$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653230313a3a2f34382d3438203d3e20323134363433.roa File: 326131343a373538313a653230313a3a2f34382d3438203d3e20323134363433.roa (raw, json) Hash identifier: LEvQykliArSbr3Le6L5IJ3FxF2oND+JB/5a1H1lHmZ4= Subject key identifier: 29:3D:FF:8A:DD:DA:09:99:EA:0F:83:8C:4A:33:B5:C9:17:91:71:32 Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 5A86C398FA52C1F0DD884D10006AACFA3606BCEB Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653230313a3a2f34382d3438203d3e20323134363433.roa Signing time: Fri 05 Jul 2024 10:54:48 +0000 ROA not before: Fri 05 Jul 2024 10:49:48 +0000 ROA not after: Fri 04 Jul 2025 10:54:48 +0000 asID: 214643 IP address blocks: 2a14:7581:e201::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jul 2024 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:86:c3:98:fa:52:c1:f0:dd:88:4d:10:00:6a:ac:fa:36:06:bc:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jul 5 10:49:48 2024 GMT Not After : Jul 4 10:54:48 2025 GMT Subject: CN=293DFF8ADDDA0999EA0F838C4A33B5C917917132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0f:6a:3b:dd:f8:7f:d8:db:52:71:65:b2:08: 9e:97:4a:ff:1b:ef:38:39:cf:00:b7:13:5c:04:44: 53:ab:c3:fa:0b:31:9d:64:79:ef:d7:2c:62:c7:1a: 1b:cc:65:95:a7:ed:e8:6c:e4:cf:61:74:8c:1e:40: 61:77:9f:8d:f6:d2:28:c3:6b:e8:ae:9e:a9:75:98: cb:ff:30:0f:dd:3f:9a:75:44:c0:7c:49:66:12:e3: 14:d4:29:77:3f:5f:31:a6:5a:bd:3b:63:d4:64:60: ae:47:d3:74:25:45:d4:51:00:b3:8e:7f:0e:69:3b: 76:93:c8:32:89:34:ff:f3:55:a1:d7:85:77:17:16: 89:c2:0b:a3:a9:46:c6:6a:bd:81:81:ab:df:fa:42: ed:00:17:09:ba:d1:fe:8e:f3:4a:c2:1e:0e:9b:c6: 1d:bd:67:82:8c:1f:51:bb:c1:62:73:e5:71:7f:af: 0e:41:d9:3c:6e:9d:a9:77:16:49:a9:8d:d8:2d:db: 51:bc:48:9d:cd:cf:50:4b:5f:cc:9a:c8:84:43:e8: 53:20:d2:e5:9f:dc:f4:8a:46:25:7e:31:6f:f9:ad: e1:9e:94:ca:8d:a9:a0:e1:a3:49:76:ce:48:e5:bb: 27:cb:4c:2b:2d:bb:9b:c7:1c:79:e0:57:84:c7:36: 83:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3D:FF:8A:DD:DA:09:99:EA:0F:83:8C:4A:33:B5:C9:17:91:71:32 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653230313a3a2f34382d3438203d3e20323134363433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:e201::/48 Signature Algorithm: sha256WithRSAEncryption 76:2e:df:cb:cf:f8:62:46:31:92:9d:fc:67:1d:30:e2:d2:53: 45:c0:99:7b:72:ed:c8:92:2f:76:09:e2:00:37:1c:7e:d5:f6: 8d:dc:1f:99:59:6c:0c:8b:30:f5:02:e6:19:b1:0f:f2:2f:af: 55:b4:93:fe:31:86:2b:d5:51:a3:e2:8f:a8:10:53:20:1b:16: 34:1c:ca:1d:90:f2:7f:11:3b:b9:30:44:36:4f:5d:fe:a0:0f: 56:be:d3:3e:4d:ad:fb:b6:81:08:c4:3d:85:d5:dd:1e:db:c6: c5:4f:a6:75:d8:27:9a:44:30:e8:bb:0c:37:25:0f:0f:a6:b8: 83:3e:da:02:57:d4:3f:44:f9:b5:05:d0:77:bc:a4:cb:60:90: 94:1e:27:d2:3e:8c:66:0b:84:27:3b:17:dd:db:5f:04:ab:d6: 6e:38:4f:a5:95:22:05:5f:bf:39:84:54:59:42:96:fc:75:74: 06:3f:a8:d5:2f:0b:50:5f:dd:2d:57:ef:e3:51:0d:e7:1c:54: 09:c9:1c:93:4b:2f:86:cb:41:7b:ae:c8:b8:f5:22:17:1c:5d: 80:7c:4c:dd:a8:5d:71:b0:27:c1:5d:52:97:01:42:58:12:6b: f0:08:7f:9f:12:ea:df:31:bb:34:43:5d:67:c0:02:a9:61:56: a3:9e:ac:90 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUWobDmPpSwfDdiE0QAGqs+jYGvOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNDA3MDUxMDQ5NDhaFw0yNTA3MDQxMDU0NDhaMDMxMTAvBgNV BAMTKDI5M0RGRjhBREREQTA5OTlFQTBGODM4QzRBMzNCNUM5MTc5MTcxMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmD2o73fh/2NtScWWyCJ6XSv8b 7zg5zwC3E1wERFOrw/oLMZ1kee/XLGLHGhvMZZWn7ehs5M9hdIweQGF3n4320ijD a+iunql1mMv/MA/dP5p1RMB8SWYS4xTUKXc/XzGmWr07Y9RkYK5H03QlRdRRALOO fw5pO3aTyDKJNP/zVaHXhXcXFonCC6OpRsZqvYGBq9/6Qu0AFwm60f6O80rCHg6b xh29Z4KMH1G7wWJz5XF/rw5B2Txunal3Fkmpjdgt21G8SJ3Nz1BLX8yayIRD6FMg 0uWf3PSKRiV+MW/5reGelMqNqaDho0l2zkjluyfLTCstu5vHHHngV4THNoMTAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUKT3/it3aCZnqD4OMSjO1yReRcTIwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTY1MzIzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzYzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1geIBMA0GCSqGSIb3DQEBCwUAA4IBAQB2 Lt/Lz/hiRjGSnfxnHTDi0lNFwJl7cu3Iki92CeIANxx+1faN3B+ZWWwMizD1AuYZ sQ/yL69VtJP+MYYr1VGj4o+oEFMgGxY0HModkPJ/ETu5MEQ2T13+oA9WvtM+Ta37 toEIxD2F1d0e28bFT6Z12CeaRDDouww3JQ8PpriDPtoCV9Q/RPm1BdB3vKTLYJCU HifSPoxmC4QnOxfd218Eq9ZuOE+llSIFX785hFRZQpb8dXQGP6jVLwtQX90tV+/j UQ3nHFQJyRyTSy+Gy0F7rsi49SIXHF2AfEzdqF1xsCfBXVKXAUJYEmvwCH+fEurf Mbs0Q11nwAKpYVajnqyQ -----END CERTIFICATE-----Generated at Sun Jul 14 08:31:14 2024 by rpki-client on console.sobornost.net