$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa File: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (raw, json) Hash identifier: 4JKiECPfyLZYZpNlohD2hYOZCrShpFM8qyjM4PYygzc= Subject key identifier: FC:26:F0:51:3D:24:55:01:41:94:42:E7:F4:84:88:32:8F:84:DA:0B Certificate issuer: /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Certificate serial: 60D425FA9CC7680E942DC958EEA9B97E7CD1FE11 Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa Signing time: Mon 10 Mar 2025 22:37:36 +0000 ROA not before: Mon 10 Mar 2025 22:32:36 +0000 ROA not after: Mon 09 Mar 2026 22:37:36 +0000 asID: 14618 IP address blocks: 2a0a:6040:3f80::/41 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Apr 2025 23:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d4:25:fa:9c:c7:68:0e:94:2d:c9:58:ee:a9:b9:7e:7c:d1:fe:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Validity Not Before: Mar 10 22:32:36 2025 GMT Not After : Mar 9 22:37:36 2026 GMT Subject: CN=FC26F0513D245501419442E7F48488328F84DA0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:40:9e:3f:6c:5c:df:14:56:d9:74:99:83: 5c:49:8d:b4:49:78:fd:1e:6e:00:76:4c:a9:2b:b0: a3:dd:eb:b0:8b:85:f2:5d:8e:33:b3:20:86:98:3a: 3f:09:39:88:bd:d9:7f:03:b8:e0:e6:84:8b:1c:68: 5c:3d:c0:62:eb:e5:de:9a:81:8f:7f:c8:d1:c5:19: ab:f5:ad:bf:07:11:b7:54:3e:8d:4e:57:c7:94:e5: 2b:80:fc:af:8e:2f:ad:12:d8:0d:a3:5d:59:c9:9a: 77:0f:7d:7c:07:3b:fa:96:63:9a:94:00:26:bb:26: ae:9c:48:6b:9d:12:f3:ec:9e:b3:77:0b:9d:03:5a: 4f:c7:8e:fc:42:ae:67:d4:c9:78:aa:54:fc:33:e3: ed:bb:d0:53:3c:c9:c2:35:7e:d4:21:b5:ea:0c:46: a2:cc:9b:3b:fc:01:3a:56:ff:b4:85:99:ed:67:b6: 37:07:a5:8d:bd:04:18:49:08:cf:22:37:2a:d7:72: f0:f1:6b:0d:8c:bb:e2:78:bd:3a:5f:2b:4c:f5:f1: 34:95:eb:95:44:6b:85:fd:58:68:0c:29:4c:e0:ac: bd:b4:3b:38:8b:c3:64:32:10:ce:04:16:e4:ea:ee: 12:77:ab:57:20:8a:ec:fa:73:34:0a:d4:92:8b:3f: 05:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:26:F0:51:3D:24:55:01:41:94:42:E7:F4:84:88:32:8F:84:DA:0B X509v3 Authority Key Identifier: keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:3f80::/41 Signature Algorithm: sha256WithRSAEncryption 1c:b3:8a:35:3b:6c:fb:02:6b:d7:ff:05:84:5e:27:94:37:b7: c9:19:59:5f:9d:75:d8:fd:40:df:0c:dd:6d:70:18:63:10:57: ac:db:cf:7b:8c:99:16:2c:35:cf:a5:71:b1:dc:3a:1b:1d:5d: 30:68:cb:88:52:6b:21:bb:bb:a3:ab:c6:a1:71:bc:fc:dd:fc: a3:1e:9c:fe:46:db:b3:3b:e0:66:74:57:92:50:22:9f:93:ed: d1:d1:90:bd:71:af:68:f0:1a:f7:c6:d8:ca:68:6a:61:77:ab: bc:ea:f7:88:a4:8f:5d:ed:54:26:1d:2b:d1:1a:5d:a7:07:dc: 00:95:a0:4b:a8:e4:70:3c:15:fa:27:31:2c:28:7b:5e:58:9e: 91:95:5c:2d:4b:4a:1f:59:1e:f0:98:03:b9:2b:a0:98:36:bb: 7a:d7:14:ab:6f:b9:fd:89:3f:be:4b:db:2f:75:45:d4:7b:5d: 00:4b:c2:41:88:2e:14:1a:ce:08:83:80:e2:37:d8:23:3a:98: 59:82:c6:c5:38:be:1a:90:c7:17:10:51:7e:5a:74:6c:b4:0b: 83:e6:c1:7f:69:71:4d:06:d0:08:eb:ec:c1:3d:bc:0a:86:53: 59:34:1b:7f:80:fe:df:07:9a:a3:ab:6a:25:8f:93:e4:e0:ca: 2d:26:5f:d0 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUYNQl+pzHaA6ULclY7qm5fnzR/hEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAw MTFBQzEyMjAeFw0yNTAzMTAyMjMyMzZaFw0yNjAzMDkyMjM3MzZaMDMxMTAvBgNV BAMTKEZDMjZGMDUxM0QyNDU1MDE0MTk0NDJFN0Y0ODQ4ODMyOEY4NERBMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+oECeP2xc3xRW2XSZg1xJjbRJ eP0ebgB2TKkrsKPd67CLhfJdjjOzIIaYOj8JOYi92X8DuODmhIscaFw9wGLr5d6a gY9/yNHFGav1rb8HEbdUPo1OV8eU5SuA/K+OL60S2A2jXVnJmncPfXwHO/qWY5qU ACa7Jq6cSGudEvPsnrN3C50DWk/HjvxCrmfUyXiqVPwz4+270FM8ycI1ftQhteoM RqLMmzv8ATpW/7SFme1ntjcHpY29BBhJCM8iNyrXcvDxaw2Mu+J4vTpfK0z18TSV 65VEa4X9WGgMKUzgrL20OziLw2QyEM4EFuTq7hJ3q1cgiuz6czQK1JKLPwWFAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU/CbwUT0kVQFBlELn9ISIMo+E2gswHwYDVR0j BBgwFoAU+QC8ZeK2RuusRypd6hK9sAEawSIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzMvRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAwMTFBQzEyMi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y5MDBCQzY1RTJCNjQ2 RUJBQzQ3MkE1REVBMTJCREIwMDExQUMxMjIuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQyYmU0 ZS8zLzMyNjEzMDYxM2EzNjMwMzQzMDNhMzM2NjM4MzAzYTNhMmYzNDMxMmQzNDM4 MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHKgpgQD+AMA0GCSqGSIb3DQEB CwUAA4IBAQAcs4o1O2z7AmvX/wWEXieUN7fJGVlfnXXY/UDfDN1tcBhjEFes2897 jJkWLDXPpXGx3DobHV0waMuIUmshu7ujq8ahcbz83fyjHpz+RtuzO+BmdFeSUCKf k+3R0ZC9ca9o8Br3xtjKaGphd6u86veIpI9d7VQmHSvRGl2nB9wAlaBLqORwPBX6 JzEsKHteWJ6RlVwtS0ofWR7wmAO5K6CYNrt61xSrb7n9iT++S9svdUXUe10AS8JB iC4UGs4Ig4DiN9gjOphZgsbFOL4akMcXEFF+WnRstAuD5sF/aXFNBtAI6+zBPbwK hlNZNBt/gP7fB5qjq2olj5Pk4MotJl/Q -----END CERTIFICATE-----Generated at Sat Apr 26 13:34:19 2025 by rpki-client