$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa File: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (raw, json) Hash identifier: 0cCFPlcOjS3xWnb1dJLZXDYv3McRJuNCq2FLbccHCeQ= Subject key identifier: 32:C6:A0:9C:08:95:0D:1B:E4:C1:D5:A1:88:9B:51:26:E6:9C:A1:E7 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 66E2DD2CAB468C3A45075B6667970DF85899F4F2 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa Signing time: Wed 22 Jan 2025 15:03:27 +0000 ROA not before: Wed 22 Jan 2025 14:58:27 +0000 ROA not after: Wed 21 Jan 2026 15:03:27 +0000 asID: 401386 IP address blocks: 2a14:7581:2300::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 03:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e2:dd:2c:ab:46:8c:3a:45:07:5b:66:67:97:0d:f8:58:99:f4:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Jan 22 14:58:27 2025 GMT Not After : Jan 21 15:03:27 2026 GMT Subject: CN=32C6A09C08950D1BE4C1D5A1889B5126E69CA1E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:de:83:26:93:8a:0c:13:f4:22:04:32:b2:83: d0:51:77:23:bb:8a:04:9c:f0:c8:4a:cc:45:d8:8e: 81:2d:7a:c8:f3:41:d5:60:ba:84:e0:8a:ae:bf:3d: 41:fe:01:26:d7:7a:1e:db:65:92:c0:bd:5e:41:12: 66:8c:61:5c:b9:80:f5:da:8d:38:46:ae:1c:4a:ba: d1:13:65:70:23:f4:98:2f:6e:2e:a6:d0:44:f0:89: 4a:8a:2b:ab:98:72:0c:68:79:82:8a:24:67:7e:14: f8:b6:fe:86:5c:9d:55:b8:e8:42:eb:a8:9d:28:74: 6c:62:a4:e2:0b:fc:1b:82:d2:4c:cb:10:49:34:9b: 93:96:56:a9:a6:53:7d:76:77:ee:01:45:74:bd:05: 54:c7:5d:3b:5c:b6:d8:d2:5d:c3:38:ff:93:67:5b: 34:13:43:d9:21:04:c5:88:87:bc:37:88:9d:24:88: f4:c9:89:4a:01:12:d8:b8:78:3c:b3:51:97:89:bf: be:69:66:86:7f:2b:59:e0:d8:4d:31:3f:db:c0:33: 50:d1:fc:23:29:f6:83:0d:dc:00:34:89:a9:c0:f0: 32:54:ae:08:fd:51:4d:d4:8c:08:a4:ac:71:e9:94: f8:bb:b9:96:48:08:ae:34:54:39:40:82:b0:f6:ed: 18:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C6:A0:9C:08:95:0D:1B:E4:C1:D5:A1:88:9B:51:26:E6:9C:A1:E7 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2300::/40 Signature Algorithm: sha256WithRSAEncryption 97:60:0d:e7:90:ea:e5:89:64:a9:0c:eb:34:8e:6e:f5:7a:07: 28:63:83:55:f3:d8:81:b8:12:f6:65:4d:24:8b:c1:a1:2a:58: 59:24:fa:58:ab:29:94:74:88:8b:ca:44:b7:26:d9:94:70:d4: b1:1a:33:4b:cb:ac:0f:e2:71:70:28:0b:09:ee:c5:f3:fa:02: 47:f2:6b:7e:72:9d:00:ed:88:3a:d7:66:cb:bb:19:42:b2:ff: c9:2c:5b:98:fe:fd:29:cc:2a:a6:1b:80:a1:11:fe:d8:c6:3a: de:31:0f:b1:ba:1a:8d:39:4d:36:66:c5:98:05:98:93:48:ec: 93:2d:81:b3:48:59:fe:75:80:3c:e0:2b:9d:22:f1:fc:7e:77: c5:fb:0b:3d:db:ca:7d:0c:02:c9:1b:1f:b3:c8:71:4e:bf:a5: 0f:fb:2f:bc:18:7b:ce:ad:0b:b5:2e:a2:6d:05:cf:22:00:74: 30:43:ef:a1:7c:f5:92:68:e3:d5:59:ea:e2:1d:7e:99:46:3a: 18:91:a2:cf:92:fb:c1:f4:0e:d3:7f:82:a0:ae:f8:23:87:5b: c8:92:f5:54:20:50:f2:af:ae:d2:7e:69:9f:58:7e:f8:7f:77: e9:97:1b:39:a1:47:73:c7:a9:ef:44:b6:01:89:af:c0:ff:ee: b9:d0:47:7b -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUZuLdLKtGjDpFB1tmZ5cN+FiZ9PIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTAxMjIxNDU4MjdaFw0yNjAxMjExNTAzMjdaMDMxMTAvBgNV BAMTKDMyQzZBMDlDMDg5NTBEMUJFNEMxRDVBMTg4OUI1MTI2RTY5Q0ExRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR3oMmk4oME/QiBDKyg9BRdyO7 igSc8MhKzEXYjoEtesjzQdVguoTgiq6/PUH+ASbXeh7bZZLAvV5BEmaMYVy5gPXa jThGrhxKutETZXAj9Jgvbi6m0ETwiUqKK6uYcgxoeYKKJGd+FPi2/oZcnVW46ELr qJ0odGxipOIL/BuC0kzLEEk0m5OWVqmmU312d+4BRXS9BVTHXTtcttjSXcM4/5Nn WzQTQ9khBMWIh7w3iJ0kiPTJiUoBEti4eDyzUZeJv75pZoZ/K1ng2E0xP9vAM1DR /CMp9oMN3AA0ianA8DJUrgj9UU3UjAikrHHplPi7uZZICK40VDlAgrD27RhHAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUMsagnAiVDRvkwdWhiJtRJuacoecwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYWRlYmI5ZC0zM2NjLTQyOWItYWEzNS0xMDYzNGE4YjFkZDQvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMyMzMzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzQz MDMxMzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gSMwDQYJKoZIhvcNAQELBQADggEBAJdg DeeQ6uWJZKkM6zSObvV6Byhjg1Xz2IG4EvZlTSSLwaEqWFkk+lirKZR0iIvKRLcm 2ZRw1LEaM0vLrA/icXAoCwnuxfP6Akfya35ynQDtiDrXZsu7GUKy/8ksW5j+/SnM KqYbgKER/tjGOt4xD7G6Go05TTZmxZgFmJNI7JMtgbNIWf51gDzgK50i8fx+d8X7 Cz3byn0MAskbH7PIcU6/pQ/7L7wYe86tC7Uuom0FzyIAdDBD76F89ZJo49VZ6uId fplGOhiRos+S+8H0DtN/gqCu+COHW8iS9VQgUPKvrtJ+aZ9Yfvh/d+mXGzmhR3PH qe9EtgGJr8D/7rnQR3s= -----END CERTIFICATE-----Generated at Fri May 9 13:18:21 2025 by rpki-client