$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa File: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (raw, json) Hash identifier: b1Tp3urffazrHFC2uNuqtecL+ZwX7JySZaJd8ifcpCw= Subject key identifier: C3:3C:DD:24:57:1F:E4:1C:12:3A:B6:9E:02:81:2A:CF:00:13:AA:78 Certificate issuer: /CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801 Certificate serial: 040CD9258FE767302F1CC3026DA5360BAA889247 Authority key identifier: D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa Signing time: Fri 04 Jul 2025 19:50:15 +0000 ROA not before: Fri 04 Jul 2025 19:45:15 +0000 ROA not after: Fri 03 Jul 2026 19:50:15 +0000 asID: 47496 IP address blocks: 2a05:dfc1:c423::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 22:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0c:d9:25:8f:e7:67:30:2f:1c:c3:02:6d:a5:36:0b:aa:88:92:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801 Validity Not Before: Jul 4 19:45:15 2025 GMT Not After : Jul 3 19:50:15 2026 GMT Subject: CN=C33CDD24571FE41C123AB69E02812ACF0013AA78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:cf:33:37:62:e2:e8:36:0c:4b:3f:b8:10: 32:9e:c1:9f:93:4c:56:e0:33:09:50:b0:fc:70:1b: 9d:48:5b:3c:d0:72:97:40:89:35:1b:db:48:71:61: 44:23:97:df:53:db:e4:81:65:55:7b:87:8d:1e:0b: 4d:b0:c9:c6:3a:0b:74:fe:0b:cf:6d:e8:42:33:bb: 8d:6e:da:47:79:49:f6:2e:0e:2d:8f:b6:29:61:7a: 3b:6f:08:30:27:81:79:24:72:f0:72:c0:a1:1a:b3: ca:0a:15:1d:ba:7f:fe:f4:af:82:76:0f:a6:24:db: bd:1b:d1:8a:cd:f3:d6:25:44:8d:0f:58:b2:3f:5c: 51:50:51:f6:1f:71:43:eb:02:b3:5e:08:b5:51:52: d9:76:8b:8e:17:4e:ff:3e:52:21:bf:07:60:11:3d: 0f:ac:96:81:5a:69:07:b5:b2:cc:f9:7c:db:6a:97: b7:1d:87:a5:df:f7:23:a4:21:4d:d8:3f:2f:9c:1e: 35:39:e0:59:4d:1e:dd:03:de:9f:ba:1f:83:7e:ee: 4c:db:0d:73:cc:c4:88:8e:bc:c6:a8:07:38:fd:1c: 7a:cb:20:9a:ad:9f:07:49:b4:27:b9:d7:33:5a:38: 45:36:17:6b:49:6e:0a:e8:b8:95:50:b4:e1:81:ec: 72:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3C:DD:24:57:1F:E4:1C:12:3A:B6:9E:02:81:2A:CF:00:13:AA:78 X509v3 Authority Key Identifier: keyid:D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c423::/48 Signature Algorithm: sha256WithRSAEncryption a0:c8:96:33:a5:5d:bd:31:0c:41:52:24:c2:d8:1a:e2:f5:92: 68:c7:40:85:a0:07:0d:39:f5:22:33:5d:d9:54:61:26:7c:43: dd:c9:20:39:22:40:34:6a:de:92:ea:ad:42:2d:87:6b:b0:94: c0:86:1a:8e:f6:c4:22:8e:d4:7e:ec:53:7e:af:79:e3:fc:01: 1d:fa:e5:e3:42:81:98:31:08:67:b8:84:28:bc:54:a9:e5:d1: 1f:d0:d7:ce:fe:32:29:00:45:a0:92:a2:4a:5f:56:bd:b5:ce: 99:e7:55:ac:07:08:4f:a8:69:3d:0d:0e:f7:00:54:70:21:a4: 16:d5:27:18:17:31:e0:02:9d:72:1e:34:5a:ac:6e:eb:b1:82: b8:2a:66:05:56:78:38:b0:b6:50:43:d5:38:93:4f:92:2d:92: 5f:a4:50:b7:ac:e4:72:0c:f6:71:90:cf:79:f3:97:c7:07:f2: c7:c3:6c:23:d2:53:cd:00:2f:22:24:34:ab:7f:d2:3d:23:98: 1f:5d:10:3b:4d:2d:e4:1f:4e:a3:79:75:e1:2a:75:2e:31:1e: 0a:95:be:c7:c4:36:64:0a:97:aa:df:fc:de:9a:9a:4a:2c:02: 80:2a:08:e9:cb:87:e9:45:e4:d3:9c:17:63:ed:a0:c1:a4:b9: 58:75:91:c6 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUBAzZJY/nZzAvHMMCbaU2C6qIkkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENF OEJCQjgwMTAeFw0yNTA3MDQxOTQ1MTVaFw0yNjA3MDMxOTUwMTVaMDMxMTAvBgNV BAMTKEMzM0NERDI0NTcxRkU0MUMxMjNBQjY5RTAyODEyQUNGMDAxM0FBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEAc8zN2Li6DYMSz+4EDKewZ+T TFbgMwlQsPxwG51IWzzQcpdAiTUb20hxYUQjl99T2+SBZVV7h40eC02wycY6C3T+ C89t6EIzu41u2kd5SfYuDi2PtilhejtvCDAngXkkcvBywKEas8oKFR26f/70r4J2 D6Yk270b0YrN89YlRI0PWLI/XFFQUfYfcUPrArNeCLVRUtl2i44XTv8+UiG/B2AR PQ+sloFaaQe1ssz5fNtql7cdh6Xf9yOkIU3YPy+cHjU54FlNHt0D3p+6H4N+7kzb DXPMxIiOvMaoBzj9HHrLIJqtnwdJtCe51zNaOEU2F2tJbgrouJVQtOGB7HInAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUwzzdJFcf5BwSOraeAoEqzwATqngwHwYDVR0j BBgwFoAU16wL+9oVp/JAoSg/VkkZTOi7uAEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzQvRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENFOEJCQjgwMS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0Q3QUMwQkZCREExNUE3 RjI0MEExMjgzRjU2NDkxOTRDRThCQkI4MDEuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4LTNlZjlkMDk4MjM1 Mi80LzMyNjEzMDM1M2E2NDY2NjMzMTNhNjMzNDMyMzMzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNDM3MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwcQjMA0GCSqGSIb3DQEB CwUAA4IBAQCgyJYzpV29MQxBUiTC2Bri9ZJox0CFoAcNOfUiM13ZVGEmfEPdySA5 IkA0at6S6q1CLYdrsJTAhhqO9sQijtR+7FN+r3nj/AEd+uXjQoGYMQhnuIQovFSp 5dEf0NfO/jIpAEWgkqJKX1a9tc6Z51WsBwhPqGk9DQ73AFRwIaQW1ScYFzHgAp1y HjRarG7rsYK4KmYFVng4sLZQQ9U4k0+SLZJfpFC3rORyDPZxkM9585fHB/LHw2wj 0lPNAC8iJDSrf9I9I5gfXRA7TS3kH06jeXXhKnUuMR4Klb7HxDZkCpeq3/zemppK LAKAKgjpy4fpReTTnBdj7aDBpLlYdZHG -----END CERTIFICATE-----Generated at Sat Jul 5 12:54:45 2025 by rpki-client