$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653238303a3a2f34322d3432203d3e20323134363433.roa File: 326131343a373538313a653238303a3a2f34322d3432203d3e20323134363433.roa (raw, json) Hash identifier: mj4axxCOWwll5ZjMNy36TTHlnSEb0bzz9PV0j0VR7RY= Subject key identifier: 0C:27:33:1F:54:BB:16:A9:38:F0:48:74:1E:7C:96:68:50:BF:D0:9B Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 02E84E74FCF7D191AABA4EA47FCD36D5EEB3833D Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653238303a3a2f34322d3432203d3e20323134363433.roa Signing time: Tue 09 Jul 2024 22:37:34 +0000 ROA not before: Tue 09 Jul 2024 22:32:34 +0000 ROA not after: Tue 08 Jul 2025 22:37:34 +0000 asID: 214643 IP address blocks: 2a14:7581:e280::/42 maxlen: 42 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jul 2024 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e8:4e:74:fc:f7:d1:91:aa:ba:4e:a4:7f:cd:36:d5:ee:b3:83:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jul 9 22:32:34 2024 GMT Not After : Jul 8 22:37:34 2025 GMT Subject: CN=0C27331F54BB16A938F048741E7C966850BFD09B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:74:2d:da:01:4a:c8:e6:3f:ce:19:be:aa: 97:40:36:42:63:12:68:11:ae:2e:ae:27:59:84:d5: 31:c9:12:5e:e4:9c:86:fe:1a:e8:7b:a6:54:f9:cf: b6:c6:45:0e:07:8f:77:ed:9e:f5:6a:35:fd:46:fb: 46:0a:d4:e3:22:a2:ff:e9:18:48:be:1e:39:67:e5: 33:02:76:58:cb:da:fc:0b:c3:24:79:34:ba:14:a1: 7d:af:a8:9b:5e:25:54:e1:9d:2e:1f:fb:f6:2e:dd: 9f:e5:4b:22:32:91:39:f7:8b:c1:60:c3:19:22:c1: de:0a:3c:6f:1a:66:3c:7c:70:a5:29:66:e3:e1:4b: 72:b3:0f:01:71:0d:07:48:04:b2:12:bb:44:be:50: 91:e4:c2:de:fd:74:f0:d6:ce:8c:d5:55:21:bc:19: ab:9e:27:88:14:17:87:14:04:80:71:79:99:76:c9: 63:aa:fe:24:2d:bb:99:5a:2a:d8:7f:e5:37:9a:ff: d7:41:d8:45:42:b3:e6:dd:58:c7:8c:f7:cb:e8:5d: 30:9d:34:10:e8:40:f8:f0:bb:c7:89:a7:6c:ec:a6: b4:be:2e:4e:48:11:1d:f7:b1:9a:68:23:4d:c8:22: 10:1f:4a:0d:48:50:45:66:d0:98:b1:87:55:29:e6: 4a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:27:33:1F:54:BB:16:A9:38:F0:48:74:1E:7C:96:68:50:BF:D0:9B X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653238303a3a2f34322d3432203d3e20323134363433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:e280::/42 Signature Algorithm: sha256WithRSAEncryption 2b:f1:3f:7e:b4:2d:bc:0e:b8:32:24:0f:ee:9e:0f:51:c3:d6: c9:18:09:3b:c0:07:82:91:f1:81:9d:d6:16:c7:e1:b2:1d:ab: ad:c0:b9:59:6f:42:a1:a9:94:43:8d:d9:3d:5f:b1:48:d8:1c: 62:ba:80:9b:08:c5:46:f5:41:1b:2a:c3:b4:93:c0:f6:df:2e: 3b:f1:00:ae:5f:56:eb:96:17:7d:55:67:35:88:f6:13:3b:99: 89:83:a5:35:2e:70:e9:72:9a:c0:e7:be:5a:5d:6c:3b:f0:6c: c7:09:0c:6d:0d:a4:d1:55:53:49:72:35:ce:40:24:b3:1e:02: 06:2f:2a:f2:db:ab:14:0c:31:da:6c:ea:81:ea:0e:7b:65:7c: e8:b9:41:55:2b:f9:9e:ae:ac:c1:41:17:82:1b:7b:5e:8a:70: f4:2a:99:15:f2:ce:9d:1c:ea:6b:0f:42:3a:41:65:32:33:d5: 49:a7:06:69:e8:d4:64:14:53:b9:96:0e:7a:a1:e4:a5:0f:fe: c6:72:33:0f:b7:be:d0:c2:3b:dd:1e:cf:d6:97:f1:34:84:38: 1f:10:7d:85:c8:43:7c:e3:37:16:25:25:09:37:10:e8:96:ab: 83:4a:ab:1e:d6:b8:2b:3a:48:5a:8a:70:33:6d:7a:fb:d4:16: 44:e9:5d:8b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUAuhOdPz30ZGquk6kf8021e6zgz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNDA3MDkyMjMyMzRaFw0yNTA3MDgyMjM3MzRaMDMxMTAvBgNV BAMTKDBDMjczMzFGNTRCQjE2QTkzOEYwNDg3NDFFN0M5NjY4NTBCRkQwOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAG3Qt2gFKyOY/zhm+qpdANkJj EmgRri6uJ1mE1THJEl7knIb+Guh7plT5z7bGRQ4Hj3ftnvVqNf1G+0YK1OMiov/p GEi+Hjln5TMCdljL2vwLwyR5NLoUoX2vqJteJVThnS4f+/Yu3Z/lSyIykTn3i8Fg wxkiwd4KPG8aZjx8cKUpZuPhS3KzDwFxDQdIBLISu0S+UJHkwt79dPDWzozVVSG8 GaueJ4gUF4cUBIBxeZl2yWOq/iQtu5laKth/5Tea/9dB2EVCs+bdWMeM98voXTCd NBDoQPjwu8eJp2zsprS+Lk5IER33sZpoI03IIhAfSg1IUEVm0Jixh1Up5krhAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUDCczH1S7Fqk48Eh0HnyWaFC/0JswHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTY1MzIzODMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIz MTM0MzYzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcGKhR1geKAMA0GCSqGSIb3DQEBCwUAA4IBAQAr 8T9+tC28DrgyJA/ung9Rw9bJGAk7wAeCkfGBndYWx+GyHautwLlZb0KhqZRDjdk9 X7FI2BxiuoCbCMVG9UEbKsO0k8D23y478QCuX1brlhd9VWc1iPYTO5mJg6U1LnDp cprA575aXWw78GzHCQxtDaTRVVNJcjXOQCSzHgIGLyry26sUDDHabOqB6g57ZXzo uUFVK/merqzBQReCG3teinD0KpkV8s6dHOprD0I6QWUyM9VJpwZp6NRkFFO5lg56 oeSlD/7GcjMPt77QwjvdHs/Wl/E0hDgfEH2FyEN84zcWJSUJNxDolquDSqse1rgr OkhainAzbXr71BZE6V2L -----END CERTIFICATE-----Generated at Sun Jul 14 08:31:14 2024 by rpki-client on console.sobornost.net