$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa File: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (raw, json) Hash identifier: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y= Subject key identifier: 6F:62:70:26:28:50:15:D4:E4:B9:D4:45:EF:A0:BF:47:0E:F8:B1:60 Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 566D8F4B303B46736407C455283B6ACD95FBE5C4 Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa Signing time: Mon 13 Oct 2025 21:04:59 +0000 ROA not before: Mon 13 Oct 2025 20:59:59 +0000 ROA not after: Mon 12 Oct 2026 21:04:59 +0000 asID: 31898 IP address blocks: 2a05:dfc1:9300::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:6d:8f:4b:30:3b:46:73:64:07:c4:55:28:3b:6a:cd:95:fb:e5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Oct 13 20:59:59 2025 GMT Not After : Oct 12 21:04:59 2026 GMT Subject: CN=6F627026285015D4E4B9D445EFA0BF470EF8B160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:b2:cc:a7:23:4f:65:fd:44:9e:73:09:d4: 9c:c6:a8:1b:4b:65:90:32:33:07:26:04:e2:9d:c7: 05:14:47:04:a8:4f:2e:ac:02:9a:73:b2:41:77:7b: 96:cf:c0:e8:2d:5d:77:40:df:7e:ff:d3:a1:7a:73: fc:c8:9a:d7:3c:12:d0:70:5b:b8:89:d2:fd:95:f2: 1a:82:62:68:f2:5f:52:12:44:04:85:b3:02:05:37: 34:a0:84:93:72:6a:e4:09:85:10:79:42:08:f5:57: f3:1c:a4:d9:23:67:16:6d:f7:eb:2c:7e:09:97:7d: ae:3d:0c:b8:5b:ff:3c:34:b5:6a:e2:f1:da:e7:23: e7:a4:e2:37:72:d9:f2:4e:38:ea:86:eb:35:0d:19: b7:96:b5:5d:7d:5c:d6:8a:56:75:86:c8:3c:fd:24: 47:c6:1e:fc:66:18:53:c1:86:30:fc:5d:a5:1f:ac: 39:9b:59:c9:bb:c5:c0:b5:26:03:1e:d9:29:ae:97: b0:10:bd:17:44:00:b5:55:b9:eb:65:87:e9:97:1c: 2e:9d:0c:56:da:1c:2d:ac:00:9f:05:c0:36:cf:93: d2:f4:bc:f3:79:7b:29:db:4b:2d:b4:19:72:5c:6b: 5f:62:a0:8e:0c:d0:f2:cd:29:c2:4c:54:0d:38:43: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:62:70:26:28:50:15:D4:E4:B9:D4:45:EF:A0:BF:47:0E:F8:B1:60 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:9300::/44 Signature Algorithm: sha256WithRSAEncryption e4:d4:57:39:52:31:89:50:6e:76:ea:14:e5:6d:a3:db:a3:d8: c5:85:1c:d1:03:30:b5:50:76:c8:f3:8e:17:e5:45:67:d8:8a: 1b:52:1c:14:49:f8:bf:d1:a8:51:54:c2:27:a7:9c:91:e1:23: cd:66:c2:09:bb:de:8a:65:fd:a0:cf:a8:79:f1:67:3f:9a:a2: 19:cf:a6:59:53:a0:7d:e8:0a:9e:78:13:64:72:80:3a:8c:ea: bc:3d:56:4a:77:cd:db:05:62:b9:a0:21:f0:a4:af:07:10:db: 51:a7:96:8d:d7:fa:fd:dd:40:97:98:94:29:07:e4:c7:1a:4c: 2d:81:4f:b7:40:33:93:53:64:8f:26:7d:06:71:5e:80:3f:d3: 65:2f:cb:ee:9f:4a:85:54:0e:07:42:7c:5c:66:0c:eb:78:16: a9:11:c9:8e:51:64:bc:48:3e:fa:42:7a:03:1c:4c:5b:77:5b: 16:8b:72:76:d7:13:50:5a:5e:64:1a:b6:df:0c:bb:f2:ba:a4: c8:04:22:50:88:67:ce:8f:ac:a9:2d:1a:16:74:b3:2c:09:ea: e4:62:c9:6f:ac:6f:d1:88:96:8c:5d:f2:df:29:89:47:31:e8: 04:63:67:f8:7d:90:8f:54:06:7b:60:e9:5f:f4:a5:fe:5b:d9: bd:74:e4:8c -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUVm2PSzA7RnNkB8RVKDtqzZX75cQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNTEwMTMyMDU5NTlaFw0yNjEwMTIyMTA0NTlaMDMxMTAvBgNV BAMTKDZGNjI3MDI2Mjg1MDE1RDRFNEI5RDQ0NUVGQTBCRjQ3MEVGOEIxNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94LLMpyNPZf1EnnMJ1JzGqBtL ZZAyMwcmBOKdxwUURwSoTy6sAppzskF3e5bPwOgtXXdA337/06F6c/zImtc8EtBw W7iJ0v2V8hqCYmjyX1ISRASFswIFNzSghJNyauQJhRB5Qgj1V/McpNkjZxZt9+ss fgmXfa49DLhb/zw0tWri8drnI+ek4jdy2fJOOOqG6zUNGbeWtV19XNaKVnWGyDz9 JEfGHvxmGFPBhjD8XaUfrDmbWcm7xcC1JgMe2Smul7AQvRdEALVVuetlh+mXHC6d DFbaHC2sAJ8FwDbPk9L0vPN5eynbSy20GXJca19ioI4M0PLNKcJMVA04QyoNAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUb2JwJihQFdTkudRF76C/Rw74sWAwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzI4Y2Q2MjI0LWEzYjAtNDY4ZS1hYTM3LTgyY2E2YTNlOTI0 My8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzkzMzMwMzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzMzMxMzgzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwZMAMA0GCSqGSIb3DQEB CwUAA4IBAQDk1Fc5UjGJUG526hTlbaPbo9jFhRzRAzC1UHbI844X5UVn2IobUhwU Sfi/0ahRVMInp5yR4SPNZsIJu96KZf2gz6h58Wc/mqIZz6ZZU6B96AqeeBNkcoA6 jOq8PVZKd83bBWK5oCHwpK8HENtRp5aN1/r93UCXmJQpB+THGkwtgU+3QDOTU2SP Jn0GcV6AP9NlL8vun0qFVA4HQnxcZgzreBapEcmOUWS8SD76QnoDHExbd1sWi3J2 1xNQWl5kGrbfDLvyuqTIBCJQiGfOj6ypLRoWdLMsCerkYslvrG/RiJaMXfLfKYlH MegEY2f4fZCPVAZ7YOlf9KX+W9m9dOSM -----END CERTIFICATE-----Generated at Mon Oct 20 10:01:03 2025 by rpki-client