$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: 4mtRi19RChTYj5MP8b22EzoYUQDS5Y9fVkI9xWWaQU0= Subject key identifier: 80:CF:71:D0:5B:20:EE:6C:FE:F9:1B:FC:16:F6:ED:0F:85:16:F0:CB Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 1F010825B0E2A9B6ADBC5758A1948FBC5D19C232 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa Signing time: Fri 05 Jun 2026 19:58:11 +0000 ROA not before: Fri 05 Jun 2026 19:53:11 +0000 ROA not after: Fri 04 Jun 2027 19:58:11 +0000 asID: 58339 IP address blocks: 2a05:dfc1:5f50::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 07:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:01:08:25:b0:e2:a9:b6:ad:bc:57:58:a1:94:8f:bc:5d:19:c2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Jun 5 19:53:11 2026 GMT Not After : Jun 4 19:58:11 2027 GMT Subject: CN=80CF71D05B20EE6CFEF91BFC16F6ED0F8516F0CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2c:b8:29:ef:b5:44:e4:ad:78:66:df:60:ac: 3d:3d:b8:5c:9a:23:02:e3:7d:54:0e:ef:6b:93:a6: 99:27:91:ca:f3:68:49:46:d2:6f:ea:8e:b0:da:c3: 36:13:c9:42:2d:61:02:e6:37:f7:27:d6:d7:71:c6: 78:cf:33:30:b6:73:2b:f7:aa:71:bd:2d:a6:75:8f: d1:5e:79:89:51:af:d8:50:21:5a:c4:a2:e3:b6:5d: f1:6e:cc:f0:c8:f9:18:f4:1a:1a:5e:eb:50:c1:f4: e2:50:85:4a:f6:a0:05:97:67:fe:bb:75:ae:96:b7: ab:0b:28:c3:72:10:01:4b:39:6c:c5:ff:d3:5a:79: 19:70:a7:b7:43:18:33:b7:11:e0:b5:69:26:91:21: 66:16:9b:bd:62:8f:71:53:7b:ba:7f:ab:df:e2:5a: 1d:e6:8c:91:34:7b:5d:ed:d4:e2:67:09:eb:96:20: a5:c6:b8:91:48:19:ff:00:13:b8:20:1e:22:43:bc: 48:56:fc:49:f5:7d:1f:10:1a:bb:bb:c4:af:c5:80: dc:d4:30:e0:d5:a1:de:29:b7:01:55:f9:8b:e1:ac: ae:cd:28:cc:f6:37:f2:e5:e5:30:65:e4:a1:a2:78: db:85:c4:51:2a:b7:a1:02:c9:8f:6e:88:d7:b7:61: c1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CF:71:D0:5B:20:EE:6C:FE:F9:1B:FC:16:F6:ED:0F:85:16:F0:CB X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f50::/44 Signature Algorithm: sha256WithRSAEncryption 0e:cd:d6:49:d3:a9:cf:88:74:86:e0:f4:47:37:e0:0e:15:01: 5f:40:0e:50:1f:47:2e:71:38:c4:b0:59:a9:aa:c9:55:b7:72: 9a:19:c4:c9:63:50:53:0d:27:bd:21:c0:00:4c:db:22:5d:41: 14:8c:bf:73:07:cf:40:05:14:06:f6:47:78:21:ec:5b:90:32: 46:16:94:d8:da:79:cb:4a:fe:c3:79:c3:a0:ab:fe:5a:a1:ea: 6d:21:e7:ea:cd:1f:3e:ba:bc:2a:64:0b:f2:56:c8:a2:f1:37: 1c:dc:65:5f:52:93:cf:df:da:5b:93:23:9c:9f:c5:dc:6f:72: 7f:d0:62:d6:33:08:29:0c:d5:71:50:a4:20:9b:c4:15:8e:65: 96:b8:ad:91:3b:d4:a1:d0:65:49:35:cf:a3:f4:77:34:ec:85: 15:e3:87:cb:f1:0f:8e:bf:24:a3:d3:ba:d8:aa:b8:c8:ac:a1: b8:c8:5d:3b:38:4e:59:53:16:6a:98:ef:71:36:39:68:b1:de: 26:40:86:4c:7b:6c:fd:97:ab:dd:3d:b6:ba:5a:e1:95:e9:2e: 32:13:10:d6:a2:24:66:83:e4:1b:37:c1:a1:c9:d4:4c:00:2a: 77:ec:0a:a6:6b:d6:65:98:3e:ff:fd:57:97:4b:39:8c:f2:17: c8:eb:a3:9a -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUHwEIJbDiqbatvFdYoZSPvF0ZwjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjA2MDUxOTUzMTFaFw0yNzA2MDQxOTU4MTFaMDMxMTAvBgNV BAMTKDgwQ0Y3MUQwNUIyMEVFNkNGRUY5MUJGQzE2RjZFRDBGODUxNkYwQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrLLgp77VE5K14Zt9grD09uFya IwLjfVQO72uTppknkcrzaElG0m/qjrDawzYTyUItYQLmN/cn1tdxxnjPMzC2cyv3 qnG9LaZ1j9FeeYlRr9hQIVrEouO2XfFuzPDI+Rj0Ghpe61DB9OJQhUr2oAWXZ/67 da6Wt6sLKMNyEAFLOWzF/9NaeRlwp7dDGDO3EeC1aSaRIWYWm71ij3FTe7p/q9/i Wh3mjJE0e13t1OJnCeuWIKXGuJFIGf8AE7ggHiJDvEhW/En1fR8QGru7xK/FgNzU MODVod4ptwFV+YvhrK7NKMz2N/Ll5TBl5KGieNuFxFEqt6ECyY9uiNe3YcEPAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUgM9x0Fsg7mz++Rv8FvbtD4UW8MswHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjM1MzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwV9QMA0GCSqGSIb3DQEB CwUAA4IBAQAOzdZJ06nPiHSG4PRHN+AOFQFfQA5QH0cucTjEsFmpqslVt3KaGcTJ Y1BTDSe9IcAATNsiXUEUjL9zB89ABRQG9kd4IexbkDJGFpTY2nnLSv7DecOgq/5a oeptIefqzR8+urwqZAvyVsii8Tcc3GVfUpPP39pbkyOcn8Xcb3J/0GLWMwgpDNVx UKQgm8QVjmWWuK2RO9Sh0GVJNc+j9Hc07IUV44fL8Q+OvySj07rYqrjIrKG4yF07 OE5ZUxZqmO9xNjlosd4mQIZMe2z9l6vdPba6WuGV6S4yExDWoiRmg+QbN8GhydRM ACp37Aqma9ZlmD7//VeXSzmM8hfI66Oa -----END CERTIFICATE-----Generated at Fri Jun 12 01:10:48 2026 by rpki-client