$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: BtxfwQvueehDGJrNiwkb7VQOoetARww2saMZcqiUdbY= Subject key identifier: 83:F7:DD:D5:8D:89:0E:7E:B2:12:9F:C6:51:F0:4D:06:E5:CC:47:9E Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Certificate serial: 18F3B2B5D9F34AD5E0A1E906BC047DBF18476A64 Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa Signing time: Tue 06 May 2025 08:50:49 +0000 ROA not before: Tue 06 May 2025 08:45:49 +0000 ROA not after: Tue 05 May 2026 08:50:49 +0000 asID: 58339 IP address blocks: 2a05:dfc1:5f30::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 02:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f3:b2:b5:d9:f3:4a:d5:e0:a1:e9:06:bc:04:7d:bf:18:47:6a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Validity Not Before: May 6 08:45:49 2025 GMT Not After : May 5 08:50:49 2026 GMT Subject: CN=83F7DDD58D890E7EB2129FC651F04D06E5CC479E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:61:fa:10:28:cb:66:80:52:b3:a8:9f:fb:b8: 27:d1:71:c5:ec:a0:ec:b3:44:8b:4b:e1:da:bc:ad: 59:e1:c7:6f:05:8e:a5:93:4a:9e:98:5f:33:91:56: 2e:45:71:86:bf:11:d6:e7:57:0b:32:aa:31:33:88: f7:ca:36:47:66:c9:e6:d2:24:3f:e4:6d:3d:90:74: 0c:52:e6:4f:0f:33:1b:75:6c:82:41:f3:95:5e:8f: 93:3a:65:be:62:e6:fc:b8:9c:f7:e0:23:34:49:92: a9:9f:27:f8:16:c5:36:bb:c0:cc:67:bc:0c:22:51: 16:6f:be:8f:c9:4a:63:04:97:d1:21:e8:3d:cb:b6: f0:f6:f2:03:2e:e6:fc:cd:d4:d5:76:e5:d2:7e:49: 45:5d:db:a6:22:7f:fd:1b:37:3d:bf:5d:45:8f:19: a8:3c:bb:d4:12:b4:54:7a:f6:7d:7c:78:4e:7c:00: 5f:0e:39:af:63:a1:99:35:62:86:bd:8b:b8:1c:20: 0a:bf:e6:2a:9f:49:24:c2:9c:a7:2c:87:c9:aa:a7: 94:8e:9d:e9:2f:ed:14:a0:6d:d5:15:e3:f1:7e:4b: f5:21:5b:f4:8a:de:c0:39:4b:79:17:78:6e:db:7c: 09:52:fd:ef:65:36:ad:53:09:21:93:6a:76:d3:05: 4f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F7:DD:D5:8D:89:0E:7E:B2:12:9F:C6:51:F0:4D:06:E5:CC:47:9E X509v3 Authority Key Identifier: keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f30::/48 Signature Algorithm: sha256WithRSAEncryption 3b:cd:0a:18:38:73:85:54:e8:52:80:7a:c0:cc:91:13:74:23: 92:1b:81:42:b2:30:44:ea:c8:83:7d:7a:ef:ad:2c:70:52:75: f3:52:d3:b9:c5:ae:0c:fe:a9:ac:7f:a8:0c:ed:a7:e7:f9:8f: 3f:78:14:8b:1d:49:aa:71:bb:2a:72:15:04:1d:67:36:d8:58: a0:35:2e:5d:7e:ac:db:3d:94:08:e9:dd:3c:c5:40:e2:8f:70: cb:5b:9e:c0:fd:2f:52:e2:18:73:ac:3a:fd:df:a8:36:43:0d: c6:47:e8:38:96:e6:37:69:0b:a8:a6:92:a5:10:5f:d2:42:d7: e8:9a:22:00:7c:8e:76:4e:e9:a7:31:68:7e:fa:bf:18:0a:b5: fc:c1:31:56:93:61:7d:4e:1f:1a:1d:1e:40:48:31:c6:d3:d4: 73:68:f2:a1:dc:0e:3c:49:1c:64:8d:cf:03:9c:98:98:ce:19: db:ef:91:31:64:68:0c:b6:de:7d:d3:8e:35:59:ca:17:5b:20: d9:4c:0c:f9:ce:40:6b:65:22:bf:66:a3:54:35:91:74:59:ad: e5:e3:61:3d:f3:b3:e4:4b:04:aa:17:80:d9:fd:df:ce:b3:11: e8:04:de:12:ea:28:63:e0:c8:e4:90:74:27:dd:59:7e:d8:0f: 06:cf:2d:dc -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUGPOytdnzStXgoekGvAR9vxhHamQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1 NzU2QjE5QzAeFw0yNTA1MDYwODQ1NDlaFw0yNjA1MDUwODUwNDlaMDMxMTAvBgNV BAMTKDgzRjdEREQ1OEQ4OTBFN0VCMjEyOUZDNjUxRjA0RDA2RTVDQzQ3OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuYfoQKMtmgFKzqJ/7uCfRccXs oOyzRItL4dq8rVnhx28FjqWTSp6YXzORVi5FcYa/EdbnVwsyqjEziPfKNkdmyebS JD/kbT2QdAxS5k8PMxt1bIJB85Vej5M6Zb5i5vy4nPfgIzRJkqmfJ/gWxTa7wMxn vAwiURZvvo/JSmMEl9Eh6D3LtvD28gMu5vzN1NV25dJ+SUVd26Yif/0bNz2/XUWP Gag8u9QStFR69n18eE58AF8OOa9joZk1Yoa9i7gcIAq/5iqfSSTCnKcsh8mqp5SO nekv7RSgbdUV4/F+S/UhW/SK3sA5S3kXeG7bfAlS/e9lNq1TCSGTanbTBU8TAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUg/fd1Y2JDn6yEp/GUfBNBuXMR54wHwYDVR0j BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMzMzAzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwV8wMA0GCSqGSIb3DQEB CwUAA4IBAQA7zQoYOHOFVOhSgHrAzJETdCOSG4FCsjBE6siDfXrvrSxwUnXzUtO5 xa4M/qmsf6gM7afn+Y8/eBSLHUmqcbsqchUEHWc22FigNS5dfqzbPZQI6d08xUDi j3DLW57A/S9S4hhzrDr936g2Qw3GR+g4luY3aQuoppKlEF/SQtfomiIAfI52Tumn MWh++r8YCrX8wTFWk2F9Th8aHR5ASDHG09RzaPKh3A48SRxkjc8DnJiYzhnb75Ex ZGgMtt590441WcoXWyDZTAz5zkBrZSK/ZqNUNZF0Wa3l42E987PkSwSqF4DZ/d/O sxHoBN4S6ihj4MjkkHQn3Vl+2A8Gzy3c -----END CERTIFICATE-----Generated at Thu May 8 18:54:01 2025 by rpki-client