$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa File: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (raw, json) Hash identifier: wtG4iZDQHopnv5FvmJF0lihSOVqR5JmK37bFpW6CqYo= Subject key identifier: 5E:E6:35:88:67:87:AD:99:4A:25:57:B0:38:15:D8:B4:D9:E6:06:A6 Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 2FE8A48F42110FE590C1DB6D9B047BA6C8259328 Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa Signing time: Fri 05 Jun 2026 23:10:32 +0000 ROA not before: Fri 05 Jun 2026 23:05:32 +0000 ROA not after: Fri 04 Jun 2027 23:10:32 +0000 asID: 216107 IP address blocks: 2a05:dfc1:c53::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e8:a4:8f:42:11:0f:e5:90:c1:db:6d:9b:04:7b:a6:c8:25:93:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Jun 5 23:05:32 2026 GMT Not After : Jun 4 23:10:32 2027 GMT Subject: CN=5EE635886787AD994A2557B03815D8B4D9E606A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e7:3b:20:db:61:70:af:fb:ad:7e:3d:8e:c5: 06:44:73:86:c4:07:9f:fd:6c:fa:9b:5a:7e:d9:63: b9:89:e6:ee:4c:22:b3:0a:1a:1c:8e:98:32:e0:f9: f7:44:35:2c:71:b6:8a:a4:c6:3e:f5:d0:3a:f3:c3: 3b:f5:71:cd:a0:91:47:0c:0c:39:55:f8:04:0c:7f: 2a:a1:f2:2d:e6:96:b7:2a:c1:e0:59:ee:89:53:50: 40:e2:d7:ea:51:35:40:b0:e2:50:0f:ab:4d:c7:e0: 55:95:00:0f:1b:7a:c0:60:07:9a:ca:93:82:be:b5: c4:45:ef:07:54:0f:bf:dd:4e:e2:81:46:9c:bd:40: f3:2b:84:4a:ca:91:18:4c:50:fd:85:e2:9d:e1:7c: b2:96:20:af:a0:22:4f:85:59:dd:1f:63:76:7f:17: a1:bc:6c:46:de:16:c7:7d:2c:55:a2:d6:4a:16:50: 85:c3:0e:fb:fd:f9:d5:74:3b:a0:eb:72:62:b8:8f: 0d:60:6d:e9:17:3b:fe:a7:86:6f:9f:d1:b3:79:55: 50:d5:ed:91:2a:44:14:f5:84:aa:ba:d5:b7:cb:91: cd:2b:1e:7f:d2:20:ae:92:d0:ce:e9:c6:31:34:b9: 5f:91:db:ec:c1:31:40:b1:21:fa:2a:f5:17:19:19: f5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E6:35:88:67:87:AD:99:4A:25:57:B0:38:15:D8:B4:D9:E6:06:A6 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c53::/48 Signature Algorithm: sha256WithRSAEncryption 0a:71:f6:55:6f:b7:a4:b7:57:a9:fd:78:ad:8d:6a:d8:d7:15: 12:6c:9b:03:77:2e:fc:ba:f5:fa:79:87:4b:42:aa:7c:8f:2e: a5:87:14:b5:93:ad:7e:cd:c4:64:1d:67:d2:b4:a4:d1:3c:31: fc:63:37:92:7a:54:9e:e2:a6:f5:e2:c4:29:78:0b:1d:a4:a6: ad:0f:53:19:ec:90:7c:fd:be:d6:e5:20:13:c5:eb:c6:24:f7: 10:d0:03:79:b7:2d:40:76:b1:f3:3a:58:00:12:f9:5a:bd:f8: 14:57:f4:eb:b5:2a:87:54:34:e9:e7:d2:31:4a:c0:d8:07:a0: 04:15:c4:ec:8f:12:d4:53:ee:0a:a9:42:ca:44:5c:ae:4e:01: e2:b6:1c:7d:a9:4c:99:5b:0b:08:8f:1e:f3:d5:9d:59:08:2a: 0f:8c:f5:f6:d2:d6:83:21:eb:ac:6a:d4:5b:e1:64:a9:98:a9: 80:e7:21:06:08:b2:28:49:86:6d:f3:e5:38:9b:6a:1d:6d:96: e8:7e:fe:78:17:fe:fe:e4:0e:7e:74:c3:bd:7b:7c:6b:68:20: 33:0f:64:3a:9c:30:71:e8:c9:3d:91:02:28:46:43:13:cd:fa: a1:ad:c1:22:b0:b4:31:d8:bb:4b:e2:11:dd:1b:0c:82:53:f1: e4:1f:af:c0 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUL+ikj0IRD+WQwdttmwR7psglkygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNjA2MDUyMzA1MzJaFw0yNzA2MDQyMzEwMzJaMDMxMTAvBgNV BAMTKDVFRTYzNTg4Njc4N0FEOTk0QTI1NTdCMDM4MTVEOEI0RDlFNjA2QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd5zsg22Fwr/utfj2OxQZEc4bE B5/9bPqbWn7ZY7mJ5u5MIrMKGhyOmDLg+fdENSxxtoqkxj710Drzwzv1cc2gkUcM DDlV+AQMfyqh8i3mlrcqweBZ7olTUEDi1+pRNUCw4lAPq03H4FWVAA8besBgB5rK k4K+tcRF7wdUD7/dTuKBRpy9QPMrhErKkRhMUP2F4p3hfLKWIK+gIk+FWd0fY3Z/ F6G8bEbeFsd9LFWi1koWUIXDDvv9+dV0O6DrcmK4jw1gbekXO/6nhm+f0bN5VVDV 7ZEqRBT1hKq61bfLkc0rHn/SIK6S0M7pxjE0uV+R2+zBMUCxIfoq9RcZGfWbAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUXuY1iGeHrZlKJVewOBXYtNnmBqYwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzI4Y2Q2MjI0LWEzYjAtNDY4ZS1hYTM3LTgyY2E2YTNlOTI0 My8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhNjMzNTMzM2EzYTJmMzQzODJkMzQzODIw M2QzZTIwMzIzMTM2MzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwQxTMA0GCSqGSIb3DQEB CwUAA4IBAQAKcfZVb7ekt1ep/XitjWrY1xUSbJsDdy78uvX6eYdLQqp8jy6lhxS1 k61+zcRkHWfStKTRPDH8YzeSelSe4qb14sQpeAsdpKatD1MZ7JB8/b7W5SATxevG JPcQ0AN5ty1AdrHzOlgAEvlavfgUV/TrtSqHVDTp59IxSsDYB6AEFcTsjxLUU+4K qULKRFyuTgHithx9qUyZWwsIjx7z1Z1ZCCoPjPX20taDIeusatRb4WSpmKmA5yEG CLIoSYZt8+U4m2odbZbofv54F/7+5A5+dMO9e3xraCAzD2Q6nDBx6Mk9kQIoRkMT zfqhrcEisLQx2LtL4hHdGwyCU/HkH6/A -----END CERTIFICATE-----Generated at Sat Jun 13 23:37:33 2026 by rpki-client