$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130333a3a2f34382d3438203d3e20323033383433.roa File: 326130613a363034303a613130333a3a2f34382d3438203d3e20323033383433.roa (raw, json) Hash identifier: 06tAnlm0i1jYu3D9mVMZ/IhYeCYC1xL7tDX2aImcRpw= Subject key identifier: 09:C2:2D:A4:F6:F0:75:5F:9E:5C:54:A2:AD:C9:96:C2:80:FA:53:87 Certificate issuer: /CN=13DDCFA128DC141F076EB7B60F46359286489D55 Certificate serial: 16D68078670526FC7AEE8397FD1EDC4459E07C16 Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130333a3a2f34382d3438203d3e20323033383433.roa Signing time: Fri 14 Mar 2025 01:28:03 +0000 ROA not before: Fri 14 Mar 2025 01:23:03 +0000 ROA not after: Fri 13 Mar 2026 01:28:03 +0000 asID: 203843 IP address blocks: 2a0a:6040:a103::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 10:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d6:80:78:67:05:26:fc:7a:ee:83:97:fd:1e:dc:44:59:e0:7c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55 Validity Not Before: Mar 14 01:23:03 2025 GMT Not After : Mar 13 01:28:03 2026 GMT Subject: CN=09C22DA4F6F0755F9E5C54A2ADC996C280FA5387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ff:69:e3:5c:be:da:2a:9e:eb:41:d4:12:00: 5e:c2:5e:14:6b:44:3d:80:27:37:0f:5d:8c:55:be: c9:e2:f7:25:db:ab:43:9b:7a:5a:74:71:cd:82:41: 7a:57:65:f1:c7:39:35:f0:3d:be:32:39:22:cf:c8: e0:4b:dd:b2:10:eb:10:0f:c7:ea:4a:d6:c6:96:81: 65:d6:80:0c:54:31:fc:c5:30:b3:d8:92:e7:22:b0: 44:ae:f3:ef:94:d2:3d:9c:4b:94:3b:63:90:17:dd: 6e:b5:b1:a6:20:11:02:bd:a3:53:41:07:fa:aa:fa: 7f:16:67:a7:ce:ca:44:18:f2:96:df:59:90:24:19: cf:3f:8d:48:34:73:de:41:a1:c5:50:db:fc:ec:13: 5b:12:a7:3b:8a:c6:e3:d9:7f:39:1f:7c:7c:43:45: d5:15:cc:9f:05:aa:06:29:f8:7c:08:87:f1:0d:a9: e1:d2:4f:ef:f9:d0:66:9a:0e:72:0b:1a:66:86:7c: f5:eb:ea:13:27:7c:b6:d3:e9:f1:75:95:02:63:b5: a5:82:84:1f:db:7c:0c:3c:08:8a:88:a9:91:2c:72: da:95:97:9f:85:a0:9b:6f:57:94:8c:02:dd:20:13: b6:12:59:28:b8:a5:a4:c2:c9:fc:7b:f1:30:e9:98: b3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C2:2D:A4:F6:F0:75:5F:9E:5C:54:A2:AD:C9:96:C2:80:FA:53:87 X509v3 Authority Key Identifier: keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130333a3a2f34382d3438203d3e20323033383433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:a103::/48 Signature Algorithm: sha256WithRSAEncryption 34:44:58:4e:a5:00:ce:23:6d:85:73:91:b5:e5:f3:08:fa:05: e8:6a:02:c0:b7:d2:2a:48:b3:fd:bd:99:c2:a1:0a:aa:10:a2: a8:a0:57:76:3e:51:17:16:3c:fa:39:cf:73:d1:2c:0f:aa:45: e3:7e:19:7f:bb:8c:5c:f5:59:5c:0b:8a:c0:b0:6a:09:02:69: f2:2f:f0:18:7f:ce:30:6d:de:d8:6a:66:c2:a0:7d:55:5f:cd: d4:61:ee:10:6d:7c:05:3f:0a:e2:c6:f1:a6:88:56:1d:15:d3: dc:96:be:e5:bf:99:ff:57:40:98:2f:7f:fe:86:d6:92:09:7b: 1e:ee:14:65:39:e7:73:6b:24:db:6b:ad:f3:cc:11:3e:0e:0f: d4:e5:34:0d:25:1f:ae:e8:56:e8:06:6c:57:7b:87:db:c3:02: 80:9f:85:5e:32:52:a6:ab:08:36:45:ed:d0:81:a0:5d:13:56: 0a:42:15:df:72:41:cb:14:db:7e:c0:36:5e:a8:96:10:77:fb: 3c:54:bd:47:52:5a:94:ba:be:b2:c5:1c:19:bc:54:41:d7:b8: 1e:31:7b:13:8b:83:7e:8b:55:a6:21:a5:6e:12:fe:fe:94:be: 84:dd:ea:50:d1:be:d2:d6:d8:63:03:25:26:3b:0f:91:41:73: 1d:62:8b:1f -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUFtaAeGcFJvx67oOX/R7cRFngfBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNERENGQTEyOERDMTQxRjA3NkVCN0I2MEY0NjM1OTI4 NjQ4OUQ1NTAeFw0yNTAzMTQwMTIzMDNaFw0yNjAzMTMwMTI4MDNaMDMxMTAvBgNV BAMTKDA5QzIyREE0RjZGMDc1NUY5RTVDNTRBMkFEQzk5NkMyODBGQTUzODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM/2njXL7aKp7rQdQSAF7CXhRr RD2AJzcPXYxVvsni9yXbq0Obelp0cc2CQXpXZfHHOTXwPb4yOSLPyOBL3bIQ6xAP x+pK1saWgWXWgAxUMfzFMLPYkucisESu8++U0j2cS5Q7Y5AX3W61saYgEQK9o1NB B/qq+n8WZ6fOykQY8pbfWZAkGc8/jUg0c95BocVQ2/zsE1sSpzuKxuPZfzkffHxD RdUVzJ8FqgYp+HwIh/ENqeHST+/50GaaDnILGmaGfPXr6hMnfLbT6fF1lQJjtaWC hB/bfAw8CIqIqZEsctqVl5+FoJtvV5SMAt0gE7YSWSi4paTCyfx78TDpmLM3AgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUCcItpPbwdV+eXFSircmWwoD6U4cwHwYDVR0j BBgwFoAUE93PoSjcFB8Hbre2D0Y1koZInVUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzIvMTNERENGQTEyOERDMTQxRjA3NkVCN0I2MEY0NjM1OTI4NjQ4OUQ1NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzEzRERDRkExMjhEQzE0 MUYwNzZFQjdCNjBGNDYzNTkyODY0ODlENTUuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGVi OC8yLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjEzMTMwMzMzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMjMwMzMzODM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAoQMwDQYJKoZIhvcN AQELBQADggEBADREWE6lAM4jbYVzkbXl8wj6BehqAsC30ipIs/29mcKhCqoQoqig V3Y+URcWPPo5z3PRLA+qReN+GX+7jFz1WVwLisCwagkCafIv8Bh/zjBt3thqZsKg fVVfzdRh7hBtfAU/CuLG8aaIVh0V09yWvuW/mf9XQJgvf/6G1pIJex7uFGU553Nr JNtrrfPMET4OD9TlNA0lH67oVugGbFd7h9vDAoCfhV4yUqarCDZF7dCBoF0TVgpC Fd9yQcsU237ANl6olhB3+zxUvUdSWpS6vrLFHBm8VEHXuB4xexOLg36LVaYhpW4S /v6UvoTd6lDRvtLW2GMDJSY7D5FBcx1iix8= -----END CERTIFICATE-----Generated at Sun Apr 27 23:49:04 2025 by rpki-client