$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa File: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (raw, json) Hash identifier: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc= Subject key identifier: 23:BC:E2:40:73:D9:A4:98:66:BD:2E:60:D5:AC:2F:F8:D9:49:A2:1E Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 016ACAEEDF59544BE37F4426DBF0DDDB18BFB2BD Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa Signing time: Fri 04 Jul 2025 22:34:45 +0000 ROA not before: Fri 04 Jul 2025 22:29:45 +0000 ROA not after: Fri 03 Jul 2026 22:34:45 +0000 asID: 216107 IP address blocks: 2a05:dfc1:c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 00:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:6a:ca:ee:df:59:54:4b:e3:7f:44:26:db:f0:dd:db:18:bf:b2:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Jul 4 22:29:45 2025 GMT Not After : Jul 3 22:34:45 2026 GMT Subject: CN=23BCE24073D9A49866BD2E60D5AC2FF8D949A21E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bc:a5:70:79:b4:b1:72:b0:3a:6a:01:6d:f1: 12:2e:96:c2:11:ee:f5:56:2a:30:17:b2:1d:48:f6: d2:56:d3:c7:84:30:14:ae:5b:8a:9c:37:ee:85:f1: 0a:d8:c1:5f:d0:07:96:97:61:76:f7:70:f3:c3:52: c0:aa:0a:ad:b6:22:62:a4:99:e3:0b:fb:96:ea:79: a6:11:f3:d0:59:27:97:f4:d0:ab:85:05:16:30:ce: 49:45:99:42:f4:c3:fd:9c:df:c9:6a:5d:6e:43:66: 4b:d9:76:6e:98:a7:4b:81:77:f7:ce:ba:b5:60:03: 89:a7:26:b5:a6:66:1e:54:6d:fa:20:0a:12:76:30: 31:b5:21:91:78:68:00:f8:f8:bf:dc:88:79:4d:13: 94:a3:a3:ab:d8:70:80:67:2d:2e:e4:b7:1e:35:b9: 3a:c1:7c:25:56:df:e8:1f:02:a8:2f:bc:97:d2:ad: 57:f9:48:06:52:d3:1f:9b:f7:3b:2a:25:bb:44:ff: af:1d:13:cd:d4:9f:fb:2e:6d:66:41:7a:86:5d:36: 36:c0:3c:f8:9b:4e:3a:2c:1d:53:ed:41:6f:8e:8c: d8:44:fa:b5:2d:81:83:be:ab:86:f0:fe:90:26:1c: 03:02:bc:2a:38:39:fe:5a:d1:4c:cb:e3:6a:a3:2d: ae:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BC:E2:40:73:D9:A4:98:66:BD:2E:60:D5:AC:2F:F8:D9:49:A2:1E X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c00::/40 Signature Algorithm: sha256WithRSAEncryption 97:54:1c:0f:d7:72:12:38:6b:64:0c:19:e1:53:71:28:82:1a: 35:70:4a:8a:9e:60:12:b2:59:16:c3:00:6a:37:49:c9:07:b0: 91:ee:5f:c6:f3:a3:f9:d4:4d:6a:57:13:66:70:77:19:e5:2c: e1:b2:0a:5f:88:a5:78:c2:55:09:f3:11:fa:85:65:79:95:3c: ef:f1:ac:44:f6:cd:33:42:7e:53:c2:74:f6:1f:85:0b:61:62: 13:bc:c1:17:d1:0f:5f:cc:e3:6c:29:b9:06:7c:8e:a7:49:c4: c3:48:71:b7:c7:1d:c8:f8:08:91:89:d7:c2:b8:25:6f:3b:cc: 89:cd:69:20:43:d8:66:8e:b5:08:f5:1f:83:c4:55:4b:3a:43: d4:27:93:ef:71:7b:f4:16:a4:b4:ae:39:a2:f5:fa:49:b5:a1: 51:ce:31:9a:f7:5d:b1:8b:25:b1:84:2e:4e:7f:cb:d6:ff:92: c4:ea:90:9f:86:8c:26:36:ff:3a:9d:24:4e:b0:84:6b:e2:92: 3b:4c:7c:24:5a:95:12:84:78:76:2f:cf:91:f3:88:47:8a:1e: 63:fd:2d:cb:13:6e:f9:5d:78:a8:c1:c1:75:69:c6:ed:36:52: 60:8a:76:f2:b5:fd:50:f9:ed:f3:30:47:ef:14:b0:18:c2:09: a2:a3:93:71 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUAWrK7t9ZVEvjf0Qm2/Dd2xi/sr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNTA3MDQyMjI5NDVaFw0yNjA3MDMyMjM0NDVaMDMxMTAvBgNV BAMTKDIzQkNFMjQwNzNEOUE0OTg2NkJEMkU2MEQ1QUMyRkY4RDk0OUEyMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvKVwebSxcrA6agFt8RIulsIR 7vVWKjAXsh1I9tJW08eEMBSuW4qcN+6F8QrYwV/QB5aXYXb3cPPDUsCqCq22ImKk meML+5bqeaYR89BZJ5f00KuFBRYwzklFmUL0w/2c38lqXW5DZkvZdm6Yp0uBd/fO urVgA4mnJrWmZh5UbfogChJ2MDG1IZF4aAD4+L/ciHlNE5Sjo6vYcIBnLS7ktx41 uTrBfCVW3+gfAqgvvJfSrVf5SAZS0x+b9zsqJbtE/68dE83Un/subWZBeoZdNjbA PPibTjosHVPtQW+OjNhE+rUtgYO+q4bw/pAmHAMCvCo4Of5a0UzL42qjLa6DAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUI7ziQHPZpJhmvS5g1awv+NlJoh4wHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzI4Y2Q2MjI0LWEzYjAtNDY4ZS1hYTM3LTgyY2E2YTNlOTI0 My8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhNjMzMDMwM2EzYTJmMzQzMDJkMzQzMDIw M2QzZTIwMzIzMTM2MzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwQwwDQYJKoZIhvcNAQEL BQADggEBAJdUHA/XchI4a2QMGeFTcSiCGjVwSoqeYBKyWRbDAGo3SckHsJHuX8bz o/nUTWpXE2ZwdxnlLOGyCl+IpXjCVQnzEfqFZXmVPO/xrET2zTNCflPCdPYfhQth YhO8wRfRD1/M42wpuQZ8jqdJxMNIcbfHHcj4CJGJ18K4JW87zInNaSBD2GaOtQj1 H4PEVUs6Q9Qnk+9xe/QWpLSuOaL1+km1oVHOMZr3XbGLJbGELk5/y9b/ksTqkJ+G jCY2/zqdJE6whGvikjtMfCRalRKEeHYvz5HziEeKHmP9LcsTbvldeKjBwXVpxu02 UmCKdvK1/VD57fMwR+8UsBjCCaKjk3E= -----END CERTIFICATE-----Generated at Sat Jul 5 10:45:53 2025 by rpki-client