$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386538303a3a2f34362d3436203d3e203538333339.roa File: 326130353a646663313a386538303a3a2f34362d3436203d3e203538333339.roa (raw, json) Hash identifier: cH792DvWHjfkl+xn9HEotj4MCImlIhZ8An9znA82xgc= Subject key identifier: 98:6F:70:DB:C5:2E:64:A3:F0:FC:4D:AE:B6:E5:33:3F:87:E7:D5:55 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 1FC5E255C5B9150AD2E0EFEB3E16B2A3BDC7283E Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386538303a3a2f34362d3436203d3e203538333339.roa Signing time: Thu 02 Apr 2026 03:18:42 +0000 ROA not before: Thu 02 Apr 2026 03:13:42 +0000 ROA not after: Thu 01 Apr 2027 03:18:42 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e80::/46 maxlen: 46 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 22:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c5:e2:55:c5:b9:15:0a:d2:e0:ef:eb:3e:16:b2:a3:bd:c7:28:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Apr 2 03:13:42 2026 GMT Not After : Apr 1 03:18:42 2027 GMT Subject: CN=986F70DBC52E64A3F0FC4DAEB6E5333F87E7D555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:29:b3:3e:78:c7:d3:0d:c7:d0:2b:19:16: d9:a7:88:05:85:cc:6f:36:11:6b:2d:c1:1b:e5:fb: e7:8c:6a:82:c3:ff:c9:f6:bf:9a:96:3e:31:77:0b: 3b:ff:62:60:46:13:c5:16:66:1c:ce:88:82:f8:cb: b2:b6:72:0b:a5:6a:97:0a:0d:da:12:d9:6b:ed:fe: c2:55:07:02:f9:01:3f:ac:8c:eb:65:ca:1f:c6:51: 1f:26:29:a3:8d:42:fa:14:a6:e5:04:47:e2:4e:09: 2e:a1:d1:45:ba:ba:34:3f:b7:18:af:d1:05:e2:bd: b3:f7:91:84:eb:1d:24:18:9a:be:b5:9c:a1:13:eb: 7e:96:b4:83:d3:0e:fd:1c:42:65:65:26:4c:4d:2e: 94:ce:df:ca:3d:5f:63:5e:36:20:ea:0d:e2:ea:8a: 33:8a:d0:27:7f:e2:6a:80:6b:59:df:d0:b8:37:77: ac:a9:90:c3:4a:42:de:8c:7c:a2:41:b2:b1:1f:c9: 06:c1:2b:5c:ca:e0:35:cf:5d:e1:05:08:c9:2c:99: 32:c7:08:66:0b:66:16:b6:36:a2:f7:a8:08:ab:23: 68:da:ba:29:74:b1:cb:30:6f:fa:cb:20:75:ca:fa: ab:41:cf:75:88:e7:08:1b:07:1a:72:26:f1:b9:69: 82:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6F:70:DB:C5:2E:64:A3:F0:FC:4D:AE:B6:E5:33:3F:87:E7:D5:55 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386538303a3a2f34362d3436203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e80::/46 Signature Algorithm: sha256WithRSAEncryption 8c:72:37:00:de:4f:7f:64:57:20:73:dd:b6:74:78:70:e9:f0: dd:e2:9a:51:68:f1:c4:09:7f:a4:3a:ce:64:5c:71:ce:13:80: e2:ac:6d:b0:de:72:ef:46:2e:0a:83:05:f1:eb:a8:af:73:f3: e0:e0:97:94:72:2a:c9:1a:0d:c7:cd:eb:29:b9:a7:21:f2:47: 61:0a:83:73:41:1b:6a:c1:09:e1:7c:11:b2:d2:ca:29:1b:b6: 90:ca:c5:cd:f6:4c:26:57:48:44:df:3f:04:bb:00:42:39:af: a3:a2:2c:62:c0:86:9a:08:d3:65:48:5b:e6:61:38:ea:13:9c: 7a:74:2c:52:94:c1:87:de:87:32:50:e2:38:8a:5b:61:d9:a5: 5b:fc:42:38:6f:1a:d1:d3:fc:70:1f:c7:93:a2:4a:02:3b:ef: 37:a5:7d:5f:52:15:53:c6:9e:19:cb:a6:e7:3a:bf:86:ce:2e: d4:f0:db:8c:18:ed:1a:5f:ca:bc:da:67:bf:40:f4:f3:8b:61: 91:52:fe:44:ae:f3:3b:a2:1f:8e:a3:9f:3f:da:7d:57:c9:2b: e9:68:65:c4:45:4d:93:26:e8:aa:e4:47:59:96:cc:dd:0f:62: f4:82:87:f5:df:53:c1:5d:4b:9c:b6:d8:84:ce:a3:4b:5e:04: 07:31:2e:9b -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUH8XiVcW5FQrS4O/rPhayo73HKD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjA0MDIwMzEzNDJaFw0yNzA0MDEwMzE4NDJaMDMxMTAvBgNV BAMTKDk4NkY3MERCQzUyRTY0QTNGMEZDNERBRUI2RTUzMzNGODdFN0Q1NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9SymzPnjH0w3H0CsZFtmniAWF zG82EWstwRvl++eMaoLD/8n2v5qWPjF3Czv/YmBGE8UWZhzOiIL4y7K2cgulapcK DdoS2Wvt/sJVBwL5AT+sjOtlyh/GUR8mKaONQvoUpuUER+JOCS6h0UW6ujQ/txiv 0QXivbP3kYTrHSQYmr61nKET636WtIPTDv0cQmVlJkxNLpTO38o9X2NeNiDqDeLq ijOK0Cd/4mqAa1nf0Lg3d6ypkMNKQt6MfKJBsrEfyQbBK1zK4DXPXeEFCMksmTLH CGYLZha2NqL3qAirI2jauil0scswb/rLIHXK+qtBz3WI5wgbBxpyJvG5aYKBAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUmG9w28UuZKPw/E2utuUzP4fn1VUwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM4MzAzYTNhMmYzNDM2MmQzNDM2 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgXfwY6AMA0GCSqGSIb3DQEB CwUAA4IBAQCMcjcA3k9/ZFcgc922dHhw6fDd4ppRaPHECX+kOs5kXHHOE4DirG2w 3nLvRi4KgwXx66ivc/Pg4JeUcirJGg3Hzespuach8kdhCoNzQRtqwQnhfBGy0sop G7aQysXN9kwmV0hE3z8EuwBCOa+joixiwIaaCNNlSFvmYTjqE5x6dCxSlMGH3ocy UOI4ilth2aVb/EI4bxrR0/xwH8eTokoCO+83pX1fUhVTxp4Zy6bnOr+Gzi7U8NuM GO0aX8q82me/QPTzi2GRUv5ErvM7oh+Oo58/2n1XySvpaGXERU2TJuiq5EdZlszd D2L0gof131PBXUucttiEzqNLXgQHMS6b -----END CERTIFICATE-----Generated at Sat Apr 11 11:45:25 2026 by rpki-client