$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa File: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (raw, json) Hash identifier: oi3cTY9RPbSSa44GzFqVMPw4EmmK/P6XuRB3HCSy6ZU= Subject key identifier: D0:00:AE:52:88:2C:FC:5D:9E:91:F0:64:F2:7E:A9:23:87:0E:61:7E Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 389080586D92E461D93EAD00366A368DA82799FA Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa Signing time: Sat 05 Jul 2025 03:09:35 +0000 ROA not before: Sat 05 Jul 2025 03:04:35 +0000 ROA not after: Sat 04 Jul 2026 03:09:35 +0000 asID: 216455 IP address blocks: 2a05:dfc1:8500::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 20:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:90:80:58:6d:92:e4:61:d9:3e:ad:00:36:6a:36:8d:a8:27:99:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Jul 5 03:04:35 2025 GMT Not After : Jul 4 03:09:35 2026 GMT Subject: CN=D000AE52882CFC5D9E91F064F27EA923870E617E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f2:a7:0e:07:ec:63:94:61:f4:8f:4e:4a:95: 07:36:95:b6:da:ed:50:39:09:13:79:cb:85:fb:e8: 0e:8c:c9:a7:95:c5:83:bb:da:9a:20:1c:77:e4:ff: 46:bd:cd:19:d1:2c:1a:78:ff:31:fa:32:9e:47:27: 8f:99:6f:d7:c2:f9:af:38:a8:14:e4:16:68:a4:e4: 5a:70:7a:e6:7b:b2:10:36:12:d7:5b:d3:eb:99:47: 92:8c:00:54:2a:b6:32:8c:1c:31:00:10:98:11:0a: e7:2f:23:32:31:03:4b:18:2a:72:8e:3a:f7:d8:a6: f7:71:05:b5:ba:4f:6e:6d:a6:e9:9b:c2:ff:2b:89: ff:bd:3d:22:f4:1a:74:3a:a6:81:2a:d7:62:93:80: 4e:93:41:c6:7c:c3:35:a7:1e:19:08:7e:6b:4d:ff: f7:da:cb:fc:6d:02:32:32:88:e1:bd:52:1f:6e:c4: ec:54:49:03:5e:de:b7:aa:fc:15:57:c0:66:7d:1f: 57:bb:47:76:0c:06:a1:aa:8c:04:a5:16:23:b2:c6: 96:af:7b:10:e1:48:01:aa:49:6f:47:a6:b5:5e:07: 55:16:50:a9:dd:0d:93:cb:b5:6c:df:d0:60:ee:84: 68:0a:37:2c:ab:8a:02:ad:9f:ef:c8:0a:8d:ba:06: 93:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:00:AE:52:88:2C:FC:5D:9E:91:F0:64:F2:7E:A9:23:87:0E:61:7E X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8500::/40 Signature Algorithm: sha256WithRSAEncryption 3b:09:78:01:d3:2b:25:04:f0:98:60:28:22:da:69:e2:44:12: 35:42:8c:49:46:a8:b3:0d:05:bf:07:e5:d8:b6:01:4a:4b:37: 49:32:be:83:ef:ba:8c:43:6f:03:b9:29:00:75:49:18:4b:14: ea:7d:21:8d:46:17:5b:aa:0a:3d:ba:f8:a0:a6:28:e7:20:8a: 3b:9b:93:f8:e7:0b:cb:80:04:47:8f:42:59:03:a6:27:66:56: 4d:9c:b6:47:85:85:0c:70:6f:92:40:11:ce:fb:fc:ab:70:0f: d6:8d:51:a2:1e:55:46:00:ee:b9:98:b8:ae:d4:c0:ac:d9:32: d6:a4:22:5d:34:c2:0c:99:47:93:fa:5f:50:d8:5a:dd:38:fe: b2:5f:f8:d3:37:6a:e5:3a:e9:cc:46:ee:72:96:8c:41:4e:b7: b9:33:cd:39:33:be:a2:13:e2:e2:6d:c6:6d:3e:b7:1c:ea:2a: 91:7b:82:09:d9:9c:80:db:3a:a2:a4:59:f4:1d:8a:e2:f2:ca: 70:3f:6e:04:54:c5:4b:b0:b7:53:4c:e1:2b:b6:fc:e2:ab:ce: 47:51:1d:bb:af:c7:9d:41:d7:fc:55:d3:97:a5:fa:79:60:da: d9:a0:c6:f4:d6:23:c5:5a:ab:72:91:2f:9b:4a:07:49:28:a3: 27:0c:77:52 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIUOJCAWG2S5GHZPq0ANmo2jagnmfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNTA3MDUwMzA0MzVaFw0yNjA3MDQwMzA5MzVaMDMxMTAvBgNV BAMTKEQwMDBBRTUyODgyQ0ZDNUQ5RTkxRjA2NEYyN0VBOTIzODcwRTYxN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl8qcOB+xjlGH0j05KlQc2lbba 7VA5CRN5y4X76A6MyaeVxYO72pogHHfk/0a9zRnRLBp4/zH6Mp5HJ4+Zb9fC+a84 qBTkFmik5FpweuZ7shA2Etdb0+uZR5KMAFQqtjKMHDEAEJgRCucvIzIxA0sYKnKO OvfYpvdxBbW6T25tpumbwv8rif+9PSL0GnQ6poEq12KTgE6TQcZ8wzWnHhkIfmtN //fay/xtAjIyiOG9Uh9uxOxUSQNe3req/BVXwGZ9H1e7R3YMBqGqjASlFiOyxpav exDhSAGqSW9HprVeB1UWUKndDZPLtWzf0GDuhGgKNyyrigKtn+/ICo26BpO/AgMB AAGjggJfMIICWzAdBgNVHQ4EFgQU0ACuUogs/F2ekfBk8n6pI4cOYX4wHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0 YS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzgzNTMwMzAzYTNhMmYzNDMwMmQzNDMw MjAzZDNlMjAzMjMxMzYzNDM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BhTANBgkqhkiG9w0B AQsFAAOCAQEAOwl4AdMrJQTwmGAoItpp4kQSNUKMSUaosw0Fvwfl2LYBSks3STK+ g++6jENvA7kpAHVJGEsU6n0hjUYXW6oKPbr4oKYo5yCKO5uT+OcLy4AER49CWQOm J2ZWTZy2R4WFDHBvkkARzvv8q3AP1o1Roh5VRgDuuZi4rtTArNky1qQiXTTCDJlH k/pfUNha3Tj+sl/40zdq5TrpzEbucpaMQU63uTPNOTO+ohPi4m3GbT63HOoqkXuC CdmcgNs6oqRZ9B2K4vLKcD9uBFTFS7C3U0zhK7b84qvOR1Edu6/HnUHX/FXTl6X6 eWDa2aDG9NYjxVqrcpEvm0oHSSijJwx3Ug== -----END CERTIFICATE-----Generated at Wed Jul 23 12:44:35 2025 by rpki-client