$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: RbgeKR90MI6a70WTsPaa/svRQ3a5mKLfMNJjAv2M1lc= Subject key identifier: 79:69:C2:52:4A:1C:7D:EA:E6:15:0A:39:38:EB:04:46:97:14:39:90 Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Certificate serial: 1B5340431C056DD4DBE8C69971C6D9860DEE8B44 Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa Signing time: Tue 06 May 2025 08:50:51 +0000 ROA not before: Tue 06 May 2025 08:45:51 +0000 ROA not after: Tue 05 May 2026 08:50:51 +0000 asID: 58339 IP address blocks: 2a05:dfc1:5f70::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 23:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:53:40:43:1c:05:6d:d4:db:e8:c6:99:71:c6:d9:86:0d:ee:8b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Validity Not Before: May 6 08:45:51 2025 GMT Not After : May 5 08:50:51 2026 GMT Subject: CN=7969C2524A1C7DEAE6150A3938EB044697143990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4d:64:e6:dc:20:c9:63:0f:5d:c3:93:29:a4: 1f:6b:65:63:9f:48:e7:a2:62:c9:f8:5a:a0:8c:e7: 1d:e2:f0:ec:44:81:58:12:06:c1:e6:52:69:46:d8: 61:fe:2e:25:61:a6:2b:b6:21:25:18:09:2f:19:76: 28:4d:d6:b8:08:8b:ac:23:d1:1d:44:52:ee:97:05: bc:81:b6:84:a2:e6:ba:39:3a:8e:5a:0c:72:8d:cc: b6:11:4d:0e:9d:33:72:8f:46:b4:f3:b8:58:4f:30: d5:a6:b8:8c:44:52:08:26:f0:65:ba:5b:bd:5c:80: a2:ff:5a:f2:f1:96:d9:62:02:d4:28:a6:0d:3d:7c: 15:d4:b5:06:ba:d9:6a:70:87:9c:70:a6:c2:32:92: 9c:56:5f:29:6c:5b:d6:20:68:a6:66:82:2d:18:6c: 7b:56:78:3f:60:89:3e:8d:f5:43:55:74:be:77:40: f9:ac:cf:76:3d:c1:c2:91:55:24:ba:42:00:ef:8f: aa:45:8f:a4:51:51:1e:38:c8:1d:c8:9a:c1:87:85: 78:3a:25:8f:f1:f6:2e:52:ce:ad:1a:0c:e9:b1:e8: 08:a5:93:4e:f8:f8:33:17:e0:71:e3:13:c4:36:e2: 1c:e0:4d:82:18:c4:42:50:39:c1:3b:62:df:be:03: 0c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:69:C2:52:4A:1C:7D:EA:E6:15:0A:39:38:EB:04:46:97:14:39:90 X509v3 Authority Key Identifier: keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f70::/44 Signature Algorithm: sha256WithRSAEncryption 21:a1:da:52:d4:7d:a6:bc:ad:e3:d2:ec:62:a9:29:51:1e:3a: f9:aa:e5:2d:5e:66:30:1c:10:c6:b4:02:69:e1:7e:94:a9:ec: 9a:c3:98:43:24:43:52:be:6c:ad:15:87:9b:c9:fb:4d:11:e2: d1:e4:86:de:53:59:b1:2a:4a:3d:fb:b7:2e:86:5b:33:e8:57: 8e:2a:eb:17:fa:be:b8:24:c4:9a:5b:6d:28:b8:95:a2:7b:0f: 6a:b1:f6:1e:47:a9:28:80:f4:e7:71:37:d4:4a:74:dd:05:cd: 47:17:57:11:ba:e7:a7:08:55:e5:8f:bb:b9:aa:e5:12:a4:27: 56:b4:de:d6:6c:90:67:45:97:b5:10:ef:fd:a8:d9:1f:01:2a: 13:dd:c6:c2:63:58:83:8a:d1:58:25:1c:e3:b9:a9:3f:22:c3: 70:51:93:99:35:f2:89:18:c3:9b:35:94:47:49:e8:57:c4:c2: cd:25:64:4d:95:0b:00:cd:65:45:be:55:e1:1c:d0:ee:25:fd: 63:a0:22:7e:37:2c:65:6d:e3:e4:51:c7:4b:98:e3:cc:0f:cd: 4c:a6:7a:a1:9e:aa:7d:cf:eb:ef:52:d5:a4:29:a4:37:94:ce: 43:f7:a0:ff:83:aa:a6:c5:86:ee:06:b7:42:3a:57:20:97:24: 4d:86:4d:e9 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUG1NAQxwFbdTb6MaZccbZhg3ui0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1 NzU2QjE5QzAeFw0yNTA1MDYwODQ1NTFaFw0yNjA1MDUwODUwNTFaMDMxMTAvBgNV BAMTKDc5NjlDMjUyNEExQzdERUFFNjE1MEEzOTM4RUIwNDQ2OTcxNDM5OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMTWTm3CDJYw9dw5MppB9rZWOf SOeiYsn4WqCM5x3i8OxEgVgSBsHmUmlG2GH+LiVhpiu2ISUYCS8ZdihN1rgIi6wj 0R1EUu6XBbyBtoSi5ro5Oo5aDHKNzLYRTQ6dM3KPRrTzuFhPMNWmuIxEUggm8GW6 W71cgKL/WvLxltliAtQopg09fBXUtQa62Wpwh5xwpsIykpxWXylsW9YgaKZmgi0Y bHtWeD9giT6N9UNVdL53QPmsz3Y9wcKRVSS6QgDvj6pFj6RRUR44yB3ImsGHhXg6 JY/x9i5Szq0aDOmx6Ailk074+DMX4HHjE8Q24hzgTYIYxEJQOcE7Yt++AwzBAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUeWnCUkocfermFQo5OOsERpcUOZAwHwYDVR0j BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjM3MzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwV9wMA0GCSqGSIb3DQEB CwUAA4IBAQAhodpS1H2mvK3j0uxiqSlRHjr5quUtXmYwHBDGtAJp4X6Uqeyaw5hD JENSvmytFYebyftNEeLR5IbeU1mxKko9+7cuhlsz6FeOKusX+r64JMSaW20ouJWi ew9qsfYeR6kogPTncTfUSnTdBc1HF1cRuuenCFXlj7u5quUSpCdWtN7WbJBnRZe1 EO/9qNkfASoT3cbCY1iDitFYJRzjuak/IsNwUZOZNfKJGMObNZRHSehXxMLNJWRN lQsAzWVFvlXhHNDuJf1joCJ+NyxlbePkUcdLmOPMD81Mpnqhnqp9z+vvUtWkKaQ3 lM5D96D/g6qmxYbuBrdCOlcglyRNhk3p -----END CERTIFICATE-----Generated at Wed May 7 16:26:24 2025 by rpki-client