$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa File: 326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa (raw, json) Hash identifier: CWOxtutFW8hhUOi9VObNEvn/pGQ0cmbzWj3A/jlfZ7k= Subject key identifier: F5:4B:DF:9C:37:71:C0:CE:86:49:6B:6B:A2:14:90:FD:2C:6E:A6:77 Certificate issuer: /CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801 Certificate serial: 143E1B4158E5A21935744E9C2BD80F793D6E77DF Authority key identifier: D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa Signing time: Fri 04 Jul 2025 19:50:14 +0000 ROA not before: Fri 04 Jul 2025 19:45:14 +0000 ROA not after: Fri 03 Jul 2026 19:50:14 +0000 asID: 47496 IP address blocks: 2a05:dfc1:c430::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 22:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:3e:1b:41:58:e5:a2:19:35:74:4e:9c:2b:d8:0f:79:3d:6e:77:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801 Validity Not Before: Jul 4 19:45:14 2025 GMT Not After : Jul 3 19:50:14 2026 GMT Subject: CN=F54BDF9C3771C0CE86496B6BA21490FD2C6EA677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:78:32:66:8c:94:42:86:71:e1:e0:c6:4a:64: a2:a2:6c:91:37:5f:1f:14:f5:07:84:01:1e:db:9a: 0f:70:25:4f:c6:2d:d2:df:40:ba:49:4f:34:8f:fb: 8e:c1:6f:21:cb:80:6f:a2:07:e2:71:5a:34:f5:7f: 70:89:ed:5e:93:ca:5c:5f:9c:d0:36:5d:72:54:13: d2:db:4f:51:eb:dc:46:b1:d5:bc:9b:a4:27:0a:f1: 4d:b5:ea:76:56:7b:28:4d:6b:9f:b7:d5:44:90:41: a9:6a:80:84:95:00:ca:21:6f:f3:e4:45:ac:91:54: 93:ca:7e:66:d2:f6:d6:94:61:9a:40:89:c6:df:f9: 04:b7:ed:8e:74:0a:5b:35:6e:a4:0e:b0:e3:0c:30: 2b:ce:15:f0:f2:58:a1:48:5a:4b:76:78:bc:c2:e1: f9:7d:64:82:91:57:c0:3d:0c:08:06:40:89:9d:37: 53:9c:2a:80:ff:f4:f3:2d:a4:fc:35:c6:bf:6f:56: 57:20:f3:94:01:19:c1:09:1b:65:f5:e7:f5:7e:6f: e8:0c:9e:5f:b5:04:91:61:70:c6:a3:23:48:2a:89: 53:93:21:03:16:a2:ba:fe:9c:7d:d3:45:d9:cf:ed: a6:fa:18:8b:21:21:4b:0c:09:e1:42:92:47:40:37: 01:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4B:DF:9C:37:71:C0:CE:86:49:6B:6B:A2:14:90:FD:2C:6E:A6:77 X509v3 Authority Key Identifier: keyid:D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c430::/48 Signature Algorithm: sha256WithRSAEncryption 83:f3:01:82:d2:a2:20:11:2a:5e:bc:c9:06:c3:78:81:d2:45: e3:d7:f5:66:be:c5:cd:a7:c8:cb:f3:b8:e5:87:22:3e:5d:81: ea:16:94:10:9c:87:a8:60:8b:61:6d:4e:62:b3:5d:bc:74:df: 91:70:c2:b8:e7:9b:15:57:15:a6:c4:55:2a:11:aa:4f:df:43: 4b:07:78:cc:d9:3f:ec:cc:28:6b:9a:22:eb:4f:b5:32:53:82: 33:c6:aa:b6:dc:6a:e5:cd:f2:0b:a4:df:d6:cf:59:98:d4:1b: 4b:c1:cf:c6:13:c4:1a:a6:e7:ee:22:e2:5a:8d:c2:fb:7f:e8: e0:40:c1:d2:d3:9a:92:83:89:35:3d:5b:39:6c:d8:e5:74:d5: da:01:07:04:70:c5:6d:77:f7:a8:9c:dd:3f:74:7e:f3:b2:7e: 88:9a:12:77:4c:3d:26:ea:e8:60:b2:e0:b1:90:36:c5:2e:3a: e6:b8:03:cb:a4:8d:80:a4:0d:e5:1f:68:26:df:bf:fa:7d:ca: 6b:94:18:30:6b:60:f6:87:92:69:41:ed:ee:0a:01:a2:d6:b8: 06:57:9b:9d:85:39:0f:87:86:fd:fc:a6:53:99:8a:91:42:67: 2e:79:8f:98:92:b7:cf:85:78:e6:93:bb:5e:83:50:6c:d0:60: c0:b5:ce:29 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUFD4bQVjlohk1dE6cK9gPeT1ud98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENF OEJCQjgwMTAeFw0yNTA3MDQxOTQ1MTRaFw0yNjA3MDMxOTUwMTRaMDMxMTAvBgNV BAMTKEY1NEJERjlDMzc3MUMwQ0U4NjQ5NkI2QkEyMTQ5MEZEMkM2RUE2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYeDJmjJRChnHh4MZKZKKibJE3 Xx8U9QeEAR7bmg9wJU/GLdLfQLpJTzSP+47BbyHLgG+iB+JxWjT1f3CJ7V6Tylxf nNA2XXJUE9LbT1Hr3Eax1bybpCcK8U216nZWeyhNa5+31USQQalqgISVAMohb/Pk RayRVJPKfmbS9taUYZpAicbf+QS37Y50Cls1bqQOsOMMMCvOFfDyWKFIWkt2eLzC 4fl9ZIKRV8A9DAgGQImdN1OcKoD/9PMtpPw1xr9vVlcg85QBGcEJG2X15/V+b+gM nl+1BJFhcMajI0gqiVOTIQMWorr+nH3TRdnP7ab6GIshIUsMCeFCkkdANwFpAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU9UvfnDdxwM6GSWtrohSQ/SxupncwHwYDVR0j BBgwFoAU16wL+9oVp/JAoSg/VkkZTOi7uAEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzQvRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENFOEJCQjgwMS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0Q3QUMwQkZCREExNUE3 RjI0MEExMjgzRjU2NDkxOTRDRThCQkI4MDEuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4LTNlZjlkMDk4MjM1 Mi80LzMyNjEzMDM1M2E2NDY2NjMzMTNhNjMzNDMzMzAzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNDM3MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwcQwMA0GCSqGSIb3DQEB CwUAA4IBAQCD8wGC0qIgESpevMkGw3iB0kXj1/VmvsXNp8jL87jlhyI+XYHqFpQQ nIeoYIthbU5is128dN+RcMK455sVVxWmxFUqEapP30NLB3jM2T/szChrmiLrT7Uy U4Izxqq23GrlzfILpN/Wz1mY1BtLwc/GE8QapufuIuJajcL7f+jgQMHS05qSg4k1 PVs5bNjldNXaAQcEcMVtd/eonN0/dH7zsn6ImhJ3TD0m6uhgsuCxkDbFLjrmuAPL pI2ApA3lH2gm37/6fcprlBgwa2D2h5JpQe3uCgGi1rgGV5udhTkPh4b9/KZTmYqR QmcueY+YkrfPhXjmk7teg1Bs0GDAtc4p -----END CERTIFICATE-----Generated at Sat Jul 5 12:52:10 2025 by rpki-client