$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034333a3a2f34382d3438203d3e20313530383035.roa File: 326130363a396638313a333034333a3a2f34382d3438203d3e20313530383035.roa (raw, json) Hash identifier: MRSXpyWSbVj9fLo4QH75ZJ7h1v8bbPZt36oN7nrxKRI= Subject key identifier: 6D:55:EC:C3:80:44:CC:1D:BB:DA:85:23:AF:4D:C4:84:83:11:1B:40 Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Certificate serial: 6887E44831F7353FE80047C1D96AA34314353DD4 Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034333a3a2f34382d3438203d3e20313530383035.roa Signing time: Fri 04 Jul 2025 19:57:42 +0000 ROA not before: Fri 04 Jul 2025 19:52:42 +0000 ROA not after: Fri 03 Jul 2026 19:57:42 +0000 asID: 150805 IP address blocks: 2a06:9f81:3043::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 20:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:87:e4:48:31:f7:35:3f:e8:00:47:c1:d9:6a:a3:43:14:35:3d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Validity Not Before: Jul 4 19:52:42 2025 GMT Not After : Jul 3 19:57:42 2026 GMT Subject: CN=6D55ECC38044CC1DBBDA8523AF4DC48483111B40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:99:2c:9e:36:12:2c:74:4f:50:49:ed:82: b0:26:be:8d:7f:75:9e:03:bb:c5:ce:e4:6d:0c:c1: ed:99:8e:4f:86:56:ce:80:c0:b3:30:7f:ab:41:71: ac:44:67:84:86:a1:91:f5:c8:04:d0:11:c8:bf:45: 22:5c:3b:75:f1:c3:05:d8:58:fc:26:fc:33:f8:69: d0:01:09:24:38:b6:e2:d1:5f:17:1e:9d:41:05:f3: 59:0f:7f:1e:f7:81:dd:f7:b1:a0:54:31:2c:3a:60: 44:a9:00:3e:d7:9d:9b:18:fb:3f:1b:97:7d:57:ba: d6:00:4a:1e:90:a6:c2:87:60:95:68:64:36:f1:8f: 03:54:dd:a7:36:77:3a:cd:fd:1a:f9:28:c8:87:3e: 3b:3e:87:48:42:2e:d5:f8:f1:f0:6f:07:81:6e:6e: a2:19:17:6d:f2:4a:a3:88:56:48:12:d8:44:c8:6a: 2d:cc:8b:54:46:c1:eb:28:4b:86:87:be:e3:c0:37: 21:40:23:a6:55:8d:22:26:65:ce:6c:3a:16:72:67: d6:2d:2f:2b:5b:4c:25:91:7e:8f:ff:d6:8e:dd:a1: 06:19:40:62:61:5b:26:92:60:b0:64:d3:21:20:0c: 82:bb:76:f5:ec:00:5d:21:b0:49:89:81:c6:b1:e5: d5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:55:EC:C3:80:44:CC:1D:BB:DA:85:23:AF:4D:C4:84:83:11:1B:40 X509v3 Authority Key Identifier: keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034333a3a2f34382d3438203d3e20313530383035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3043::/48 Signature Algorithm: sha256WithRSAEncryption 40:82:b3:11:5e:69:1d:8d:99:b5:48:73:29:f0:6d:82:e0:cd: 43:30:48:f0:50:a5:79:6e:47:fc:29:9e:71:e0:b5:6d:4f:8c: 41:d5:f2:c2:df:80:89:cc:02:67:a0:b3:87:53:2c:9c:d4:21: 19:eb:ff:33:14:58:53:4e:ce:99:71:60:e4:3b:72:29:ef:f1: 4e:37:51:30:07:95:11:6c:f0:ea:cf:b0:53:e7:81:61:6e:fe: 72:1a:81:d5:85:b4:1b:e8:9f:6e:50:75:28:18:29:35:ba:5d: 7c:ce:ab:af:01:fc:eb:7e:78:8c:eb:7c:14:e4:38:6c:ec:66: 8a:85:36:f1:5a:62:bb:81:dc:86:d8:dd:c4:77:c2:fd:5b:88: 13:b2:ed:0d:73:48:66:b6:f8:77:15:58:72:fe:7d:f7:6d:e7: 75:11:c0:a1:48:a9:2a:01:a7:ef:49:e9:65:35:93:0e:d2:78: b7:80:f7:d9:6c:1c:bf:a0:42:b8:06:78:4b:8e:8a:a7:19:19: fc:98:03:1e:5a:a1:24:69:e0:e0:80:46:54:74:93:e3:e3:5f: 34:03:3b:85:b6:65:fa:9b:5d:50:1c:70:fa:3e:e1:94:43:22: 7d:bf:0b:18:d5:07:a3:a5:86:73:9a:7c:45:4a:53:4e:ef:94: bf:e3:62:38 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUaIfkSDH3NT/oAEfB2WqjQxQ1PdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3 MTdDOTNDQzAeFw0yNTA3MDQxOTUyNDJaFw0yNjA3MDMxOTU3NDJaMDMxMTAvBgNV BAMTKDZENTVFQ0MzODA0NENDMURCQkRBODUyM0FGNERDNDg0ODMxMTFCNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq8pksnjYSLHRPUEntgrAmvo1/ dZ4Du8XO5G0Mwe2Zjk+GVs6AwLMwf6tBcaxEZ4SGoZH1yATQEci/RSJcO3XxwwXY WPwm/DP4adABCSQ4tuLRXxcenUEF81kPfx73gd33saBUMSw6YESpAD7XnZsY+z8b l31XutYASh6QpsKHYJVoZDbxjwNU3ac2dzrN/Rr5KMiHPjs+h0hCLtX48fBvB4Fu bqIZF23ySqOIVkgS2ETIai3Mi1RGwesoS4aHvuPANyFAI6ZVjSImZc5sOhZyZ9Yt LytbTCWRfo//1o7doQYZQGJhWyaSYLBk0yEgDIK7dvXsAF0hsEmJgcax5dVXAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUbVXsw4BEzB272oUjr03EhIMRG0AwHwYDVR0j BBgwFoAUctHd4bGwRdi+Q53dEBSG5nF8k8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4 N2YyLzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzcyRDFEREUxQjFCMDQ1 RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2Q2NGFjOTQxLTVhN2MtNDJjZi1iNjRiLTBiMjg4ZjE4ODdm Mi8xLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDM0MzMzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMTM1MzAzODMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBp+BMEMwDQYJKoZIhvcN AQELBQADggEBAECCsxFeaR2NmbVIcynwbYLgzUMwSPBQpXluR/wpnnHgtW1PjEHV 8sLfgInMAmegs4dTLJzUIRnr/zMUWFNOzplxYOQ7cinv8U43UTAHlRFs8OrPsFPn gWFu/nIagdWFtBvon25QdSgYKTW6XXzOq68B/Ot+eIzrfBTkOGzsZoqFNvFaYruB 3IbY3cR3wv1biBOy7Q1zSGa2+HcVWHL+ffdt53URwKFIqSoBp+9J6WU1kw7SeLeA 99lsHL+gQrgGeEuOiqcZGfyYAx5aoSRp4OCARlR0k+PjXzQDO4W2ZfqbXVAccPo+ 4ZRDIn2/CxjVB6OlhnOafEVKU07vlL/jYjg= -----END CERTIFICATE-----Generated at Sat Jul 5 11:04:53 2025 by rpki-client