$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa File: 326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa (raw, json) Hash identifier: EPhN/IdQdctHEgcI5mRqnnjYfzJlSrsw3WqDekvn86Y= Subject key identifier: 0A:D4:D4:28:44:BE:BA:63:36:00:08:CD:44:52:22:12:16:05:91:99 Certificate issuer: /CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801 Certificate serial: 244B02C6E26C91995DBF0E3FEF5E056C781FF4B8 Authority key identifier: D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa Signing time: Fri 04 Jul 2025 19:50:15 +0000 ROA not before: Fri 04 Jul 2025 19:45:15 +0000 ROA not after: Fri 03 Jul 2026 19:50:15 +0000 asID: 47496 IP address blocks: 2a05:dfc1:c42e::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 22:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:4b:02:c6:e2:6c:91:99:5d:bf:0e:3f:ef:5e:05:6c:78:1f:f4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801 Validity Not Before: Jul 4 19:45:15 2025 GMT Not After : Jul 3 19:50:15 2026 GMT Subject: CN=0AD4D42844BEBA63360008CD4452221216059199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:3a:cc:f4:15:75:64:82:62:11:43:2c:9e: 39:65:d6:8f:4c:05:5f:ac:65:4e:1d:e9:15:3a:67: 83:83:d5:44:c0:fa:d2:01:7c:f7:eb:7e:10:b1:67: 3d:bb:79:49:90:f3:45:b7:d8:05:44:d7:26:1b:57: 68:c4:5d:72:63:81:a6:31:d1:98:bf:d1:6b:70:32: a2:06:d4:dc:7e:28:c8:68:76:a1:d1:28:70:45:21: 35:3b:b6:00:a3:6e:5d:f6:66:a3:26:b7:77:f5:d8: 55:02:cd:47:bb:38:e3:fb:0e:d6:66:c8:59:93:33: 26:81:07:69:e9:bf:76:73:3d:7b:64:10:6e:4e:c0: e4:e9:ee:95:38:85:67:28:82:b0:0e:3c:f1:3a:02: 46:23:eb:56:ec:6e:d9:2a:db:69:d0:c1:2f:15:93: e3:3b:6e:72:d4:16:40:a1:c4:d7:4f:30:27:2c:5b: f4:41:74:83:3f:b2:c8:47:19:f2:89:3e:dc:a2:22: 89:19:45:a1:f5:23:fd:54:f0:7b:15:4e:da:02:8c: 96:1a:5d:09:d2:66:cc:40:31:16:9c:59:2d:42:86: d2:b3:a2:59:13:44:f0:15:5a:b4:84:d0:ba:3d:29: 42:98:6d:2d:9f:ac:a0:0f:01:5e:fd:c9:5f:99:13: dd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D4:D4:28:44:BE:BA:63:36:00:08:CD:44:52:22:12:16:05:91:99 X509v3 Authority Key Identifier: keyid:D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c42e::/48 Signature Algorithm: sha256WithRSAEncryption 12:82:ff:3e:e2:3a:92:d7:cc:ca:0a:10:2d:ab:6f:6b:1c:12: d8:79:82:56:86:6a:e1:19:cd:02:63:b9:e3:fe:ee:26:79:58: cd:dd:cc:22:21:a3:2c:a5:10:c6:af:7a:b3:a8:66:e8:5b:2e: 37:58:ae:00:52:9d:28:4a:f2:4c:d8:74:4a:d9:14:f0:57:71: 5e:7d:bc:8c:37:ce:50:22:8f:ca:fe:e0:de:e5:ba:8a:99:00: 55:58:d5:3e:c1:d1:63:ae:24:cd:b9:d8:cd:bf:d1:1b:d4:f6: 8b:2b:ff:ab:ca:e8:08:c1:36:17:5b:03:ab:72:9c:d3:86:cf: 0e:15:77:7c:30:63:ae:74:8c:f6:40:9a:33:37:9e:63:79:99: 9b:cf:9f:92:88:96:76:34:6b:a4:d6:09:78:e4:a7:2f:88:ab: 06:d5:05:87:e9:ed:0c:c1:10:85:fd:02:74:2e:f3:46:0d:e6: f4:bb:74:4e:f7:46:8b:4b:ab:42:35:73:0c:6a:d5:8e:e6:47: 4c:fb:ae:09:23:2f:58:40:d7:69:49:7f:0d:e7:3e:43:cf:e4: 01:14:c8:5e:a7:dc:9f:6b:d9:d9:ed:64:aa:5e:f1:6d:c2:5b: 1d:d1:ba:8a:a5:99:c8:9c:fb:d3:36:cf:2e:0c:e2:45:04:d0: a8:94:9f:45 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUJEsCxuJskZldvw4/714FbHgf9LgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENF OEJCQjgwMTAeFw0yNTA3MDQxOTQ1MTVaFw0yNjA3MDMxOTUwMTVaMDMxMTAvBgNV BAMTKDBBRDRENDI4NDRCRUJBNjMzNjAwMDhDRDQ0NTIyMjEyMTYwNTkxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RTrM9BV1ZIJiEUMsnjll1o9M BV+sZU4d6RU6Z4OD1UTA+tIBfPfrfhCxZz27eUmQ80W32AVE1yYbV2jEXXJjgaYx 0Zi/0WtwMqIG1Nx+KMhodqHRKHBFITU7tgCjbl32ZqMmt3f12FUCzUe7OOP7DtZm yFmTMyaBB2npv3ZzPXtkEG5OwOTp7pU4hWcogrAOPPE6AkYj61bsbtkq22nQwS8V k+M7bnLUFkChxNdPMCcsW/RBdIM/sshHGfKJPtyiIokZRaH1I/1U8HsVTtoCjJYa XQnSZsxAMRacWS1ChtKzolkTRPAVWrSE0Lo9KUKYbS2frKAPAV79yV+ZE90zAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUCtTUKES+umM2AAjNRFIiEhYFkZkwHwYDVR0j BBgwFoAU16wL+9oVp/JAoSg/VkkZTOi7uAEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzQvRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENFOEJCQjgwMS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0Q3QUMwQkZCREExNUE3 RjI0MEExMjgzRjU2NDkxOTRDRThCQkI4MDEuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4LTNlZjlkMDk4MjM1 Mi80LzMyNjEzMDM1M2E2NDY2NjMzMTNhNjMzNDMyNjUzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNDM3MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwcQuMA0GCSqGSIb3DQEB CwUAA4IBAQASgv8+4jqS18zKChAtq29rHBLYeYJWhmrhGc0CY7nj/u4meVjN3cwi IaMspRDGr3qzqGboWy43WK4AUp0oSvJM2HRK2RTwV3FefbyMN85QIo/K/uDe5bqK mQBVWNU+wdFjriTNudjNv9Eb1PaLK/+ryugIwTYXWwOrcpzThs8OFXd8MGOudIz2 QJozN55jeZmbz5+SiJZ2NGuk1gl45KcviKsG1QWH6e0MwRCF/QJ0LvNGDeb0u3RO 90aLS6tCNXMMatWO5kdM+64JIy9YQNdpSX8N5z5Dz+QBFMhep9yfa9nZ7WSqXvFt wlsd0bqKpZnInPvTNs8uDOJFBNColJ9F -----END CERTIFICATE-----Generated at Sat Jul 5 12:57:39 2025 by rpki-client