$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: PKyRLyzGERkTuILaZpoUaRCHtJwNgMlRpCrPnu+1llw= Subject key identifier: BD:97:82:88:4B:38:03:01:DB:CB:E5:F8:F6:A7:92:B9:04:B7:06:DC Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 61928620F56362DCD1D76E697D98D8E244C55C5A Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa Signing time: Fri 05 Jun 2026 19:58:12 +0000 ROA not before: Fri 05 Jun 2026 19:53:12 +0000 ROA not after: Fri 04 Jun 2027 19:58:12 +0000 asID: 58339 IP address blocks: 2a05:dfc1:5f35::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 07:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:92:86:20:f5:63:62:dc:d1:d7:6e:69:7d:98:d8:e2:44:c5:5c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Jun 5 19:53:12 2026 GMT Not After : Jun 4 19:58:12 2027 GMT Subject: CN=BD9782884B380301DBCBE5F8F6A792B904B706DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:30:5c:13:d5:ac:84:ed:51:a4:f8:30:a9:f7: fd:5b:4f:1b:f1:03:6d:6f:e8:74:76:62:9f:4e:32: 22:b2:0c:8c:1e:50:5c:f3:d9:a9:aa:9c:bb:c0:63: fd:00:4a:19:ed:29:d3:ba:06:58:e6:38:78:74:c3: 1b:2e:41:67:78:73:3a:e0:86:ea:74:1a:d0:48:68: 0d:31:f7:27:9c:2d:d4:36:e1:27:08:fe:02:e0:95: ea:c5:d0:fc:60:33:83:af:ab:90:17:d3:04:b6:a9: 29:04:3b:2e:0e:3f:df:22:20:4e:70:41:91:11:a2: 2b:c0:35:0b:ed:51:a2:12:78:2c:25:58:e6:e5:52: 8e:d9:dd:0c:fe:44:d7:16:ec:44:c7:fb:10:a9:cf: a1:98:ad:8b:93:5a:09:47:6c:2d:c9:f5:51:d9:a3: b2:bb:3a:f2:57:45:d7:6c:59:64:c0:6b:9e:6a:be: b7:24:dd:a8:ea:f9:7a:f0:1d:1b:10:d0:31:d6:10: d9:9b:86:8b:07:ad:dd:1f:b2:f6:0f:91:1d:c2:f6: f4:21:a7:f2:60:af:c0:c2:46:94:50:12:e9:aa:23: 20:c5:50:33:7e:b1:8e:91:9a:78:d4:97:d1:6d:6f: 53:6d:7b:de:44:6b:33:81:e6:fb:78:7e:48:dd:bc: ff:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:97:82:88:4B:38:03:01:DB:CB:E5:F8:F6:A7:92:B9:04:B7:06:DC X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f35::/48 Signature Algorithm: sha256WithRSAEncryption 81:36:f4:ae:31:b7:a4:ba:a9:32:70:31:c9:c7:cb:80:83:5a: db:8d:ce:f1:70:2d:2c:a7:86:29:15:03:c7:7e:26:34:82:01: 08:e8:36:8d:91:24:13:98:14:94:0d:77:09:4a:ea:63:3f:5b: bb:c8:09:b3:31:ee:9a:19:25:ad:b0:44:5d:15:3f:d9:22:95: b6:a8:03:d1:17:b9:93:09:70:39:39:4c:4a:2f:bc:7d:6e:dc: c9:3c:29:e8:af:8a:95:63:2c:7f:78:86:2a:42:e0:4d:49:54: ef:d1:db:b1:4f:33:f3:58:b7:4f:b4:c9:31:d9:dc:67:06:32: 90:d8:4c:2c:7b:82:f0:db:9d:05:1b:26:b6:74:c7:a1:03:11: ca:b2:38:f2:a9:65:75:1c:8f:20:16:5c:87:4c:5a:c5:f9:59: 73:fb:aa:85:e2:c5:69:e6:62:d4:b4:24:cf:95:f5:d4:bd:ff: c2:bb:b8:42:60:2f:80:fb:fc:b0:ef:a3:ae:11:c1:72:7b:91: 3a:31:2c:3a:b3:e0:b1:e2:84:7f:2a:af:17:1a:8e:48:1c:74: 77:e7:da:0c:e2:23:8a:19:f3:28:6e:ea:37:64:cf:b2:19:26: aa:6e:fc:2e:bf:e2:1c:a9:5b:b7:70:27:66:f9:d6:47:f0:d3: 1d:93:90:83 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUYZKGIPVjYtzR125pfZjY4kTFXFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjA2MDUxOTUzMTJaFw0yNzA2MDQxOTU4MTJaMDMxMTAvBgNV BAMTKEJEOTc4Mjg4NEIzODAzMDFEQkNCRTVGOEY2QTc5MkI5MDRCNzA2REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgMFwT1ayE7VGk+DCp9/1bTxvx A21v6HR2Yp9OMiKyDIweUFzz2amqnLvAY/0AShntKdO6BljmOHh0wxsuQWd4czrg hup0GtBIaA0x9yecLdQ24ScI/gLglerF0PxgM4Ovq5AX0wS2qSkEOy4OP98iIE5w QZERoivANQvtUaISeCwlWOblUo7Z3Qz+RNcW7ETH+xCpz6GYrYuTWglHbC3J9VHZ o7K7OvJXRddsWWTAa55qvrck3ajq+XrwHRsQ0DHWENmbhosHrd0fsvYPkR3C9vQh p/Jgr8DCRpRQEumqIyDFUDN+sY6RmnjUl9Ftb1Nte95EazOB5vt4fkjdvP8FAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUvZeCiEs4AwHby+X49qeSuQS3BtwwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMzMzUzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwV81MA0GCSqGSIb3DQEB CwUAA4IBAQCBNvSuMbekuqkycDHJx8uAg1rbjc7xcC0sp4YpFQPHfiY0ggEI6DaN kSQTmBSUDXcJSupjP1u7yAmzMe6aGSWtsERdFT/ZIpW2qAPRF7mTCXA5OUxKL7x9 btzJPCnor4qVYyx/eIYqQuBNSVTv0duxTzPzWLdPtMkx2dxnBjKQ2Ewse4Lw250F Gya2dMehAxHKsjjyqWV1HI8gFlyHTFrF+Vlz+6qF4sVp5mLUtCTPlfXUvf/Cu7hC YC+A+/yw76OuEcFye5E6MSw6s+Cx4oR/Kq8XGo5IHHR359oM4iOKGfMobuo3ZM+y GSaqbvwuv+IcqVu3cCdm+dZH8NMdk5CD -----END CERTIFICATE-----Generated at Fri Jun 12 01:10:47 2026 by rpki-client