$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa File: 326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa (raw, json) Hash identifier: gzJ/ISS2azSN/go3Vy4OUvl8JcaTrk3I2rLykqYdpkE= Subject key identifier: 71:DF:D3:18:86:34:20:DC:89:7F:FB:EB:53:35:21:B8:FE:4B:04:87 Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Certificate serial: 348F9DB345DEED6C089F5D098CD486B4AB1C9D32 Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa Signing time: Fri 04 Jul 2025 19:57:39 +0000 ROA not before: Fri 04 Jul 2025 19:52:39 +0000 ROA not after: Fri 03 Jul 2026 19:57:39 +0000 asID: 147036 IP address blocks: 2a06:9f81:3045::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 20:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:8f:9d:b3:45:de:ed:6c:08:9f:5d:09:8c:d4:86:b4:ab:1c:9d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Validity Not Before: Jul 4 19:52:39 2025 GMT Not After : Jul 3 19:57:39 2026 GMT Subject: CN=71DFD318863420DC897FFBEB533521B8FE4B0487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7a:bb:14:2b:b1:db:a2:b6:a4:5a:3c:10:5e: cf:ed:a0:7d:e2:89:53:7a:23:5e:ae:88:82:7b:98: 9f:c9:8d:2d:b5:98:43:92:b5:b8:e5:17:a8:b1:14: 49:57:43:38:9f:dd:5e:8c:39:b7:c2:09:b7:c1:3e: b2:d1:fe:ab:07:f2:6f:59:6c:5c:f9:01:ac:c1:7d: 28:ee:d2:be:b2:59:82:fa:0b:5d:dd:e5:60:7f:47: 1a:b3:14:ce:fb:fa:60:f5:3f:2e:ad:53:a1:3b:1f: b1:05:9f:34:50:e1:6a:33:c5:fe:6b:65:d1:81:db: 1a:33:f5:cd:6c:af:6f:c3:93:2e:a0:de:e7:08:05: 56:e4:8e:3c:93:2e:f9:2a:c3:a3:22:da:23:a1:52: 2d:10:9d:bd:b5:d1:32:26:5b:3b:81:0d:3f:73:05: 83:ad:27:7e:76:c0:ab:e9:be:29:74:1f:b1:04:6a: c7:69:39:9c:da:9e:6c:92:73:49:0f:38:c0:29:01: 4a:eb:57:18:4d:86:4f:3e:48:ed:0c:9f:b0:9b:6d: f0:b1:8a:73:96:e7:a4:78:12:30:f4:26:be:51:3d: d9:87:ae:f8:84:e6:f5:aa:97:bf:52:27:a3:98:27: ab:3e:82:3b:e4:a7:85:a8:7e:22:58:e7:21:ff:14: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DF:D3:18:86:34:20:DC:89:7F:FB:EB:53:35:21:B8:FE:4B:04:87 X509v3 Authority Key Identifier: keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3045::/48 Signature Algorithm: sha256WithRSAEncryption 20:64:72:bf:95:57:2b:ce:10:26:01:12:18:2e:d1:33:0c:c3: c8:22:f7:33:33:d0:f0:58:ca:0f:b0:4d:ac:ce:d1:87:f2:de: d0:16:03:58:c3:c7:6b:16:7f:bc:72:74:3e:dd:b7:ec:b0:d8: f3:72:a0:d0:0b:65:29:e8:34:41:fa:34:2a:b5:ca:18:7d:b1: 9e:92:ff:a3:d0:c9:e9:f7:e5:19:0a:50:c1:89:d1:97:c4:5d: 9b:9a:23:03:de:ad:50:cc:26:e0:b1:b9:f6:de:e5:28:fe:a9: 90:46:53:a6:cd:3f:e6:b0:19:d1:9c:3b:03:78:09:9d:9c:4e: d1:86:f8:72:75:a1:d1:a7:00:07:d3:d3:fc:fc:61:54:a4:a4: ab:c2:94:9f:db:26:85:f7:a6:9f:9e:7a:4f:46:e9:1f:ee:ce: 05:b3:3b:59:f6:9a:fe:e5:c4:91:f0:0c:dd:89:16:50:df:3e: 65:b2:35:11:cf:c8:2c:27:fc:22:c2:f6:b0:57:ee:32:2a:26: 02:88:6f:13:29:11:24:ab:fa:4c:67:5e:a9:a1:ff:a3:0c:6b: 2c:c7:66:37:b9:aa:2d:a7:e7:40:f1:ca:19:8e:2f:40:c8:a7: fb:ad:c5:62:bf:e3:4d:0e:f4:ba:a3:db:f2:bb:64:b5:ef:6d: 87:03:c5:8b -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUNI+ds0Xe7WwIn10JjNSGtKscnTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3 MTdDOTNDQzAeFw0yNTA3MDQxOTUyMzlaFw0yNjA3MDMxOTU3MzlaMDMxMTAvBgNV BAMTKDcxREZEMzE4ODYzNDIwREM4OTdGRkJFQjUzMzUyMUI4RkU0QjA0ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUersUK7HborakWjwQXs/toH3i iVN6I16uiIJ7mJ/JjS21mEOStbjlF6ixFElXQzif3V6MObfCCbfBPrLR/qsH8m9Z bFz5AazBfSju0r6yWYL6C13d5WB/RxqzFM77+mD1Py6tU6E7H7EFnzRQ4Wozxf5r ZdGB2xoz9c1sr2/Dky6g3ucIBVbkjjyTLvkqw6Mi2iOhUi0Qnb210TImWzuBDT9z BYOtJ352wKvpvil0H7EEasdpOZzanmySc0kPOMApAUrrVxhNhk8+SO0Mn7CbbfCx inOW56R4EjD0Jr5RPdmHrviE5vWql79SJ6OYJ6s+gjvkp4WofiJY5yH/FEnVAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUcd/TGIY0INyJf/vrUzUhuP5LBIcwHwYDVR0j BBgwFoAUctHd4bGwRdi+Q53dEBSG5nF8k8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4 N2YyLzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzcyRDFEREUxQjFCMDQ1 RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2Q2NGFjOTQxLTVhN2MtNDJjZi1iNjRiLTBiMjg4ZjE4ODdm Mi8xLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDM0MzUzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMTM0MzczMDMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBp+BMEUwDQYJKoZIhvcN AQELBQADggEBACBkcr+VVyvOECYBEhgu0TMMw8gi9zMz0PBYyg+wTazO0Yfy3tAW A1jDx2sWf7xydD7dt+yw2PNyoNALZSnoNEH6NCq1yhh9sZ6S/6PQyen35RkKUMGJ 0ZfEXZuaIwPerVDMJuCxufbe5Sj+qZBGU6bNP+awGdGcOwN4CZ2cTtGG+HJ1odGn AAfT0/z8YVSkpKvClJ/bJoX3pp+eek9G6R/uzgWzO1n2mv7lxJHwDN2JFlDfPmWy NRHPyCwn/CLC9rBX7jIqJgKIbxMpESSr+kxnXqmh/6MMayzHZje5qi2n50DxyhmO L0DIp/utxWK/400O9Lqj2/K7ZLXvbYcDxYs= -----END CERTIFICATE-----Generated at Sat Jul 5 10:48:05 2025 by rpki-client