$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634343a3a2f34362d3436203d3e20323134363433.roa File: 326131343a373538313a6634343a3a2f34362d3436203d3e20323134363433.roa (raw, json) Hash identifier: DHMo+HoD2IBPD0jcE5wNevnxR7Mge/nxxuYWze55UIc= Subject key identifier: A9:84:D6:1D:11:8F:C5:A7:89:74:0F:29:F6:C8:E5:D1:3E:FD:B1:39 Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 4E9B74E76D387163759E703DCC287B7657B0F468 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634343a3a2f34362d3436203d3e20323134363433.roa Signing time: Sat 06 Jul 2024 23:41:59 +0000 ROA not before: Sat 06 Jul 2024 23:36:59 +0000 ROA not after: Sat 05 Jul 2025 23:41:59 +0000 asID: 214643 IP address blocks: 2a14:7581:f44::/46 maxlen: 46 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jul 2024 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9b:74:e7:6d:38:71:63:75:9e:70:3d:cc:28:7b:76:57:b0:f4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jul 6 23:36:59 2024 GMT Not After : Jul 5 23:41:59 2025 GMT Subject: CN=A984D61D118FC5A789740F29F6C8E5D13EFDB139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b9:79:16:b6:56:5a:94:a6:46:f4:ad:1e:92: 98:68:fc:65:ae:b9:2e:0f:2f:08:88:7d:bd:5c:f7: 06:cf:3d:64:45:4f:79:c7:fd:64:48:93:36:7c:b9: f1:26:3f:56:a5:3f:38:82:e9:7f:8f:b2:3a:3a:af: d3:bc:be:25:6a:66:28:44:23:ba:2a:a5:90:a9:1e: 4e:c1:a2:fc:cf:e2:86:08:cc:d9:dc:ae:b6:0d:7b: 73:f1:3d:a7:94:87:00:8d:02:b8:1c:96:67:ed:9b: ce:b4:cf:48:f1:ee:c1:f4:4e:ad:67:13:99:14:d0: 1d:e7:9d:9f:3b:ed:17:c6:29:16:ad:38:ef:1f:6e: 37:de:79:39:c5:ca:f4:cb:5e:e2:ca:bc:25:a1:a0: f3:b3:77:f8:b2:22:f1:9b:b9:d4:96:66:d3:50:d7: 90:4c:1c:ee:10:60:c9:e0:c8:a5:cd:6b:87:86:7d: f3:16:8e:e4:13:dc:6a:cb:b9:45:19:d8:ee:35:62: 3b:b9:88:77:c1:ec:8a:25:6f:51:28:7d:a0:a1:19: bb:fa:8f:a1:90:4c:51:7e:35:4b:79:96:c1:6c:40: 6f:ae:6e:4c:da:81:78:e7:d8:76:27:c5:de:20:df: c5:be:74:54:32:16:10:c4:8f:1c:07:d3:45:92:5d: 33:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:84:D6:1D:11:8F:C5:A7:89:74:0F:29:F6:C8:E5:D1:3E:FD:B1:39 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634343a3a2f34362d3436203d3e20323134363433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:f44::/46 Signature Algorithm: sha256WithRSAEncryption 2a:9d:fa:ab:35:e7:15:0e:89:90:6b:42:74:6c:20:78:31:0f: fd:9b:ef:bf:43:bc:b6:d8:42:19:bf:f4:ad:e4:7c:1b:d1:7e: 01:20:e5:a8:d9:d7:8c:2f:99:8f:75:81:eb:2b:3b:b1:00:d3: 7e:71:7d:d9:fd:52:4d:c3:af:e5:34:79:0f:ab:e8:04:8d:86: f0:4b:e9:81:24:cf:6c:12:95:75:47:af:92:0e:66:12:22:c0: b7:32:12:90:f2:c6:e7:4e:66:0d:a8:80:7e:96:2b:ba:1a:95: df:4e:4f:df:91:9d:de:03:08:9b:8a:78:f6:88:4a:f6:f7:14: 42:df:ca:97:8d:8a:27:82:e2:39:a4:38:0f:07:be:41:91:66: a6:d1:28:ce:83:1f:cc:c8:a5:53:4b:80:82:8e:4d:6c:cc:37: 11:99:19:dd:23:ed:95:02:6c:65:80:f2:76:41:3c:d0:44:d7: 8b:8f:53:81:ee:a8:d1:a4:98:18:3f:08:d2:be:38:ff:ee:45: 92:0b:9b:43:9b:90:f0:ae:aa:11:71:1b:d3:8c:cd:d9:46:a4: 8d:15:ee:2e:cf:77:fa:68:5f:74:4a:80:e3:88:3f:55:96:61: 14:98:21:77:b6:56:85:8c:7d:61:2b:12:43:4f:9b:06:39:f3: aa:7a:b7:42 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUTpt05204cWN1nnA9zCh7dlew9GgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNDA3MDYyMzM2NTlaFw0yNTA3MDUyMzQxNTlaMDMxMTAvBgNV BAMTKEE5ODRENjFEMTE4RkM1QTc4OTc0MEYyOUY2QzhFNUQxM0VGREIxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2uXkWtlZalKZG9K0ekpho/GWu uS4PLwiIfb1c9wbPPWRFT3nH/WRIkzZ8ufEmP1alPziC6X+Psjo6r9O8viVqZihE I7oqpZCpHk7BovzP4oYIzNncrrYNe3PxPaeUhwCNArgclmftm860z0jx7sH0Tq1n E5kU0B3nnZ877RfGKRatOO8fbjfeeTnFyvTLXuLKvCWhoPOzd/iyIvGbudSWZtNQ 15BMHO4QYMngyKXNa4eGffMWjuQT3GrLuUUZ2O41Yju5iHfB7Iolb1EofaChGbv6 j6GQTFF+NUt5lsFsQG+ubkzagXjn2HYnxd4g38W+dFQyFhDEjxwH00WSXTMVAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUqYTWHRGPxaeJdA8p9sjl0T79sTkwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTY2MzQzNDNhM2EyZjM0MzYyZDM0MzYyMDNkM2UyMDMyMzEz NDM2MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHAioUdYEPRDANBgkqhkiG9w0BAQsFAAOCAQEAKp36 qzXnFQ6JkGtCdGwgeDEP/Zvvv0O8tthCGb/0reR8G9F+ASDlqNnXjC+Zj3WB6ys7 sQDTfnF92f1STcOv5TR5D6voBI2G8EvpgSTPbBKVdUevkg5mEiLAtzISkPLG505m DaiAfpYruhqV305P35Gd3gMIm4p49ohK9vcUQt/Kl42KJ4LiOaQ4Dwe+QZFmptEo zoMfzMilU0uAgo5NbMw3EZkZ3SPtlQJsZYDydkE80ETXi49Tge6o0aSYGD8I0r44 /+5FkgubQ5uQ8K6qEXEb04zN2UakjRXuLs93+mhfdEqA44g/VZZhFJghd7ZWhYx9 YSsSQ0+bBjnzqnq3Qg== -----END CERTIFICATE-----Generated at Sun Jul 14 08:31:14 2024 by rpki-client on console.sobornost.net