$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356637303a3a2f34342d3434203d3e20313338313930.roa File: 326130353a646663313a356637303a3a2f34342d3434203d3e20313338313930.roa (raw, json) Hash identifier: bzPxcWW3joy+d5NhGndNVFwTT/udxdOZrwNJogvMQ5M= Subject key identifier: D6:E1:CD:FF:79:7E:9D:D9:81:AC:47:05:BE:AC:C4:1B:B8:99:88:D9 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 53090B21B0BAC1230F01F55DFE4ACD6998E8E198 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356637303a3a2f34342d3434203d3e20313338313930.roa Signing time: Mon 03 Aug 2026 16:45:06 +0000 ROA not before: Mon 03 Aug 2026 16:40:06 +0000 ROA not after: Mon 02 Aug 2027 16:45:06 +0000 asID: 138190 IP address blocks: 2a05:dfc1:5f70::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:09:0b:21:b0:ba:c1:23:0f:01:f5:5d:fe:4a:cd:69:98:e8:e1:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Aug 3 16:40:06 2026 GMT Not After : Aug 2 16:45:06 2027 GMT Subject: CN=D6E1CDFF797E9DD981AC4705BEACC41BB89988D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:44:76:dd:ce:e4:8f:4b:de:28:e0:34:4b:e5: be:e5:a6:e7:35:b1:d3:74:22:96:88:8b:7c:cd:e3: f5:f8:76:bd:bc:23:99:a9:cc:87:aa:83:45:71:73: b9:90:76:8c:90:97:f3:e4:2e:3b:90:c2:7c:80:5c: f7:16:c8:88:3a:d8:80:11:1d:97:c8:ca:27:27:f9: f3:8d:59:18:89:94:be:7c:6f:96:60:8f:8f:92:d2: 8a:d7:c6:9b:9a:1e:b3:a8:d5:2c:44:c8:6f:4e:aa: 3a:ec:55:02:65:a6:e8:16:6d:b5:55:8c:53:24:41: be:6e:56:bd:5a:48:af:9f:4b:13:ef:dd:25:e5:91: b0:85:8c:f3:34:91:c5:20:23:42:eb:cf:34:94:9e: 6d:89:60:d0:2c:3c:9c:38:4b:df:70:eb:f5:a3:b7: 77:23:ae:84:4d:68:a9:94:b8:1b:9b:24:d9:e8:01: 25:f5:2e:66:93:75:5c:b9:01:6b:8e:20:36:4c:0b: b9:a5:3b:f7:c6:d9:39:05:02:73:4a:19:4f:35:64: 3c:85:97:ac:ed:1d:5d:67:bc:34:28:c6:96:cf:c8: e6:fa:49:47:be:12:41:a1:ed:6b:b7:31:60:7a:a1: 3e:65:5d:57:fb:fb:f0:c1:fe:ec:82:ff:0b:ef:a5: 4d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E1:CD:FF:79:7E:9D:D9:81:AC:47:05:BE:AC:C4:1B:B8:99:88:D9 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356637303a3a2f34342d3434203d3e20313338313930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f70::/44 Signature Algorithm: sha256WithRSAEncryption 0f:63:23:cf:c5:fd:3c:cf:1c:94:d8:cc:43:4f:ea:9e:e9:29: 25:c7:93:24:f0:90:79:23:32:58:28:d3:dc:32:cf:46:5f:07: cb:21:62:23:6f:f5:4e:fc:8f:e4:c5:96:34:ab:27:81:3a:35: c3:55:4a:63:b3:d5:88:e2:c4:73:61:f1:78:5b:2d:df:89:41: 3a:b7:2a:ce:01:be:bd:b0:68:52:25:77:48:7b:7c:be:af:a0: 69:cb:69:92:d2:c8:69:7b:5d:e4:7f:c0:e0:cc:1d:a8:41:b7: 8d:9c:5c:bf:05:8e:eb:38:85:0a:ea:fd:10:e6:62:4a:5b:19: e1:64:8c:cc:77:6e:52:a2:ef:ba:72:52:3e:20:ba:ac:32:58: fb:d7:c3:46:83:10:8a:7d:d1:bb:8c:6e:fd:16:09:48:b6:35: 32:64:f5:27:22:2d:5c:1c:2f:bb:ee:46:71:bd:52:a7:ff:9d: 1e:3f:32:a4:9f:d6:97:bd:ae:c1:d7:a2:0a:ad:28:5e:96:b0: b7:a3:04:1c:4b:25:34:5f:0f:90:db:60:a9:d4:6a:2f:87:ca: 08:42:3a:61:c1:b5:3f:73:66:54:93:75:a9:16:4a:d5:62:0a: 1f:1a:3a:5a:33:f6:e0:0a:5e:be:3e:d1:a5:08:11:0a:53:57: fa:e3:39:e7 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUUwkLIbC6wSMPAfVd/krNaZjo4ZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjA4MDMxNjQwMDZaFw0yNzA4MDIxNjQ1MDZaMDMxMTAvBgNV BAMTKEQ2RTFDREZGNzk3RTlERDk4MUFDNDcwNUJFQUNDNDFCQjg5OTg4RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwRHbdzuSPS94o4DRL5b7lpuc1 sdN0IpaIi3zN4/X4dr28I5mpzIeqg0Vxc7mQdoyQl/PkLjuQwnyAXPcWyIg62IAR HZfIyicn+fONWRiJlL58b5Zgj4+S0orXxpuaHrOo1SxEyG9OqjrsVQJlpugWbbVV jFMkQb5uVr1aSK+fSxPv3SXlkbCFjPM0kcUgI0LrzzSUnm2JYNAsPJw4S99w6/Wj t3cjroRNaKmUuBubJNnoASX1LmaTdVy5AWuOIDZMC7mlO/fG2TkFAnNKGU81ZDyF l6ztHV1nvDQoxpbPyOb6SUe+EkGh7Wu3MWB6oT5lXVf7+/DB/uyC/wvvpU1xAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQU1uHN/3l+ndmBrEcFvqzEG7iZiNkwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjM3MzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzMTMzMzgzMTM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqBd/BX3AwDQYJKoZIhvcN AQELBQADggEBAA9jI8/F/TzPHJTYzENP6p7pKSXHkyTwkHkjMlgo09wyz0ZfB8sh YiNv9U78j+TFljSrJ4E6NcNVSmOz1YjixHNh8XhbLd+JQTq3Ks4Bvr2waFIld0h7 fL6voGnLaZLSyGl7XeR/wODMHahBt42cXL8Fjus4hQrq/RDmYkpbGeFkjMx3blKi 77pyUj4guqwyWPvXw0aDEIp90buMbv0WCUi2NTJk9SciLVwcL7vuRnG9Uqf/nR4/ MqSf1pe9rsHXogqtKF6WsLejBBxLJTRfD5DbYKnUai+HyghCOmHBtT9zZlSTdakW StViCh8aOloz9uAKXr4+0aUIEQpTV/rjOec= -----END CERTIFICATE-----Generated at Thu Sep 10 14:33:13 2026 by rpki-client