$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: yG1S+CdPa7hKoaBIM0RNhq34ItnOYKjgvC+nKfKXLxU= Subject key identifier: 75:37:D8:69:82:3A:9D:E9:87:81:7D:0F:36:58:1C:1A:AE:85:62:0F Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Certificate serial: 47ED7E8752C86979EA96088C60390C0B0BB07390 Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa Signing time: Tue 06 May 2025 08:50:50 +0000 ROA not before: Tue 06 May 2025 08:45:50 +0000 ROA not after: Tue 05 May 2026 08:50:50 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e10::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 21:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ed:7e:87:52:c8:69:79:ea:96:08:8c:60:39:0c:0b:0b:b0:73:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Validity Not Before: May 6 08:45:50 2025 GMT Not After : May 5 08:50:50 2026 GMT Subject: CN=7537D869823A9DE987817D0F36581C1AAE85620F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0c:50:e8:1e:e7:39:2e:00:75:9f:1e:a7:06: ba:f5:17:69:72:48:ef:bf:5a:2f:3e:16:19:10:61: e8:74:90:06:15:4b:04:b6:85:13:9d:26:e6:5a:b7: 2f:3e:22:bb:21:f4:8e:bd:fb:cf:d3:af:3e:59:da: 5a:86:03:71:6f:0d:ef:19:b6:16:48:dd:d2:7c:0d: a9:1a:04:52:ac:99:13:69:aa:ec:8e:55:ea:42:8f: b9:cb:5c:1d:a6:eb:74:bb:92:38:8d:b7:b6:90:dc: 21:de:b6:77:f3:49:50:5c:b6:af:57:97:98:1f:42: ba:87:e5:26:17:79:ab:c9:c3:f0:d6:5e:8c:df:4d: 49:8a:9b:96:7d:bb:df:06:1a:54:f4:51:c8:9b:3b: ee:7d:45:fe:cd:7e:06:29:3f:4b:e2:09:84:5d:32: 0d:7f:0e:77:d2:54:c4:b3:e8:5c:be:c7:e4:e5:49: 47:52:75:a5:d4:7d:cf:0a:be:3b:87:64:8a:26:93: 93:87:a9:eb:02:67:55:e1:84:e5:33:ad:56:ef:40: 02:f7:42:92:99:10:41:1d:1c:3a:a3:b4:9a:f9:96: 43:4e:15:af:1f:af:c5:0d:5f:b1:0a:48:83:d5:94: 6a:d6:84:7b:14:08:38:58:05:7e:ae:db:58:e1:d8: b5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:37:D8:69:82:3A:9D:E9:87:81:7D:0F:36:58:1C:1A:AE:85:62:0F X509v3 Authority Key Identifier: keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e10::/44 Signature Algorithm: sha256WithRSAEncryption 51:e4:94:0d:f4:fe:f6:42:bf:c8:80:01:e2:03:c8:de:1e:df: ce:28:bf:5a:8b:0e:22:28:23:45:42:82:fd:7c:5a:43:41:72: 61:4c:e0:c5:f4:2a:1b:c3:bc:36:98:92:19:e1:66:65:77:a0: 5b:29:f4:5e:c6:d2:8c:7b:e2:4d:b2:52:ee:6f:7e:5f:30:70: 2a:f5:c4:ac:1a:5a:9d:3f:41:52:ac:09:33:f9:5c:f1:eb:57: 5c:a2:d2:d6:03:31:a2:ca:be:75:9c:c0:19:e8:84:fe:6c:08: fb:49:e9:8f:bd:37:2b:c1:4b:dd:10:91:d4:b7:e1:ab:28:e7: e3:d9:78:ab:bc:79:97:c0:5b:3a:9b:12:a4:85:88:3a:e9:ea: af:68:ef:20:5f:6e:85:57:4e:d4:fd:e5:8e:24:4c:94:0e:20: 35:69:a3:8e:0c:bd:8c:db:9d:af:34:17:51:36:fe:8d:9d:39: d1:60:40:5d:85:4c:cd:53:af:c5:6f:79:bc:77:9c:e3:c5:5d: a5:b2:34:29:b5:fb:45:3e:4f:6b:70:4f:70:f9:cd:75:32:83: 0a:70:2d:52:44:32:17:29:a8:28:57:54:ea:a9:9f:60:a7:b5: a0:ab:28:89:f8:80:2a:92:b9:21:dc:a8:76:94:c1:45:5a:8b: bf:c5:9f:66 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUR+1+h1LIaXnqlgiMYDkMCwuwc5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1 NzU2QjE5QzAeFw0yNTA1MDYwODQ1NTBaFw0yNjA1MDUwODUwNTBaMDMxMTAvBgNV BAMTKDc1MzdEODY5ODIzQTlERTk4NzgxN0QwRjM2NTgxQzFBQUU4NTYyMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHDFDoHuc5LgB1nx6nBrr1F2ly SO+/Wi8+FhkQYeh0kAYVSwS2hROdJuZaty8+Irsh9I69+8/Trz5Z2lqGA3FvDe8Z thZI3dJ8DakaBFKsmRNpquyOVepCj7nLXB2m63S7kjiNt7aQ3CHetnfzSVBctq9X l5gfQrqH5SYXeavJw/DWXozfTUmKm5Z9u98GGlT0UcibO+59Rf7NfgYpP0viCYRd Mg1/DnfSVMSz6Fy+x+TlSUdSdaXUfc8KvjuHZIomk5OHqesCZ1XhhOUzrVbvQAL3 QpKZEEEdHDqjtJr5lkNOFa8fr8UNX7EKSIPVlGrWhHsUCDhYBX6u21jh2LWFAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUdTfYaYI6nemHgX0PNlgcGq6FYg8wHwYDVR0j BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTMxMzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY4QMA0GCSqGSIb3DQEB CwUAA4IBAQBR5JQN9P72Qr/IgAHiA8jeHt/OKL9aiw4iKCNFQoL9fFpDQXJhTODF 9Cobw7w2mJIZ4WZld6BbKfRextKMe+JNslLub35fMHAq9cSsGlqdP0FSrAkz+Vzx 61dcotLWAzGiyr51nMAZ6IT+bAj7SemPvTcrwUvdEJHUt+GrKOfj2XirvHmXwFs6 mxKkhYg66eqvaO8gX26FV07U/eWOJEyUDiA1aaOODL2M252vNBdRNv6NnTnRYEBd hUzNU6/Fb3m8d5zjxV2lsjQptftFPk9rcE9w+c11MoMKcC1SRDIXKagoV1TqqZ9g p7WgqyiJ+IAqkrkh3Kh2lMFFWou/xZ9m -----END CERTIFICATE-----Generated at Thu May 8 11:37:01 2025 by rpki-client