$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa File: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (raw, json) Hash identifier: 1GdKwaiZZMUPaKMrZsRjBpqXP8X/viR8NTU0VBdDiIs= Subject key identifier: 88:56:D6:6A:D6:B5:EF:68:3A:55:78:55:9A:A8:32:D1:81:D8:4D:FC Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 0AFE80E6BFE8CC2F7287AB6CBBBFDDCD25E94DD2 Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa Signing time: Mon 14 Sep 2026 21:24:47 +0000 ROA not before: Mon 14 Sep 2026 21:19:47 +0000 ROA not after: Mon 13 Sep 2027 21:24:47 +0000 asID: 216107 IP address blocks: 2a05:dfc1:9300::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 17 Sep 2026 00:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:fe:80:e6:bf:e8:cc:2f:72:87:ab:6c:bb:bf:dd:cd:25:e9:4d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Sep 14 21:19:47 2026 GMT Not After : Sep 13 21:24:47 2027 GMT Subject: CN=8856D66AD6B5EF683A5578559AA832D181D84DFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:e6:a3:d8:57:93:d3:02:13:64:86:d5:80: 97:0d:83:12:81:09:1d:9a:2d:c6:22:c0:4b:4e:81: a4:b6:31:82:e8:ec:0d:e7:43:21:dc:a9:1b:93:ba: fc:97:9e:13:9b:ac:5e:b6:f2:83:88:ff:96:2f:61: 8c:af:29:26:1b:a1:14:56:8f:0a:46:bc:16:1d:c5: cf:02:9e:80:17:d1:57:fc:95:db:87:94:34:92:42: 51:11:45:af:93:25:c4:90:de:72:d3:5d:3f:1d:cf: cb:9c:b3:21:e2:cf:11:cc:bc:c7:45:d4:92:74:73: ed:13:9a:c1:da:52:0e:19:e5:2a:f3:3d:af:e3:6b: 90:ea:57:9b:3b:95:ae:d0:32:f3:52:62:a8:1c:be: c1:cd:03:39:1c:78:5f:8c:d3:41:3b:ca:20:33:5f: 33:f6:0a:e1:59:6e:1d:bb:6d:ff:c9:d4:c8:0e:f0: a4:76:90:38:b8:e5:95:ae:aa:30:9b:01:2f:16:e0: 83:bd:3d:1f:de:48:12:b7:7c:da:34:f7:e8:95:63: 24:09:68:28:7e:90:6f:48:4d:93:d4:f2:8a:28:d2: 0d:27:d0:54:b8:2c:5e:84:0a:cc:cf:5c:62:d2:f0: 89:8c:ed:fb:96:0e:80:88:12:68:cf:3b:cf:a9:12: ba:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:56:D6:6A:D6:B5:EF:68:3A:55:78:55:9A:A8:32:D1:81:D8:4D:FC X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:9300::/44 Signature Algorithm: sha256WithRSAEncryption 23:01:01:20:28:ab:2c:56:9b:b1:61:b1:ab:e8:8f:b2:25:12: 62:ed:d4:f3:0b:9a:ad:98:80:18:f0:4b:61:3f:4a:f9:8c:69: f8:5d:35:bd:a9:c0:ee:c0:93:2b:39:16:b6:c1:53:d1:76:95: c5:77:7c:4f:0f:91:f1:88:dd:99:0c:e1:e8:7b:74:ea:7e:cc: c9:2b:4f:a0:e0:29:2b:62:68:02:46:9e:0e:fa:77:9e:40:13: 52:7e:a3:1e:ea:c5:f6:1c:b6:e9:5e:ac:b5:94:6e:76:b5:74: 5f:bd:61:04:bd:40:6b:88:c7:6d:89:55:9f:24:46:6b:1c:9a: 88:43:e4:fa:84:91:1b:49:b6:7a:ba:f7:a6:8e:a4:4f:06:a4: f7:80:67:81:7a:54:2e:fc:70:aa:76:56:7e:2d:17:c8:ed:a8: ec:7b:4b:fb:11:49:a1:27:fa:c3:d4:19:c1:98:d2:63:8f:4c: 72:26:7b:0e:3e:93:c3:48:a1:75:7d:1d:68:ab:6c:22:5e:e5: c8:7f:bf:3c:9d:f6:5c:f2:4c:52:3d:62:05:98:1b:04:eb:6e: 8a:8f:eb:47:f6:dc:1f:d5:1f:3a:a7:b3:39:8e:7c:d5:6a:89: 3c:6b:03:4d:83:bd:f6:0f:4e:b6:10:f1:ca:3b:fc:b5:9e:b2: 39:b6:b7:e9 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUCv6A5r/ozC9yh6tsu7/dzSXpTdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNjA5MTQyMTE5NDdaFw0yNzA5MTMyMTI0NDdaMDMxMTAvBgNV BAMTKDg4NTZENjZBRDZCNUVGNjgzQTU1Nzg1NTlBQTgzMkQxODFEODRERkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69Oaj2FeT0wITZIbVgJcNgxKB CR2aLcYiwEtOgaS2MYLo7A3nQyHcqRuTuvyXnhObrF628oOI/5YvYYyvKSYboRRW jwpGvBYdxc8CnoAX0Vf8lduHlDSSQlERRa+TJcSQ3nLTXT8dz8ucsyHizxHMvMdF 1JJ0c+0TmsHaUg4Z5SrzPa/ja5DqV5s7la7QMvNSYqgcvsHNAzkceF+M00E7yiAz XzP2CuFZbh27bf/J1MgO8KR2kDi45ZWuqjCbAS8W4IO9PR/eSBK3fNo09+iVYyQJ aCh+kG9ITZPU8ooo0g0n0FS4LF6ECszPXGLS8ImM7fuWDoCIEmjPO8+pErq7AgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUiFbWata172g6VXhVmqgy0YHYTfwwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzI4Y2Q2MjI0LWEzYjAtNDY4ZS1hYTM3LTgyY2E2YTNlOTI0 My8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzkzMzMwMzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzMjMxMzYzMTMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqBd/BkwAwDQYJKoZIhvcN AQELBQADggEBACMBASAoqyxWm7Fhsavoj7IlEmLt1PMLmq2YgBjwS2E/SvmMafhd Nb2pwO7Akys5FrbBU9F2lcV3fE8PkfGI3ZkM4eh7dOp+zMkrT6DgKStiaAJGng76 d55AE1J+ox7qxfYctulerLWUbna1dF+9YQS9QGuIx22JVZ8kRmscmohD5PqEkRtJ tnq696aOpE8GpPeAZ4F6VC78cKp2Vn4tF8jtqOx7S/sRSaEn+sPUGcGY0mOPTHIm ew4+k8NIoXV9HWirbCJe5ch/vzyd9lzyTFI9YgWYGwTrboqP60f23B/VHzqnszmO fNVqiTxrA02DvfYPTrYQ8co7/LWesjm2t+k= -----END CERTIFICATE-----Generated at Wed Sep 16 13:23:24 2026 by rpki-client