$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa File: 326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (raw, json) Hash identifier: ThRAOJbjHQmA9JxK13qULk+qo7BnGKM2UqWFr1YC6nk= Subject key identifier: D4:6E:5F:DF:0E:7B:11:D1:0B:94:C6:A5:8D:8F:5E:50:FE:C0:2A:23 Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Certificate serial: 2A2B99424F1D2EAD382A91FB63114277C7D8F227 Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa Signing time: Fri 05 Jun 2026 20:46:10 +0000 ROA not before: Fri 05 Jun 2026 20:41:10 +0000 ROA not after: Fri 04 Jun 2027 20:46:10 +0000 asID: 215087 IP address blocks: 2a06:9f81:30fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 04:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:2b:99:42:4f:1d:2e:ad:38:2a:91:fb:63:11:42:77:c7:d8:f2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Validity Not Before: Jun 5 20:41:10 2026 GMT Not After : Jun 4 20:46:10 2027 GMT Subject: CN=D46E5FDF0E7B11D10B94C6A58D8F5E50FEC02A23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:12:f8:4f:07:e2:bf:b6:a2:d7:2c:66:df:a6: 5f:15:59:52:45:da:42:47:16:a7:99:7c:39:91:7e: 10:2b:7e:b0:c9:6c:0e:43:6f:0d:fb:d4:1f:13:64: b1:7f:38:04:4b:6c:ab:14:89:f2:23:09:20:80:cd: a3:d8:e2:ea:e3:24:82:be:73:37:2e:2b:e6:41:89: 5b:33:fe:0f:60:7e:c0:6d:bc:0d:43:a5:e4:fa:51: 11:4d:08:00:80:9d:dd:8e:06:9f:65:1c:a6:24:78: 86:a0:ff:97:1f:0a:48:9b:19:d0:3b:22:2a:b1:e2: 27:93:0a:9d:aa:b6:e5:7a:85:58:8d:3c:30:fe:b7: a5:a2:79:52:b2:9e:7e:eb:8d:6e:ee:86:57:5b:1b: 71:35:d7:76:6d:48:12:14:22:77:8a:9a:c7:81:9c: f6:f3:73:07:e4:bb:1b:a1:fa:27:08:71:52:34:fb: f8:3f:81:5d:98:e4:56:fd:30:1e:e3:37:ef:87:4c: 7d:4c:b2:fe:6f:41:08:96:7b:d6:2f:f8:0d:a5:b8: d0:42:2c:08:67:9c:5a:73:ed:5a:bf:b2:fc:12:06: f2:36:79:24:83:18:af:d2:9a:25:60:aa:1e:01:ef: d5:5a:d3:04:23:a7:12:a0:59:74:85:23:f0:03:b6: db:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6E:5F:DF:0E:7B:11:D1:0B:94:C6:A5:8D:8F:5E:50:FE:C0:2A:23 X509v3 Authority Key Identifier: keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:30fb::/48 Signature Algorithm: sha256WithRSAEncryption 91:7c:fd:f3:a1:6c:0d:7f:2b:17:e9:12:89:22:21:75:5d:6f: ab:f4:19:15:55:f7:43:82:94:b6:76:09:24:46:5f:6c:e4:de: f0:44:7d:6d:66:92:be:0a:14:a7:63:9f:22:4b:4c:08:e6:da: 39:a4:91:6b:25:9a:7c:b3:44:57:08:05:b9:21:6b:dd:06:48: 89:b1:30:7e:e3:52:05:af:77:f7:62:4e:db:05:5a:9e:fd:ea: a3:d8:1a:f6:40:12:21:ca:98:bd:dc:e6:f5:76:51:96:d4:7f: ce:46:67:4e:21:ae:26:82:03:e2:a6:33:71:c2:8d:82:62:7d: ba:e8:77:9d:30:f2:1d:7f:83:d7:c3:b0:bb:83:9b:1b:5e:52: c5:c9:4e:f0:f2:64:94:96:e5:25:4a:b0:15:a7:55:c8:a4:74: df:3d:6e:42:7c:1f:71:d6:6b:64:be:7e:28:31:f1:b8:e4:e0: be:1c:90:02:a8:f9:fb:90:f2:ba:1a:5d:5e:5f:ec:a0:36:35: 58:87:70:34:c8:4e:fb:0b:01:2b:8f:d3:ae:33:bc:93:cf:b4: 83:e8:67:bc:db:38:b9:89:da:bb:7d:8c:3c:53:8a:ba:fd:be: 56:f2:cf:3d:b3:2e:30:42:e7:48:3c:44:34:20:0b:cb:99:b6: a1:19:7d:d9 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUKiuZQk8dLq04KpH7YxFCd8fY8icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3 MTdDOTNDQzAeFw0yNjA2MDUyMDQxMTBaFw0yNzA2MDQyMDQ2MTBaMDMxMTAvBgNV BAMTKEQ0NkU1RkRGMEU3QjExRDEwQjk0QzZBNThEOEY1RTUwRkVDMDJBMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMEvhPB+K/tqLXLGbfpl8VWVJF 2kJHFqeZfDmRfhArfrDJbA5Dbw371B8TZLF/OARLbKsUifIjCSCAzaPY4urjJIK+ czcuK+ZBiVsz/g9gfsBtvA1DpeT6URFNCACAnd2OBp9lHKYkeIag/5cfCkibGdA7 Iiqx4ieTCp2qtuV6hViNPDD+t6WieVKynn7rjW7uhldbG3E113ZtSBIUIneKmseB nPbzcwfkuxuh+icIcVI0+/g/gV2Y5Fb9MB7jN++HTH1Msv5vQQiWe9Yv+A2luNBC LAhnnFpz7Vq/svwSBvI2eSSDGK/SmiVgqh4B79Va0wQjpxKgWXSFI/ADtts7AgMB AAGjggJgMIICXDAdBgNVHQ4EFgQU1G5f3w57EdELlMaljY9eUP7AKiMwHwYDVR0j BBgwFoAUctHd4bGwRdi+Q53dEBSG5nF8k8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4 N2YyLzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzcyRDFEREUxQjFCMDQ1 RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2Q2NGFjOTQxLTVhN2MtNDJjZi1iNjRiLTBiMjg4ZjE4ODdm Mi8xLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDY2NjIzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMjMxMzUzMDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBp+BMPswDQYJKoZIhvcN AQELBQADggEBAJF8/fOhbA1/KxfpEokiIXVdb6v0GRVV90OClLZ2CSRGX2zk3vBE fW1mkr4KFKdjnyJLTAjm2jmkkWslmnyzRFcIBbkha90GSImxMH7jUgWvd/diTtsF Wp796qPYGvZAEiHKmL3c5vV2UZbUf85GZ04hriaCA+KmM3HCjYJifbrod50w8h1/ g9fDsLuDmxteUsXJTvDyZJSW5SVKsBWnVcikdN89bkJ8H3HWa2S+figx8bjk4L4c kAKo+fuQ8roaXV5f7KA2NViHcDTITvsLASuP064zvJPPtIPoZ7zbOLmJ2rt9jDxT irr9vlbyzz2zLjBC50g8RDQgC8uZtqEZfdk= -----END CERTIFICATE-----Generated at Sat Jun 13 15:37:38 2026 by rpki-client