm48qg5oqdWO mbq5tw== -----END CERTIFICATE-----Generated at Sat May 10 00:01:05 2025 by rpki-client