$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa File: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (raw, json) Hash identifier: T25tbrYVZpBemZDjqgpA9HPrUcZHUwwg3LOVGpsmSZ8= Subject key identifier: 7E:D1:85:5D:BB:61:84:25:B5:3C:D2:D7:11:75:11:63:C6:61:0B:A1 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 083AE70F2447B728E6BE733FC2E48819921670DC Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa Signing time: Wed 22 Jan 2025 15:03:26 +0000 ROA not before: Wed 22 Jan 2025 14:58:26 +0000 ROA not after: Wed 21 Jan 2026 15:03:26 +0000 asID: 401386 IP address blocks: 2a14:7581:2100::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 13:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:3a:e7:0f:24:47:b7:28:e6:be:73:3f:c2:e4:88:19:92:16:70:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Jan 22 14:58:26 2025 GMT Not After : Jan 21 15:03:26 2026 GMT Subject: CN=7ED1855DBB618425B53CD2D711751163C6610BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f7:86:18:e4:12:ba:80:b2:2b:3e:7e:31:93: a1:97:80:a8:95:0a:4a:df:6d:77:7b:c8:d2:08:ec: e7:35:1f:76:29:e9:f1:83:3f:e0:1d:0d:98:3b:3b: 59:4e:22:84:bb:46:80:a1:67:9b:5d:ec:1e:41:ed: 54:b3:88:51:85:e3:91:83:a1:95:45:88:76:71:85: 08:eb:1e:a3:ab:df:c5:ef:cf:4f:27:f6:b8:e7:da: 46:de:91:5d:f4:ba:5b:10:01:a3:00:b0:43:b0:fe: aa:99:6b:9c:45:52:87:95:10:d5:d8:64:f7:f5:d6: 4d:1c:e2:15:88:20:ad:b0:38:2f:1b:33:f5:8f:54: dd:cd:29:92:87:cd:1e:e0:e5:37:64:27:16:fb:2c: c8:6b:19:3b:ec:6d:7b:a7:7a:af:e2:b8:d5:ce:20: f5:c6:96:9f:30:c1:8f:4e:4d:0b:f9:bc:06:36:b1: 10:dd:0d:67:d2:62:22:c4:70:01:6f:36:37:da:30: 85:e6:36:f8:d4:24:f9:62:64:54:97:c0:31:2f:cd: 95:47:3b:39:76:30:27:99:5d:84:3a:f1:15:20:76: 0f:66:09:b0:05:a4:57:45:dd:87:c9:0e:39:3f:32: 8d:2c:5e:25:14:dd:83:c0:b6:b3:b0:ae:9b:39:36: fa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D1:85:5D:BB:61:84:25:B5:3C:D2:D7:11:75:11:63:C6:61:0B:A1 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2100::/40 Signature Algorithm: sha256WithRSAEncryption 01:bb:11:2f:72:7d:49:ce:8d:4e:1f:eb:b8:40:d5:11:f1:56: d5:0c:09:76:3a:b5:c2:6e:c8:cf:5f:54:e6:90:c0:1e:a0:ed: 03:9a:fc:5f:bb:e9:5c:48:28:92:08:f8:92:e1:9e:a8:5d:50: f4:b6:0b:c5:3a:de:be:fe:36:ec:d1:86:a7:07:d3:f0:c9:bc: 35:73:71:66:7b:42:94:75:93:d2:ef:9d:01:32:04:45:94:13: 99:63:97:36:e5:08:3a:85:4b:00:48:86:d8:50:46:c9:1e:92: 3d:f5:42:0d:e9:78:3c:bd:3d:65:93:61:30:6a:97:6d:36:50: 9f:e9:f7:d8:a9:cc:29:ea:0f:a1:bb:81:0c:eb:ff:b2:c9:9c: d8:8c:95:fb:89:f8:8b:d4:62:9f:d2:5e:96:99:e0:15:de:5f: 8f:56:50:c2:15:8a:84:b6:b7:64:12:32:c5:a1:c8:36:95:68: 1b:02:81:63:94:9e:5f:4e:fe:a6:63:a6:f1:67:5e:0e:2a:72: e6:65:b9:fc:d1:33:13:e5:c5:ea:ad:96:29:3d:b0:83:81:65: e4:a9:a4:ed:3d:fd:4a:30:f5:c8:ea:b9:f8:5d:79:ba:f9:ff: 68:41:89:98:39:b2:42:80:1c:79:07:a7:27:ce:c4:ec:1e:8d: 6a:fe:3d:6c -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUCDrnDyRHtyjmvnM/wuSIGZIWcNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTAxMjIxNDU4MjZaFw0yNjAxMjExNTAzMjZaMDMxMTAvBgNV BAMTKDdFRDE4NTVEQkI2MTg0MjVCNTNDRDJENzExNzUxMTYzQzY2MTBCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk94YY5BK6gLIrPn4xk6GXgKiV CkrfbXd7yNII7Oc1H3Yp6fGDP+AdDZg7O1lOIoS7RoChZ5td7B5B7VSziFGF45GD oZVFiHZxhQjrHqOr38Xvz08n9rjn2kbekV30ulsQAaMAsEOw/qqZa5xFUoeVENXY ZPf11k0c4hWIIK2wOC8bM/WPVN3NKZKHzR7g5TdkJxb7LMhrGTvsbXuneq/iuNXO IPXGlp8wwY9OTQv5vAY2sRDdDWfSYiLEcAFvNjfaMIXmNvjUJPliZFSXwDEvzZVH Ozl2MCeZXYQ68RUgdg9mCbAFpFdF3YfJDjk/Mo0sXiUU3YPAtrOwrps5NvqxAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUftGFXbthhCW1PNLXEXURY8ZhC6EwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYWRlYmI5ZC0zM2NjLTQyOWItYWEzNS0xMDYzNGE4YjFkZDQvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMyMzEzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzQz MDMxMzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gSEwDQYJKoZIhvcNAQELBQADggEBAAG7 ES9yfUnOjU4f67hA1RHxVtUMCXY6tcJuyM9fVOaQwB6g7QOa/F+76VxIKJII+JLh nqhdUPS2C8U63r7+NuzRhqcH0/DJvDVzcWZ7QpR1k9LvnQEyBEWUE5ljlzblCDqF SwBIhthQRskekj31Qg3peDy9PWWTYTBql202UJ/p99ipzCnqD6G7gQzr/7LJnNiM lfuJ+IvUYp/SXpaZ4BXeX49WUMIVioS2t2QSMsWhyDaVaBsCgWOUnl9O/qZjpvFn Xg4qcuZlufzRMxPlxeqtlik9sIOBZeSppO09/Uow9cjqufhdebr5/2hBiZg5skKA HHkHpyfOxOwejWr+PWw= -----END CERTIFICATE-----Generated at Fri May 9 20:43:19 2025 by rpki-client