$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa File: 326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa (raw, json) Hash identifier: UPbRWjjdOjtlciOFfZiOUrhrbDXOps+Mf6X8zEAQmV8= Subject key identifier: CB:88:64:E3:00:4E:76:33:B9:45:22:11:E4:E6:90:48:30:21:67:7C Certificate issuer: /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8 Certificate serial: 7D044CE6C58978563E200324A2F2E4738EEB0E3C Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa Signing time: Sat 05 Jul 2025 09:32:33 +0000 ROA not before: Sat 05 Jul 2025 09:27:33 +0000 ROA not after: Sat 04 Jul 2026 09:32:33 +0000 asID: 199518 IP address blocks: 2a0a:6040:bade::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 04:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:04:4c:e6:c5:89:78:56:3e:20:03:24:a2:f2:e4:73:8e:eb:0e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8 Validity Not Before: Jul 5 09:27:33 2025 GMT Not After : Jul 4 09:32:33 2026 GMT Subject: CN=CB8864E3004E7633B9452211E4E690483021677C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:85:15:58:11:09:27:72:ce:b3:ce:1a:3d: 9d:6b:13:44:c3:ef:2b:bc:10:3c:14:a6:7e:5a:94: 4b:d4:3c:42:d4:04:ae:14:c5:d9:68:bf:56:c1:1c: b1:2d:6f:da:06:30:82:00:80:c0:0c:59:59:ae:3e: e0:58:6b:59:1c:d1:62:16:2a:df:ca:a2:1c:91:16: d3:2c:28:98:03:cd:f2:cd:9b:ab:da:b6:15:af:1f: bb:3a:ee:a6:48:c9:d1:00:fa:0d:71:60:7b:65:87: 90:eb:47:31:d7:a0:96:08:78:3a:77:e7:1a:cd:84: d3:87:a9:b0:22:99:7e:cf:11:61:1b:7b:e7:f4:20: 26:76:e2:64:09:93:f0:34:80:87:d8:10:3e:5e:79: b7:7c:aa:85:f6:44:0b:a6:c2:b3:cc:cb:31:3c:91: c3:11:22:6e:df:61:e3:8e:ad:3e:bb:49:6c:4c:93: e2:ab:7a:6b:ca:49:8a:8d:00:59:82:68:60:78:26: 0a:48:13:a1:36:8d:86:ae:3b:37:7e:78:c6:e9:a7: 3d:c9:4a:16:54:01:3e:3f:bc:64:4a:ec:9c:50:1a: 98:91:b1:0e:9d:6c:f4:fc:cb:d7:9f:92:b2:6f:d6: fb:ff:b5:bc:6e:15:12:e3:25:f1:23:98:68:51:b1: db:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:88:64:E3:00:4E:76:33:B9:45:22:11:E4:E6:90:48:30:21:67:7C X509v3 Authority Key Identifier: keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:bade::/48 Signature Algorithm: sha256WithRSAEncryption 82:6a:7c:54:f6:22:b8:1d:ad:ad:de:2f:f4:bf:c4:c7:a1:1e: a9:53:51:8c:69:ac:92:6c:1c:ae:02:f4:af:16:cc:e0:bb:9e: 76:8c:6d:20:e1:15:79:d5:73:da:47:7c:a7:c3:d0:e0:4d:67: 2a:88:41:9e:2e:ca:9a:30:58:d7:be:01:07:32:83:22:5e:e9: b6:3a:af:90:c9:3a:aa:46:eb:9b:1a:32:dd:fd:2b:51:c1:16: 93:9d:60:0f:f8:29:01:9c:d6:4b:ae:8b:ae:90:af:59:95:4c: 25:7a:81:14:13:9c:5d:cf:31:dd:26:e9:c0:6a:22:8a:ba:11: 53:14:11:fc:69:96:19:b0:f9:8e:b5:17:60:4a:c6:b1:96:f4: 7b:f6:9c:ad:34:f4:45:15:53:db:da:73:b5:f5:6a:31:0b:ae: 26:a7:2f:24:8e:5c:ab:f4:38:c6:88:9a:ba:5c:32:6d:4f:d4: 1d:ed:f7:3b:b3:71:36:33:02:36:da:6c:c8:32:27:ba:77:6b: 92:68:0a:77:db:4e:48:32:e7:c8:64:2c:28:7e:9a:d1:40:1d: 3f:c2:88:e1:16:37:f8:c2:bc:92:5a:a9:b3:51:91:7b:b4:8a: c2:f1:54:35:ea:5b:e5:09:f1:ee:70:c4:00:dc:c2:53:26:6d: 9c:6e:44:e5 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUfQRM5sWJeFY+IAMkovLkc47rDjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY3MjhCOTE0NjcwNDM0RENGNTYzM0U4MUUyQjg3MjFE Rjc1Q0VCODAeFw0yNTA3MDUwOTI3MzNaFw0yNjA3MDQwOTMyMzNaMDMxMTAvBgNV BAMTKENCODg2NEUzMDA0RTc2MzNCOTQ1MjIxMUU0RTY5MDQ4MzAyMTY3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSYUVWBEJJ3LOs84aPZ1rE0TD 7yu8EDwUpn5alEvUPELUBK4Uxdlov1bBHLEtb9oGMIIAgMAMWVmuPuBYa1kc0WIW Kt/KohyRFtMsKJgDzfLNm6vathWvH7s67qZIydEA+g1xYHtlh5DrRzHXoJYIeDp3 5xrNhNOHqbAimX7PEWEbe+f0ICZ24mQJk/A0gIfYED5eebd8qoX2RAumwrPMyzE8 kcMRIm7fYeOOrT67SWxMk+KremvKSYqNAFmCaGB4JgpIE6E2jYauOzd+eMbppz3J ShZUAT4/vGRK7JxQGpiRsQ6dbPT8y9efkrJv1vv/tbxuFRLjJfEjmGhRsdvXAgMB AAGjggJjMIICXzAdBgNVHQ4EFgQUy4hk4wBOdjO5RSIR5OaQSDAhZ3wwHwYDVR0j BBgwFoAUD3KLkUZwQ03PVjPoHiuHId91zrgwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm NTBlOC8xMS8wRjcyOEI5MTQ2NzA0MzREQ0Y1NjMzRTgxRTJCODcyMURGNzVDRUI4 LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvMEY3MjhCOTE0Njcw NDM0RENGNTYzM0U4MUUyQjg3MjFERjc1Q0VCOC5jZXIwgbgGCCsGAQUFBwELBIGr MIGoMIGlBggrBgEFBQcwC4aBmHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzExLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjI2MTY0NjUzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMTM5MzkzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAut4wDQYJKoZI hvcNAQELBQADggEBAIJqfFT2Irgdra3eL/S/xMehHqlTUYxprJJsHK4C9K8WzOC7 nnaMbSDhFXnVc9pHfKfD0OBNZyqIQZ4uypowWNe+AQcygyJe6bY6r5DJOqpG65sa Mt39K1HBFpOdYA/4KQGc1kuui66Qr1mVTCV6gRQTnF3PMd0m6cBqIoq6EVMUEfxp lhmw+Y61F2BKxrGW9Hv2nK009EUVU9vac7X1ajELrianLySOXKv0OMaImrpcMm1P 1B3t9zuzcTYzAjbabMgyJ7p3a5JoCnfbTkgy58hkLCh+mtFAHT/CiOEWN/jCvJJa qbNRkXu0isLxVDXqW+UJ8e5wxADcwlMmbZxuROU= -----END CERTIFICATE-----Generated at Tue Jul 22 11:51:02 2025 by rpki-client