$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: iz3g5mMMFRbHt5DP+N14kkQSFjXHsjcvoa6INBsQ4K4= Subject key identifier: CD:81:45:E5:4A:8E:1F:63:6B:5F:D3:CC:36:A2:40:DA:68:F0:F0:8D Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Certificate serial: 734EC4FC88F44190ED9873FDCD5E51A7B689CCE5 Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa Signing time: Tue 06 May 2025 08:50:50 +0000 ROA not before: Tue 06 May 2025 08:45:50 +0000 ROA not after: Tue 05 May 2026 08:50:50 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e90::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 21:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:4e:c4:fc:88:f4:41:90:ed:98:73:fd:cd:5e:51:a7:b6:89:cc:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Validity Not Before: May 6 08:45:50 2025 GMT Not After : May 5 08:50:50 2026 GMT Subject: CN=CD8145E54A8E1F636B5FD3CC36A240DA68F0F08D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6c:a9:32:ac:08:42:f8:40:be:df:fb:ce:51: 57:46:67:4c:5a:0f:04:08:f4:8b:77:b5:3d:53:f1: f1:0d:15:96:a8:ba:d0:a9:79:f1:32:cf:c4:37:a6: 2b:ad:24:2d:ef:be:ce:6b:b9:94:5c:30:4a:a5:58: 1d:b6:09:7c:27:35:56:ac:a0:27:1f:18:bc:42:6e: 38:b1:d1:56:dd:0b:5b:48:01:83:76:d0:70:db:22: b8:27:c9:3e:e1:ce:ab:ad:f3:1e:eb:4f:0e:75:d0: 8c:c3:8c:d7:ed:b6:a9:1f:21:2d:2f:32:18:d2:fb: 0a:0f:c5:94:65:09:ec:e2:e9:1b:95:83:56:54:d4: 25:62:59:fd:c5:0b:09:87:71:f6:1d:dc:cf:45:98: 70:96:cd:bd:db:f1:35:42:c2:97:4b:ab:06:ec:b8: 4d:9a:06:d9:46:7b:b6:b7:7f:55:fd:a7:ac:6d:02: 2a:39:81:d1:9e:ec:61:71:18:9b:4f:31:29:ef:8b: 74:08:1e:74:d9:91:23:16:b2:99:1f:1e:37:8a:62: 9e:8a:49:96:88:23:fe:1e:9c:d0:77:86:8e:e4:3f: b7:68:90:7a:51:23:6a:27:96:99:9f:00:37:0e:77: 8e:0b:6c:3a:0b:31:91:99:eb:69:c2:1a:0c:f0:09: ae:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:81:45:E5:4A:8E:1F:63:6B:5F:D3:CC:36:A2:40:DA:68:F0:F0:8D X509v3 Authority Key Identifier: keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e90::/44 Signature Algorithm: sha256WithRSAEncryption 9f:f5:2d:bf:3b:5b:f0:09:49:3e:fe:ed:4c:1b:53:e5:04:11: d9:0c:9d:d9:f0:4d:d3:67:92:c9:5c:c1:53:0c:b6:e0:5b:43: 6f:8d:aa:d8:73:f9:92:fe:88:f6:cf:73:4c:48:be:9f:ac:75: 7e:dd:29:d3:e0:b9:6a:47:0f:ee:38:34:d8:86:51:e3:46:48: 31:1c:07:58:fb:e0:2c:9c:27:22:fe:7a:64:f8:ae:b4:0e:e5: 5f:bf:74:7e:ab:f1:cd:bb:0d:94:f5:b4:64:eb:90:ae:8c:38: 89:3f:96:52:e1:40:0f:c9:ed:ab:58:04:6a:0f:e9:a5:2e:aa: 21:9c:af:ab:07:ef:8e:8d:96:0e:9c:1b:fa:07:d3:cd:b8:87: 34:57:67:db:c1:58:36:37:37:b9:33:cd:5c:2b:c9:30:93:e5: 95:db:53:ec:ae:94:43:46:ab:cc:fb:6b:10:0b:86:70:f3:6e: b9:57:bc:e0:66:c9:5a:93:39:88:8e:a7:48:f8:22:02:3a:26: fa:d2:b3:a2:ce:5c:dd:58:fd:22:ce:02:64:7b:39:3b:95:c9: 3b:b6:56:2b:d1:be:c9:81:72:8a:ff:55:2e:9f:62:5f:3d:54: a4:1a:e2:48:d2:4e:ad:f9:cb:0e:bf:b5:1f:72:4b:2a:9d:5e: c7:5f:2f:9b -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUc07E/Ij0QZDtmHP9zV5Rp7aJzOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1 NzU2QjE5QzAeFw0yNTA1MDYwODQ1NTBaFw0yNjA1MDUwODUwNTBaMDMxMTAvBgNV BAMTKENEODE0NUU1NEE4RTFGNjM2QjVGRDNDQzM2QTI0MERBNjhGMEYwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDObKkyrAhC+EC+3/vOUVdGZ0xa DwQI9It3tT1T8fENFZaoutCpefEyz8Q3piutJC3vvs5ruZRcMEqlWB22CXwnNVas oCcfGLxCbjix0VbdC1tIAYN20HDbIrgnyT7hzqut8x7rTw510IzDjNfttqkfIS0v MhjS+woPxZRlCezi6RuVg1ZU1CViWf3FCwmHcfYd3M9FmHCWzb3b8TVCwpdLqwbs uE2aBtlGe7a3f1X9p6xtAio5gdGe7GFxGJtPMSnvi3QIHnTZkSMWspkfHjeKYp6K SZaII/4enNB3ho7kP7dokHpRI2onlpmfADcOd44LbDoLMZGZ62nCGgzwCa6dAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUzYFF5UqOH2NrX9PMNqJA2mjw8I0wHwYDVR0j BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM5MzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY6QMA0GCSqGSIb3DQEB CwUAA4IBAQCf9S2/O1vwCUk+/u1MG1PlBBHZDJ3Z8E3TZ5LJXMFTDLbgW0NvjarY c/mS/oj2z3NMSL6frHV+3SnT4LlqRw/uODTYhlHjRkgxHAdY++AsnCci/npk+K60 DuVfv3R+q/HNuw2U9bRk65CujDiJP5ZS4UAPye2rWARqD+mlLqohnK+rB++OjZYO nBv6B9PNuIc0V2fbwVg2Nze5M81cK8kwk+WV21PsrpRDRqvM+2sQC4Zw8265V7zg ZslakzmIjqdI+CICOib60rOizlzdWP0izgJkezk7lck7tlYr0b7JgXKK/1Uun2Jf PVSkGuJI0k6t+csOv7UfcksqnV7HXy+b -----END CERTIFICATE-----Generated at Sat Jun 7 09:14:05 2025 by rpki-client