$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: q6s6QzGI8Dg8GwZedG8yaZBbOpQfVqrWUQvwegW7rlc= Subject key identifier: 67:91:73:EC:03:68:43:19:79:81:26:D6:1D:6A:76:4B:74:F7:9E:36 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 7B39197BA170D2225DEB7701784D241E1C9649E1 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa Signing time: Fri 05 Jun 2026 19:58:12 +0000 ROA not before: Fri 05 Jun 2026 19:53:12 +0000 ROA not after: Fri 04 Jun 2027 19:58:12 +0000 asID: 58339 IP address blocks: 2a05:dfc1:5f25::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 07:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:39:19:7b:a1:70:d2:22:5d:eb:77:01:78:4d:24:1e:1c:96:49:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Jun 5 19:53:12 2026 GMT Not After : Jun 4 19:58:12 2027 GMT Subject: CN=679173EC03684319798126D61D6A764B74F79E36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:a2:b3:ce:ec:e3:12:a7:55:22:02:08:6a: 84:6c:de:91:90:d1:8e:ab:b4:c3:3a:24:5d:f6:43: ab:b2:fe:b3:f9:37:c1:8a:f2:9d:6c:42:5a:82:ac: 63:24:05:5c:ab:c0:c8:f2:00:c8:6c:bf:a4:14:e9: ab:30:02:c7:50:cf:ce:67:06:82:1a:67:ec:1c:c1: ac:71:57:54:d5:54:31:92:a1:f7:cf:f5:39:cc:ae: 51:a0:13:e4:11:db:52:02:4a:46:bf:62:d9:2f:86: 93:09:a0:f7:c6:75:59:57:ee:e0:94:b7:99:39:e1: d7:8c:a9:60:58:5a:26:dd:41:76:f6:e3:70:43:b6: dd:06:dd:a1:d7:f1:a2:97:e2:7e:cf:56:cb:3b:9b: 3e:d4:b1:a1:1c:57:6e:2f:5d:a2:65:3f:07:64:25: b1:c9:53:32:69:0d:0a:8b:2f:56:a3:f5:32:b1:60: 80:96:19:8b:89:86:b4:85:db:3d:ad:e1:f1:44:0b: 7c:9f:54:37:07:d1:52:00:0b:d2:15:05:e9:88:c2: fb:c9:35:6b:9d:e7:3d:75:46:be:f2:58:e2:dd:cd: 21:b5:e6:a1:9d:9e:3c:a6:51:39:bd:5b:d1:da:bf: 32:5d:4d:ea:50:67:0c:e6:0d:3b:4a:22:e8:8d:89: 95:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:91:73:EC:03:68:43:19:79:81:26:D6:1D:6A:76:4B:74:F7:9E:36 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f25::/48 Signature Algorithm: sha256WithRSAEncryption 76:66:bb:76:90:6a:99:1a:67:8e:a3:68:d3:46:ca:00:af:f1: 91:29:6c:a0:3b:7e:c6:73:78:b4:41:d1:b2:d1:87:ce:56:85: 5a:d0:de:00:5a:32:b6:65:46:e2:4b:ad:6d:d0:12:92:c0:20: ef:c1:b2:52:7e:ef:4d:2f:f2:e8:0f:cf:3a:e8:06:6e:12:5e: 7c:44:9b:2f:bc:2a:60:65:bb:fb:b2:3b:1b:3c:c9:bc:a8:e0: 28:75:20:4b:e1:75:2e:af:1d:25:10:91:b5:53:4d:2a:04:48: cc:a5:26:dc:bc:21:2b:15:16:36:17:56:fb:a1:d3:eb:06:40: 40:00:be:0a:cb:13:7c:cc:ba:52:86:35:ef:22:b4:02:fd:fd: fe:62:37:81:1e:bc:72:1e:bb:5b:6b:b3:52:c5:7b:8b:ad:90: 35:3b:73:34:f1:91:06:92:57:0c:c8:8e:69:1a:5f:a6:f2:98: dd:eb:dc:b5:8c:e3:51:b2:16:d1:c6:b3:4a:74:03:40:db:45: e7:21:b5:47:9a:87:07:bf:1e:2b:36:8a:3d:63:fb:12:01:01: ed:7e:2a:02:26:4d:de:6c:46:82:ea:9c:be:46:94:86:3f:d4: 18:29:73:9d:d6:12:25:a8:53:6c:0f:b2:0f:c8:a1:0d:df:5e: 27:e0:0d:05 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUezkZe6Fw0iJd63cBeE0kHhyWSeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjA2MDUxOTUzMTJaFw0yNzA2MDQxOTU4MTJaMDMxMTAvBgNV BAMTKDY3OTE3M0VDMDM2ODQzMTk3OTgxMjZENjFENkE3NjRCNzRGNzlFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxaKzzuzjEqdVIgIIaoRs3pGQ 0Y6rtMM6JF32Q6uy/rP5N8GK8p1sQlqCrGMkBVyrwMjyAMhsv6QU6aswAsdQz85n BoIaZ+wcwaxxV1TVVDGSoffP9TnMrlGgE+QR21ICSka/YtkvhpMJoPfGdVlX7uCU t5k54deMqWBYWibdQXb243BDtt0G3aHX8aKX4n7PVss7mz7UsaEcV24vXaJlPwdk JbHJUzJpDQqLL1aj9TKxYICWGYuJhrSF2z2t4fFEC3yfVDcH0VIAC9IVBemIwvvJ NWud5z11Rr7yWOLdzSG15qGdnjymUTm9W9HavzJdTepQZwzmDTtKIuiNiZXZAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUZ5Fz7ANoQxl5gSbWHWp2S3T3njYwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMyMzUzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwV8lMA0GCSqGSIb3DQEB CwUAA4IBAQB2Zrt2kGqZGmeOo2jTRsoAr/GRKWygO37Gc3i0QdGy0YfOVoVa0N4A WjK2ZUbiS61t0BKSwCDvwbJSfu9NL/LoD8866AZuEl58RJsvvCpgZbv7sjsbPMm8 qOAodSBL4XUurx0lEJG1U00qBEjMpSbcvCErFRY2F1b7odPrBkBAAL4KyxN8zLpS hjXvIrQC/f3+YjeBHrxyHrtba7NSxXuLrZA1O3M08ZEGklcMyI5pGl+m8pjd69y1 jONRshbRxrNKdANA20XnIbVHmocHvx4rNoo9Y/sSAQHtfioCJk3ebEaC6py+RpSG P9QYKXOd1hIlqFNsD7IPyKEN314n4A0F -----END CERTIFICATE-----Generated at Fri Jun 12 01:10:45 2026 by rpki-client