$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626131313a3a2f34382d3438203d3e20313939353138.roa File: 326130613a363034303a626131313a3a2f34382d3438203d3e20313939353138.roa (raw, json) Hash identifier: Iq4eSkM2mD7cqfU/UltgR+hYhlRTOg/EsQBpvTZNrRw= Subject key identifier: 49:D3:0E:0F:F7:3F:A8:38:0D:32:0F:E3:11:79:90:6E:0F:99:1C:92 Certificate issuer: /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8 Certificate serial: 5D2BD7B15738DEE068B84288B19BF9304F10DDCE Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626131313a3a2f34382d3438203d3e20313939353138.roa Signing time: Sat 05 Jul 2025 09:32:30 +0000 ROA not before: Sat 05 Jul 2025 09:27:30 +0000 ROA not after: Sat 04 Jul 2026 09:32:30 +0000 asID: 199518 IP address blocks: 2a0a:6040:ba11::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 13:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:2b:d7:b1:57:38:de:e0:68:b8:42:88:b1:9b:f9:30:4f:10:dd:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8 Validity Not Before: Jul 5 09:27:30 2025 GMT Not After : Jul 4 09:32:30 2026 GMT Subject: CN=49D30E0FF73FA8380D320FE31179906E0F991C92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:1e:61:9c:c3:6a:da:ce:40:83:af:6c:d9: f8:ab:00:4c:44:9f:d0:78:48:2a:8b:19:98:99:69: d6:b9:88:2c:e4:5f:d2:a1:3a:b7:1f:fa:0d:29:bd: 23:d4:54:4a:15:fd:8c:8c:67:64:5a:44:90:85:db: a7:3d:66:94:f1:2b:15:b2:b8:26:45:e3:5c:29:55: 83:94:e6:47:76:37:58:6c:5b:b6:a0:ad:6a:a6:83: b6:cc:ae:07:19:35:d0:87:c5:0c:61:b2:02:ca:e3: 87:53:46:ce:0f:d7:3c:4d:54:e2:75:0f:40:5d:fa: e8:f3:0b:0b:5c:76:3d:fd:cc:45:47:10:3e:61:22: b5:78:1d:a8:fb:54:a5:39:0b:f5:2f:e3:1c:2f:7b: de:71:23:a4:db:5b:2e:32:f5:99:31:12:d2:02:af: 14:7f:9e:0c:c2:41:2a:fe:16:28:8c:7f:4b:c9:8a: b4:9b:ab:cd:b8:a0:1d:7f:52:d9:75:e9:14:74:3e: b8:e6:29:7e:9e:4f:73:a9:89:94:1f:08:c4:f2:cf: 06:60:bd:aa:95:b0:71:1d:98:8d:52:1a:ab:36:54: 67:f6:2d:39:63:fa:ef:78:dc:67:ba:dd:73:10:18: e5:c1:59:3d:fc:29:55:c5:4d:1f:b7:b3:fa:75:0d: b3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D3:0E:0F:F7:3F:A8:38:0D:32:0F:E3:11:79:90:6E:0F:99:1C:92 X509v3 Authority Key Identifier: keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626131313a3a2f34382d3438203d3e20313939353138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ba11::/48 Signature Algorithm: sha256WithRSAEncryption 55:23:38:5e:e1:68:ae:47:d8:4d:d3:05:27:ab:7f:99:9f:36: ca:b9:04:4f:c6:9b:bd:c8:44:59:57:63:9b:53:c0:fc:63:be: 4b:04:7b:a7:8a:50:7f:81:93:7f:0e:eb:16:99:8b:5d:b5:88: da:42:f9:fc:07:a9:88:76:c3:f2:92:4d:2d:85:77:9d:13:65: 5d:e6:b6:a7:2d:54:12:c5:6d:0c:b5:9d:08:e6:3d:d5:3c:52: 85:42:ff:45:1e:44:65:c8:a5:e4:59:c2:bd:58:c3:c0:9f:55: a9:13:55:4d:41:c8:cf:dc:cb:13:6a:f2:73:4a:63:8c:91:ec: 59:b3:44:4a:5e:ec:83:e8:1d:ca:68:2c:df:fa:25:da:00:36: b6:86:c6:07:67:95:b5:60:b9:c9:54:22:dc:dd:a6:ed:5a:f1: dd:94:52:82:ff:1f:d1:ed:98:3a:e7:26:dd:9d:a3:f0:b6:df: 2c:7f:29:b4:c2:cf:15:08:2d:eb:38:40:5e:14:be:bc:79:f6: ef:06:ea:35:02:81:88:1d:62:f6:33:f8:66:50:07:47:66:4d: a7:ed:70:6e:9b:a9:ac:ec:2a:bf:b5:15:d7:aa:cf:4a:55:ca: d3:11:f1:f4:a3:9f:ec:80:8d:9c:e7:e5:e2:b1:02:66:72:73: 08:7c:cb:ea -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUXSvXsVc43uBouEKIsZv5ME8Q3c4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY3MjhCOTE0NjcwNDM0RENGNTYzM0U4MUUyQjg3MjFE Rjc1Q0VCODAeFw0yNTA3MDUwOTI3MzBaFw0yNjA3MDQwOTMyMzBaMDMxMTAvBgNV BAMTKDQ5RDMwRTBGRjczRkE4MzgwRDMyMEZFMzExNzk5MDZFMEY5OTFDOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2hB5hnMNq2s5Ag69s2firAExE n9B4SCqLGZiZada5iCzkX9KhOrcf+g0pvSPUVEoV/YyMZ2RaRJCF26c9ZpTxKxWy uCZF41wpVYOU5kd2N1hsW7agrWqmg7bMrgcZNdCHxQxhsgLK44dTRs4P1zxNVOJ1 D0Bd+ujzCwtcdj39zEVHED5hIrV4Haj7VKU5C/Uv4xwve95xI6TbWy4y9ZkxEtIC rxR/ngzCQSr+FiiMf0vJirSbq824oB1/Utl16RR0PrjmKX6eT3OpiZQfCMTyzwZg vaqVsHEdmI1SGqs2VGf2LTlj+u943Ge63XMQGOXBWT38KVXFTR+3s/p1DbNTAgMB AAGjggJjMIICXzAdBgNVHQ4EFgQUSdMOD/c/qDgNMg/jEXmQbg+ZHJIwHwYDVR0j BBgwFoAUD3KLkUZwQ03PVjPoHiuHId91zrgwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm NTBlOC8xMS8wRjcyOEI5MTQ2NzA0MzREQ0Y1NjMzRTgxRTJCODcyMURGNzVDRUI4 LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvMEY3MjhCOTE0Njcw NDM0RENGNTYzM0U4MUUyQjg3MjFERjc1Q0VCOC5jZXIwgbgGCCsGAQUFBwELBIGr MIGoMIGlBggrBgEFBQcwC4aBmHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzExLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjI2MTMxMzEzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMTM5MzkzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAuhEwDQYJKoZI hvcNAQELBQADggEBAFUjOF7haK5H2E3TBSerf5mfNsq5BE/Gm73IRFlXY5tTwPxj vksEe6eKUH+Bk38O6xaZi121iNpC+fwHqYh2w/KSTS2Fd50TZV3mtqctVBLFbQy1 nQjmPdU8UoVC/0UeRGXIpeRZwr1Yw8CfVakTVU1ByM/cyxNq8nNKY4yR7FmzREpe 7IPoHcpoLN/6JdoANraGxgdnlbVguclUItzdpu1a8d2UUoL/H9HtmDrnJt2do/C2 3yx/KbTCzxUILes4QF4Uvrx59u8G6jUCgYgdYvYz+GZQB0dmTaftcG6bqazsKr+1 Fdeqz0pVytMR8fSjn+yAjZzn5eKxAmZycwh8y+o= -----END CERTIFICATE-----Generated at Wed Nov 5 01:14:04 2025 by rpki-client