$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653138303a3a2f34322d3432203d3e20323134363433.roa File: 326131343a373538313a653138303a3a2f34322d3432203d3e20323134363433.roa (raw, json) Hash identifier: CHaFQ9524YBC3WACN18S5ZEByk+dN0kH51+ZGAMLNHs= Subject key identifier: AD:3B:1E:CC:42:8B:C0:52:03:57:99:08:47:1D:5A:2E:0B:61:B8:0C Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 4AC8CAE80E162C3E4CE57C27BF5A92159565723E Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653138303a3a2f34322d3432203d3e20323134363433.roa Signing time: Tue 09 Jul 2024 22:50:24 +0000 ROA not before: Tue 09 Jul 2024 22:45:24 +0000 ROA not after: Tue 08 Jul 2025 22:50:24 +0000 asID: 214643 IP address blocks: 2a14:7581:e180::/42 maxlen: 42 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jul 2024 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c8:ca:e8:0e:16:2c:3e:4c:e5:7c:27:bf:5a:92:15:95:65:72:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jul 9 22:45:24 2024 GMT Not After : Jul 8 22:50:24 2025 GMT Subject: CN=AD3B1ECC428BC05203579908471D5A2E0B61B80C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:50:76:fa:e8:40:9e:52:a9:43:c5:93:65:0d: b6:03:03:ca:b9:20:3e:61:b7:e5:3b:a4:50:47:8c: 44:b5:44:b5:78:50:dc:a5:db:4e:d1:fe:37:c0:40: 5a:9d:d5:76:76:37:78:99:88:aa:16:bd:8d:79:30: 78:c4:b7:eb:b8:fb:e4:e5:4a:11:2f:22:98:ba:c4: 16:d0:46:3b:72:8d:1d:cf:20:be:e9:c4:c9:7f:b2: 64:70:7a:34:fe:8a:2e:52:88:44:cf:da:ed:0e:4e: a5:2c:98:ea:53:a1:8c:80:c0:fd:1d:d5:a6:81:bc: 04:b6:54:6c:2c:76:0a:4d:51:08:b4:08:62:85:6f: 6a:79:6f:65:23:cb:a3:5c:d9:50:97:ba:b5:fa:0c: 2f:32:bc:f2:00:45:6c:f7:52:07:d6:f5:c6:58:64: 90:f7:ad:13:ce:02:99:43:64:c7:15:35:2b:2a:fc: 48:2d:fd:92:0d:15:3b:25:b1:a3:fc:f1:61:59:7f: e4:77:28:aa:1a:0b:05:91:e2:17:f9:ae:56:b2:6d: b1:a9:17:0c:0c:54:b4:f0:0b:4b:3a:89:dc:fd:40: 61:07:1d:3f:a0:62:80:01:34:cd:76:ea:c9:db:06: ca:5d:c1:af:06:fc:b7:c8:5f:fc:5b:ad:88:64:82: 2d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3B:1E:CC:42:8B:C0:52:03:57:99:08:47:1D:5A:2E:0B:61:B8:0C X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653138303a3a2f34322d3432203d3e20323134363433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:e180::/42 Signature Algorithm: sha256WithRSAEncryption 04:8f:05:03:9d:ab:fe:a4:52:9b:dc:32:4f:b9:5c:f2:be:32: de:ed:74:26:01:45:49:ce:39:7c:76:9e:fc:2f:82:70:fe:28: 88:a2:76:dd:e8:07:fb:fa:ec:76:36:f8:4b:fe:3a:25:16:f2: fc:c2:72:9c:5a:c2:74:6d:51:e7:cc:73:65:c8:d3:2c:d2:16: 1b:3d:58:ed:53:fb:17:38:b7:d6:f4:d8:81:fc:41:93:e6:32: e3:49:e2:a5:5e:fd:0f:d0:ab:d3:73:d2:85:3f:13:8d:2d:0b: b0:13:b3:c1:1d:04:6d:37:f1:9d:1b:89:7c:57:d5:6b:8f:3d: 4f:7b:e8:f9:3d:91:49:42:30:25:06:04:57:b0:9f:d8:1b:07: 23:ce:a0:15:e3:a6:82:1f:2e:c2:3b:38:9a:b9:7a:14:d4:ee: 50:7f:b0:a3:14:d4:87:24:c7:09:bf:98:e3:1c:b3:a6:c9:7f: f1:39:00:e0:91:e9:26:ee:04:18:69:6d:d5:22:85:6e:59:d7: 7f:df:15:d3:f2:28:e1:8d:8e:0f:61:87:87:ee:70:24:f4:9d: 8f:85:c9:62:08:da:90:f4:cc:cb:22:69:25:69:59:e0:c2:4b: 3c:e9:cd:f5:fa:26:57:b2:cd:96:55:7b:60:5c:5d:ba:36:5c: 9f:4f:e1:6e -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUSsjK6A4WLD5M5Xwnv1qSFZVlcj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNDA3MDkyMjQ1MjRaFw0yNTA3MDgyMjUwMjRaMDMxMTAvBgNV BAMTKEFEM0IxRUNDNDI4QkMwNTIwMzU3OTkwODQ3MUQ1QTJFMEI2MUI4MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbUHb66ECeUqlDxZNlDbYDA8q5 ID5ht+U7pFBHjES1RLV4UNyl207R/jfAQFqd1XZ2N3iZiKoWvY15MHjEt+u4++Tl ShEvIpi6xBbQRjtyjR3PIL7pxMl/smRwejT+ii5SiETP2u0OTqUsmOpToYyAwP0d 1aaBvAS2VGwsdgpNUQi0CGKFb2p5b2Ujy6Nc2VCXurX6DC8yvPIARWz3UgfW9cZY ZJD3rRPOAplDZMcVNSsq/Egt/ZINFTslsaP88WFZf+R3KKoaCwWR4hf5rlaybbGp FwwMVLTwC0s6idz9QGEHHT+gYoABNM126snbBspdwa8G/LfIX/xbrYhkgi0LAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUrTsezEKLwFIDV5kIRx1aLgthuAwwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTY1MzEzODMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIz MTM0MzYzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcGKhR1geGAMA0GCSqGSIb3DQEBCwUAA4IBAQAE jwUDnav+pFKb3DJPuVzyvjLe7XQmAUVJzjl8dp78L4Jw/iiIonbd6Af7+ux2NvhL /jolFvL8wnKcWsJ0bVHnzHNlyNMs0hYbPVjtU/sXOLfW9NiB/EGT5jLjSeKlXv0P 0KvTc9KFPxONLQuwE7PBHQRtN/GdG4l8V9Vrjz1Pe+j5PZFJQjAlBgRXsJ/YGwcj zqAV46aCHy7COziauXoU1O5Qf7CjFNSHJMcJv5jjHLOmyX/xOQDgkekm7gQYaW3V IoVuWdd/3xXT8ijhjY4PYYeH7nAk9J2PhcliCNqQ9MzLImklaVngwks86c31+iZX ss2WVXtgXF26NlyfT+Fu -----END CERTIFICATE-----Generated at Sun Jul 14 08:31:14 2024 by rpki-client on console.sobornost.net