$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa File: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (raw, json) Hash identifier: d5nVF16uuJH0TZ1YA8s7hx5fCbPpHfSbcJo4JXI+35s= Subject key identifier: CD:D8:85:81:24:CE:2A:2F:B4:36:29:32:02:91:10:78:C2:B7:B8:41 Certificate issuer: /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Certificate serial: 0960959320E21C9D16237297D2B5EFEB20F3C04F Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa Signing time: Mon 10 Mar 2025 22:37:41 +0000 ROA not before: Mon 10 Mar 2025 22:32:41 +0000 ROA not after: Mon 09 Mar 2026 22:37:41 +0000 asID: 16509 IP address blocks: 2a0a:6040:3f80::/41 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 07:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:60:95:93:20:e2:1c:9d:16:23:72:97:d2:b5:ef:eb:20:f3:c0:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Validity Not Before: Mar 10 22:32:41 2025 GMT Not After : Mar 9 22:37:41 2026 GMT Subject: CN=CDD8858124CE2A2FB436293202911078C2B7B841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:1d:d1:f7:07:0a:0d:d7:0a:ba:46:41:e0: 84:12:08:b4:aa:e6:dd:11:b7:ea:16:08:7a:36:fe: 30:2b:f0:24:02:00:d5:13:cb:2f:08:43:25:bf:7a: cd:e3:a3:20:07:be:b3:94:4f:f3:a4:e5:9a:10:7f: 0c:fa:c2:d9:88:02:ad:c6:d2:f2:eb:e0:64:d4:e1: 60:4e:f9:ed:c2:4a:84:d3:2e:29:04:1a:84:0d:ac: 5d:3b:c8:72:93:76:63:51:a3:a1:91:26:5f:25:aa: a3:4a:55:68:f8:17:86:12:5d:4e:d1:8c:03:2c:1a: e8:3c:f4:20:0a:07:74:7d:e9:ff:e7:79:47:24:fd: 4a:fa:48:a9:4c:5e:d3:a3:a1:a7:79:59:da:b7:1b: 20:07:4b:11:5d:b9:b4:1e:d6:ca:3b:a6:9c:9b:a7: 33:09:13:a2:32:e4:9b:90:4a:7d:e6:53:53:ae:9e: 5f:d8:7b:db:f4:d0:82:05:3f:c0:7b:33:ea:5d:fc: 60:ab:d4:9b:79:45:15:88:26:19:7c:45:7b:a6:65: 8b:5f:c3:af:e3:cb:e0:95:b1:14:55:64:ed:da:ec: 43:a2:05:0b:a2:13:e3:e5:b4:bc:dc:18:c3:be:62: 04:f6:c0:34:19:f8:21:1e:e2:25:fb:c7:fe:a1:28: d4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D8:85:81:24:CE:2A:2F:B4:36:29:32:02:91:10:78:C2:B7:B8:41 X509v3 Authority Key Identifier: keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:3f80::/41 Signature Algorithm: sha256WithRSAEncryption 8a:7c:09:5a:a1:3f:32:27:7e:e6:0a:78:1d:2a:b2:b8:60:90: d5:7d:9b:02:4d:8f:a2:41:d5:45:81:2e:09:30:f0:cf:a8:53: b9:93:a2:8a:45:ca:54:5b:af:09:84:1d:75:69:8f:f0:e2:23: 01:18:94:80:49:0a:d0:c8:1d:91:1e:dd:76:d2:a9:04:d3:a1: 82:5b:8d:ef:66:3d:7d:70:25:ff:b8:f1:7e:9f:59:29:ed:f1: 1c:54:e7:9d:ba:83:68:61:d3:c3:a6:c4:a9:dc:df:c4:d7:d4: 76:37:22:ad:f3:9d:bc:6a:9b:fb:79:e4:df:55:27:ca:b7:9c: 91:7f:76:25:60:d7:a1:ae:60:da:64:ec:49:7c:25:69:75:85: 3d:60:a0:3f:ed:64:a7:d7:6f:c0:84:c4:1e:40:4a:fd:2e:70: 7f:2e:0a:cd:a4:a6:76:c5:eb:07:e1:15:de:08:a9:11:2b:70: 1a:53:bb:fe:f5:62:76:23:25:d4:47:f1:29:c4:78:83:50:b4: d2:d1:cf:1d:ff:19:3f:7f:31:98:03:e3:31:db:18:a1:06:5b: c0:ae:12:88:40:57:65:73:75:a5:d8:88:f9:98:7a:a6:80:43: 25:d7:dc:6d:7b:fc:8d:43:f0:07:14:3c:27:90:bd:e2:6a:1d: 85:df:9d:48 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUCWCVkyDiHJ0WI3KX0rXv6yDzwE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAw MTFBQzEyMjAeFw0yNTAzMTAyMjMyNDFaFw0yNjAzMDkyMjM3NDFaMDMxMTAvBgNV BAMTKENERDg4NTgxMjRDRTJBMkZCNDM2MjkzMjAyOTExMDc4QzJCN0I4NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Bh3R9wcKDdcKukZB4IQSCLSq 5t0Rt+oWCHo2/jAr8CQCANUTyy8IQyW/es3joyAHvrOUT/Ok5ZoQfwz6wtmIAq3G 0vLr4GTU4WBO+e3CSoTTLikEGoQNrF07yHKTdmNRo6GRJl8lqqNKVWj4F4YSXU7R jAMsGug89CAKB3R96f/neUck/Ur6SKlMXtOjoad5Wdq3GyAHSxFdubQe1so7ppyb pzMJE6Iy5JuQSn3mU1Ounl/Ye9v00IIFP8B7M+pd/GCr1Jt5RRWIJhl8RXumZYtf w6/jy+CVsRRVZO3a7EOiBQuiE+PltLzcGMO+YgT2wDQZ+CEe4iX7x/6hKNSJAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUzdiFgSTOKi+0NikyApEQeMK3uEEwHwYDVR0j BBgwFoAU+QC8ZeK2RuusRypd6hK9sAEawSIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzMvRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAwMTFBQzEyMi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y5MDBCQzY1RTJCNjQ2 RUJBQzQ3MkE1REVBMTJCREIwMDExQUMxMjIuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQyYmU0 ZS8zLzMyNjEzMDYxM2EzNjMwMzQzMDNhMzM2NjM4MzAzYTNhMmYzNDMxMmQzNDM4 MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHKgpgQD+AMA0GCSqGSIb3DQEB CwUAA4IBAQCKfAlaoT8yJ37mCngdKrK4YJDVfZsCTY+iQdVFgS4JMPDPqFO5k6KK RcpUW68JhB11aY/w4iMBGJSASQrQyB2RHt120qkE06GCW43vZj19cCX/uPF+n1kp 7fEcVOeduoNoYdPDpsSp3N/E19R2NyKt8528apv7eeTfVSfKt5yRf3YlYNehrmDa ZOxJfCVpdYU9YKA/7WSn12/AhMQeQEr9LnB/LgrNpKZ2xesH4RXeCKkRK3AaU7v+ 9WJ2IyXUR/EpxHiDULTS0c8d/xk/fzGYA+Mx2xihBlvArhKIQFdlc3Wl2Ij5mHqm gEMl19xte/yNQ/AHFDwnkL3iah2F351I -----END CERTIFICATE-----Generated at Sat May 10 22:05:08 2025 by rpki-client