$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa File: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (raw, json) Hash identifier: xASXurrkB21YmULJQ68AjQqXl8iRC/GmjrwM45TRghc= Subject key identifier: A1:F4:06:FA:E7:9E:B8:FD:4B:BB:2B:55:6B:E7:06:CF:99:09:C5:A4 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 5B40BDCBFC308390A87548BE5796380C2470537B Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa Signing time: Wed 22 Jan 2025 15:03:28 +0000 ROA not before: Wed 22 Jan 2025 14:58:28 +0000 ROA not after: Wed 21 Jan 2026 15:03:28 +0000 asID: 401386 IP address blocks: 2a14:7581:2200::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 13:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:40:bd:cb:fc:30:83:90:a8:75:48:be:57:96:38:0c:24:70:53:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Jan 22 14:58:28 2025 GMT Not After : Jan 21 15:03:28 2026 GMT Subject: CN=A1F406FAE79EB8FD4BBB2B556BE706CF9909C5A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:be:18:2b:ca:ab:d8:1b:ec:75:a0:cb:98:91: 70:ea:63:7a:84:4b:49:23:0b:85:e8:1a:94:1c:6b: e5:b7:76:0f:d3:bf:69:30:e6:ee:8d:63:22:39:8b: 17:2a:a1:a2:9c:97:73:89:3a:da:78:5a:41:a9:ea: 39:b5:da:65:cb:e4:5d:aa:9f:f5:c6:ce:3d:32:a2: 14:99:70:d0:c0:dd:79:aa:8b:0e:35:1e:a6:2e:48: 48:6a:a9:95:de:6f:fa:12:7b:13:3b:91:83:1f:e4: 1a:4c:23:77:7b:3a:8a:71:bb:4d:21:1a:14:e0:76: 4b:90:2e:9b:49:5b:df:c5:11:74:c2:26:dc:d5:0e: b2:34:9b:47:19:bc:1e:57:4f:a7:4b:6a:f6:c0:02: eb:91:26:16:7b:73:28:ea:fa:69:2c:eb:1b:34:cd: 4c:e5:ba:ac:bc:22:16:b5:c6:ce:37:d8:2f:ee:13: 15:58:e4:67:fb:b0:dc:8e:5c:8f:ce:2a:25:67:42: 43:ee:dd:76:85:16:5f:e6:07:d8:45:96:70:96:64: b9:da:5c:7a:30:b6:3c:82:dd:ce:ad:08:14:2b:ed: bb:8a:b0:d9:7a:64:c0:c6:4b:72:4d:a2:cf:3f:34: 65:82:91:b1:df:d3:90:bb:82:73:13:3e:e1:05:28: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F4:06:FA:E7:9E:B8:FD:4B:BB:2B:55:6B:E7:06:CF:99:09:C5:A4 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2200::/40 Signature Algorithm: sha256WithRSAEncryption 17:82:81:57:a2:b5:75:10:d9:9f:13:56:82:3c:36:f5:85:64: b5:d9:7d:1a:4f:3f:01:fc:b2:d2:1d:81:0a:ee:f2:ac:a2:12: da:93:42:22:87:ff:6f:91:0e:8f:ae:3e:26:49:f4:14:d6:b8: 5e:69:1d:45:9b:32:52:a4:31:ab:5a:40:46:a0:fe:41:9d:c2: f9:6d:cd:63:a6:9e:cb:4c:bf:03:b6:59:b5:12:ee:22:65:aa: c2:69:d2:81:a0:db:1a:38:09:a6:2f:9e:f1:85:d7:19:42:1c: 62:d4:56:97:61:70:ff:47:21:5a:6a:ce:34:9f:25:42:81:32: c9:f5:51:94:23:2e:29:b5:8f:f7:7d:6d:96:d6:6f:b6:3e:ac: 5a:f2:e7:88:e4:9c:2c:6f:8c:e5:5f:34:35:a0:cb:94:37:ea: 73:69:d0:74:80:e9:8d:1e:0f:e6:92:b1:b2:3b:6f:04:33:21: 4e:14:5c:52:a7:ef:d3:3b:55:df:fb:17:fa:28:36:20:8c:7c: 42:bf:ab:b2:19:f6:b6:5e:d5:31:62:7e:e9:49:a2:14:1d:2f: 1f:76:b9:3b:0f:e6:cc:77:84:ea:7e:93:1a:a5:43:ba:22:ea: 54:4b:2e:ef:32:df:91:6c:02:63:98:25:b9:b1:56:28:fc:5c: b6:61:58:a6 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUW0C9y/wwg5CodUi+V5Y4DCRwU3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTAxMjIxNDU4MjhaFw0yNjAxMjExNTAzMjhaMDMxMTAvBgNV BAMTKEExRjQwNkZBRTc5RUI4RkQ0QkJCMkI1NTZCRTcwNkNGOTkwOUM1QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZvhgryqvYG+x1oMuYkXDqY3qE S0kjC4XoGpQca+W3dg/Tv2kw5u6NYyI5ixcqoaKcl3OJOtp4WkGp6jm12mXL5F2q n/XGzj0yohSZcNDA3Xmqiw41HqYuSEhqqZXeb/oSexM7kYMf5BpMI3d7Oopxu00h GhTgdkuQLptJW9/FEXTCJtzVDrI0m0cZvB5XT6dLavbAAuuRJhZ7cyjq+mks6xs0 zUzluqy8Iha1xs432C/uExVY5Gf7sNyOXI/OKiVnQkPu3XaFFl/mB9hFlnCWZLna XHowtjyC3c6tCBQr7buKsNl6ZMDGS3JNos8/NGWCkbHf05C7gnMTPuEFKMkBAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUofQG+ueeuP1LuytVa+cGz5kJxaQwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYWRlYmI5ZC0zM2NjLTQyOWItYWEzNS0xMDYzNGE4YjFkZDQvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMyMzIzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzQz MDMxMzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gSIwDQYJKoZIhvcNAQELBQADggEBABeC gVeitXUQ2Z8TVoI8NvWFZLXZfRpPPwH8stIdgQru8qyiEtqTQiKH/2+RDo+uPiZJ 9BTWuF5pHUWbMlKkMataQEag/kGdwvltzWOmnstMvwO2WbUS7iJlqsJp0oGg2xo4 CaYvnvGF1xlCHGLUVpdhcP9HIVpqzjSfJUKBMsn1UZQjLim1j/d9bZbWb7Y+rFry 54jknCxvjOVfNDWgy5Q36nNp0HSA6Y0eD+aSsbI7bwQzIU4UXFKn79M7Vd/7F/oo NiCMfEK/q7IZ9rZe1TFifulJohQdLx92uTsP5sx3hOp+kxqlQ7oi6lRLLu8y35Fs AmOYJbmxVij8XLZhWKY= -----END CERTIFICATE-----Generated at Fri May 9 20:35:52 2025 by rpki-client