$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa File: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (raw, json) Hash identifier: u/op1Gb+lh53LhTdxSovsMBPfFi75dye37nTdYVQSh4= Subject key identifier: 5F:1B:7D:8A:EA:65:77:93:9C:61:18:A1:F9:43:98:3F:CC:86:D0:D3 Certificate issuer: /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Certificate serial: 0B8BD40A5E8EDE29B261C9E424AC0C2AE596AD23 Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa Signing time: Fri 11 Apr 2025 16:00:07 +0000 ROA not before: Fri 11 Apr 2025 15:55:07 +0000 ROA not after: Fri 10 Apr 2026 16:00:07 +0000 asID: 203069 IP address blocks: 2a0a:6040:3f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 08:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8b:d4:0a:5e:8e:de:29:b2:61:c9:e4:24:ac:0c:2a:e5:96:ad:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Validity Not Before: Apr 11 15:55:07 2025 GMT Not After : Apr 10 16:00:07 2026 GMT Subject: CN=5F1B7D8AEA6577939C6118A1F943983FCC86D0D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d6:ed:bb:9f:37:0d:f7:38:f3:9f:a4:cd:69: 4d:0a:68:c3:2d:05:e4:3c:10:6a:8b:48:9d:5b:fa: c2:18:e7:5e:34:48:fd:aa:ea:a9:10:43:0e:f5:91: ed:2a:0e:04:83:83:d8:61:3c:db:50:31:ec:aa:3d: 38:1c:ac:9e:71:1c:11:c3:b7:d1:85:e9:54:89:2e: af:da:03:8c:00:2e:09:8b:89:0f:e6:d1:2e:83:c9: e8:2a:ef:cd:b1:48:b9:85:ca:e3:a1:da:cc:0b:8e: 52:34:78:9c:f3:4a:b3:24:2e:5b:54:b6:c1:23:18: 1d:59:7a:9b:2f:78:ba:34:c0:ae:3f:f3:fd:6d:87: 42:67:4e:3b:5e:c4:28:a0:97:9a:2d:2c:ac:71:23: ac:2e:64:3f:2c:24:5d:0e:a8:46:5d:36:ee:a4:0a: e4:71:13:05:7b:4a:7b:9b:9a:b2:f7:5a:d1:05:a7: f2:46:04:4e:ae:52:f4:cc:79:bc:6a:4d:8b:2d:f9: 6f:1e:0b:08:97:aa:7d:2c:cf:ec:ba:25:6b:fd:10: d8:b2:10:df:2f:90:ee:5f:78:e7:d2:51:b3:a6:64: 43:5f:0a:3c:14:f5:8b:ad:de:52:c1:09:89:75:c9: d6:e6:25:d0:d2:60:11:63:a9:c5:86:d3:e5:39:ee: 02:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1B:7D:8A:EA:65:77:93:9C:61:18:A1:F9:43:98:3F:CC:86:D0:D3 X509v3 Authority Key Identifier: keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:3f00::/40 Signature Algorithm: sha256WithRSAEncryption b3:eb:73:4e:22:0e:21:30:b0:94:2b:85:b1:73:31:69:6c:4f: ea:4d:3c:74:44:cd:da:17:a2:bf:14:8a:19:5e:b2:6f:f0:be: 5a:45:34:f5:f1:3f:27:5f:0b:27:f9:f6:9f:5e:f0:3e:f9:46: c2:d2:e8:a6:16:1e:5c:a0:63:48:36:4f:7f:0e:32:54:8c:9b: 2b:f6:af:67:81:ed:83:c4:72:41:0d:c0:ef:82:aa:b1:61:e3: 33:db:32:f5:bc:1d:f3:66:13:7b:e6:cc:90:1f:ae:97:e2:16: ef:22:ab:69:da:0e:6a:29:b7:b5:4b:51:5d:ae:d5:bb:b2:93: 00:ad:b8:71:15:41:4d:99:30:52:5b:e6:67:06:56:6b:e7:be: c3:e1:28:2e:f2:b6:58:0e:e5:f2:c3:56:91:f9:3b:b9:cd:86: c2:89:36:ee:fb:08:b7:d0:31:84:9d:1c:74:e8:68:47:04:13: e2:55:ac:c1:fb:2b:aa:be:2d:14:df:a8:37:22:04:4c:c4:62: 40:1f:a5:5c:4d:f0:6f:65:3f:97:1b:23:93:37:ef:5c:43:27: 0a:60:11:f3:30:b1:67:4f:5c:5a:c4:8d:c8:65:be:9c:4f:bf: f9:9f:11:92:fd:0e:14:fc:c8:3a:35:ab:62:d1:24:41:53:aa: b0:9f:d6:64 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIUC4vUCl6O3imyYcnkJKwMKuWWrSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAw MTFBQzEyMjAeFw0yNTA0MTExNTU1MDdaFw0yNjA0MTAxNjAwMDdaMDMxMTAvBgNV BAMTKDVGMUI3RDhBRUE2NTc3OTM5QzYxMThBMUY5NDM5ODNGQ0M4NkQwRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK1u27nzcN9zjzn6TNaU0KaMMt BeQ8EGqLSJ1b+sIY5140SP2q6qkQQw71ke0qDgSDg9hhPNtQMeyqPTgcrJ5xHBHD t9GF6VSJLq/aA4wALgmLiQ/m0S6Dyegq782xSLmFyuOh2swLjlI0eJzzSrMkLltU tsEjGB1ZepsveLo0wK4/8/1th0JnTjtexCigl5otLKxxI6wuZD8sJF0OqEZdNu6k CuRxEwV7SnubmrL3WtEFp/JGBE6uUvTMebxqTYst+W8eCwiXqn0sz+y6JWv9ENiy EN8vkO5feOfSUbOmZENfCjwU9Yut3lLBCYl1ydbmJdDSYBFjqcWG0+U57gKfAgMB AAGjggJfMIICWzAdBgNVHQ4EFgQUXxt9iupld5OcYRih+UOYP8yG0NMwHwYDVR0j BBgwFoAU+QC8ZeK2RuusRypd6hK9sAEawSIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzMvRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAwMTFBQzEyMi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y5MDBCQzY1RTJCNjQ2 RUJBQzQ3MkE1REVBMTJCREIwMDExQUMxMjIuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQyYmU0 ZS8zLzMyNjEzMDYxM2EzNjMwMzQzMDNhMzM2NjMwMzAzYTNhMmYzNDMwMmQzNDM4 MjAzZDNlMjAzMjMwMzMzMDM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAPzANBgkqhkiG9w0B AQsFAAOCAQEAs+tzTiIOITCwlCuFsXMxaWxP6k08dETN2heivxSKGV6yb/C+WkU0 9fE/J18LJ/n2n17wPvlGwtLophYeXKBjSDZPfw4yVIybK/avZ4Htg8RyQQ3A74Kq sWHjM9sy9bwd82YTe+bMkB+ul+IW7yKradoOaim3tUtRXa7Vu7KTAK24cRVBTZkw UlvmZwZWa+e+w+EoLvK2WA7l8sNWkfk7uc2Gwok27vsIt9AxhJ0cdOhoRwQT4lWs wfsrqr4tFN+oNyIETMRiQB+lXE3wb2U/lxsjkzfvXEMnCmAR8zCxZ09cWsSNyGW+ nE+/+Z8Rkv0OFPzIOjWrYtEkQVOqsJ/WZA== -----END CERTIFICATE-----Generated at Sun May 11 01:05:38 2025 by rpki-client