$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: LvwmcCOHOuF+k8ErhtWb0ds90bf4Are6ExjJ++KY4LQ= Subject key identifier: 1C:B0:02:5C:CC:22:09:66:94:1A:86:99:57:F8:23:4A:C1:13:B3:1A Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Certificate serial: 75629C57FE034A08B0C898EC1DD4F13FD134BB48 Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa Signing time: Tue 06 May 2025 08:50:51 +0000 ROA not before: Tue 06 May 2025 08:45:51 +0000 ROA not after: Tue 05 May 2026 08:50:51 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8ef0::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 02:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:62:9c:57:fe:03:4a:08:b0:c8:98:ec:1d:d4:f1:3f:d1:34:bb:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Validity Not Before: May 6 08:45:51 2025 GMT Not After : May 5 08:50:51 2026 GMT Subject: CN=1CB0025CCC220966941A869957F8234AC113B31A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:9d:b4:54:ee:be:f4:85:3b:df:3d:35:51: 01:5b:9a:0e:c4:0b:fd:be:4d:91:18:54:a2:c4:2c: 97:a5:be:ff:cb:1b:d6:f0:12:41:ba:29:05:7f:d7: 6b:87:ac:60:3e:f8:02:aa:ad:6c:27:1f:97:f2:45: 86:4d:70:3d:a6:2c:e2:d5:c8:4b:40:25:2d:e1:64: 7f:4b:53:65:63:9b:b0:20:a5:da:05:58:0b:6b:d9: 17:ea:95:53:ab:27:fc:40:16:7c:48:7c:91:41:bf: 28:68:6a:f1:11:97:7d:f6:24:89:e3:1e:2b:69:bb: 8f:4c:f0:28:21:7e:2c:f5:09:a5:38:eb:1d:10:c5: 5e:3f:69:89:9a:6f:4f:71:86:e5:3f:3c:d9:2a:64: 8a:09:9f:a5:c6:06:72:7c:80:db:09:56:d7:b0:39: 65:e5:8f:e2:64:cc:dc:19:35:ec:6c:8b:98:41:67: 8f:c8:34:0e:89:7c:72:54:8a:e1:d8:4b:ed:14:c2: 34:0a:57:fa:bb:99:05:d7:79:d1:3d:d7:c7:2d:5f: 5f:81:80:c3:42:7d:ad:e7:8d:8c:98:b9:eb:17:3a: 8e:fd:7b:cb:5f:b9:46:a0:f4:8f:14:24:f1:f1:dd: 82:6d:d6:0e:72:8f:97:aa:8b:0a:e0:bc:cc:39:ef: 4a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B0:02:5C:CC:22:09:66:94:1A:86:99:57:F8:23:4A:C1:13:B3:1A X509v3 Authority Key Identifier: keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8ef0::/44 Signature Algorithm: sha256WithRSAEncryption 54:f0:6c:a4:fd:79:96:1f:76:1f:9f:56:a7:c3:06:dd:71:23: 92:ee:08:41:41:36:16:33:56:de:f8:32:25:70:2e:09:6a:dc: ff:df:d1:ef:39:09:c5:d4:e1:6d:05:2d:9e:bd:3f:27:79:41: d5:8c:61:9d:7f:54:d0:54:17:ac:c4:15:ff:f1:7a:3c:42:2e: 3b:34:9e:b2:21:c0:d3:6c:ff:87:3b:a9:c6:19:bc:90:1a:fb: 53:0f:e7:7e:87:09:99:f0:27:df:34:ab:b3:11:e7:2a:4e:63: 2a:ce:86:db:6d:56:b0:c0:ed:31:53:31:21:67:a9:de:b7:ce: c5:40:b8:5d:3e:2a:ec:fe:c5:1b:f5:04:ec:5e:47:24:44:6f: 4b:5e:28:38:78:96:59:dc:e2:80:c6:07:82:fd:86:1a:92:ad: 9b:26:14:27:73:2e:ef:b5:10:11:05:a8:9b:02:b1:35:ed:39: 40:43:2b:f4:4b:4d:33:57:f9:e8:b1:0a:f0:28:13:80:3b:67: 50:df:61:8f:f2:da:e5:31:80:33:f8:7d:75:bd:4e:fd:26:aa: 46:ac:f9:00:0a:db:eb:b3:82:49:a0:20:f3:9a:2f:ca:c7:ad: 91:0b:54:cb:1c:16:41:91:8d:e8:d8:85:f9:7f:b1:3f:c0:41: a9:c2:71:43 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUdWKcV/4DSgiwyJjsHdTxP9E0u0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1 NzU2QjE5QzAeFw0yNTA1MDYwODQ1NTFaFw0yNjA1MDUwODUwNTFaMDMxMTAvBgNV BAMTKDFDQjAwMjVDQ0MyMjA5NjY5NDFBODY5OTU3RjgyMzRBQzExM0IzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHt520VO6+9IU73z01UQFbmg7E C/2+TZEYVKLELJelvv/LG9bwEkG6KQV/12uHrGA++AKqrWwnH5fyRYZNcD2mLOLV yEtAJS3hZH9LU2Vjm7AgpdoFWAtr2RfqlVOrJ/xAFnxIfJFBvyhoavERl332JInj Hitpu49M8Cghfiz1CaU46x0QxV4/aYmab09xhuU/PNkqZIoJn6XGBnJ8gNsJVtew OWXlj+JkzNwZNexsi5hBZ4/INA6JfHJUiuHYS+0UwjQKV/q7mQXXedE918ctX1+B gMNCfa3njYyYuesXOo79e8tfuUag9I8UJPHx3YJt1g5yj5eqiwrgvMw570rXAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUHLACXMwiCWaUGoaZV/gjSsETsxowHwYDVR0j BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTY2MzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY7wMA0GCSqGSIb3DQEB CwUAA4IBAQBU8Gyk/XmWH3Yfn1anwwbdcSOS7ghBQTYWM1be+DIlcC4Jatz/39Hv OQnF1OFtBS2evT8neUHVjGGdf1TQVBesxBX/8Xo8Qi47NJ6yIcDTbP+HO6nGGbyQ GvtTD+d+hwmZ8CffNKuzEecqTmMqzobbbVawwO0xUzEhZ6net87FQLhdPirs/sUb 9QTsXkckRG9LXig4eJZZ3OKAxgeC/YYakq2bJhQncy7vtRARBaibArE17TlAQyv0 S00zV/nosQrwKBOAO2dQ32GP8trlMYAz+H11vU79JqpGrPkACtvrs4JJoCDzmi/K x62RC1TLHBZBkY3o2IX5f7E/wEGpwnFD -----END CERTIFICATE-----Generated at Thu May 8 18:59:57 2025 by rpki-client