$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa File: 326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (raw, json) Hash identifier: NOrJOyMxOJke+xSkPaEjrzeDYC6qpAzFuARa/CDSvCY= Subject key identifier: 93:CC:45:EB:01:F0:8F:53:A0:F6:51:BE:44:97:C3:87:16:08:59:87 Certificate issuer: /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB Certificate serial: 17A0B137089D27384A475B17BAF2A5A610A80EE8 Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa Signing time: Tue 24 Dec 2024 15:12:18 +0000 ROA not before: Tue 24 Dec 2024 15:07:18 +0000 ROA not after: Tue 23 Dec 2025 15:12:18 +0000 asID: 152671 IP address blocks: 2a06:9f81:3042::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 12:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a0:b1:37:08:9d:27:38:4a:47:5b:17:ba:f2:a5:a6:10:a8:0e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB Validity Not Before: Dec 24 15:07:18 2024 GMT Not After : Dec 23 15:12:18 2025 GMT Subject: CN=93CC45EB01F08F53A0F651BE4497C38716085987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2a:f1:ed:78:50:77:9b:f3:ee:eb:3f:a3:83: 2f:d7:38:04:ee:a5:67:e1:a2:61:e7:de:b9:ba:26: 96:95:ec:22:6a:d1:22:10:a3:e1:15:8c:20:a4:20: bd:a4:6d:45:65:a6:f9:98:ae:3a:a9:7b:65:1b:d0: 6a:47:70:ab:89:a7:04:3b:44:26:65:f6:09:9a:87: 19:4a:b2:9f:d8:ad:90:1c:3f:c2:34:2a:d0:9b:9f: 4e:e8:03:e7:0a:55:4b:5d:ba:5b:99:31:e9:e7:c0: 0f:b6:fe:0d:4a:01:fd:4f:e7:42:34:44:1f:52:2c: 8f:73:a2:55:3d:d3:6c:26:40:53:35:f5:21:f6:29: 5d:6f:23:0d:75:30:f4:5e:1a:d7:6f:81:d1:a8:b6: db:11:9a:3b:36:d3:27:60:f1:33:c3:96:ac:fc:a0: 9b:bf:ce:f5:87:ef:81:12:17:3a:55:63:b1:71:3b: 93:c4:aa:8b:b4:7d:73:a8:10:48:7d:01:2c:14:3c: 75:bb:a2:48:f6:be:fa:81:d6:02:e8:8e:cc:2f:d6: 3b:91:e7:84:57:7d:9c:8c:bc:06:71:3b:ff:df:9b: b8:76:82:08:57:e2:fc:4a:cd:82:a9:9d:c9:2a:05: 84:a7:1f:c3:fb:de:bb:0c:b0:b7:cb:10:97:63:bd: 5d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CC:45:EB:01:F0:8F:53:A0:F6:51:BE:44:97:C3:87:16:08:59:87 X509v3 Authority Key Identifier: keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3042::/48 Signature Algorithm: sha256WithRSAEncryption 88:47:bb:bc:fd:da:5b:c6:43:3b:8d:b0:61:7a:46:43:cc:42: ae:7f:e9:97:2a:d2:08:90:3b:52:21:53:f7:7f:68:52:39:d6: c9:68:eb:9d:bd:7a:97:e7:b2:b8:ef:f3:73:95:35:56:2f:08: 33:08:1e:b0:ea:60:27:6a:41:d3:9d:95:68:58:3e:80:97:40: 78:ea:94:7b:41:71:31:7f:2a:07:0a:78:3d:4f:08:10:87:31: 70:1c:b2:1c:20:f4:58:6c:cf:02:8f:03:e3:30:3d:fc:6c:2a: 32:11:38:61:d3:c4:81:35:c5:fa:3e:25:92:32:fa:12:ab:36: 30:7d:3f:d5:76:94:4d:13:f7:47:94:e8:d3:8b:98:a1:55:91: 6b:3e:91:b9:6c:09:1b:db:7c:67:bd:34:a6:5c:ed:44:6c:93: 55:19:7b:a2:05:e5:3c:14:7b:3b:af:b1:c8:e3:e2:2b:f9:59: 0c:d7:e2:e2:49:d3:f2:c9:59:03:92:d5:e2:df:86:47:09:65: 11:b7:cd:cc:a4:04:c1:39:a5:a6:c3:7e:b7:14:c5:3a:91:4d: 65:93:40:4e:fa:d0:95:73:48:a4:e4:5f:a4:53:0a:51:b4:08: 6e:e5:8c:54:31:94:ee:66:e4:91:f4:fa:2a:82:a6:ed:5b:df: 60:91:65:47 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUF6CxNwidJzhKR1sXuvKlphCoDugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc1RTVGMzY1MjQzMENFRjk2RTFFMEJEMTZEREFDNDA3 MjY4ODlFQjAeFw0yNDEyMjQxNTA3MThaFw0yNTEyMjMxNTEyMThaMDMxMTAvBgNV BAMTKDkzQ0M0NUVCMDFGMDhGNTNBMEY2NTFCRTQ0OTdDMzg3MTYwODU5ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQKvHteFB3m/Pu6z+jgy/XOATu pWfhomHn3rm6JpaV7CJq0SIQo+EVjCCkIL2kbUVlpvmYrjqpe2Ub0GpHcKuJpwQ7 RCZl9gmahxlKsp/YrZAcP8I0KtCbn07oA+cKVUtduluZMennwA+2/g1KAf1P50I0 RB9SLI9zolU902wmQFM19SH2KV1vIw11MPReGtdvgdGottsRmjs20ydg8TPDlqz8 oJu/zvWH74ESFzpVY7FxO5PEqou0fXOoEEh9ASwUPHW7okj2vvqB1gLojswv1juR 54RXfZyMvAZxO//fm7h2gghX4vxKzYKpnckqBYSnH8P73rsMsLfLEJdjvV1xAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUk8xF6wHwj1Og9lG+RJfDhxYIWYcwHwYDVR0j BBgwFoAUt15fNlJDDO+W4eC9Ft2sQHJoieswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4 N2YyLzAvQjc1RTVGMzY1MjQzMENFRjk2RTFFMEJEMTZEREFDNDA3MjY4ODlFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0I3NUU1RjM2NTI0MzBD RUY5NkUxRTBCRDE2RERBQzQwNzI2ODg5RUIuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2Q2NGFjOTQxLTVhN2MtNDJjZi1iNjRiLTBiMjg4ZjE4ODdm Mi8wLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDM0MzIzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMTM1MzIzNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBp+BMEIwDQYJKoZIhvcN AQELBQADggEBAIhHu7z92lvGQzuNsGF6RkPMQq5/6Zcq0giQO1IhU/d/aFI51slo 6529epfnsrjv83OVNVYvCDMIHrDqYCdqQdOdlWhYPoCXQHjqlHtBcTF/KgcKeD1P CBCHMXAcshwg9FhszwKPA+MwPfxsKjIROGHTxIE1xfo+JZIy+hKrNjB9P9V2lE0T 90eU6NOLmKFVkWs+kblsCRvbfGe9NKZc7URsk1UZe6IF5TwUezuvscjj4iv5WQzX 4uJJ0/LJWQOS1eLfhkcJZRG3zcykBME5pabDfrcUxTqRTWWTQE760JVzSKTkX6RT ClG0CG7ljFQxlO5m5JH0+iqCpu1b32CRZUc= -----END CERTIFICATE-----Generated at Mon May 12 02:07:24 2025 by rpki-client