$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa File: 326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa (raw, json) Hash identifier: MGdlk5+TUnj5C79rnEEKnIx6cWVkK1Xd9nVtCZSrExA= Subject key identifier: 99:26:CC:82:68:2C:61:4F:FF:A5:47:D2:FD:A9:4C:9F:AA:AC:BD:92 Certificate issuer: /CN=756560C5B960222CE81AF47A8B758E1741461E7F Certificate serial: 1169E64E250026B23EA730174B876908ED76DA49 Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa Signing time: Fri 21 Mar 2025 00:10:08 +0000 ROA not before: Fri 21 Mar 2025 00:05:08 +0000 ROA not after: Fri 20 Mar 2026 00:10:08 +0000 asID: 199518 IP address blocks: 2a0a:6040:ba55::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 19:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:69:e6:4e:25:00:26:b2:3e:a7:30:17:4b:87:69:08:ed:76:da:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F Validity Not Before: Mar 21 00:05:08 2025 GMT Not After : Mar 20 00:10:08 2026 GMT Subject: CN=9926CC82682C614FFFA547D2FDA94C9FAAACBD92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:9b:9b:67:90:39:88:56:09:c7:7a:5c:a1: 9a:72:d0:75:ad:ac:3a:a2:8e:7b:5d:1a:85:90:4f: e1:e6:f4:de:d6:3c:79:1e:48:51:9d:01:ab:5a:c6: c0:82:9c:6e:48:92:d0:7d:a3:04:38:63:61:11:ab: 61:db:de:f0:d6:45:b9:14:22:05:ac:ca:6f:a6:81: 7c:e1:99:63:53:94:f5:33:1f:f2:db:6f:ac:60:65: 76:87:64:c7:44:16:44:d7:3d:ea:ef:62:56:58:25: 54:77:9a:44:d4:43:8c:d3:4a:6b:e5:5c:e1:b3:5b: d2:5c:a9:ed:6f:0f:14:bd:98:3f:80:c0:c4:f5:bf: 15:00:83:b9:68:9e:28:e7:49:7a:70:7e:d8:2a:e5: 6a:4a:10:a6:f6:28:55:d1:23:6d:77:ef:d5:6b:e0: fa:0a:75:26:e5:22:b6:15:53:97:f9:28:a0:b5:26: da:ee:14:fd:ad:84:3a:b4:cc:8e:ff:95:87:ce:4a: 8c:24:e4:54:43:1f:6a:de:c8:46:c4:8b:0a:7d:75: d1:e6:24:b1:14:73:bc:b6:fa:1e:58:73:44:b5:8a: af:ec:db:49:80:2b:e7:d7:15:19:f6:a2:92:09:19: 4e:aa:8d:a5:c7:1c:78:c4:08:10:94:f7:35:b0:35: 68:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:26:CC:82:68:2C:61:4F:FF:A5:47:D2:FD:A9:4C:9F:AA:AC:BD:92 X509v3 Authority Key Identifier: keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ba55::/48 Signature Algorithm: sha256WithRSAEncryption 94:45:55:0f:95:25:1a:a8:41:50:05:92:18:e2:20:48:d4:b3: a2:f4:ad:23:f0:50:3d:07:0d:c8:37:c5:b8:e2:19:df:19:09: df:3b:1e:49:a7:e0:85:39:b4:ae:cb:75:ad:4c:f7:ea:e6:80: 58:86:40:c3:86:da:cd:5b:98:ed:97:0a:92:1c:cf:e7:e5:65: 2a:0b:30:18:d3:ba:10:37:cb:a1:33:39:54:ee:57:05:0f:0d: c5:6f:72:ad:90:cb:23:9f:52:e8:41:f1:87:82:4b:73:d0:e3: bf:b4:7d:19:ac:02:6d:64:01:db:28:7d:26:99:29:cc:fa:1f: 00:d8:b6:bc:db:f5:37:37:48:ed:7f:48:bc:c7:b1:4e:88:af: eb:05:92:71:ac:c1:26:8d:a4:4c:1e:5a:cc:a6:85:93:2a:25: 15:17:8d:f7:a3:13:41:27:a1:a3:60:a2:dd:e8:58:3c:dc:15: 05:81:d8:18:86:8c:34:10:b3:41:47:18:47:70:ba:90:fb:be: 0a:af:24:3a:94:4a:9d:c2:07:0b:80:b6:a3:e3:de:96:ef:db: 69:07:11:68:e7:22:d3:40:9e:ee:22:77:15:65:a5:a6:80:e0: c6:54:9d:b2:ba:2c:e9:4e:f0:36:bc:02:78:89:fa:a6:8f:d9: b9:95:b8:1c -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUEWnmTiUAJrI+pzAXS4dpCO122kkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU2NTYwQzVCOTYwMjIyQ0U4MUFGNDdBOEI3NThFMTc0 MTQ2MUU3RjAeFw0yNTAzMjEwMDA1MDhaFw0yNjAzMjAwMDEwMDhaMDMxMTAvBgNV BAMTKDk5MjZDQzgyNjgyQzYxNEZGRkE1NDdEMkZEQTk0QzlGQUFBQ0JEOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC81ZubZ5A5iFYJx3pcoZpy0HWt rDqijntdGoWQT+Hm9N7WPHkeSFGdAataxsCCnG5IktB9owQ4Y2ERq2Hb3vDWRbkU IgWsym+mgXzhmWNTlPUzH/Lbb6xgZXaHZMdEFkTXPervYlZYJVR3mkTUQ4zTSmvl XOGzW9Jcqe1vDxS9mD+AwMT1vxUAg7lonijnSXpwftgq5WpKEKb2KFXRI21379Vr 4PoKdSblIrYVU5f5KKC1JtruFP2thDq0zI7/lYfOSowk5FRDH2reyEbEiwp9ddHm JLEUc7y2+h5Yc0S1iq/s20mAK+fXFRn2opIJGU6qjaXHHHjECBCU9zWwNWhfAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUmSbMgmgsYU//pUfS/alMn6qsvZIwHwYDVR0j BBgwFoAUdWVgxblgIizoGvR6i3WOF0FGHn8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzEvNzU2NTYwQzVCOTYwMjIyQ0U4MUFGNDdBOEI3NThFMTc0MTQ2MUU3Ri5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzc1NjU2MEM1Qjk2MDIy MkNFODFBRjQ3QThCNzU4RTE3NDE0NjFFN0YuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBl OC8xLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjI2MTM1MzUzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMTM5MzkzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAulUwDQYJKoZIhvcN AQELBQADggEBAJRFVQ+VJRqoQVAFkhjiIEjUs6L0rSPwUD0HDcg3xbjiGd8ZCd87 Hkmn4IU5tK7Lda1M9+rmgFiGQMOG2s1bmO2XCpIcz+flZSoLMBjTuhA3y6EzOVTu VwUPDcVvcq2QyyOfUuhB8YeCS3PQ47+0fRmsAm1kAdsofSaZKcz6HwDYtrzb9Tc3 SO1/SLzHsU6Ir+sFknGswSaNpEweWsymhZMqJRUXjfejE0EnoaNgot3oWDzcFQWB 2BiGjDQQs0FHGEdwupD7vgqvJDqUSp3CBwuAtqPj3pbv22kHEWjnItNAnu4idxVl paaA4MZUnbK6LOlO8Da8AniJ+qaP2bmVuBw= -----END CERTIFICATE-----Generated at Mon Apr 28 08:37:47 2025 by rpki-client