$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: qHv/wyYZXsswsJSNS9kpm6gHIJtrfyHSD8CTsiCps04= Subject key identifier: C9:E1:56:4D:6E:DA:1F:EC:66:7C:B2:6D:B4:B0:68:EB:E7:F3:55:69 Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Certificate serial: 5EFF44A2CDC4CD3ED2FCCC14C00CED2132A1C90B Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa Signing time: Tue 06 May 2025 08:50:51 +0000 ROA not before: Tue 06 May 2025 08:45:51 +0000 ROA not after: Tue 05 May 2026 08:50:51 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8ee0::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 12:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ff:44:a2:cd:c4:cd:3e:d2:fc:cc:14:c0:0c:ed:21:32:a1:c9:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Validity Not Before: May 6 08:45:51 2025 GMT Not After : May 5 08:50:51 2026 GMT Subject: CN=C9E1564D6EDA1FEC667CB26DB4B068EBE7F35569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:25:84:f6:c0:2d:50:c3:54:5e:c7:44:32: f2:3a:00:b6:f8:b2:1e:5b:ed:43:5a:d8:89:35:8f: 51:21:f5:5b:33:df:a8:f9:43:d3:23:cb:70:01:58: e6:f9:32:bb:e3:e3:14:eb:1a:c6:80:56:f1:29:4a: 63:76:26:ef:90:05:c2:fe:dc:78:47:96:82:94:9c: f2:a0:a4:1f:0b:2a:03:6d:ef:ad:5b:f1:06:50:1c: cc:cb:a7:59:c5:cb:42:f5:a0:84:b4:92:6d:09:61: d8:a5:59:f0:73:ed:08:14:66:d1:54:b5:fd:93:88: e4:c5:d6:33:c8:a3:e7:2a:cc:21:5f:ec:4e:e1:30: 7a:73:33:ac:67:15:44:66:5d:fc:b4:c5:fd:55:e5: 44:b0:8c:f0:e1:6f:e0:da:52:e5:d7:e9:d5:15:36: 1e:b8:58:40:22:c3:68:86:a0:ed:41:b2:de:c5:7d: 4b:d8:9a:73:e8:55:a3:71:26:7e:b7:cc:d0:2d:71: 2c:cd:75:94:32:14:9a:65:28:cf:1e:c9:f4:fd:b8: 8d:fe:6e:1f:9e:8a:f6:e9:59:13:ed:de:0d:2c:2b: 0c:0f:48:be:74:26:fc:54:4c:90:60:8e:70:d3:c1: 94:68:ec:25:f8:44:f6:af:ec:51:6f:5a:46:cc:0f: 60:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E1:56:4D:6E:DA:1F:EC:66:7C:B2:6D:B4:B0:68:EB:E7:F3:55:69 X509v3 Authority Key Identifier: keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8ee0::/44 Signature Algorithm: sha256WithRSAEncryption 56:d5:fb:a9:4f:6c:6b:cf:7a:04:3d:ce:5f:79:f1:48:cc:b7: fb:38:a2:a5:31:56:e4:93:4e:2b:d7:9c:e4:80:1c:cc:47:86: 6d:77:ed:29:ed:f2:6a:bd:c6:68:28:d8:e0:15:3e:45:e6:f1: 24:fb:06:58:e1:97:3d:ff:0a:a2:76:c6:be:d4:23:b9:6f:2d: 1e:4e:ca:08:5a:ab:2a:ac:87:88:7a:ee:9c:27:51:85:bf:36: 61:f7:1b:60:8a:37:fe:91:0e:61:c1:ce:a1:c3:a3:c4:20:3c: 3e:e3:0e:d1:40:3e:6e:a7:fd:e4:6f:c7:29:5c:16:b0:d6:f6: 3f:6c:ac:a3:b7:75:f0:3d:8e:a5:b2:2f:66:2a:cf:43:7f:6a: 64:a3:cc:c0:21:c7:e1:36:99:ce:23:78:c9:bb:56:e7:15:2b: ba:d2:43:d3:c0:4d:c0:b0:3a:d1:e6:49:ca:71:51:8e:1d:59: 4b:c7:5c:76:9d:c0:07:59:d8:c4:82:80:05:0a:e6:26:6a:da: 26:de:95:49:8c:af:94:0b:43:80:5d:61:ea:f6:08:f4:89:87: 6d:dd:56:c3:33:5d:9e:27:7e:e1:d6:03:09:25:cf:1c:c8:39: 75:c9:c3:c8:3e:39:fb:e0:83:46:3a:3c:37:1f:5d:72:c2:97: bf:ad:93:64 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUXv9Eos3EzT7S/MwUwAztITKhyQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1 NzU2QjE5QzAeFw0yNTA1MDYwODQ1NTFaFw0yNjA1MDUwODUwNTFaMDMxMTAvBgNV BAMTKEM5RTE1NjRENkVEQTFGRUM2NjdDQjI2REI0QjA2OEVCRTdGMzU1NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7tiWE9sAtUMNUXsdEMvI6ALb4 sh5b7UNa2Ik1j1Eh9Vsz36j5Q9Mjy3ABWOb5Mrvj4xTrGsaAVvEpSmN2Ju+QBcL+ 3HhHloKUnPKgpB8LKgNt761b8QZQHMzLp1nFy0L1oIS0km0JYdilWfBz7QgUZtFU tf2TiOTF1jPIo+cqzCFf7E7hMHpzM6xnFURmXfy0xf1V5USwjPDhb+DaUuXX6dUV Nh64WEAiw2iGoO1Bst7FfUvYmnPoVaNxJn63zNAtcSzNdZQyFJplKM8eyfT9uI3+ bh+eivbpWRPt3g0sKwwPSL50JvxUTJBgjnDTwZRo7CX4RPav7FFvWkbMD2AVAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUyeFWTW7aH+xmfLJttLBo6+fzVWkwHwYDVR0j BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTY1MzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY7gMA0GCSqGSIb3DQEB CwUAA4IBAQBW1fupT2xrz3oEPc5fefFIzLf7OKKlMVbkk04r15zkgBzMR4Ztd+0p 7fJqvcZoKNjgFT5F5vEk+wZY4Zc9/wqidsa+1CO5by0eTsoIWqsqrIeIeu6cJ1GF vzZh9xtgijf+kQ5hwc6hw6PEIDw+4w7RQD5up/3kb8cpXBaw1vY/bKyjt3XwPY6l si9mKs9Df2pko8zAIcfhNpnOI3jJu1bnFSu60kPTwE3AsDrR5knKcVGOHVlLx1x2 ncAHWdjEgoAFCuYmatom3pVJjK+UC0OAXWHq9gj0iYdt3VbDM12eJ37h1gMJJc8c yDl1ycPIPjn74INGOjw3H11ywpe/rZNk -----END CERTIFICATE-----Generated at Wed May 7 21:02:44 2025 by rpki-client