$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634383a3a2f34362d3436203d3e20323134363433.roa File: 326131343a373538313a6634383a3a2f34362d3436203d3e20323134363433.roa (raw, json) Hash identifier: K1YRNuhTJnYxr1wT2rmYnAsXRtRmKveDOfSwScZPj4g= Subject key identifier: F6:F5:26:07:6E:05:DE:8F:1A:A3:50:42:04:5B:EA:7C:F0:5B:91:73 Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 567FAC8F4EA536AC3DF6030817A570D08BBA247B Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634383a3a2f34362d3436203d3e20323134363433.roa Signing time: Sat 06 Jul 2024 23:35:41 +0000 ROA not before: Sat 06 Jul 2024 23:30:41 +0000 ROA not after: Sat 05 Jul 2025 23:35:41 +0000 asID: 214643 IP address blocks: 2a14:7581:f48::/46 maxlen: 46 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jul 2024 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:7f:ac:8f:4e:a5:36:ac:3d:f6:03:08:17:a5:70:d0:8b:ba:24:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jul 6 23:30:41 2024 GMT Not After : Jul 5 23:35:41 2025 GMT Subject: CN=F6F526076E05DE8F1AA35042045BEA7CF05B9173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:90:0b:94:f6:db:42:11:26:49:82:3c:d2:eb: ba:f1:5f:2f:a0:0d:0b:64:35:e7:20:ef:8c:84:00: a8:f3:10:00:8f:5b:a2:db:c1:a7:75:2c:2b:ce:9a: 50:af:81:d3:c5:0c:11:2c:1a:f7:6e:ed:43:76:d0: d5:43:f0:5d:46:a9:3b:d2:22:e6:04:7c:f2:0a:72: da:46:d8:92:4e:3a:13:e1:e8:01:a0:1b:a8:0e:d7: 79:3a:77:08:0e:a4:01:e3:cf:1d:78:fd:f8:09:6a: d8:52:7f:13:40:63:0b:61:dc:c9:19:ea:b7:53:64: d6:69:59:37:6b:58:40:8a:6a:d7:62:7a:c9:c7:b3: cf:df:75:1e:1a:e7:35:da:a2:d0:a9:81:6e:82:1f: 17:d0:aa:4f:78:67:4b:31:f8:b8:c6:2e:4e:7c:fa: 48:78:8c:15:67:04:49:bd:06:15:53:90:f5:7a:d3: 6d:25:c2:91:fd:fa:44:10:89:fd:14:84:7f:bf:fd: 0a:be:c2:3c:79:57:84:25:62:77:a3:8f:d2:bb:74: d8:64:2e:3c:80:c7:4a:70:34:6b:cb:19:45:3e:71: 3c:cc:c3:f8:48:89:da:66:ba:f3:e0:a1:e9:e7:e5: e2:da:af:3d:31:a7:c4:2f:e8:8a:63:84:87:a8:6a: bb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F5:26:07:6E:05:DE:8F:1A:A3:50:42:04:5B:EA:7C:F0:5B:91:73 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634383a3a2f34362d3436203d3e20323134363433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:f48::/46 Signature Algorithm: sha256WithRSAEncryption 85:0b:4a:43:d1:7c:10:1b:6c:16:34:7c:b7:ea:76:a4:6a:ca: 3d:5e:3a:e3:a8:d3:80:2b:e3:2b:14:98:9f:a9:76:17:92:f0: ad:dc:30:cd:ea:c1:80:22:5a:66:03:87:b6:f6:1c:50:e6:d6: d7:a9:f9:7d:7b:1b:f5:0e:2b:59:ae:14:9d:91:7d:46:d0:79: 25:1b:92:dd:f0:08:3d:2a:3b:44:a9:f6:25:e9:3d:0d:1a:fc: 5e:e2:1a:61:e6:78:05:5d:c5:23:47:bf:2e:a6:02:22:d8:d3: 2e:9d:ea:e2:48:85:9c:d9:9d:3b:9d:ea:77:e1:4c:b9:7d:35: 2a:0d:53:55:10:48:7a:21:1c:66:2a:1c:73:e1:13:5b:51:e7: 07:ad:f9:d9:87:38:26:9a:b6:b3:84:c3:fd:a5:99:0a:5f:ae: d4:fb:c0:cb:69:6f:80:8b:34:5e:8f:be:f4:79:5a:ee:28:11: cd:2d:dc:2f:c1:49:eb:5a:58:7c:42:01:6c:73:09:ba:11:4d: bc:2d:38:8e:e1:31:02:aa:5a:2e:ac:04:ba:d4:85:80:c5:70: 06:d4:f4:69:52:a4:2d:9f:e6:08:40:8b:48:c6:fa:a9:a0:c0: 62:89:ba:36:27:ce:5a:e9:f9:47:10:ab:c1:d0:f0:b1:30:93: 4d:78:94:8f -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUVn+sj06lNqw99gMIF6Vw0Iu6JHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNDA3MDYyMzMwNDFaFw0yNTA3MDUyMzM1NDFaMDMxMTAvBgNV BAMTKEY2RjUyNjA3NkUwNURFOEYxQUEzNTA0MjA0NUJFQTdDRjA1QjkxNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvkAuU9ttCESZJgjzS67rxXy+g DQtkNecg74yEAKjzEACPW6Lbwad1LCvOmlCvgdPFDBEsGvdu7UN20NVD8F1GqTvS IuYEfPIKctpG2JJOOhPh6AGgG6gO13k6dwgOpAHjzx14/fgJathSfxNAYwth3MkZ 6rdTZNZpWTdrWECKatdiesnHs8/fdR4a5zXaotCpgW6CHxfQqk94Z0sx+LjGLk58 +kh4jBVnBEm9BhVTkPV6020lwpH9+kQQif0UhH+//Qq+wjx5V4QlYnejj9K7dNhk LjyAx0pwNGvLGUU+cTzMw/hIidpmuvPgoenn5eLarz0xp8Qv6IpjhIeoaruRAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQU9vUmB24F3o8ao1BCBFvqfPBbkXMwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTY2MzQzODNhM2EyZjM0MzYyZDM0MzYyMDNkM2UyMDMyMzEz NDM2MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHAioUdYEPSDANBgkqhkiG9w0BAQsFAAOCAQEAhQtK Q9F8EBtsFjR8t+p2pGrKPV4646jTgCvjKxSYn6l2F5LwrdwwzerBgCJaZgOHtvYc UObW16n5fXsb9Q4rWa4UnZF9RtB5JRuS3fAIPSo7RKn2Jek9DRr8XuIaYeZ4BV3F I0e/LqYCItjTLp3q4kiFnNmdO53qd+FMuX01Kg1TVRBIeiEcZiocc+ETW1HnB635 2Yc4Jpq2s4TD/aWZCl+u1PvAy2lvgIs0Xo++9Hla7igRzS3cL8FJ61pYfEIBbHMJ uhFNvC04juExAqpaLqwEutSFgMVwBtT0aVKkLZ/mCECLSMb6qaDAYom6NifOWun5 RxCrwdDwsTCTTXiUjw== -----END CERTIFICATE-----Generated at Sun Jul 14 08:31:14 2024 by rpki-client on console.sobornost.net