$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa File: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (raw, json) Hash identifier: x8ZSb+1ldH2+HWHNp1OnRRlj5YRqpU3YQDg+aJ7m/zM= Subject key identifier: 81:52:27:7B:73:C4:CD:18:1F:6A:05:87:B3:63:06:F2:A2:39:36:17 Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 3579D993F877B3C5E9C854EF3FB9E65C46974E0D Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa Signing time: Fri 05 Jun 2026 23:10:30 +0000 ROA not before: Fri 05 Jun 2026 23:05:30 +0000 ROA not after: Fri 04 Jun 2027 23:10:30 +0000 asID: 216107 IP address blocks: 2a05:dfc1:cb0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:79:d9:93:f8:77:b3:c5:e9:c8:54:ef:3f:b9:e6:5c:46:97:4e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Jun 5 23:05:30 2026 GMT Not After : Jun 4 23:10:30 2027 GMT Subject: CN=8152277B73C4CD181F6A0587B36306F2A2393617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:96:59:1b:5f:18:5b:8b:9a:21:f3:d6:9b:45: 82:d4:1a:3a:1f:84:8f:12:07:4d:5c:37:8c:ae:21: f9:51:47:b7:fe:a7:0e:95:6e:cb:8e:74:da:0c:b8: be:0a:a4:3b:28:70:66:f0:c1:b0:e4:5e:b7:90:af: be:07:82:cc:64:7e:af:c5:46:bc:c5:66:23:46:08: a5:a2:0c:f8:b3:b5:0f:26:5b:87:c1:bb:68:3d:c3: fd:96:3a:b1:07:f0:de:3f:9c:d4:14:43:ef:7a:ff: 05:97:a0:92:db:80:a1:da:cc:ed:3f:fd:81:2a:6b: 7e:ed:08:0c:19:53:a5:3c:9a:d2:f9:b3:c9:6c:b4: 6a:f1:e4:ad:ad:5c:fe:ad:d8:e9:fa:7f:e9:35:45: 7b:44:cf:24:3b:93:b4:93:13:80:f6:1e:d3:36:e2: f9:b3:46:31:d7:dd:4c:d8:70:7c:16:64:70:20:a3: 02:2e:fc:53:27:c5:b0:48:d4:ea:98:76:d5:18:5f: 51:cc:63:46:20:77:06:dc:96:86:f7:eb:f6:14:67: 3c:4e:21:97:09:e5:99:2a:a9:11:7e:6f:19:bb:f2: be:9e:05:f9:b7:bf:ad:8a:d3:a2:a9:40:05:c8:34: b3:a8:8b:1c:98:04:46:2e:5b:d9:e2:31:f2:b8:64: d5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:52:27:7B:73:C4:CD:18:1F:6A:05:87:B3:63:06:F2:A2:39:36:17 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:cb0::/48 Signature Algorithm: sha256WithRSAEncryption 22:12:23:85:10:a5:2e:2b:71:01:13:1a:87:5a:91:2c:a2:b4: 8f:98:66:f3:9e:7a:8f:a3:3c:e2:10:c4:22:f6:03:fc:c1:bd: 03:62:46:eb:72:a4:f1:a7:b3:eb:65:ca:80:31:09:2f:dd:a5: 94:77:a4:e7:b8:5c:1f:8a:8c:61:9c:9d:9c:72:44:f2:0c:85: 22:18:37:47:3a:a2:25:0e:59:0f:b5:cc:15:4a:a4:db:d2:f0: 28:e9:0c:77:33:70:4e:47:04:6d:f2:cf:c5:a4:04:00:24:d1: ea:23:4e:67:5d:f9:39:7b:19:1f:e9:ee:8b:d5:1c:34:39:74: da:86:e2:aa:24:24:df:90:c8:c4:d3:f7:54:9b:b1:8f:35:d5: 1b:40:84:e9:60:9c:e6:cd:a1:8a:3c:cc:25:9b:92:cb:f0:5c: af:f3:ca:3c:0e:5e:6b:f3:d5:91:db:15:53:0c:06:18:d3:64: ad:95:24:a3:71:64:69:71:b8:ba:39:4a:1f:cf:9b:84:f8:eb: 41:5d:a0:98:c8:a0:ba:44:b6:13:58:2e:68:8e:33:27:0d:3f: f1:78:b3:5e:c5:8f:db:64:49:4d:ba:96:09:0f:68:a3:6d:47: 88:b8:cc:b2:f8:a3:6c:b7:dc:ee:af:73:75:99:04:e6:47:ed: 91:64:8d:61 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUNXnZk/h3s8XpyFTvP7nmXEaXTg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNjA2MDUyMzA1MzBaFw0yNzA2MDQyMzEwMzBaMDMxMTAvBgNV BAMTKDgxNTIyNzdCNzNDNENEMTgxRjZBMDU4N0IzNjMwNkYyQTIzOTM2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDollkbXxhbi5oh89abRYLUGjof hI8SB01cN4yuIflRR7f+pw6VbsuOdNoMuL4KpDsocGbwwbDkXreQr74Hgsxkfq/F RrzFZiNGCKWiDPiztQ8mW4fBu2g9w/2WOrEH8N4/nNQUQ+96/wWXoJLbgKHazO0/ /YEqa37tCAwZU6U8mtL5s8lstGrx5K2tXP6t2On6f+k1RXtEzyQ7k7STE4D2HtM2 4vmzRjHX3UzYcHwWZHAgowIu/FMnxbBI1OqYdtUYX1HMY0Ygdwbclob36/YUZzxO IZcJ5ZkqqRF+bxm78r6eBfm3v62K06KpQAXINLOoixyYBEYuW9niMfK4ZNXxAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUgVIne3PEzRgfagWHs2MG8qI5NhcwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzI4Y2Q2MjI0LWEzYjAtNDY4ZS1hYTM3LTgyY2E2YTNlOTI0 My8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhNjM2MjMwM2EzYTJmMzQzODJkMzQzODIw M2QzZTIwMzIzMTM2MzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwQywMA0GCSqGSIb3DQEB CwUAA4IBAQAiEiOFEKUuK3EBExqHWpEsorSPmGbznnqPozziEMQi9gP8wb0DYkbr cqTxp7PrZcqAMQkv3aWUd6TnuFwfioxhnJ2cckTyDIUiGDdHOqIlDlkPtcwVSqTb 0vAo6Qx3M3BORwRt8s/FpAQAJNHqI05nXfk5exkf6e6L1Rw0OXTahuKqJCTfkMjE 0/dUm7GPNdUbQITpYJzmzaGKPMwlm5LL8Fyv88o8Dl5r89WR2xVTDAYY02StlSSj cWRpcbi6OUofz5uE+OtBXaCYyKC6RLYTWC5ojjMnDT/xeLNexY/bZElNupYJD2ij bUeIuMyy+KNst9zur3N1mQTmR+2RZI1h -----END CERTIFICATE-----Generated at Sat Jun 13 06:59:06 2026 by rpki-client