$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa File: 326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa (raw, json) Hash identifier: Il1KcF3EWUvTbocMt7EmzFT5S+tk1xhYo0laUEKF3gs= Subject key identifier: EE:A7:D9:DE:51:37:EB:E1:11:7F:C8:D6:DF:96:FA:5F:92:C3:42:1F Certificate issuer: /CN=756560C5B960222CE81AF47A8B758E1741461E7F Certificate serial: 04BF7EC473A1D74524BEDC5F21C6147369A48CEC Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa Signing time: Sun 25 May 2025 02:10:20 +0000 ROA not before: Sun 25 May 2025 02:05:20 +0000 ROA not after: Sun 24 May 2026 02:10:20 +0000 asID: 199518 IP address blocks: 2a0a:6040:baa1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 12:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:bf:7e:c4:73:a1:d7:45:24:be:dc:5f:21:c6:14:73:69:a4:8c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F Validity Not Before: May 25 02:05:20 2025 GMT Not After : May 24 02:10:20 2026 GMT Subject: CN=EEA7D9DE5137EBE1117FC8D6DF96FA5F92C3421F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:49:21:51:5a:1a:73:9b:6c:4b:de:f4:a9:8f: 15:27:e5:ca:1e:9f:f6:a4:8f:3d:55:0f:c7:1f:a4: 0f:fe:63:37:40:05:31:9d:90:91:9a:ad:5e:ec:bb: 9e:d3:2b:09:25:97:96:6e:39:fb:10:f8:b5:82:fa: 7c:5f:31:00:72:fd:a3:81:4a:b1:03:5e:a9:52:4d: 8b:e5:09:f0:e8:d1:47:a8:64:6b:af:6a:50:e6:ab: 7a:32:c6:bb:e0:ab:a4:86:6b:cb:d8:4a:28:34:54: b1:30:47:bd:f4:b7:8e:fd:08:c1:e8:22:e3:8d:23: 8f:fb:a2:ed:de:75:73:ba:4f:2f:85:93:ac:4f:c9: 3b:73:05:9d:f3:9b:d2:f7:70:51:ce:4e:3c:51:3d: 6b:4e:31:44:b9:2c:f7:60:ce:01:4e:60:29:8e:a2: 5e:8a:14:56:30:5f:eb:c0:05:11:41:50:ed:6d:0f: 25:6f:4a:2d:3a:20:ff:33:83:ed:1e:db:7a:c1:bb: 7f:8f:b7:0b:d8:77:a1:8b:32:47:a4:d4:82:d0:0a: bf:18:1f:57:69:bd:38:38:03:07:eb:c4:51:a1:f9: a8:2b:8f:61:15:01:a0:a0:84:33:53:51:5d:7a:68: 3c:b7:a0:29:09:de:b7:04:d6:ff:03:06:1d:58:52: eb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A7:D9:DE:51:37:EB:E1:11:7F:C8:D6:DF:96:FA:5F:92:C3:42:1F X509v3 Authority Key Identifier: keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:baa1::/48 Signature Algorithm: sha256WithRSAEncryption 01:1d:e0:71:19:5f:74:44:d5:a9:44:67:f6:ab:40:a3:07:09: 1b:a4:60:89:07:27:4e:85:5c:50:ce:03:e9:41:8d:44:44:2d: 09:a0:8b:c7:fe:0d:32:ba:c0:7c:17:7d:66:a0:fa:49:37:c5: a9:b5:26:3b:78:58:88:20:ef:52:cc:84:8c:73:b9:fd:52:90: 1a:71:a3:60:a8:0d:f2:85:2d:c2:81:63:73:d6:98:26:1e:d4: 38:c1:76:0a:12:98:87:49:1e:cd:b7:fc:ff:07:1d:a4:6b:e6: 30:06:43:22:fd:9c:61:28:bb:30:13:ea:31:1e:8a:9f:e4:d4: 7b:e2:f9:17:6d:0a:a9:ed:57:86:51:68:d0:2d:96:39:78:b1: a7:73:72:9f:ae:17:13:91:a5:a4:1e:4e:69:39:02:fb:81:25: fd:c5:d9:75:51:23:ae:c4:0c:cc:9c:c6:b8:45:8b:48:50:dc: f5:01:ea:f0:1d:99:b2:9b:35:af:11:50:49:27:2d:dc:04:3e: 6a:94:8d:18:6e:74:36:c0:ac:dc:c8:e5:0f:f7:c3:9b:c3:06: 30:58:ce:28:e7:73:9f:b9:e3:fd:ba:47:5c:b6:61:96:8b:4b: a9:d9:05:00:e6:7b:2a:71:bf:88:72:95:a8:65:c3:74:e1:45: 14:b3:c7:d9 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUBL9+xHOh10UkvtxfIcYUc2mkjOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU2NTYwQzVCOTYwMjIyQ0U4MUFGNDdBOEI3NThFMTc0 MTQ2MUU3RjAeFw0yNTA1MjUwMjA1MjBaFw0yNjA1MjQwMjEwMjBaMDMxMTAvBgNV BAMTKEVFQTdEOURFNTEzN0VCRTExMTdGQzhENkRGOTZGQTVGOTJDMzQyMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySSFRWhpzm2xL3vSpjxUn5coe n/akjz1VD8cfpA/+YzdABTGdkJGarV7su57TKwkll5ZuOfsQ+LWC+nxfMQBy/aOB SrEDXqlSTYvlCfDo0UeoZGuvalDmq3oyxrvgq6SGa8vYSig0VLEwR730t479CMHo IuONI4/7ou3edXO6Ty+Fk6xPyTtzBZ3zm9L3cFHOTjxRPWtOMUS5LPdgzgFOYCmO ol6KFFYwX+vABRFBUO1tDyVvSi06IP8zg+0e23rBu3+PtwvYd6GLMkek1ILQCr8Y H1dpvTg4AwfrxFGh+agrj2EVAaCghDNTUV16aDy3oCkJ3rcE1v8DBh1YUutfAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQU7qfZ3lE36+ERf8jW35b6X5LDQh8wHwYDVR0j BBgwFoAUdWVgxblgIizoGvR6i3WOF0FGHn8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzEvNzU2NTYwQzVCOTYwMjIyQ0U4MUFGNDdBOEI3NThFMTc0MTQ2MUU3Ri5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzc1NjU2MEM1Qjk2MDIy MkNFODFBRjQ3QThCNzU4RTE3NDE0NjFFN0YuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBl OC8xLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjI2MTYxMzEzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMTM5MzkzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAuqEwDQYJKoZIhvcN AQELBQADggEBAAEd4HEZX3RE1alEZ/arQKMHCRukYIkHJ06FXFDOA+lBjURELQmg i8f+DTK6wHwXfWag+kk3xam1Jjt4WIgg71LMhIxzuf1SkBpxo2CoDfKFLcKBY3PW mCYe1DjBdgoSmIdJHs23/P8HHaRr5jAGQyL9nGEouzAT6jEeip/k1Hvi+RdtCqnt V4ZRaNAtljl4sadzcp+uFxORpaQeTmk5AvuBJf3F2XVRI67EDMycxrhFi0hQ3PUB 6vAdmbKbNa8RUEknLdwEPmqUjRhudDbArNzI5Q/3w5vDBjBYzijnc5+54/26R1y2 YZaLS6nZBQDmeypxv4hylahlw3ThRRSzx9k= -----END CERTIFICATE-----Generated at Fri Jun 6 23:02:20 2025 by rpki-client