$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa File: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (raw, json) Hash identifier: E7vQShgXOvBH1q/A8kYfwNTbOyQSM9xRkA+S+5IF33A= Subject key identifier: CA:90:DA:51:A0:C1:BC:E7:75:BE:46:9D:6C:E6:79:F4:FE:EF:EE:92 Certificate issuer: /CN=547F71C62763A22A9156089F2F55B587337FAFCB Certificate serial: 74E068F589D93536893886FE7DE6A7DA72FB4DC4 Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa Signing time: Sat 05 Jul 2025 15:29:02 +0000 ROA not before: Sat 05 Jul 2025 15:24:02 +0000 ROA not after: Sat 04 Jul 2026 15:29:02 +0000 asID: 200179 IP address blocks: 2a0a:6040:4900::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:e0:68:f5:89:d9:35:36:89:38:86:fe:7d:e6:a7:da:72:fb:4d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB Validity Not Before: Jul 5 15:24:02 2025 GMT Not After : Jul 4 15:29:02 2026 GMT Subject: CN=CA90DA51A0C1BCE775BE469D6CE679F4FEEFEE92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:32:3e:27:48:99:09:c2:97:21:9b:c2:1f: e2:c7:e8:be:d1:9a:42:64:57:68:68:d7:79:7a:6e: b1:07:d7:27:49:6b:99:71:5e:96:d2:85:0f:2a:9d: 40:9a:a4:64:74:4e:eb:75:3d:81:33:11:d4:0a:f8: 36:9b:43:a1:65:f3:14:70:7c:96:c2:14:fa:5c:97: ac:d2:92:6d:a0:9f:34:8d:5b:7a:41:58:89:1e:bc: 76:bd:1c:73:b7:d9:9f:11:cb:fd:4e:00:85:24:9c: 9c:dd:0a:13:e0:4c:3a:c4:1e:e6:f9:11:06:3d:6f: 0f:a9:d9:4b:c7:e8:12:9f:5b:11:11:15:a7:32:a0: ea:de:2a:06:65:de:38:40:1e:a2:f1:0c:48:da:cc: d0:da:db:15:68:62:21:63:03:c0:a9:8b:50:b7:84: 03:c0:11:38:cf:01:50:a1:c3:fa:33:0e:44:e0:2b: 67:39:91:6c:69:07:61:28:7d:4d:d3:7d:2c:d8:5d: 28:5b:96:b6:1b:e8:15:2e:fc:e9:f5:e9:be:43:7f: c7:f3:70:ba:30:8f:07:dd:f6:a5:fc:13:3c:af:36: 04:78:fc:02:f7:03:1f:1a:d4:00:4e:9d:d2:fa:dd: e2:46:e8:a9:cf:f3:cb:be:9d:81:f3:68:9e:90:f2: f7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:90:DA:51:A0:C1:BC:E7:75:BE:46:9D:6C:E6:79:F4:FE:EF:EE:92 X509v3 Authority Key Identifier: keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:4900::/40 Signature Algorithm: sha256WithRSAEncryption b0:84:3b:9c:01:bd:79:b2:da:93:d9:e9:a1:5e:1f:36:a7:9b: 5e:e7:9e:d8:f5:1f:49:e0:3a:c5:32:93:aa:d0:e8:4a:d4:9a: f1:4a:53:01:97:70:da:bd:23:a8:4a:43:9f:2e:82:c1:18:59: 25:74:f3:d3:c1:70:bf:4f:69:a5:f9:52:5a:d6:03:ac:45:fa: e7:af:17:ab:d6:26:fc:d4:ee:03:60:e1:5d:72:24:03:6d:82: 5e:48:cc:e0:92:4c:3c:55:18:e4:db:5a:f0:ce:7e:77:0e:53: b8:e7:f6:91:c7:46:79:19:94:6f:6b:0e:d5:2b:73:dd:11:85: 59:66:f0:b5:9d:df:9e:6f:07:c9:82:c0:65:b2:f1:23:de:aa: c3:21:04:ff:83:32:b6:f2:c3:bb:a5:5b:90:ac:e6:d1:02:df: 86:84:c8:a5:fe:ee:e3:e7:50:ba:e6:c4:e4:de:f2:77:ff:42: c4:60:16:05:84:00:4b:c7:1e:f8:08:2b:9f:b2:02:e6:b4:74: e1:ba:f6:cc:28:4f:75:67:e9:c9:ee:cf:4d:16:04:ca:a4:91: 27:95:e9:53:4f:12:6a:81:cd:10:bf:3b:07:9d:13:03:21:92: 13:78:e3:62:8f:5b:8b:ec:2f:f1:a9:1f:18:d8:a3:c7:6e:0a: 1a:20:95:43 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIUdOBo9YnZNTaJOIb+fean2nL7TcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODcz MzdGQUZDQjAeFw0yNTA3MDUxNTI0MDJaFw0yNjA3MDQxNTI5MDJaMDMxMTAvBgNV BAMTKENBOTBEQTUxQTBDMUJDRTc3NUJFNDY5RDZDRTY3OUY0RkVFRkVFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzeTI+J0iZCcKXIZvCH+LH6L7R mkJkV2ho13l6brEH1ydJa5lxXpbShQ8qnUCapGR0Tut1PYEzEdQK+DabQ6Fl8xRw fJbCFPpcl6zSkm2gnzSNW3pBWIkevHa9HHO32Z8Ry/1OAIUknJzdChPgTDrEHub5 EQY9bw+p2UvH6BKfWxERFacyoOreKgZl3jhAHqLxDEjazNDa2xVoYiFjA8Cpi1C3 hAPAETjPAVChw/ozDkTgK2c5kWxpB2EofU3TfSzYXShblrYb6BUu/On16b5Df8fz cLowjwfd9qX8EzyvNgR4/AL3Ax8a1ABOndL63eJG6KnP88u+nYHzaJ6Q8vdXAgMB AAGjggJfMIICWzAdBgNVHQ4EFgQUypDaUaDBvOd1vkadbOZ59P7v7pIwHwYDVR0j BBgwFoAUVH9xxidjoiqRVgifL1W1hzN/r8swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3 Y2EzLzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU0N0Y3MUM2Mjc2M0Ey MkE5MTU2MDg5RjJGNTVCNTg3MzM3RkFGQ0IuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzAxNzkxYTY0LWEzNmEtNGViOS1hNmZmLWUxYzQwNzhhN2Nh My8xLzMyNjEzMDYxM2EzNjMwMzQzMDNhMzQzOTMwMzAzYTNhMmYzNDMwMmQzNDM4 MjAzZDNlMjAzMjMwMzAzMTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBASTANBgkqhkiG9w0B AQsFAAOCAQEAsIQ7nAG9ebLak9npoV4fNqebXuee2PUfSeA6xTKTqtDoStSa8UpT AZdw2r0jqEpDny6CwRhZJXTz08Fwv09ppflSWtYDrEX6568Xq9Ym/NTuA2DhXXIk A22CXkjM4JJMPFUY5Nta8M5+dw5TuOf2kcdGeRmUb2sO1Stz3RGFWWbwtZ3fnm8H yYLAZbLxI96qwyEE/4MytvLDu6VbkKzm0QLfhoTIpf7u4+dQuubE5N7yd/9CxGAW BYQAS8ce+Agrn7IC5rR04br2zChPdWfpye7PTRYEyqSRJ5XpU08SaoHNEL87B50T AyGSE3jjYo9bi+wv8akfGNijx24KGiCVQw== -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:55 2025 by rpki-client