$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa File: 326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa (raw, json) Hash identifier: Cf7Hq4Bj6m3ldjocti6iTYM0fKxr5EeeVnIgQEdXi4Q= Subject key identifier: F0:C4:24:85:C7:CC:C9:59:89:EE:7F:99:EF:33:29:47:5B:AC:2B:29 Certificate issuer: /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8 Certificate serial: C637DC7C8980A7FF8495C950290B8E5B5E47EE Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa Signing time: Sat 05 Jul 2025 09:32:33 +0000 ROA not before: Sat 05 Jul 2025 09:27:33 +0000 ROA not after: Sat 04 Jul 2026 09:32:33 +0000 asID: 199518 IP address blocks: 2a0a:6040:ba55::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 04:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c6:37:dc:7c:89:80:a7:ff:84:95:c9:50:29:0b:8e:5b:5e:47:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8 Validity Not Before: Jul 5 09:27:33 2025 GMT Not After : Jul 4 09:32:33 2026 GMT Subject: CN=F0C42485C7CCC95989EE7F99EF3329475BAC2B29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:13:f0:e2:a4:be:be:c3:5f:2f:75:95:9b:c4: be:1d:f8:a2:44:3d:24:ec:92:39:aa:a5:0a:d0:da: 66:32:26:7f:d6:1e:99:8b:bd:7f:3f:c4:4b:a3:bb: 46:6f:6c:6d:07:1e:71:91:ff:7d:6c:54:fc:bb:ed: c8:32:92:ba:8a:52:cb:34:f6:c9:f7:09:02:d8:07: e8:20:a4:1b:5d:58:b6:e2:a3:b3:74:43:96:38:41: 34:28:da:75:09:62:5f:01:1a:57:ee:1a:f1:e2:c0: 31:7a:ff:48:8e:72:66:dc:51:c1:00:b7:58:1f:42: d4:87:10:e0:39:e9:f7:f6:48:f3:fd:f0:0d:56:4e: a3:e6:90:ce:69:07:f0:92:0f:d2:a0:e9:bc:9e:d8: 7d:b3:26:a0:b3:ee:d4:09:b9:1b:5f:ed:03:ea:89: 39:8c:03:25:3a:a6:8b:c6:7a:0e:de:39:a9:1a:54: 47:04:0c:ab:7e:94:28:48:49:56:76:aa:ee:fb:48: 32:d6:88:78:08:aa:89:9d:89:bb:b7:fa:04:e9:73: 1b:0f:3b:39:38:a0:fd:e6:01:64:ef:53:77:c5:aa: 0f:0c:6d:b7:8b:3a:0e:78:00:0d:f3:6b:17:ea:4b: 30:8a:9b:37:09:78:b9:14:be:90:cd:03:25:8f:87: d4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C4:24:85:C7:CC:C9:59:89:EE:7F:99:EF:33:29:47:5B:AC:2B:29 X509v3 Authority Key Identifier: keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ba55::/48 Signature Algorithm: sha256WithRSAEncryption 2d:b0:5e:c7:69:93:27:7d:3f:29:49:3a:e8:8c:cb:65:4b:6e: d1:84:28:57:22:f0:b6:9f:73:b5:bc:dd:11:e4:3c:fd:fe:83: 63:99:15:8b:72:0a:90:fb:b2:2d:e7:79:3c:6a:19:4e:ca:8e: 45:cc:7f:6e:ba:7e:20:5e:db:4e:f8:7a:56:66:dd:54:c0:14: ff:bc:19:3e:6d:5c:d2:15:e0:e2:80:f5:b6:be:6d:d8:d8:ed: 1f:ca:72:f5:19:0f:ab:ea:4f:ec:61:ab:86:55:bd:bc:51:25: 68:28:b0:61:c1:f7:c6:69:8a:d6:99:39:89:3c:42:f6:aa:c4: f3:11:f4:20:f5:e9:24:eb:c6:85:35:9e:f2:a5:f8:b1:06:be: 2e:f8:1c:27:d8:5d:9e:bc:03:3c:c5:a2:ee:a2:fd:89:11:ba: 30:a1:a4:71:3d:de:5e:1e:cb:50:bb:37:b8:6e:f5:cd:72:51: 23:5b:2c:84:24:fa:bf:35:56:f2:7e:e6:c3:39:c7:0d:9d:e7: 7b:96:7b:44:f3:1b:b4:37:3b:2e:77:65:9a:18:17:60:b9:0d: 67:f6:06:1a:eb:20:4a:4b:d5:4a:fb:a4:80:53:d7:0b:50:3a: 26:6b:09:ea:7c:b7:a8:ec:be:08:ca:05:53:0c:11:9a:b0:2c: 85:2b:b4:d8 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUAMY33HyJgKf/hJXJUCkLjlteR+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY3MjhCOTE0NjcwNDM0RENGNTYzM0U4MUUyQjg3MjFE Rjc1Q0VCODAeFw0yNTA3MDUwOTI3MzNaFw0yNjA3MDQwOTMyMzNaMDMxMTAvBgNV BAMTKEYwQzQyNDg1QzdDQ0M5NTk4OUVFN0Y5OUVGMzMyOTQ3NUJBQzJCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqE/DipL6+w18vdZWbxL4d+KJE PSTskjmqpQrQ2mYyJn/WHpmLvX8/xEuju0ZvbG0HHnGR/31sVPy77cgykrqKUss0 9sn3CQLYB+ggpBtdWLbio7N0Q5Y4QTQo2nUJYl8BGlfuGvHiwDF6/0iOcmbcUcEA t1gfQtSHEOA56ff2SPP98A1WTqPmkM5pB/CSD9Kg6bye2H2zJqCz7tQJuRtf7QPq iTmMAyU6povGeg7eOakaVEcEDKt+lChISVZ2qu77SDLWiHgIqomdibu3+gTpcxsP Ozk4oP3mAWTvU3fFqg8MbbeLOg54AA3zaxfqSzCKmzcJeLkUvpDNAyWPh9QjAgMB AAGjggJjMIICXzAdBgNVHQ4EFgQU8MQkhcfMyVmJ7n+Z7zMpR1usKykwHwYDVR0j BBgwFoAUD3KLkUZwQ03PVjPoHiuHId91zrgwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm NTBlOC8xMS8wRjcyOEI5MTQ2NzA0MzREQ0Y1NjMzRTgxRTJCODcyMURGNzVDRUI4 LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvMEY3MjhCOTE0Njcw NDM0RENGNTYzM0U4MUUyQjg3MjFERjc1Q0VCOC5jZXIwgbgGCCsGAQUFBwELBIGr MIGoMIGlBggrBgEFBQcwC4aBmHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzExLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjI2MTM1MzUzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMTM5MzkzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAulUwDQYJKoZI hvcNAQELBQADggEBAC2wXsdpkyd9PylJOuiMy2VLbtGEKFci8Lafc7W83RHkPP3+ g2OZFYtyCpD7si3neTxqGU7KjkXMf266fiBe2074elZm3VTAFP+8GT5tXNIV4OKA 9ba+bdjY7R/KcvUZD6vqT+xhq4ZVvbxRJWgosGHB98ZpitaZOYk8QvaqxPMR9CD1 6STrxoU1nvKl+LEGvi74HCfYXZ68AzzFou6i/YkRujChpHE93l4ey1C7N7hu9c1y USNbLIQk+r81VvJ+5sM5xw2d53uWe0TzG7Q3Oy53ZZoYF2C5DWf2BhrrIEpL1Ur7 pIBT1wtQOiZrCep8t6jsvgjKBVMMEZqwLIUrtNg= -----END CERTIFICATE-----Generated at Tue Jul 22 11:52:10 2025 by rpki-client