$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa File: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (raw, json) Hash identifier: cCn4W1XDOWzwRiR+DkG6emZrNY/m0Yv0o0eCk/PWV3c= Subject key identifier: AD:33:FA:F0:AF:E9:C6:A8:8B:5E:20:A9:ED:FC:89:18:C2:01:44:7A Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Certificate serial: 094BDDA139EDA6E4DADD8A58E02206E80DAEE8FA Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa Signing time: Fri 05 Jun 2026 20:46:15 +0000 ROA not before: Fri 05 Jun 2026 20:41:15 +0000 ROA not after: Fri 04 Jun 2027 20:46:15 +0000 asID: 151349 IP address blocks: 2a06:9f81:3030::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 15:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:4b:dd:a1:39:ed:a6:e4:da:dd:8a:58:e0:22:06:e8:0d:ae:e8:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Validity Not Before: Jun 5 20:41:15 2026 GMT Not After : Jun 4 20:46:15 2027 GMT Subject: CN=AD33FAF0AFE9C6A88B5E20A9EDFC8918C201447A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6b:2a:94:33:21:ff:1b:1d:c9:3b:9b:15:70: 6a:8b:9e:4b:c6:79:6e:a6:22:83:e8:d3:54:1f:6e: c4:a4:05:f8:4a:95:6e:5a:13:17:7d:51:df:74:9b: e6:f8:e9:ef:a0:f5:00:5f:3a:b3:ea:b0:da:3e:ab: b6:ca:48:3f:57:16:9e:7a:7f:68:6c:43:bd:da:e7: 91:37:06:f3:f9:58:cc:eb:f1:9b:d2:e4:49:7f:23: 78:43:bb:7f:cb:6a:87:fe:f1:94:9a:7a:33:e4:2f: be:24:f6:36:3c:83:1e:0a:ee:88:22:c4:8d:8a:1b: f6:97:db:14:c8:03:85:c2:97:41:8f:98:1b:0c:64: 96:a6:49:14:c5:6a:10:76:c7:05:ae:76:3f:3d:d3: 08:4d:9a:6e:ca:8a:40:bc:bd:79:17:06:b9:e7:f2: 24:52:ed:d1:f0:11:62:c6:72:b8:d9:60:95:eb:01: 0c:3a:13:7a:0d:17:a5:aa:89:47:6b:65:95:a0:77: dc:ef:16:0a:e8:2d:4b:39:b8:67:56:6f:79:72:a6: 7e:e4:ee:89:20:b0:5b:bd:a2:9a:f3:92:22:1b:5c: c4:7a:d6:8b:05:99:8b:e2:4a:fa:c4:62:88:75:b5: 09:44:88:24:62:b0:11:0d:ff:e7:5a:4a:98:4b:c6: 5d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:33:FA:F0:AF:E9:C6:A8:8B:5E:20:A9:ED:FC:89:18:C2:01:44:7A X509v3 Authority Key Identifier: keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3030::/48 Signature Algorithm: sha256WithRSAEncryption 3f:fa:58:b2:10:02:42:c4:94:68:ff:91:b0:97:6d:ba:ce:dd: dc:c4:cc:f1:c2:59:e4:b1:ef:be:2d:c2:30:e5:5c:41:f9:98: 96:d7:21:4d:06:c8:84:c3:a2:4f:69:fd:ba:ae:f0:01:48:ca: 9e:69:17:a5:0b:8c:66:a6:5e:a7:03:a8:96:2f:69:30:66:47: 9d:4b:1b:24:1b:0c:54:73:6d:32:95:0e:53:8f:f1:a4:19:ee: 59:36:17:4e:aa:a0:cf:d5:91:83:95:59:92:f3:5d:a7:30:74: 24:b8:fb:7a:aa:d1:ee:d8:c7:20:e4:35:75:b4:b7:66:a0:50: 9b:a9:b7:04:b3:15:3a:4a:3c:4e:0e:30:78:17:eb:40:ec:88: 9e:23:a5:aa:6f:e5:0c:74:90:38:d4:7a:5a:f1:4d:60:90:eb: b2:c3:3d:c6:77:9d:81:d2:c8:41:fd:d5:0b:4e:13:9d:69:aa: 0c:05:ac:ee:8d:ec:d1:15:84:b6:c1:d6:d8:fe:7a:43:4a:af: 29:28:cd:4f:53:4a:b6:fa:74:ad:86:08:b7:61:6a:e5:d2:54: f1:82:df:da:2a:81:2e:a0:4d:41:94:a6:c1:77:9a:2f:ee:6a: 80:92:07:2b:ff:ee:c8:9b:63:13:fd:50:50:1c:51:0a:8f:9b: ca:60:c9:ea -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUCUvdoTntpuTa3YpY4CIG6A2u6PowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3 MTdDOTNDQzAeFw0yNjA2MDUyMDQxMTVaFw0yNzA2MDQyMDQ2MTVaMDMxMTAvBgNV BAMTKEFEMzNGQUYwQUZFOUM2QTg4QjVFMjBBOUVERkM4OTE4QzIwMTQ0N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUayqUMyH/Gx3JO5sVcGqLnkvG eW6mIoPo01QfbsSkBfhKlW5aExd9Ud90m+b46e+g9QBfOrPqsNo+q7bKSD9XFp56 f2hsQ73a55E3BvP5WMzr8ZvS5El/I3hDu3/Laof+8ZSaejPkL74k9jY8gx4K7ogi xI2KG/aX2xTIA4XCl0GPmBsMZJamSRTFahB2xwWudj890whNmm7KikC8vXkXBrnn 8iRS7dHwEWLGcrjZYJXrAQw6E3oNF6WqiUdrZZWgd9zvFgroLUs5uGdWb3lypn7k 7okgsFu9oprzkiIbXMR61osFmYviSvrEYoh1tQlEiCRisBEN/+daSphLxl0ZAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUrTP68K/pxqiLXiCp7fyJGMIBRHowHwYDVR0j BBgwFoAUctHd4bGwRdi+Q53dEBSG5nF8k8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4 N2YyLzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzcyRDFEREUxQjFCMDQ1 RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2Q2NGFjOTQxLTVhN2MtNDJjZi1iNjRiLTBiMjg4ZjE4ODdm Mi8xLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDMzMzAzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMTM1MzEzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBp+BMDAwDQYJKoZIhvcN AQELBQADggEBAD/6WLIQAkLElGj/kbCXbbrO3dzEzPHCWeSx774twjDlXEH5mJbX IU0GyITDok9p/bqu8AFIyp5pF6ULjGamXqcDqJYvaTBmR51LGyQbDFRzbTKVDlOP 8aQZ7lk2F06qoM/VkYOVWZLzXacwdCS4+3qq0e7YxyDkNXW0t2agUJuptwSzFTpK PE4OMHgX60DsiJ4jpapv5Qx0kDjUelrxTWCQ67LDPcZ3nYHSyEH91QtOE51pqgwF rO6N7NEVhLbB1tj+ekNKrykozU9TSrb6dK2GCLdhauXSVPGC39oqgS6gTUGUpsF3 mi/uaoCSByv/7sibYxP9UFAcUQqPm8pgyeo= -----END CERTIFICATE-----Generated at Sat Jun 13 21:46:26 2026 by rpki-client