$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa File: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (raw, json) Hash identifier: EPbQn4nTyAleGN23OETUsYn80EOl1eLpliPnGLTdXDk= Subject key identifier: 9D:A9:85:E1:3D:04:B1:15:5D:27:6C:CD:20:0D:71:B4:94:FD:03:50 Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 182EAE7D26F92A48E17DFFE04116505C38E73CC7 Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa Signing time: Sat 05 Jul 2025 03:09:35 +0000 ROA not before: Sat 05 Jul 2025 03:04:35 +0000 ROA not after: Sat 04 Jul 2026 03:09:35 +0000 asID: 216455 IP address blocks: 2a05:dfc1:9600::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 20:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:2e:ae:7d:26:f9:2a:48:e1:7d:ff:e0:41:16:50:5c:38:e7:3c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Jul 5 03:04:35 2025 GMT Not After : Jul 4 03:09:35 2026 GMT Subject: CN=9DA985E13D04B1155D276CCD200D71B494FD0350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f0:4b:a1:42:2c:a9:0f:91:78:f1:cc:13:d5: 09:39:6c:b7:ef:85:ec:c9:5c:6f:e8:1c:1f:bd:93: ba:fc:ea:28:e7:22:b7:80:7e:79:97:48:4f:70:9b: 09:8f:b6:eb:62:f9:ae:8c:7c:61:04:e2:89:b6:9f: 32:2c:6b:8d:cd:c1:70:d8:73:32:b6:a7:4a:2c:d4: d0:75:7e:28:a7:46:c4:da:67:34:d9:10:0b:8a:ec: 06:40:1d:7f:23:33:69:8f:63:86:21:14:e3:bf:6c: 77:8a:90:4c:e6:49:fa:00:6b:95:bf:c9:23:2b:a2: ee:b7:c1:3d:1e:54:3d:cd:a0:7c:1b:e4:4a:b5:aa: 90:35:1c:0d:95:20:52:73:e3:20:7c:cd:6d:d0:c5: f5:90:55:51:a1:c1:71:30:f3:b8:90:23:b0:37:4f: a3:b1:26:c6:b9:93:e6:3d:ea:b1:dd:0a:39:a3:83: e7:7b:1b:a4:08:5c:8a:4d:92:11:4d:76:bb:50:98: a7:e8:84:2f:51:c7:ab:70:6a:eb:53:70:ef:12:b4: ca:c3:8b:23:b4:43:51:02:f0:7a:d8:c8:b9:49:fc: 3e:94:f0:01:4f:09:96:3d:e6:0f:a0:9a:d4:d2:6d: 1f:87:5d:08:16:53:4c:a3:76:34:85:55:de:5c:35: e0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A9:85:E1:3D:04:B1:15:5D:27:6C:CD:20:0D:71:B4:94:FD:03:50 X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:9600::/40 Signature Algorithm: sha256WithRSAEncryption 49:c3:11:f4:c5:dc:f5:9d:d5:b9:5f:3f:97:31:d5:a2:63:a1: 12:98:08:1b:f2:28:d7:3d:1a:1e:d5:2c:99:9c:b0:43:a4:66: d1:15:e8:02:d2:59:34:1a:fb:87:16:e6:1b:1e:a8:b1:a0:72: 2c:45:91:ed:de:24:30:33:7c:09:4c:f2:8d:5e:b8:d8:a4:b4: c3:8a:a1:d8:2f:80:8f:8a:a1:08:ff:7c:a0:65:84:ef:8f:16: d5:c5:56:65:b1:ed:a7:d2:b1:e5:51:dd:dc:87:96:80:52:70: 11:2d:d5:04:34:95:62:f3:7e:4b:d8:1c:51:56:65:71:78:65: 33:99:7e:12:6d:6c:99:68:8b:3f:92:73:ad:e1:cd:b3:1b:7f: 99:8c:f6:23:41:98:24:46:d1:0e:2e:02:b5:a1:78:da:57:a9: d9:70:cd:7d:52:a9:d3:db:9f:cf:28:ae:39:0c:0d:e2:ba:6f: b6:eb:78:88:ca:69:2c:0a:89:8a:30:8f:47:18:6e:ef:79:6e: 3a:8a:46:0b:42:26:87:b0:64:72:b6:e7:24:19:80:ca:2e:79: 2f:16:de:35:91:99:0a:49:79:3d:80:3d:95:28:e6:7e:1e:46: fd:91:76:40:8d:e2:1a:85:6d:10:1d:d0:b2:de:f4:3e:87:e1: d2:95:f8:d7 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIUGC6ufSb5Kkjhff/gQRZQXDjnPMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNTA3MDUwMzA0MzVaFw0yNjA3MDQwMzA5MzVaMDMxMTAvBgNV BAMTKDlEQTk4NUUxM0QwNEIxMTU1RDI3NkNDRDIwMEQ3MUI0OTRGRDAzNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg8EuhQiypD5F48cwT1Qk5bLfv hezJXG/oHB+9k7r86ijnIreAfnmXSE9wmwmPtuti+a6MfGEE4om2nzIsa43NwXDY czK2p0os1NB1fiinRsTaZzTZEAuK7AZAHX8jM2mPY4YhFOO/bHeKkEzmSfoAa5W/ ySMrou63wT0eVD3NoHwb5Eq1qpA1HA2VIFJz4yB8zW3QxfWQVVGhwXEw87iQI7A3 T6OxJsa5k+Y96rHdCjmjg+d7G6QIXIpNkhFNdrtQmKfohC9Rx6twautTcO8StMrD iyO0Q1EC8HrYyLlJ/D6U8AFPCZY95g+gmtTSbR+HXQgWU0yjdjSFVd5cNeCLAgMB AAGjggJfMIICWzAdBgNVHQ4EFgQUnamF4T0EsRVdJ2zNIA1xtJT9A1AwHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0 YS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzkzNjMwMzAzYTNhMmYzNDMwMmQzNDMw MjAzZDNlMjAzMjMxMzYzNDM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BljANBgkqhkiG9w0B AQsFAAOCAQEAScMR9MXc9Z3VuV8/lzHVomOhEpgIG/Io1z0aHtUsmZywQ6Rm0RXo AtJZNBr7hxbmGx6osaByLEWR7d4kMDN8CUzyjV642KS0w4qh2C+Aj4qhCP98oGWE 748W1cVWZbHtp9Kx5VHd3IeWgFJwES3VBDSVYvN+S9gcUVZlcXhlM5l+Em1smWiL P5JzreHNsxt/mYz2I0GYJEbRDi4CtaF42lep2XDNfVKp09ufzyiuOQwN4rpvtut4 iMppLAqJijCPRxhu73luOopGC0Imh7BkcrbnJBmAyi55LxbeNZGZCkl5PYA9lSjm fh5G/ZF2QI3iGoVtEB3Qst70Pofh0pX41w== -----END CERTIFICATE-----Generated at Wed Jul 23 12:44:59 2025 by rpki-client