$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: xve/M9zUs9ktX2sNcw/HWBsIrUCDhCrYkjAdF0FmYDs= Subject key identifier: EA:01:2E:09:71:5B:E2:76:91:57:3B:E9:2D:9A:96:F5:8E:A5:80:94 Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Certificate serial: 0A8DE10553432A0A5730ACABF9280A6D3C713791 Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa Signing time: Tue 06 May 2025 08:50:49 +0000 ROA not before: Tue 06 May 2025 08:45:49 +0000 ROA not after: Tue 05 May 2026 08:50:49 +0000 asID: 58339 IP address blocks: 2a05:dfc1:5f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 23:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8d:e1:05:53:43:2a:0a:57:30:ac:ab:f9:28:0a:6d:3c:71:37:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Validity Not Before: May 6 08:45:49 2025 GMT Not After : May 5 08:50:49 2026 GMT Subject: CN=EA012E09715BE27691573BE92D9A96F58EA58094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:05:43:a8:06:2f:dd:ad:80:e1:1d:bc:5c:1b: 91:96:e6:40:ff:b4:04:60:cc:2c:21:38:d2:3f:da: 35:ae:59:8c:5d:6d:d8:97:b9:c5:f5:5a:6a:2d:ea: 8b:25:88:b6:15:dd:3c:18:79:6c:45:bb:82:8f:ec: 07:b2:22:88:72:ea:64:1e:bb:dd:24:a1:d9:3c:a2: 08:16:68:e8:e3:06:83:16:99:ac:8a:7c:8a:63:44: 05:c7:02:7c:81:e5:d0:e0:c5:28:d8:04:01:2a:10: 80:56:e5:ae:f2:1d:d9:d2:e1:82:a1:46:15:2d:37: 7f:58:7a:2e:1d:7b:be:62:26:6e:98:5e:d1:36:42: cc:35:f9:b6:2e:09:0e:ec:a8:0e:bc:5a:9b:e7:b9: 98:41:39:b7:a9:69:7c:85:6c:94:c5:be:df:a6:8d: 0a:fb:08:f9:d1:5f:f9:dd:dd:23:83:19:29:af:7e: 5d:8d:57:71:07:2c:2e:55:a2:89:8b:a9:c1:c3:40: 54:2e:a5:9b:ad:26:ba:2a:b2:59:9e:3e:d0:83:83: d4:72:b5:74:af:91:c7:9d:43:7b:f7:c4:ef:c6:5d: 54:0e:57:d6:35:da:02:5c:14:8f:37:27:5d:5e:e0: 75:ff:bb:32:85:ce:1d:ff:21:67:a1:1f:00:c3:ef: 03:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:01:2E:09:71:5B:E2:76:91:57:3B:E9:2D:9A:96:F5:8E:A5:80:94 X509v3 Authority Key Identifier: keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f00::/48 Signature Algorithm: sha256WithRSAEncryption 3a:99:2d:49:6e:0f:8f:85:47:5f:45:16:3e:50:45:cf:9b:09: 4d:44:06:b8:8f:ce:0c:e8:52:71:82:58:ce:10:f8:f9:da:a1: 70:ed:56:18:aa:2e:1f:76:41:94:8f:12:0b:92:f8:47:16:36: 53:ee:30:2c:22:37:f2:14:da:51:8b:23:60:59:14:0c:6a:cd: 8c:a2:46:4e:4c:92:05:02:1c:45:0d:18:9c:08:a1:99:e6:a1: ec:f8:90:ed:1f:6a:31:84:f1:a5:43:37:95:d1:94:60:b0:cf: 3a:17:c8:44:61:1a:f2:99:68:b3:e7:50:b9:9c:c7:1e:f7:b3: cc:27:d8:81:2f:38:a3:38:fa:95:aa:77:f0:4e:ba:4f:51:1a: a0:71:1b:87:a2:fb:1a:50:4e:19:5f:5e:b3:06:43:b0:cc:ab: a5:0a:98:84:39:2b:15:1e:33:b7:49:32:97:75:24:14:09:62: 97:61:cb:9d:6c:11:c0:77:27:1b:a3:dd:72:d0:b2:2b:75:7e: d3:38:73:95:29:ff:2f:42:96:b8:13:1f:b4:8c:f3:e6:b8:90: 71:6f:fe:ca:f3:d1:44:de:ec:e0:92:46:30:2e:21:d6:41:65: 57:11:ff:1e:5c:5e:42:e7:17:71:57:db:b6:13:81:0c:e4:b9: 35:4d:da:bf -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUCo3hBVNDKgpXMKyr+SgKbTxxN5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1 NzU2QjE5QzAeFw0yNTA1MDYwODQ1NDlaFw0yNjA1MDUwODUwNDlaMDMxMTAvBgNV BAMTKEVBMDEyRTA5NzE1QkUyNzY5MTU3M0JFOTJEOUE5NkY1OEVBNTgwOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfBUOoBi/drYDhHbxcG5GW5kD/ tARgzCwhONI/2jWuWYxdbdiXucX1Wmot6osliLYV3TwYeWxFu4KP7AeyIohy6mQe u90kodk8oggWaOjjBoMWmayKfIpjRAXHAnyB5dDgxSjYBAEqEIBW5a7yHdnS4YKh RhUtN39Yei4de75iJm6YXtE2Qsw1+bYuCQ7sqA68WpvnuZhBObepaXyFbJTFvt+m jQr7CPnRX/nd3SODGSmvfl2NV3EHLC5VoomLqcHDQFQupZutJroqslmePtCDg9Ry tXSvkcedQ3v3xO/GXVQOV9Y12gJcFI83J11e4HX/uzKFzh3/IWehHwDD7wMfAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU6gEuCXFb4naRVzvpLZqW9Y6lgJQwHwYDVR0j BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMwMzAzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwV8AMA0GCSqGSIb3DQEB CwUAA4IBAQA6mS1Jbg+PhUdfRRY+UEXPmwlNRAa4j84M6FJxgljOEPj52qFw7VYY qi4fdkGUjxILkvhHFjZT7jAsIjfyFNpRiyNgWRQMas2MokZOTJIFAhxFDRicCKGZ 5qHs+JDtH2oxhPGlQzeV0ZRgsM86F8hEYRrymWiz51C5nMce97PMJ9iBLzijOPqV qnfwTrpPURqgcRuHovsaUE4ZX16zBkOwzKulCpiEOSsVHjO3STKXdSQUCWKXYcud bBHAdycbo91y0LIrdX7TOHOVKf8vQpa4Ex+0jPPmuJBxb/7K89FE3uzgkkYwLiHW QWVXEf8eXF5C5xdxV9u2E4EM5Lk1Tdq/ -----END CERTIFICATE-----Generated at Wed May 7 16:26:16 2025 by rpki-client