$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: 61Wlslwfwyj1RZBuP6KE9WcNAuJHWaRU8dD2Oeu5eIE= Subject key identifier: 82:1C:CA:8F:CA:A5:39:D1:51:E8:98:D3:4D:C1:42:5C:B0:92:A5:D0 Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Certificate serial: 62820A2890A634FF555E320A74846210796ECAC3 Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa Signing time: Tue 06 May 2025 08:50:51 +0000 ROA not before: Tue 06 May 2025 08:45:51 +0000 ROA not after: Tue 05 May 2026 08:50:51 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8ea0::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 02:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:82:0a:28:90:a6:34:ff:55:5e:32:0a:74:84:62:10:79:6e:ca:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Validity Not Before: May 6 08:45:51 2025 GMT Not After : May 5 08:50:51 2026 GMT Subject: CN=821CCA8FCAA539D151E898D34DC1425CB092A5D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ca:58:88:02:44:01:b6:4a:8d:90:ff:9f:84: 0c:57:ef:e0:5f:6e:01:49:3e:0a:41:00:ca:fe:78: d1:42:d8:3b:0b:59:3f:69:b5:d5:1e:12:b7:de:63: 42:a2:09:ba:37:17:35:6a:9d:49:71:0d:4b:e8:7a: 88:60:2d:a2:91:65:93:19:3f:43:37:56:1d:f7:3d: 41:0a:71:dd:95:79:f1:de:1f:f4:2a:8f:d7:3a:70: 49:d9:d6:a1:23:b5:45:48:5e:fc:96:86:5d:d2:a3: cb:7f:92:c0:25:af:ff:4f:bf:aa:eb:e7:96:9a:65: 93:c5:9d:88:8f:a7:34:fd:fb:2f:b5:6e:83:ba:74: 78:47:e4:4d:b5:cd:d7:de:2c:06:9b:f7:02:ba:9d: ed:80:1b:b4:fb:2e:18:a8:ca:cb:5e:61:e4:f2:dd: 17:54:f5:ff:46:a2:34:ac:be:fc:f0:c4:97:15:3f: 88:be:1e:2c:79:e0:1c:e7:ac:38:bd:1c:fd:e9:ff: 2b:c0:bd:a5:a0:42:7f:77:b2:6b:88:af:4e:f6:19: 25:96:d0:7e:52:ae:e2:11:de:84:2d:73:d7:9a:83: 0c:47:0a:05:23:dc:63:81:eb:13:58:b1:88:85:4d: d8:a4:67:c3:32:06:21:5a:c6:e4:fa:f9:bd:00:1c: 51:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1C:CA:8F:CA:A5:39:D1:51:E8:98:D3:4D:C1:42:5C:B0:92:A5:D0 X509v3 Authority Key Identifier: keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8ea0::/44 Signature Algorithm: sha256WithRSAEncryption 5b:b1:6a:7d:81:3f:e1:29:29:bf:7e:b4:72:68:65:25:f0:17: fc:67:b3:98:03:a8:1c:d3:3d:4a:ce:62:1e:99:26:e7:0e:d2: 72:50:11:ee:94:67:92:62:88:1e:9d:ea:4f:1b:c6:7d:d1:f5: e3:34:9a:3f:14:2c:47:d8:bb:ac:d3:b6:fc:07:ca:0e:42:da: 99:8c:2e:bc:4e:24:9e:70:97:49:2c:18:17:03:b7:f7:40:70: f3:5f:36:9b:20:2f:bb:f4:01:5f:b1:83:b9:5b:38:80:bd:d4: 12:7f:ab:8b:e3:7f:be:c1:4d:d0:fc:16:76:d3:b5:16:c8:57: 9a:55:37:80:d7:7a:e9:73:c2:8c:db:31:1d:d6:b5:32:2e:62: 86:86:43:e1:f6:a1:34:f9:64:63:8f:f1:31:3b:6e:95:ba:c8: 16:1f:c6:65:84:73:e9:8c:0c:b1:05:b1:2d:92:9d:13:c3:ca: c7:6b:5f:12:b5:91:a1:55:cb:9c:aa:95:11:c8:cf:bc:2e:d4: 47:ae:e0:94:17:1a:b5:77:ea:47:aa:ef:a3:f5:e6:fe:06:f9: d4:bd:21:df:79:94:13:ac:ed:f0:05:ac:7a:3d:0c:95:a4:9e: 29:55:e4:9d:3f:e5:8c:d7:d0:a8:38:e7:c6:c6:64:e7:84:df: c7:f4:4a:24 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUYoIKKJCmNP9VXjIKdIRiEHluysMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1 NzU2QjE5QzAeFw0yNTA1MDYwODQ1NTFaFw0yNjA1MDUwODUwNTFaMDMxMTAvBgNV BAMTKDgyMUNDQThGQ0FBNTM5RDE1MUU4OThEMzREQzE0MjVDQjA5MkE1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCyliIAkQBtkqNkP+fhAxX7+Bf bgFJPgpBAMr+eNFC2DsLWT9ptdUeErfeY0KiCbo3FzVqnUlxDUvoeohgLaKRZZMZ P0M3Vh33PUEKcd2VefHeH/Qqj9c6cEnZ1qEjtUVIXvyWhl3So8t/ksAlr/9Pv6rr 55aaZZPFnYiPpzT9+y+1boO6dHhH5E21zdfeLAab9wK6ne2AG7T7LhioysteYeTy 3RdU9f9GojSsvvzwxJcVP4i+Hix54BznrDi9HP3p/yvAvaWgQn93smuIr072GSWW 0H5SruIR3oQtc9eagwxHCgUj3GOB6xNYsYiFTdikZ8MyBiFaxuT6+b0AHFEFAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUghzKj8qlOdFR6JjTTcFCXLCSpdAwHwYDVR0j BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTYxMzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY6gMA0GCSqGSIb3DQEB CwUAA4IBAQBbsWp9gT/hKSm/frRyaGUl8Bf8Z7OYA6gc0z1KzmIemSbnDtJyUBHu lGeSYogenepPG8Z90fXjNJo/FCxH2Lus07b8B8oOQtqZjC68TiSecJdJLBgXA7f3 QHDzXzabIC+79AFfsYO5WziAvdQSf6uL43++wU3Q/BZ207UWyFeaVTeA13rpc8KM 2zEd1rUyLmKGhkPh9qE0+WRjj/ExO26VusgWH8ZlhHPpjAyxBbEtkp0Tw8rHa18S tZGhVcucqpURyM+8LtRHruCUFxq1d+pHqu+j9eb+BvnUvSHfeZQTrO3wBax6PQyV pJ4pVeSdP+WM19CoOOfGxmTnhN/H9Eok -----END CERTIFICATE-----Generated at Thu May 8 18:38:55 2025 by rpki-client