$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa File: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (raw, json) Hash identifier: a/PEhvzrP+G5MwSsL0gkzB1gZuBpDOMslVaEMTvEPWA= Subject key identifier: 9C:26:0C:AF:02:A3:2C:45:1C:C7:F7:C8:DB:21:76:FE:2D:1F:E4:DC Certificate issuer: /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD Certificate serial: 6243EB2F7FFC73079D9807C365C96489D632E36F Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa Signing time: Fri 20 Dec 2024 19:58:48 +0000 ROA not before: Fri 20 Dec 2024 19:53:48 +0000 ROA not after: Fri 19 Dec 2025 19:58:48 +0000 asID: 216107 IP address blocks: 2a05:dfc1:cb1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 19:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:43:eb:2f:7f:fc:73:07:9d:98:07:c3:65:c9:64:89:d6:32:e3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD Validity Not Before: Dec 20 19:53:48 2024 GMT Not After : Dec 19 19:58:48 2025 GMT Subject: CN=9C260CAF02A32C451CC7F7C8DB2176FE2D1FE4DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:43:f3:5f:8a:db:71:eb:83:3b:95:13:47:ae: 5e:f0:31:52:47:99:62:af:25:dc:c6:fe:8b:ca:f4: 82:97:60:9e:34:ff:ae:88:cc:1c:df:fd:1a:c5:8b: 3d:6e:1a:28:e2:5c:01:8a:34:ba:28:b8:e2:fd:06: cb:f4:ed:21:ca:4c:9f:b8:d9:45:ff:af:8c:a3:18: cd:6e:66:97:8d:45:ec:30:07:c3:65:c9:24:93:7b: 6e:d4:42:19:d8:2f:4e:fc:ad:10:44:4c:e5:d8:60: cf:cb:5b:9f:7f:ce:42:43:e0:6d:00:43:ec:90:e6: 76:e7:50:ed:f0:ae:bd:68:13:77:d9:54:7a:7b:1c: 5b:fa:50:c2:2c:b6:ab:27:bc:c7:7d:ab:78:ba:ae: 85:6d:83:00:7c:bc:f4:46:fe:9f:12:0e:08:4f:30: 82:0b:93:ef:ee:10:9a:41:2e:f7:1e:a5:a3:cf:c9: 07:55:8f:3c:17:2f:ce:ec:f3:9b:8e:6d:9a:4a:67: 6f:99:0a:80:e9:a5:f7:09:5b:ff:d4:dd:c1:75:13: fd:63:fc:d4:6e:2b:8a:c4:1f:61:78:4a:fe:02:61: aa:eb:dc:58:07:c3:81:1f:0e:67:ec:d6:2b:63:32: 69:0a:2e:03:a4:c7:c5:87:54:1a:fc:82:0d:46:8a: 5b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:26:0C:AF:02:A3:2C:45:1C:C7:F7:C8:DB:21:76:FE:2D:1F:E4:DC X509v3 Authority Key Identifier: keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:cb1::/48 Signature Algorithm: sha256WithRSAEncryption 4b:4a:08:4a:86:82:c8:47:d1:62:c6:6e:42:64:fa:59:c4:94: e9:ca:cf:3f:17:ca:ed:88:2a:60:35:cd:b2:f9:e0:ea:58:39: ef:1c:c9:3b:03:55:36:99:7a:0b:5e:4f:d4:f4:ad:21:53:74: b1:a9:ae:7a:ca:9c:b6:1f:f0:4c:65:40:5f:85:1e:70:15:5a: 74:c4:94:7b:48:3b:df:4b:26:df:b7:29:e7:0e:e0:fa:1a:9c: 9c:51:cb:99:a8:91:d2:54:71:24:a6:c8:1a:e1:7d:41:a5:e5: ea:4b:2e:ad:ba:e1:30:5e:00:72:cb:88:b7:7f:ef:1d:f5:39: 7c:9b:d5:22:8f:24:40:93:d6:99:e9:42:b2:db:2c:b5:ae:12: 44:b9:22:59:d5:af:8c:a6:75:c1:6d:46:a1:c6:7b:3c:8d:b3: 8f:b6:db:08:c5:ba:4b:38:4e:74:d4:18:c4:e1:5c:c4:b2:3c: bf:ff:44:a2:c2:5c:28:d6:99:1e:d6:7c:ae:2a:ce:fe:41:db: 95:21:f6:51:af:2f:bb:0a:e2:df:ed:a4:da:1e:b8:7c:da:6c: f2:ab:8e:0a:c9:b2:61:9f:c8:b7:ab:ce:c5:17:43:bf:9e:41: 49:b6:b2:d2:d6:a4:1e:ce:64:70:ca:6f:ef:21:9a:d8:53:74: 88:1f:80:af -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUYkPrL3/8cwedmAfDZclkidYy428wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5 NzE5OEJGRDAeFw0yNDEyMjAxOTUzNDhaFw0yNTEyMTkxOTU4NDhaMDMxMTAvBgNV BAMTKDlDMjYwQ0FGMDJBMzJDNDUxQ0M3RjdDOERCMjE3NkZFMkQxRkU0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQ/Nfittx64M7lRNHrl7wMVJH mWKvJdzG/ovK9IKXYJ40/66IzBzf/RrFiz1uGijiXAGKNLoouOL9Bsv07SHKTJ+4 2UX/r4yjGM1uZpeNRewwB8NlySSTe27UQhnYL078rRBETOXYYM/LW59/zkJD4G0A Q+yQ5nbnUO3wrr1oE3fZVHp7HFv6UMIstqsnvMd9q3i6roVtgwB8vPRG/p8SDghP MIILk+/uEJpBLvcepaPPyQdVjzwXL87s85uObZpKZ2+ZCoDppfcJW//U3cF1E/1j /NRuK4rEH2F4Sv4CYarr3FgHw4EfDmfs1itjMmkKLgOkx8WHVBr8gg1Gils3AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUnCYMrwKjLEUcx/fI2yF2/i0f5NwwHwYDVR0j BBgwFoAUoL3NTO8Cuao8vQqDdmZxY5cZi/0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzEvQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5NzE5OEJGRC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0EwQkRDRDRDRUYwMkI5 QUEzQ0JEMEE4Mzc2NjY3MTYzOTcxOThCRkQuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzI4Y2Q2MjI0LWEzYjAtNDY4ZS1hYTM3LTgyY2E2YTNlOTI0 My8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhNjM2MjMxM2EzYTJmMzQzODJkMzQzODIw M2QzZTIwMzIzMTM2MzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwQyxMA0GCSqGSIb3DQEB CwUAA4IBAQBLSghKhoLIR9Fixm5CZPpZxJTpys8/F8rtiCpgNc2y+eDqWDnvHMk7 A1U2mXoLXk/U9K0hU3Sxqa56ypy2H/BMZUBfhR5wFVp0xJR7SDvfSybftynnDuD6 GpycUcuZqJHSVHEkpsga4X1BpeXqSy6tuuEwXgByy4i3f+8d9Tl8m9UijyRAk9aZ 6UKy2yy1rhJEuSJZ1a+MpnXBbUahxns8jbOPttsIxbpLOE501BjE4VzEsjy//0Si wlwo1pke1nyuKs7+QduVIfZRry+7CuLf7aTaHrh82mzyq44KybJhn8i3q87FF0O/ nkFJtrLS1qQezmRwym/vIZrYU3SIH4Cv -----END CERTIFICATE-----Generated at Sun Jun 29 10:21:28 2025 by rpki-client