$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: kp4zuGmfALz4BBNbJHOCEzEIlaoLL2JZoqnMbF6HOVw= Subject key identifier: B0:84:34:2C:32:67:51:62:B0:E1:ED:2E:2D:D5:45:5B:04:BF:BA:C0 Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Certificate serial: 1EC091FDFDE361C878055C47CCE2FAB1A250800C Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa Signing time: Mon 10 Feb 2025 02:39:44 +0000 ROA not before: Mon 10 Feb 2025 02:34:44 +0000 ROA not after: Mon 09 Feb 2026 02:39:44 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e30::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c0:91:fd:fd:e3:61:c8:78:05:5c:47:cc:e2:fa:b1:a2:50:80:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Validity Not Before: Feb 10 02:34:44 2025 GMT Not After : Feb 9 02:39:44 2026 GMT Subject: CN=B084342C32675162B0E1ED2E2DD5455B04BFBAC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b5:ac:55:3f:84:63:16:ca:83:98:61:bb:3e: f9:88:d0:5f:f0:42:80:54:44:97:29:9d:43:8e:99: 5d:d3:fc:75:7b:bd:a3:1f:2d:af:14:d3:60:b8:f8: 85:8b:0b:03:86:aa:19:21:03:c6:f9:aa:69:01:f6: d5:0d:c7:3a:df:11:67:8c:33:f2:e9:a2:b3:29:a4: 51:f8:95:ec:7b:ca:22:a3:3d:14:82:9f:dc:d3:c5: 87:57:8b:da:0b:3c:12:28:5c:76:33:ba:08:19:5e: 1b:28:ae:98:3d:24:aa:3f:d8:47:26:3d:22:06:91: b3:38:51:6b:93:e5:1e:f3:0a:ae:4c:3b:0a:9f:f4: 25:22:2e:b5:ce:38:96:c6:6a:60:46:7f:63:00:39: 24:c8:ac:9a:25:15:b4:22:13:95:7d:78:94:d0:2e: ad:df:46:13:a6:ef:ff:eb:94:10:c0:6e:d8:6c:af: 83:bf:49:08:1b:cf:9a:e1:ff:91:35:6e:98:2a:f8: d2:dd:35:8d:c3:4a:21:8e:8c:09:cd:26:67:77:68: a8:44:f0:f7:32:ed:00:ff:dc:18:f7:5e:27:b1:53: 0c:64:a3:45:23:6b:be:a6:c9:97:b4:b6:91:02:6f: 2d:c1:01:36:a9:17:7d:95:2d:b8:57:95:cc:d2:d6: 48:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:84:34:2C:32:67:51:62:B0:E1:ED:2E:2D:D5:45:5B:04:BF:BA:C0 X509v3 Authority Key Identifier: keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e30::/44 Signature Algorithm: sha256WithRSAEncryption 06:01:4e:d1:63:23:2b:58:18:6a:93:eb:5b:e3:42:38:2f:9b: 51:1b:ba:1f:97:ac:51:7b:a3:d9:fe:a3:3e:67:64:79:1a:d8: af:c8:c2:f7:11:56:d3:37:a7:e2:53:31:c8:d5:9b:3e:3b:25: 34:61:6d:8f:fd:3e:e2:3c:62:70:02:fb:e8:2f:0d:42:1b:a0: 75:2c:7b:53:73:9d:23:0f:05:50:54:71:ec:c4:f4:49:4a:54: e0:bf:59:f8:a4:a6:4e:a6:80:8a:09:9e:ca:ee:ba:e5:a6:88: ab:64:a9:5f:5e:cf:b1:3f:a2:92:c3:76:32:7c:61:14:45:08: 02:f3:56:03:5a:b5:cd:fe:4b:6b:c9:6c:40:89:5a:ed:4f:54: ae:cd:4c:bb:fd:27:40:e1:27:52:4e:1d:ee:da:38:4d:ac:be: 7e:a6:e9:ad:43:e7:24:24:5d:9f:84:08:d4:4e:13:8b:ee:9b: 86:22:7a:0c:00:26:ac:a4:d3:0c:a9:77:f4:ee:45:b2:c9:a6: 59:e8:3e:73:88:5e:3d:cc:3e:7f:d7:40:89:04:5d:4f:32:c9: 75:19:8c:32:ed:5e:30:00:84:9a:ae:93:13:be:49:2a:e2:a8: 54:b5:ad:99:56:e5:54:a1:02:a0:d5:23:ee:dc:7f:7e:6b:03: 85:e9:78:36 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUHsCR/f3jYch4BVxHzOL6saJQgAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1 NzU2QjE5QzAeFw0yNTAyMTAwMjM0NDRaFw0yNjAyMDkwMjM5NDRaMDMxMTAvBgNV BAMTKEIwODQzNDJDMzI2NzUxNjJCMEUxRUQyRTJERDU0NTVCMDRCRkJBQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEtaxVP4RjFsqDmGG7PvmI0F/w QoBURJcpnUOOmV3T/HV7vaMfLa8U02C4+IWLCwOGqhkhA8b5qmkB9tUNxzrfEWeM M/LporMppFH4lex7yiKjPRSCn9zTxYdXi9oLPBIoXHYzuggZXhsorpg9JKo/2Ecm PSIGkbM4UWuT5R7zCq5MOwqf9CUiLrXOOJbGamBGf2MAOSTIrJolFbQiE5V9eJTQ Lq3fRhOm7//rlBDAbthsr4O/SQgbz5rh/5E1bpgq+NLdNY3DSiGOjAnNJmd3aKhE 8Pcy7QD/3Bj3XiexUwxko0Uja76myZe0tpECby3BATapF32VLbhXlczS1kjNAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUsIQ0LDJnUWKw4e0uLdVFWwS/usAwHwYDVR0j BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTMzMzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY4wMA0GCSqGSIb3DQEB CwUAA4IBAQAGAU7RYyMrWBhqk+tb40I4L5tRG7ofl6xRe6PZ/qM+Z2R5GtivyML3 EVbTN6fiUzHI1Zs+OyU0YW2P/T7iPGJwAvvoLw1CG6B1LHtTc50jDwVQVHHsxPRJ SlTgv1n4pKZOpoCKCZ7K7rrlpoirZKlfXs+xP6KSw3YyfGEURQgC81YDWrXN/ktr yWxAiVrtT1SuzUy7/SdA4SdSTh3u2jhNrL5+pumtQ+ckJF2fhAjUThOL7puGInoM ACaspNMMqXf07kWyyaZZ6D5ziF49zD5/10CJBF1PMsl1GYwy7V4wAISarpMTvkkq 4qhUta2ZVuVUoQKg1SPu3H9+awOF6Xg2 -----END CERTIFICATE-----Generated at Sat Apr 5 04:38:13 2025 by rpki-client