$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: VdH1rmngxdsry2bTnH9gOiLaPyDXqjQsVqkD+I+D36Q= Subject key identifier: CD:2E:49:4C:B3:F5:1C:FA:F6:3D:EF:EB:53:E6:43:09:2D:64:6E:96 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 732C44F8A3B0A1CB6E8C81BA1117B192F535ACA1 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa Signing time: Fri 04 Jul 2025 19:52:54 +0000 ROA not before: Fri 04 Jul 2025 19:47:54 +0000 ROA not after: Fri 03 Jul 2026 19:52:54 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8eb0::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 23:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2c:44:f8:a3:b0:a1:cb:6e:8c:81:ba:11:17:b1:92:f5:35:ac:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Jul 4 19:47:54 2025 GMT Not After : Jul 3 19:52:54 2026 GMT Subject: CN=CD2E494CB3F51CFAF63DEFEB53E643092D646E96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:04:53:4d:f8:c7:fc:c0:a4:17:ae:32:c6:84: 24:6a:42:0d:9f:d8:38:2f:e0:eb:c1:af:d3:e3:21: 9c:f1:18:26:34:c1:b4:43:66:27:92:23:43:89:cc: 8e:de:7d:83:69:1d:cc:95:a1:96:f9:1e:c1:2a:ff: 64:df:36:58:da:fa:78:ca:64:37:15:03:d8:0d:b9: 4f:8c:b6:95:d1:b1:09:f3:0e:7c:eb:cb:b2:87:f4: ae:54:ee:79:32:d3:3b:0d:27:3a:cb:0d:29:3f:cd: 72:c0:16:9a:58:eb:b7:24:a8:b7:d7:62:e8:d6:a4: b9:dd:7d:c3:18:e1:84:26:e1:44:13:9b:fb:2b:96: b0:c5:2a:18:05:72:51:03:24:ce:75:40:27:ec:79: 22:dd:01:40:9f:15:f6:85:27:5b:91:12:3c:9b:75: 6c:0a:0d:cb:46:30:13:20:1e:f2:a7:05:88:c2:a2: 50:e1:6c:7c:44:76:a3:10:d6:1a:84:1d:47:5d:54: 44:bb:7a:c3:71:49:f0:f7:65:90:56:56:a0:2e:04: f7:56:11:6c:ed:f5:9d:ce:16:ff:f6:f7:09:29:50: a5:a5:8a:7d:db:bd:98:5b:a5:39:c0:7c:73:85:31: f8:b1:73:c0:cd:b9:e3:7b:b4:4b:b6:2c:b5:0c:ba: a1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2E:49:4C:B3:F5:1C:FA:F6:3D:EF:EB:53:E6:43:09:2D:64:6E:96 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8eb0::/44 Signature Algorithm: sha256WithRSAEncryption 7b:e8:87:a4:01:58:db:48:60:38:ab:31:27:6e:1b:06:34:6a: bd:16:78:82:5c:76:ea:b8:29:ce:6d:14:00:c6:b9:30:8d:7d: 74:a5:a3:ae:e2:b0:07:db:79:e4:2c:76:63:56:f1:61:38:9c: 8f:80:b5:cf:a2:cd:f4:b1:94:9c:69:57:a4:89:cf:ba:ac:44: bc:55:0b:33:1c:f3:e5:f5:08:2f:d7:ac:92:72:69:8e:cd:c5: f8:bb:10:fc:5f:d6:4a:75:93:ce:2e:7d:05:bf:40:b2:55:bf: 91:2b:fd:eb:75:f5:40:43:d4:7e:75:3f:86:1b:a3:33:0c:cc: 0b:e6:c9:c6:23:6c:7d:fe:ee:a6:df:82:2e:55:3a:08:60:df: 71:fb:c6:11:d6:e3:0b:4c:a4:ca:1e:fe:48:2c:1a:e2:0b:d1: 9f:ea:a8:45:f1:fa:60:ce:94:3e:0b:ed:22:36:11:1c:dd:8b: 6a:18:92:c8:15:86:e7:7d:db:88:c5:24:a3:3c:92:2c:39:dd: 4e:6f:98:45:00:82:63:83:e9:94:9c:09:e8:60:c4:06:ce:c2: 40:d7:d3:13:6a:5a:79:48:97:76:e4:af:60:59:9d:4b:06:24: 21:fb:96:b0:5b:a9:3b:d2:53:0b:b2:84:d1:13:29:f5:62:89: 42:f9:bd:d9 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUcyxE+KOwoctujIG6ERexkvU1rKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNTA3MDQxOTQ3NTRaFw0yNjA3MDMxOTUyNTRaMDMxMTAvBgNV BAMTKENEMkU0OTRDQjNGNTFDRkFGNjNERUZFQjUzRTY0MzA5MkQ2NDZFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRBFNN+Mf8wKQXrjLGhCRqQg2f 2Dgv4OvBr9PjIZzxGCY0wbRDZieSI0OJzI7efYNpHcyVoZb5HsEq/2TfNlja+njK ZDcVA9gNuU+MtpXRsQnzDnzry7KH9K5U7nky0zsNJzrLDSk/zXLAFppY67ckqLfX YujWpLndfcMY4YQm4UQTm/srlrDFKhgFclEDJM51QCfseSLdAUCfFfaFJ1uREjyb dWwKDctGMBMgHvKnBYjColDhbHxEdqMQ1hqEHUddVES7esNxSfD3ZZBWVqAuBPdW EWzt9Z3OFv/29wkpUKWlin3bvZhbpTnAfHOFMfixc8DNueN7tEu2LLUMuqEPAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUzS5JTLP1HPr2Pe/rU+ZDCS1kbpYwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTYyMzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY6wMA0GCSqGSIb3DQEB CwUAA4IBAQB76IekAVjbSGA4qzEnbhsGNGq9FniCXHbquCnObRQAxrkwjX10paOu 4rAH23nkLHZjVvFhOJyPgLXPos30sZScaVekic+6rES8VQszHPPl9Qgv16yScmmO zcX4uxD8X9ZKdZPOLn0Fv0CyVb+RK/3rdfVAQ9R+dT+GG6MzDMwL5snGI2x9/u6m 34IuVToIYN9x+8YR1uMLTKTKHv5ILBriC9Gf6qhF8fpgzpQ+C+0iNhEc3YtqGJLI FYbnfduIxSSjPJIsOd1Ob5hFAIJjg+mUnAnoYMQGzsJA19MTalp5SJd25K9gWZ1L BiQh+5awW6k70lMLsoTREyn1YolC+b3Z -----END CERTIFICATE-----Generated at Sat Jul 5 13:00:34 2025 by rpki-client