$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa File: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (raw, json) Hash identifier: qXzAtd8D2DJwzcUhLNYNl/tXZOUKVl/yvZK64cjJKyI= Subject key identifier: 7F:B8:A4:E5:56:CF:D3:C5:CF:79:1D:B8:5B:67:25:16:E8:45:D2:39 Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 7CBF5214F2A551DD3EC9C558E4722F468789D86D Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa Signing time: Mon 14 Sep 2026 21:24:47 +0000 ROA not before: Mon 14 Sep 2026 21:19:47 +0000 ROA not after: Mon 13 Sep 2027 21:24:47 +0000 asID: 31898 IP address blocks: 2a05:dfc1:9300::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 05:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:bf:52:14:f2:a5:51:dd:3e:c9:c5:58:e4:72:2f:46:87:89:d8:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Sep 14 21:19:47 2026 GMT Not After : Sep 13 21:24:47 2027 GMT Subject: CN=7FB8A4E556CFD3C5CF791DB85B672516E845D239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f9:67:11:98:9c:51:4d:a8:46:f2:a9:9c:a7: 26:ae:23:6a:0b:86:ed:58:25:52:84:d2:f0:b3:6b: d2:76:e5:26:1f:8a:ba:dd:fe:82:ee:b6:b9:c9:9a: 2c:fc:81:2e:4c:f1:a8:ae:0f:ca:18:44:2d:84:3e: ed:a5:a2:19:88:64:8c:e0:ef:a9:13:cb:66:cb:bc: 46:e8:11:01:80:bb:88:37:a7:99:19:e5:e2:ad:ff: ba:3d:e1:e8:73:48:6d:ea:6b:44:2f:21:5a:7d:48: a2:50:b7:2d:12:08:19:9f:8f:20:d8:86:69:f3:27: 01:e8:ee:18:3c:e7:96:20:1d:07:e5:60:8f:e4:76: 83:ad:9d:a9:11:cf:6b:bd:fa:f3:4e:4c:9b:3c:f8: 82:f0:df:75:b4:c1:4a:36:7f:9d:61:fb:14:e3:98: 5a:96:2d:0e:b4:1e:40:16:3d:1a:36:78:2f:53:ec: ca:c4:b5:d1:62:69:06:cb:da:09:db:72:70:f0:3a: 4c:63:b0:4a:b8:30:db:ca:aa:17:56:be:d1:a1:f5: 22:a2:c1:50:5d:f3:15:d6:57:8f:6a:8e:cc:c9:7b: 8d:f1:3f:ea:f2:34:8d:5f:43:8a:bf:42:09:19:42: 55:91:5f:e1:d6:e7:43:5a:9e:d8:46:8d:2b:9f:fa: 9f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B8:A4:E5:56:CF:D3:C5:CF:79:1D:B8:5B:67:25:16:E8:45:D2:39 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:9300::/44 Signature Algorithm: sha256WithRSAEncryption 01:3b:81:3a:16:a9:33:ef:0e:fb:ee:07:41:be:f7:69:b2:53: 51:e0:48:5d:3c:6b:d7:69:54:9f:67:13:e7:1f:75:b5:3f:ac: b8:9e:e7:8d:39:3e:4d:db:92:63:87:34:fc:b7:01:ec:c9:7a: 05:82:25:28:a5:f2:c7:bc:8d:d3:97:73:2b:6b:cc:d5:f8:ce: 77:cd:ce:9d:e0:2d:bb:bb:be:6e:57:8e:9f:8d:05:4f:c4:42: 03:fb:db:49:1c:95:1c:46:fc:75:2c:9e:97:7a:71:09:b0:80: 04:bf:4a:49:3e:2c:35:4b:9f:cd:2c:76:ed:b3:30:df:88:3b: 71:04:c7:7b:dd:c2:1f:6d:a6:2f:f7:44:5c:e7:a4:c1:73:5b: 1c:92:52:11:31:49:fb:4d:82:f6:5d:c8:24:01:20:de:b8:6b: b4:68:93:af:01:84:87:7c:3d:e8:f0:07:18:7b:f2:00:6a:f9: 8a:f9:e1:0b:18:47:1a:02:1d:ea:05:0c:12:4e:0c:da:3c:8d: 3b:d3:0b:d4:47:4e:ae:8b:fc:94:59:15:21:03:53:1a:22:62: 89:0f:3e:a0:8b:23:61:33:6d:dc:5a:f2:89:31:af:49:d8:96: 6e:d2:d3:e2:83:18:28:77:66:21:5e:29:70:55:c6:25:61:09: 54:d6:dd:2b -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUfL9SFPKlUd0+ycVY5HIvRoeJ2G0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNjA5MTQyMTE5NDdaFw0yNzA5MTMyMTI0NDdaMDMxMTAvBgNV BAMTKDdGQjhBNEU1NTZDRkQzQzVDRjc5MURCODVCNjcyNTE2RTg0NUQyMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg+WcRmJxRTahG8qmcpyauI2oL hu1YJVKE0vCza9J25SYfirrd/oLutrnJmiz8gS5M8aiuD8oYRC2EPu2lohmIZIzg 76kTy2bLvEboEQGAu4g3p5kZ5eKt/7o94ehzSG3qa0QvIVp9SKJQty0SCBmfjyDY hmnzJwHo7hg855YgHQflYI/kdoOtnakRz2u9+vNOTJs8+ILw33W0wUo2f51h+xTj mFqWLQ60HkAWPRo2eC9T7MrEtdFiaQbL2gnbcnDwOkxjsEq4MNvKqhdWvtGh9SKi wVBd8xXWV49qjszJe43xP+ryNI1fQ4q/QgkZQlWRX+HW50NanthGjSuf+p9DAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUf7ik5VbP08XPeR24W2clFuhF0jkwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzI4Y2Q2MjI0LWEzYjAtNDY4ZS1hYTM3LTgyY2E2YTNlOTI0 My8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzkzMzMwMzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzMzMxMzgzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwZMAMA0GCSqGSIb3DQEB CwUAA4IBAQABO4E6Fqkz7w777gdBvvdpslNR4EhdPGvXaVSfZxPnH3W1P6y4nueN OT5N25JjhzT8twHsyXoFgiUopfLHvI3Tl3Mra8zV+M53zc6d4C27u75uV46fjQVP xEID+9tJHJUcRvx1LJ6XenEJsIAEv0pJPiw1S5/NLHbtszDfiDtxBMd73cIfbaYv 90Rc56TBc1scklIRMUn7TYL2XcgkASDeuGu0aJOvAYSHfD3o8AcYe/IAavmK+eEL GEcaAh3qBQwSTgzaPI070wvUR06ui/yUWRUhA1MaImKJDz6giyNhM23cWvKJMa9J 2JZu0tPigxgod2YhXilwVcYlYQlU1t0r -----END CERTIFICATE-----Generated at Mon Sep 28 18:13:21 2026 by rpki-client