$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: nNhP5EnIHW0Sx6slckrrfuD2J/45paK264FY8LTR1Hs= Subject key identifier: 85:D8:F2:41:18:12:50:ED:C0:66:8B:EB:F2:EE:88:B1:D1:85:56:8A Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 34D242B3BF41AEC631240079692DC2FC6FCAC822 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa Signing time: Mon 03 Aug 2026 16:44:14 +0000 ROA not before: Mon 03 Aug 2026 16:39:14 +0000 ROA not after: Mon 02 Aug 2027 16:44:14 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e00::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d2:42:b3:bf:41:ae:c6:31:24:00:79:69:2d:c2:fc:6f:ca:c8:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Aug 3 16:39:14 2026 GMT Not After : Aug 2 16:44:14 2027 GMT Subject: CN=85D8F241181250EDC0668BEBF2EE88B1D185568A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:a1:4a:67:20:a4:db:d8:ff:9c:68:8b:ab: f6:fb:f8:0c:d3:28:d1:dc:de:a3:cb:b4:09:77:b4: 32:85:07:3c:64:3e:a9:53:88:38:8b:ee:69:42:da: 77:aa:ed:8a:49:9c:09:f6:d3:b7:b9:f5:92:e7:97: 41:ba:12:81:27:8f:bc:b9:88:c4:5e:bb:a5:7c:55: 88:c7:89:2b:5e:df:59:44:64:17:d9:5b:ad:82:6a: ab:26:9d:2e:fd:51:d6:af:0b:a6:2e:70:7c:46:2f: 34:c4:f8:5c:5a:fd:2a:02:d1:2b:2d:cc:60:fc:21: a7:89:24:2a:5c:8f:f0:aa:fc:14:bf:3f:c1:1d:db: c7:89:fc:fd:f3:ea:16:5f:5e:6a:56:31:04:25:7d: 7f:7a:2e:2e:e0:d2:5e:80:c4:66:51:c8:0c:e5:3b: 76:d9:a0:49:57:dd:a5:63:34:f5:a4:d3:74:74:96: eb:b6:ec:1b:d1:53:92:e6:34:c2:a4:51:a9:2b:7f: ab:be:75:19:14:1c:66:a4:ac:19:73:ed:76:ff:89: 7a:0d:8f:9d:a6:0b:6f:8a:d1:f3:da:11:e3:97:e7: bd:1b:af:21:3d:88:61:9e:8e:cd:54:9c:2b:43:fd: e5:ff:83:ba:38:dc:45:52:3c:45:04:bc:08:c1:93: be:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D8:F2:41:18:12:50:ED:C0:66:8B:EB:F2:EE:88:B1:D1:85:56:8A X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e00::/44 Signature Algorithm: sha256WithRSAEncryption 2e:c6:d3:e2:c5:20:fa:9e:76:ec:75:90:1e:83:13:00:c2:68: 1d:8a:50:91:6e:1c:fa:75:d9:d2:b5:0b:3c:1d:5a:72:98:0c: bc:f1:0e:8d:dd:06:97:bd:b8:5b:b2:0c:1c:54:40:cc:1f:d1: 7f:53:bd:ae:ed:29:aa:25:b5:b7:9f:a9:da:86:de:a2:68:a3: 90:f4:00:ac:3c:a6:7e:aa:8a:ae:36:e8:05:71:32:cf:98:e5: e7:5c:97:a1:f0:29:91:46:fa:bb:72:f6:a5:80:8b:e5:e9:b0: af:f0:a6:8b:86:fb:1d:a0:29:a2:21:c9:75:ba:f8:5f:99:25: c6:68:c9:39:dc:3a:bd:b9:90:08:6b:93:5b:e7:d6:03:ce:6b: 66:59:e6:bc:c9:84:b2:07:57:f2:06:7c:de:28:83:c0:bf:ab: 59:bb:ff:7d:10:d6:83:f7:a5:4e:c2:fd:bb:ac:c7:9e:c6:56: d6:e2:ca:51:bd:92:6e:68:b0:0e:fa:08:f8:03:8d:5d:87:e4: 04:a0:d7:e4:ae:b1:91:61:09:44:4f:35:5b:89:4e:0f:45:6d: b4:ee:cf:ee:37:d3:8b:45:7c:2e:7c:71:ed:eb:a7:37:b4:fe: 39:53:cd:72:a3:98:e6:9f:4d:07:c2:9b:b0:2b:d5:ce:25:d8: b7:d3:34:3e -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUNNJCs79BrsYxJAB5aS3C/G/KyCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjA4MDMxNjM5MTRaFw0yNzA4MDIxNjQ0MTRaMDMxMTAvBgNV BAMTKDg1RDhGMjQxMTgxMjUwRURDMDY2OEJFQkYyRUU4OEIxRDE4NTU2OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0tqFKZyCk29j/nGiLq/b7+AzT KNHc3qPLtAl3tDKFBzxkPqlTiDiL7mlC2neq7YpJnAn207e59ZLnl0G6EoEnj7y5 iMReu6V8VYjHiSte31lEZBfZW62CaqsmnS79UdavC6YucHxGLzTE+Fxa/SoC0Sst zGD8IaeJJCpcj/Cq/BS/P8Ed28eJ/P3z6hZfXmpWMQQlfX96Li7g0l6AxGZRyAzl O3bZoElX3aVjNPWk03R0luu27BvRU5LmNMKkUakrf6u+dRkUHGakrBlz7Xb/iXoN j52mC2+K0fPaEeOX570bryE9iGGejs1UnCtD/eX/g7o43EVSPEUEvAjBk761AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUhdjyQRgSUO3AZovr8u6IsdGFVoowHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTMwMzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY4AMA0GCSqGSIb3DQEB CwUAA4IBAQAuxtPixSD6nnbsdZAegxMAwmgdilCRbhz6ddnStQs8HVpymAy88Q6N 3QaXvbhbsgwcVEDMH9F/U72u7SmqJbW3n6naht6iaKOQ9ACsPKZ+qoquNugFcTLP mOXnXJeh8CmRRvq7cvalgIvl6bCv8KaLhvsdoCmiIcl1uvhfmSXGaMk53Dq9uZAI a5Nb59YDzmtmWea8yYSyB1fyBnzeKIPAv6tZu/99ENaD96VOwv27rMeexlbW4spR vZJuaLAO+gj4A41dh+QEoNfkrrGRYQlETzVbiU4PRW207s/uN9OLRXwufHHt66c3 tP45U81yo5jmn00HwpuwK9XOJdi30zQ+ -----END CERTIFICATE-----Generated at Thu Sep 10 16:50:11 2026 by rpki-client