$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634633a3a2f34362d3436203d3e20323134363433.roa File: 326131343a373538313a6634633a3a2f34362d3436203d3e20323134363433.roa (raw, json) Hash identifier: 0ej+F2onoDl+f1RC0h2ywFhey44vAJj9k6TSuu4NbJk= Subject key identifier: 0F:E5:C2:9D:A9:66:F5:18:48:85:13:A1:02:BF:DD:CD:62:26:39:53 Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 4F3C9D4C116C87537D96A79592DA906C187CBDCB Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634633a3a2f34362d3436203d3e20323134363433.roa Signing time: Sat 06 Jul 2024 23:42:15 +0000 ROA not before: Sat 06 Jul 2024 23:37:15 +0000 ROA not after: Sat 05 Jul 2025 23:42:15 +0000 asID: 214643 IP address blocks: 2a14:7581:f4c::/46 maxlen: 46 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jul 2024 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3c:9d:4c:11:6c:87:53:7d:96:a7:95:92:da:90:6c:18:7c:bd:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jul 6 23:37:15 2024 GMT Not After : Jul 5 23:42:15 2025 GMT Subject: CN=0FE5C29DA966F518488513A102BFDDCD62263953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:f3:90:8c:9f:17:e5:64:b7:61:dd:5e:d5: 9e:aa:c5:5b:64:ec:60:00:ee:67:f7:84:de:bc:ec: ea:a7:f6:13:30:9a:d2:78:22:08:bd:19:cf:54:17: 74:e6:92:c4:b2:7f:d9:61:0f:d5:c4:41:20:49:d6: 9c:1b:c0:77:99:16:a2:ce:f8:df:8c:d4:35:ee:62: 0d:1e:fc:5b:c9:62:ff:49:d3:05:b0:4f:80:d3:e3: c5:52:57:e6:12:71:79:8a:76:75:e0:58:01:ef:05: 41:f0:19:20:ab:39:71:17:68:73:a7:d9:e4:f6:c0: 1c:dd:54:e1:93:08:f6:5f:d5:c6:6e:67:2f:ac:7b: 9d:7d:54:4d:ea:94:48:ee:9e:e6:7c:7c:9d:70:32: 68:eb:3f:1a:9b:4e:3a:b7:49:f4:77:2e:88:7c:05: 25:e4:7f:2c:4b:b3:e7:8b:5c:80:21:0e:a7:3e:50: b5:ee:15:fa:5e:71:ba:d6:23:e2:72:56:83:42:b6: 66:0c:d9:a4:ae:04:38:58:55:af:78:92:10:44:32: 45:b8:9c:c6:31:9d:c5:cd:3c:4b:ce:10:8a:50:79: 24:40:9c:c7:05:86:7e:55:63:fe:87:53:26:23:61: ac:58:29:7d:bd:d1:31:8e:44:16:db:84:c4:0b:b1: 08:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E5:C2:9D:A9:66:F5:18:48:85:13:A1:02:BF:DD:CD:62:26:39:53 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634633a3a2f34362d3436203d3e20323134363433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:f4c::/46 Signature Algorithm: sha256WithRSAEncryption 8a:2b:d0:d5:d7:6b:17:69:ce:e4:de:a3:90:3c:28:6a:89:59: bb:30:19:88:99:f4:27:08:d2:12:6d:5f:54:44:9e:3b:fd:2b: af:ef:4f:cd:fa:8f:e9:f5:40:5c:03:06:1e:92:8f:1c:c6:ae: f9:84:98:af:15:ca:b0:7e:1f:20:aa:e3:d0:e8:85:dc:4e:8d: 91:a0:e3:ee:e7:dc:04:e7:a8:8d:76:57:45:46:6d:38:6b:a1: 71:ab:e0:eb:8a:c0:1a:d8:9f:9d:f6:f5:3f:07:06:13:49:3d: df:7a:25:2d:a9:c2:c2:78:03:12:c0:30:01:19:17:2c:bb:81: 7c:3f:f4:8a:3f:4c:23:be:c2:dc:2c:ed:31:27:31:73:9b:bd: 54:1e:b6:7f:b3:97:a1:83:4a:33:0c:5a:d8:1e:ab:b3:3e:9b: 7a:3c:08:44:cf:0e:9e:f3:15:80:af:d0:f8:fa:9d:8e:39:8c: c3:d3:11:6f:50:ea:e8:29:2f:cd:29:81:bb:c6:12:4d:2a:11: 7a:7b:e4:97:5a:4d:98:b6:c3:d4:a2:a9:3f:ea:32:9f:56:dd: 06:b3:4b:1a:7c:09:74:ec:ee:c3:8a:94:b9:05:32:f9:84:a3: 6f:69:a2:b2:28:a8:07:7e:ab:68:a0:5f:81:92:66:e1:39:ce: 75:7a:2d:e0 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUTzydTBFsh1N9lqeVktqQbBh8vcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNDA3MDYyMzM3MTVaFw0yNTA3MDUyMzQyMTVaMDMxMTAvBgNV BAMTKDBGRTVDMjlEQTk2NkY1MTg0ODg1MTNBMTAyQkZERENENjIyNjM5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC20vOQjJ8X5WS3Yd1e1Z6qxVtk 7GAA7mf3hN687Oqn9hMwmtJ4Igi9Gc9UF3TmksSyf9lhD9XEQSBJ1pwbwHeZFqLO +N+M1DXuYg0e/FvJYv9J0wWwT4DT48VSV+YScXmKdnXgWAHvBUHwGSCrOXEXaHOn 2eT2wBzdVOGTCPZf1cZuZy+se519VE3qlEjunuZ8fJ1wMmjrPxqbTjq3SfR3Loh8 BSXkfyxLs+eLXIAhDqc+ULXuFfpecbrWI+JyVoNCtmYM2aSuBDhYVa94khBEMkW4 nMYxncXNPEvOEIpQeSRAnMcFhn5VY/6HUyYjYaxYKX290TGORBbbhMQLsQhLAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUD+XCnalm9RhIhROhAr/dzWImOVMwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTY2MzQ2MzNhM2EyZjM0MzYyZDM0MzYyMDNkM2UyMDMyMzEz NDM2MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHAioUdYEPTDANBgkqhkiG9w0BAQsFAAOCAQEAiivQ 1ddrF2nO5N6jkDwoaolZuzAZiJn0JwjSEm1fVESeO/0rr+9PzfqP6fVAXAMGHpKP HMau+YSYrxXKsH4fIKrj0OiF3E6NkaDj7ufcBOeojXZXRUZtOGuhcavg64rAGtif nfb1PwcGE0k933olLanCwngDEsAwARkXLLuBfD/0ij9MI77C3CztMScxc5u9VB62 f7OXoYNKMwxa2B6rsz6bejwIRM8OnvMVgK/Q+PqdjjmMw9MRb1Dq6CkvzSmBu8YS TSoRenvkl1pNmLbD1KKpP+oyn1bdBrNLGnwJdOzuw4qUuQUy+YSjb2misiioB36r aKBfgZJm4TnOdXot4A== -----END CERTIFICATE-----Generated at Sun Jul 14 08:31:14 2024 by rpki-client on console.sobornost.net