$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa File: 326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa (raw, json) Hash identifier: 7HbuxD5mU/INEhxMMm9bzXeRfA4zUrHIZhoMBw5o4bA= Subject key identifier: BE:4E:E8:85:C3:85:76:3D:87:66:72:C9:D5:DB:1E:E0:81:B1:90:9F Certificate issuer: /CN=756560C5B960222CE81AF47A8B758E1741461E7F Certificate serial: 3CFE69A55717A7E0D9AEE43BB2C290706EA92765 Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa Signing time: Fri 21 Mar 2025 00:10:09 +0000 ROA not before: Fri 21 Mar 2025 00:05:09 +0000 ROA not after: Fri 20 Mar 2026 00:10:09 +0000 asID: 199518 IP address blocks: 2a0a:6040:ba1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 04:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:fe:69:a5:57:17:a7:e0:d9:ae:e4:3b:b2:c2:90:70:6e:a9:27:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F Validity Not Before: Mar 21 00:05:09 2025 GMT Not After : Mar 20 00:10:09 2026 GMT Subject: CN=BE4EE885C385763D876672C9D5DB1EE081B1909F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:40:de:fa:22:1e:27:97:a9:f3:17:81:65:ee: b1:60:08:b2:f0:77:fd:17:82:18:f8:54:b3:83:a4: 96:8a:87:43:9a:e0:f4:b6:14:0b:db:9e:f1:58:9a: bc:50:ca:8b:19:2c:25:24:e8:08:12:75:06:53:8f: 98:f4:72:82:12:47:28:d2:36:61:53:c1:c8:77:9f: d5:5e:14:6b:61:b6:0b:24:ea:3e:90:d5:eb:fa:74: a9:b1:7d:dc:2c:37:ec:30:0e:e6:19:52:ef:c2:fc: 2d:ab:f9:ec:25:dc:60:da:6d:f3:b3:93:59:2c:7f: 12:37:da:c6:11:42:b5:21:38:1f:85:23:76:31:38: 63:4c:91:01:bc:ad:0f:8f:a5:84:67:bc:da:dc:8f: 68:f4:e2:5c:34:2e:c6:58:bb:fd:b9:bd:aa:cc:1b: 22:30:9b:db:b9:71:31:ad:7b:2d:66:9a:ea:27:93: d6:c2:80:5f:83:01:b4:62:f0:40:c4:5f:ce:5a:bc: 0a:dc:44:bc:ea:43:47:6f:81:f9:3e:89:87:98:a3: 70:97:99:d2:4d:5f:c7:7a:99:d6:99:97:78:e2:29: 69:23:d1:2d:b5:f5:5c:ce:4e:f0:15:23:48:b0:59: f6:c6:f2:3f:17:ff:3c:13:90:f4:d2:2c:b8:7e:3a: fc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4E:E8:85:C3:85:76:3D:87:66:72:C9:D5:DB:1E:E0:81:B1:90:9F X509v3 Authority Key Identifier: keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ba1e::/48 Signature Algorithm: sha256WithRSAEncryption 9e:3e:b3:ef:d5:b6:50:35:c0:f2:d4:b8:e8:3b:24:dc:19:33: 4d:6e:88:3f:6d:53:ae:d5:b8:c7:b2:56:1f:be:2e:a1:71:14: 27:1f:ae:33:09:33:2f:76:81:54:c3:16:39:8a:6c:80:8e:6d: c4:00:ee:92:34:82:55:01:ac:ff:0a:9f:57:e9:77:3e:6b:9f: bb:2a:54:c4:31:cc:e0:85:02:36:77:93:65:a3:03:84:4c:15: 69:6d:b5:ed:2b:5e:e5:34:5e:dc:27:e4:df:ac:e9:ef:7c:a2: 7a:22:3d:26:ff:df:77:b0:c9:d6:b9:46:78:2a:16:f8:40:e8: df:ba:19:2b:60:4a:41:92:a8:04:af:e5:4d:27:41:82:d7:d5: c1:a6:11:ee:0b:06:7e:2c:50:b8:91:c4:92:33:8f:43:cc:73: 2a:d9:56:67:5d:83:51:6c:0c:2c:a7:61:62:b5:31:6b:5d:ce: a1:48:40:dc:c1:a0:77:b9:5a:61:4a:e5:a4:54:27:be:3c:1a: e9:c6:10:ce:8b:b1:56:57:1b:3d:cc:48:ea:11:7f:ff:bf:74: a4:e8:e5:a6:48:8e:0f:68:77:5a:2b:b8:c6:dc:e7:8b:99:eb: 46:54:2b:ca:54:35:06:66:ee:cb:df:dc:14:fb:45:96:6f:ac: ed:37:85:9c -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUPP5ppVcXp+DZruQ7ssKQcG6pJ2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU2NTYwQzVCOTYwMjIyQ0U4MUFGNDdBOEI3NThFMTc0 MTQ2MUU3RjAeFw0yNTAzMjEwMDA1MDlaFw0yNjAzMjAwMDEwMDlaMDMxMTAvBgNV BAMTKEJFNEVFODg1QzM4NTc2M0Q4NzY2NzJDOUQ1REIxRUUwODFCMTkwOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZQN76Ih4nl6nzF4Fl7rFgCLLw d/0Xghj4VLODpJaKh0Oa4PS2FAvbnvFYmrxQyosZLCUk6AgSdQZTj5j0coISRyjS NmFTwch3n9VeFGthtgsk6j6Q1ev6dKmxfdwsN+wwDuYZUu/C/C2r+ewl3GDabfOz k1ksfxI32sYRQrUhOB+FI3YxOGNMkQG8rQ+PpYRnvNrcj2j04lw0LsZYu/25varM GyIwm9u5cTGtey1mmuonk9bCgF+DAbRi8EDEX85avArcRLzqQ0dvgfk+iYeYo3CX mdJNX8d6mdaZl3jiKWkj0S219VzOTvAVI0iwWfbG8j8X/zwTkPTSLLh+OvxxAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUvk7ohcOFdj2HZnLJ1dse4IGxkJ8wHwYDVR0j BBgwFoAUdWVgxblgIizoGvR6i3WOF0FGHn8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzEvNzU2NTYwQzVCOTYwMjIyQ0U4MUFGNDdBOEI3NThFMTc0MTQ2MUU3Ri5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzc1NjU2MEM1Qjk2MDIy MkNFODFBRjQ3QThCNzU4RTE3NDE0NjFFN0YuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBl OC8xLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjI2MTMxNjUzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMTM5MzkzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAuh4wDQYJKoZIhvcN AQELBQADggEBAJ4+s+/VtlA1wPLUuOg7JNwZM01uiD9tU67VuMeyVh++LqFxFCcf rjMJMy92gVTDFjmKbICObcQA7pI0glUBrP8Kn1fpdz5rn7sqVMQxzOCFAjZ3k2Wj A4RMFWltte0rXuU0Xtwn5N+s6e98onoiPSb/33ewyda5RngqFvhA6N+6GStgSkGS qASv5U0nQYLX1cGmEe4LBn4sULiRxJIzj0PMcyrZVmddg1FsDCynYWK1MWtdzqFI QNzBoHe5WmFK5aRUJ748GunGEM6LsVZXGz3MSOoRf/+/dKTo5aZIjg9od1oruMbc 54uZ60ZUK8pUNQZm7svf3BT7RZZvrO03hZw= -----END CERTIFICATE-----Generated at Mon Apr 28 15:14:58 2025 by rpki-client