$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa File: 326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa (raw, json) Hash identifier: uTe3RpuC5xHTpbzhstyrLed5Fn2IO9mhtG4WFqEyr0c= Subject key identifier: 37:20:09:12:F6:40:91:AE:A4:F3:78:10:66:99:F7:8E:C1:A3:65:51 Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 7DA212066D4668505547F712DE97613D936DFCE1 Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa Signing time: Fri 04 Jul 2025 22:34:41 +0000 ROA not before: Fri 04 Jul 2025 22:29:41 +0000 ROA not after: Fri 03 Jul 2026 22:34:41 +0000 asID: 216107 IP address blocks: 2a05:dfc1:cd2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 00:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a2:12:06:6d:46:68:50:55:47:f7:12:de:97:61:3d:93:6d:fc:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Jul 4 22:29:41 2025 GMT Not After : Jul 3 22:34:41 2026 GMT Subject: CN=37200912F64091AEA4F378106699F78EC1A36551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a8:bc:bf:af:ae:af:a6:9d:03:6b:80:b5:53: 19:39:c5:d5:cd:59:da:7f:ff:8a:2d:81:85:8f:2a: 98:7a:7c:93:5c:9d:72:35:fb:e8:8d:d6:56:40:29: 23:6f:2d:cb:3c:53:91:74:57:3b:a0:06:f8:ac:61: 16:6d:80:64:ac:32:71:4b:ea:fe:40:c9:fd:c0:c3: c4:96:5a:c2:34:35:14:17:21:d0:cf:29:66:44:36: 83:f7:75:10:4a:9a:4f:3a:de:75:70:67:4a:84:37: a1:a4:4f:6e:9e:00:df:b3:89:a1:5a:9e:63:f9:2a: 84:9f:a6:58:2a:a0:8a:87:7c:92:37:13:f0:8c:d0: 7c:cc:75:bb:e2:58:ae:92:af:28:34:b8:11:af:75: 9a:78:31:90:d0:3f:bc:53:9d:83:4c:80:58:c3:88: a0:d0:e4:51:e9:fe:25:e0:6c:79:cb:92:12:a0:24: 2e:97:13:a8:3d:b1:38:9a:c1:18:55:2d:0d:cf:23: dd:ea:df:97:f1:98:28:f1:7d:e8:31:d4:d0:a5:49: d3:a9:a3:3d:54:f4:fc:67:19:6b:7c:c1:a5:31:6f: 90:5c:40:ab:99:3b:46:f1:78:63:c5:66:4f:80:31: 71:fd:1c:71:68:59:99:1a:d9:b6:84:82:ef:da:a7: 4c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:20:09:12:F6:40:91:AE:A4:F3:78:10:66:99:F7:8E:C1:A3:65:51 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:cd2::/48 Signature Algorithm: sha256WithRSAEncryption a3:a7:a0:c4:c1:5d:84:10:2d:d6:25:d1:b0:0e:af:52:bd:e6: 76:90:30:9d:c9:a4:72:f8:c7:85:19:cd:4a:78:45:a2:b7:41: 5b:32:23:36:0e:ba:f6:f8:8c:d4:fe:27:e0:fa:cd:c2:7e:0f: 8a:30:4a:db:80:4a:3d:da:9c:02:6d:8c:6c:38:38:df:d0:05: 0b:e3:e2:b6:1e:0e:f0:58:73:da:56:bf:59:a1:2f:c9:eb:bc: b6:cf:19:47:8a:e5:5d:f9:83:c9:41:e4:b9:9b:1e:a9:ec:46: 85:0f:a6:83:59:e3:a4:d7:24:63:46:4d:0b:06:2b:04:2e:e9: 68:4c:50:f4:a5:8a:c9:f5:cf:2c:e5:f8:2e:3a:26:e3:64:87: b3:e3:91:bb:f8:14:60:a7:a9:88:93:b7:ec:a0:01:77:57:ec: ee:6b:3e:a8:d2:46:10:f3:c2:91:c6:58:e5:cf:59:b1:a2:f4: 7c:a5:60:eb:65:2e:9c:3e:ab:01:15:90:8f:13:69:5e:f1:3c: 4e:f4:bf:38:77:6d:66:8e:2e:1f:f8:0a:17:d2:4d:91:1e:2c: cf:bc:17:40:f9:da:f3:9d:f8:d8:75:c2:c7:d6:21:6c:6a:a1: 2e:65:28:8e:0d:9d:c2:e6:cb:60:b0:fe:9f:39:e0:38:21:ec: 92:3e:1b:21 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUfaISBm1GaFBVR/cS3pdhPZNt/OEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNTA3MDQyMjI5NDFaFw0yNjA3MDMyMjM0NDFaMDMxMTAvBgNV BAMTKDM3MjAwOTEyRjY0MDkxQUVBNEYzNzgxMDY2OTlGNzhFQzFBMzY1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtqLy/r66vpp0Da4C1Uxk5xdXN Wdp//4otgYWPKph6fJNcnXI1++iN1lZAKSNvLcs8U5F0VzugBvisYRZtgGSsMnFL 6v5Ayf3Aw8SWWsI0NRQXIdDPKWZENoP3dRBKmk863nVwZ0qEN6GkT26eAN+ziaFa nmP5KoSfplgqoIqHfJI3E/CM0HzMdbviWK6Sryg0uBGvdZp4MZDQP7xTnYNMgFjD iKDQ5FHp/iXgbHnLkhKgJC6XE6g9sTiawRhVLQ3PI93q35fxmCjxfegx1NClSdOp oz1U9PxnGWt8waUxb5BcQKuZO0bxeGPFZk+AMXH9HHFoWZka2baEgu/ap0w1AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUNyAJEvZAka6k83gQZpn3jsGjZVEwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzI4Y2Q2MjI0LWEzYjAtNDY4ZS1hYTM3LTgyY2E2YTNlOTI0 My8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhNjM2NDMyM2EzYTJmMzQzODJkMzQzODIw M2QzZTIwMzIzMTM2MzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwQzSMA0GCSqGSIb3DQEB CwUAA4IBAQCjp6DEwV2EEC3WJdGwDq9SveZ2kDCdyaRy+MeFGc1KeEWit0FbMiM2 Drr2+IzU/ifg+s3Cfg+KMErbgEo92pwCbYxsODjf0AUL4+K2Hg7wWHPaVr9ZoS/J 67y2zxlHiuVd+YPJQeS5mx6p7EaFD6aDWeOk1yRjRk0LBisELuloTFD0pYrJ9c8s 5fguOibjZIez45G7+BRgp6mIk7fsoAF3V+zuaz6o0kYQ88KRxljlz1mxovR8pWDr ZS6cPqsBFZCPE2le8TxO9L84d21mji4f+AoX0k2RHizPvBdA+drznfjYdcLH1iFs aqEuZSiODZ3C5stgsP6fOeA4IeySPhsh -----END CERTIFICATE-----Generated at Sat Jul 5 10:45:18 2025 by rpki-client