$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: fHW/lCvDc1XAsZ9E1Y/HvwEyGix+WPtzaT4hDtTQpHM= Subject key identifier: F6:33:94:BD:69:79:20:60:D5:05:4D:A8:82:23:F1:43:F7:82:39:85 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 6DEECB768814BAC20A02F3A8AEC5CC3B67882376 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa Signing time: Fri 04 Jul 2025 19:52:53 +0000 ROA not before: Fri 04 Jul 2025 19:47:53 +0000 ROA not after: Fri 03 Jul 2026 19:52:53 +0000 asID: 58339 IP address blocks: 2a05:dfc1:5f25::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ee:cb:76:88:14:ba:c2:0a:02:f3:a8:ae:c5:cc:3b:67:88:23:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Jul 4 19:47:53 2025 GMT Not After : Jul 3 19:52:53 2026 GMT Subject: CN=F63394BD69792060D5054DA88223F143F7823985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:07:ee:bf:19:c4:81:4c:1b:9d:d0:5d:b3: 3d:98:81:af:a4:4f:5e:19:58:c3:a4:b5:b6:ca:27: bc:9c:3e:ba:f1:1c:62:f3:84:be:5c:6e:36:a3:84: 0c:ab:a0:bc:2d:fa:f1:6a:ee:9c:b8:b4:84:5d:3c: 25:83:5b:e0:9d:78:b1:55:f0:8f:45:ef:d3:f2:95: 2b:de:24:79:49:eb:ed:26:9d:10:ea:2e:47:f3:70: 13:cf:c3:cd:2e:ca:1e:ce:09:c9:82:a6:cb:4c:2b: b7:46:c6:39:38:27:c7:ae:ca:68:31:3a:29:7e:6d: 75:19:32:12:16:f3:33:ed:46:e6:82:94:e3:e7:c5: 40:33:03:fb:f1:63:06:25:f7:a3:91:96:e0:9a:13: 9f:70:44:a3:92:24:38:7d:e3:0a:ee:1c:fd:c1:db: bf:af:29:41:e4:11:e8:be:9d:06:1a:e4:a4:ce:6d: 27:cb:7f:87:e9:1f:60:ee:47:58:01:55:58:2a:b8: cc:be:e6:78:b9:35:6a:d0:3e:9f:e4:b7:ed:52:01: 3d:96:a4:40:03:f5:ef:b0:2d:29:6e:1d:de:43:28: 0c:5f:4b:0a:79:42:6c:56:55:b5:38:05:2c:68:79: 45:cc:e5:53:1d:26:a5:0b:46:30:de:ed:68:2e:0e: 9b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:33:94:BD:69:79:20:60:D5:05:4D:A8:82:23:F1:43:F7:82:39:85 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f25::/48 Signature Algorithm: sha256WithRSAEncryption 77:e8:1b:40:3c:4d:24:8e:35:09:38:e4:3e:14:ee:a2:69:b5: 9c:5c:0d:94:9b:68:ab:f4:e5:0f:cb:e8:49:4c:3d:f1:a0:8a: e0:b0:e0:00:3c:7a:11:86:19:80:14:0b:94:e4:5d:d2:9f:14: 17:91:3a:36:22:56:b9:d8:82:0c:98:62:71:0b:52:6f:c9:9e: 13:f5:c3:b9:b5:7f:d1:e0:bd:9b:78:a1:0c:e1:1f:84:72:cf: 9e:1e:1f:81:d8:1c:e0:0f:1a:50:4b:6e:2b:1f:1a:4f:6f:7a: 51:d7:e7:1e:fb:ed:e5:ba:50:26:95:60:b5:58:af:31:6a:91: 7c:1c:63:ca:a3:a7:03:35:19:99:e7:37:bd:0e:40:fc:40:02: 4e:06:ef:aa:a5:c3:89:de:ad:a8:1f:c7:4b:a1:cb:95:9f:50: 4e:6a:2a:d7:de:0c:4d:33:8b:f9:f1:d7:32:f3:78:bb:af:22: 2c:36:04:73:e8:b5:08:18:d7:63:20:ec:28:f0:d2:6a:88:8b: 9b:4c:b7:cf:05:5b:dd:1b:a6:06:24:df:09:c1:b4:ff:16:c5: 0e:c1:32:08:aa:38:e3:a4:65:86:06:1d:d6:3d:c7:7d:ae:8c: ff:11:29:15:f9:32:de:27:94:fc:93:db:f7:66:1c:a5:36:b9: 53:ca:22:8f -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUbe7LdogUusIKAvOorsXMO2eII3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNTA3MDQxOTQ3NTNaFw0yNjA3MDMxOTUyNTNaMDMxMTAvBgNV BAMTKEY2MzM5NEJENjk3OTIwNjBENTA1NERBODgyMjNGMTQzRjc4MjM5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cgfuvxnEgUwbndBdsz2Yga+k T14ZWMOktbbKJ7ycPrrxHGLzhL5cbjajhAyroLwt+vFq7py4tIRdPCWDW+CdeLFV 8I9F79PylSveJHlJ6+0mnRDqLkfzcBPPw80uyh7OCcmCpstMK7dGxjk4J8euymgx Oil+bXUZMhIW8zPtRuaClOPnxUAzA/vxYwYl96ORluCaE59wRKOSJDh94wruHP3B 27+vKUHkEei+nQYa5KTObSfLf4fpH2DuR1gBVVgquMy+5ni5NWrQPp/kt+1SAT2W pEAD9e+wLSluHd5DKAxfSwp5QmxWVbU4BSxoeUXM5VMdJqULRjDe7WguDpu1AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU9jOUvWl5IGDVBU2ogiPxQ/eCOYUwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMyMzUzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwV8lMA0GCSqGSIb3DQEB CwUAA4IBAQB36BtAPE0kjjUJOOQ+FO6iabWcXA2Um2ir9OUPy+hJTD3xoIrgsOAA PHoRhhmAFAuU5F3SnxQXkTo2Ila52IIMmGJxC1JvyZ4T9cO5tX/R4L2beKEM4R+E cs+eHh+B2BzgDxpQS24rHxpPb3pR1+ce++3lulAmlWC1WK8xapF8HGPKo6cDNRmZ 5ze9DkD8QAJOBu+qpcOJ3q2oH8dLocuVn1BOairX3gxNM4v58dcy83i7ryIsNgRz 6LUIGNdjIOwo8NJqiIubTLfPBVvdG6YGJN8JwbT/FsUOwTIIqjjjpGWGBh3WPcd9 roz/ESkV+TLeJ5T8k9v3ZhylNrlTyiKP -----END CERTIFICATE-----Generated at Wed Nov 5 20:46:29 2025 by rpki-client