$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa File: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (raw, json) Hash identifier: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc= Subject key identifier: 89:08:62:AE:1A:FF:59:81:B8:31:9F:F0:61:8B:83:38:CE:6B:BA:40 Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 386B22B1D3EC57FAC92576738872EE942657C67C Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa Signing time: Fri 04 Jul 2025 22:34:41 +0000 ROA not before: Fri 04 Jul 2025 22:29:41 +0000 ROA not after: Fri 03 Jul 2026 22:34:41 +0000 asID: 216107 IP address blocks: 2a05:dfc1:cb1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 00:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6b:22:b1:d3:ec:57:fa:c9:25:76:73:88:72:ee:94:26:57:c6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Jul 4 22:29:41 2025 GMT Not After : Jul 3 22:34:41 2026 GMT Subject: CN=890862AE1AFF5981B8319FF0618B8338CE6BBA40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d2:1c:5d:8c:72:13:e5:a4:50:f9:04:77:0c: b8:19:5e:c9:fc:25:14:cc:57:9e:00:15:48:4e:c1: a0:82:2d:71:55:8c:63:e5:20:0c:27:bf:bf:cc:d1: 2e:48:c7:67:3f:2c:09:1e:59:f8:30:d7:59:72:32: b4:02:be:ca:85:8c:75:f5:32:79:d2:0d:73:63:4d: 5c:37:57:69:47:33:a6:a2:02:60:1b:e6:16:99:ab: e5:8e:9a:41:48:bd:1d:ff:da:38:fd:6e:1f:6c:ac: 9a:c7:f1:48:aa:60:7f:42:9b:ec:3a:1d:d2:fa:db: fb:56:81:92:5e:c5:fb:37:e7:da:3e:e6:a2:ad:04: c0:45:7b:cc:19:4a:98:8e:7e:0a:de:61:cd:98:01: 6a:80:bd:cf:fa:7f:e4:27:45:92:de:90:8f:ba:f8: 87:34:2a:5e:21:3a:c6:22:62:1d:9a:f8:9e:89:34: 91:a5:55:2d:e2:06:52:0d:f5:80:6c:8b:56:5e:64: ea:f6:6f:0f:de:c7:41:25:4e:e3:95:06:31:c9:4b: 94:44:fb:af:e9:33:bf:ad:41:bd:10:05:d0:4a:2d: 33:8c:1d:f0:af:d6:7d:c6:62:84:1a:4b:d7:ab:e0: 79:6a:ba:2f:60:0f:cf:76:08:fb:e8:a8:8b:e8:65: 90:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:08:62:AE:1A:FF:59:81:B8:31:9F:F0:61:8B:83:38:CE:6B:BA:40 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:cb1::/48 Signature Algorithm: sha256WithRSAEncryption c9:d5:d8:35:0e:93:0e:b5:f9:0e:27:4b:85:54:03:e8:bb:8e: b3:e1:ab:4d:0b:db:15:6d:b0:11:12:34:d5:d2:b4:ae:7d:ea: db:dc:29:63:02:f6:2b:3f:47:0f:55:a6:c8:3e:9d:3b:9f:04: e6:78:1a:9d:30:d3:00:e9:3b:a9:b0:94:f3:c0:4c:e2:52:61: 28:9d:a3:fc:27:2a:1d:b1:af:44:d6:c2:c2:ae:2d:97:7f:7f: b7:37:d9:31:1c:cd:3e:0c:a9:c3:78:1f:46:3d:77:42:1b:59: 65:82:9c:15:27:c6:98:22:ba:83:e7:3e:03:0f:41:91:00:60: ab:60:6d:a4:34:89:a4:33:36:26:54:2c:23:da:91:a8:df:40: cb:5b:3f:9c:fe:a8:e8:95:60:3a:69:64:f2:7f:23:9d:af:56: 04:8c:c8:e9:86:41:62:0e:a5:57:07:a0:e9:53:fd:43:99:25: d5:04:88:4d:92:af:9a:3b:8a:8b:61:50:0a:49:11:65:cf:1d: b3:5b:15:d6:9c:4e:52:e4:90:b3:22:1b:90:bb:91:8d:4d:fd: 32:0c:19:08:70:c2:78:dd:fe:ca:90:ee:39:0c:ec:4d:03:79: 24:8c:67:45:35:54:14:0d:00:59:90:90:82:38:d6:6c:5b:00: 17:c2:43:78 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUOGsisdPsV/rJJXZziHLulCZXxnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNTA3MDQyMjI5NDFaFw0yNjA3MDMyMjM0NDFaMDMxMTAvBgNV BAMTKDg5MDg2MkFFMUFGRjU5ODFCODMxOUZGMDYxOEI4MzM4Q0U2QkJBNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO0hxdjHIT5aRQ+QR3DLgZXsn8 JRTMV54AFUhOwaCCLXFVjGPlIAwnv7/M0S5Ix2c/LAkeWfgw11lyMrQCvsqFjHX1 MnnSDXNjTVw3V2lHM6aiAmAb5haZq+WOmkFIvR3/2jj9bh9srJrH8UiqYH9Cm+w6 HdL62/tWgZJexfs359o+5qKtBMBFe8wZSpiOfgreYc2YAWqAvc/6f+QnRZLekI+6 +Ic0Kl4hOsYiYh2a+J6JNJGlVS3iBlIN9YBsi1ZeZOr2bw/ex0ElTuOVBjHJS5RE +6/pM7+tQb0QBdBKLTOMHfCv1n3GYoQaS9er4Hlqui9gD892CPvoqIvoZZAbAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUiQhirhr/WYG4MZ/wYYuDOM5rukAwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzI4Y2Q2MjI0LWEzYjAtNDY4ZS1hYTM3LTgyY2E2YTNlOTI0 My8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhNjM2MjMxM2EzYTJmMzQzODJkMzQzODIw M2QzZTIwMzIzMTM2MzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwQyxMA0GCSqGSIb3DQEB CwUAA4IBAQDJ1dg1DpMOtfkOJ0uFVAPou46z4atNC9sVbbAREjTV0rSuferb3Clj AvYrP0cPVabIPp07nwTmeBqdMNMA6TupsJTzwEziUmEonaP8Jyodsa9E1sLCri2X f3+3N9kxHM0+DKnDeB9GPXdCG1llgpwVJ8aYIrqD5z4DD0GRAGCrYG2kNImkMzYm VCwj2pGo30DLWz+c/qjolWA6aWTyfyOdr1YEjMjphkFiDqVXB6DpU/1DmSXVBIhN kq+aO4qLYVAKSRFlzx2zWxXWnE5S5JCzIhuQu5GNTf0yDBkIcMJ43f7KkO45DOxN A3kkjGdFNVQUDQBZkJCCONZsWwAXwkN4 -----END CERTIFICATE-----Generated at Sat Jul 5 10:42:58 2025 by rpki-client