$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: nBLMo/V7Wetpj9sQkErzk6cUsohlQubKqGemhMtWiGI= Subject key identifier: 88:A0:1E:A0:FE:56:29:76:35:06:CA:30:01:CC:57:6B:75:38:DA:EE Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Certificate serial: 050EEEAAC3ADEEE7B0104E2259E9D9E87D060502 Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa Signing time: Tue 06 May 2025 08:50:50 +0000 ROA not before: Tue 06 May 2025 08:45:50 +0000 ROA not after: Tue 05 May 2026 08:50:50 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8ec0::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 12:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:0e:ee:aa:c3:ad:ee:e7:b0:10:4e:22:59:e9:d9:e8:7d:06:05:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Validity Not Before: May 6 08:45:50 2025 GMT Not After : May 5 08:50:50 2026 GMT Subject: CN=88A01EA0FE5629763506CA3001CC576B7538DAEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:49:d3:5b:a9:39:de:04:cd:21:4e:21:6e:25: 14:5a:be:1e:8f:c4:2f:a5:ca:8f:4e:be:fa:4d:86: b6:e0:4d:1d:41:b6:58:7b:22:2d:a1:79:0a:f7:5b: f7:3d:5a:fe:8a:98:15:32:67:28:c2:71:c1:cd:6e: 9d:b2:a6:7c:8f:2f:33:eb:9f:07:e4:a0:da:ab:1a: dd:2d:59:1b:18:da:b9:cd:d8:c7:3b:f9:6f:ac:9f: 5b:46:aa:43:0d:c3:24:d1:ae:13:ac:ce:9c:76:c8: c2:93:d9:42:1c:c2:ed:d8:17:ed:9b:79:4b:9d:d7: 80:cd:26:cd:71:ba:da:c3:26:1a:15:27:12:0e:21: e5:dc:58:4e:7f:c0:f0:b5:df:1f:bc:be:03:e5:49: 11:6e:3e:dc:90:5a:84:2d:96:13:f7:ff:df:ce:94: 4f:9e:2c:fe:8b:eb:1e:ab:db:57:5d:38:f6:ce:71: f1:2a:4b:94:15:e9:0f:95:b3:12:e5:2d:84:24:49: 82:87:90:00:0c:64:3b:75:8f:8c:97:f8:1b:26:87: 3d:8b:3a:e6:fb:cc:db:ec:2a:03:5e:00:fd:8c:f2: 13:28:e3:4f:9e:60:b6:e2:06:51:a0:1e:91:af:9f: e0:9c:22:ea:13:a1:10:db:86:76:ec:3d:5d:f6:a6: 98:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A0:1E:A0:FE:56:29:76:35:06:CA:30:01:CC:57:6B:75:38:DA:EE X509v3 Authority Key Identifier: keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8ec0::/44 Signature Algorithm: sha256WithRSAEncryption 46:4f:9d:c5:86:16:43:3b:fd:9b:97:eb:94:7c:88:db:41:26: 8b:15:6b:6c:9f:44:c0:74:e7:8a:8e:4a:9f:c4:44:cf:38:8c: 62:89:00:c2:41:50:dd:a1:0a:d3:81:c6:f0:21:9e:8a:c1:f9: 1a:51:7f:9b:5c:d9:dc:61:43:f4:b2:92:29:77:28:c0:58:ba: b5:d6:9a:68:08:54:4e:16:de:c3:a7:f0:df:30:eb:bc:d2:c6: 59:02:ba:80:5f:0b:66:bf:78:36:7f:31:8c:5e:d3:d4:eb:b6: bb:57:26:2d:d3:de:db:1a:7e:b4:25:d0:f3:91:41:c5:be:06: 00:10:ce:88:bb:6b:b2:d7:8c:a9:d6:6b:5b:f9:68:d2:88:dc: c1:72:93:87:59:86:0c:62:6f:c3:80:b4:b8:7c:5c:03:da:2b: c9:c0:46:75:3c:91:b9:55:3a:bd:0c:57:17:05:e3:ef:6b:a3: 68:9d:49:6b:bf:fc:f7:31:ef:72:6f:0c:c0:0f:0e:28:41:0c: 8d:0a:42:a2:3e:1d:76:0c:2c:d7:29:69:89:88:cb:e0:1e:71: 64:af:8c:f6:62:c2:2b:94:fd:a6:85:45:3f:a0:ee:c3:5c:71: db:29:da:0a:e2:7c:05:fa:c4:60:02:c1:4e:e9:60:d0:4b:26: e8:11:0b:17 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUBQ7uqsOt7uewEE4iWenZ6H0GBQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1 NzU2QjE5QzAeFw0yNTA1MDYwODQ1NTBaFw0yNjA1MDUwODUwNTBaMDMxMTAvBgNV BAMTKDg4QTAxRUEwRkU1NjI5NzYzNTA2Q0EzMDAxQ0M1NzZCNzUzOERBRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJSdNbqTneBM0hTiFuJRRavh6P xC+lyo9OvvpNhrbgTR1Btlh7Ii2heQr3W/c9Wv6KmBUyZyjCccHNbp2ypnyPLzPr nwfkoNqrGt0tWRsY2rnN2Mc7+W+sn1tGqkMNwyTRrhOszpx2yMKT2UIcwu3YF+2b eUud14DNJs1xutrDJhoVJxIOIeXcWE5/wPC13x+8vgPlSRFuPtyQWoQtlhP3/9/O lE+eLP6L6x6r21ddOPbOcfEqS5QV6Q+VsxLlLYQkSYKHkAAMZDt1j4yX+Bsmhz2L Oub7zNvsKgNeAP2M8hMo40+eYLbiBlGgHpGvn+CcIuoToRDbhnbsPV32ppiXAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUiKAeoP5WKXY1BsowAcxXa3U42u4wHwYDVR0j BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTYzMzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY7AMA0GCSqGSIb3DQEB CwUAA4IBAQBGT53FhhZDO/2bl+uUfIjbQSaLFWtsn0TAdOeKjkqfxETPOIxiiQDC QVDdoQrTgcbwIZ6KwfkaUX+bXNncYUP0spIpdyjAWLq11ppoCFROFt7Dp/DfMOu8 0sZZArqAXwtmv3g2fzGMXtPU67a7VyYt097bGn60JdDzkUHFvgYAEM6Iu2uy14yp 1mtb+WjSiNzBcpOHWYYMYm/DgLS4fFwD2ivJwEZ1PJG5VTq9DFcXBePva6NonUlr v/z3Me9ybwzADw4oQQyNCkKiPh12DCzXKWmJiMvgHnFkr4z2YsIrlP2mhUU/oO7D XHHbKdoK4nwF+sRgAsFO6WDQSyboEQsX -----END CERTIFICATE-----Generated at Wed May 7 23:50:37 2025 by rpki-client