$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539303a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a386539303a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: aOgyyz3FbkVc8BsEy1ZpGYIB3N/SQBe9k2HeHp0FvOU= Subject key identifier: 14:93:DE:95:AB:93:83:37:30:C9:BB:0C:28:E1:10:69:14:D9:27:11 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 07C3270D74198934109EEF3C4AE3A3A040C9B516 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539303a3a2f34382d3438203d3e203538333339.roa Signing time: Sun 29 Mar 2026 05:32:32 +0000 ROA not before: Sun 29 Mar 2026 05:27:32 +0000 ROA not after: Sun 28 Mar 2027 05:32:32 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e90::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 22:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c3:27:0d:74:19:89:34:10:9e:ef:3c:4a:e3:a3:a0:40:c9:b5:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Mar 29 05:27:32 2026 GMT Not After : Mar 28 05:32:32 2027 GMT Subject: CN=1493DE95AB93833730C9BB0C28E1106914D92711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b2:ab:1a:af:11:8e:e3:ba:29:6a:e3:73:07: 42:d5:9c:43:20:a0:72:b0:63:d5:be:da:c7:d2:89: 3b:cd:19:4d:d3:d6:a0:30:77:81:23:e3:5d:2f:5c: f9:fb:5d:12:fa:95:46:76:f0:f4:7a:28:45:50:1b: c6:0f:12:92:18:06:9a:a6:f3:3e:3f:99:05:d3:49: a1:dd:92:28:f7:e9:af:b3:21:bf:91:7b:44:d1:e4: 95:f5:b8:03:2b:4f:b3:11:48:95:1f:ac:d7:dd:a0: ef:d8:96:cf:4a:a0:2e:8d:2b:24:74:59:ad:e9:5b: db:99:3e:bf:28:99:51:a6:f8:ac:83:06:86:5b:01: 55:bd:62:a9:d2:47:47:05:15:ab:fc:75:49:c4:fc: 0d:82:83:58:00:44:1d:92:63:77:65:57:df:ab:33: c8:9a:8a:3a:de:ec:19:02:75:f9:cf:50:12:a4:53: d6:1b:b0:c5:b0:4e:a5:18:ee:8e:ee:13:2c:3d:74: 4e:99:91:f2:5c:2e:da:cc:99:ef:82:c8:54:28:c0: 47:2c:78:16:1e:ba:c3:5e:71:e7:1f:66:84:b5:37: e2:db:23:42:11:8c:f4:b9:76:9f:7f:30:23:c7:03: c6:f8:f9:f6:31:56:d3:21:64:e0:c9:6a:68:a1:1f: fe:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:93:DE:95:AB:93:83:37:30:C9:BB:0C:28:E1:10:69:14:D9:27:11 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539303a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e90::/48 Signature Algorithm: sha256WithRSAEncryption 55:a8:37:be:62:34:b7:a9:cb:ee:dd:a8:fd:27:a1:21:3b:02: db:d1:8a:df:ef:1b:b5:f1:26:67:5b:2e:b4:e7:71:08:68:e5: 6d:78:16:f6:15:b4:c0:ee:a8:d3:b9:a2:c8:a0:68:dc:7e:6f: 27:a4:24:76:d3:e6:63:d7:4d:29:e0:e5:f5:29:b3:3a:70:34: 50:7a:7a:00:b8:2a:98:c3:05:9c:76:88:7a:c3:d6:8f:14:5c: b0:4b:98:7f:42:97:8f:0a:7f:48:34:ca:91:e9:c6:ff:e1:06: c4:58:56:06:77:54:78:85:54:47:ae:b8:a1:81:c3:ea:a5:36: db:ac:d6:d1:7b:81:e9:e5:10:93:c9:39:4b:a1:55:b4:17:d2: e9:6e:3f:3f:cb:5d:ad:9d:b2:86:8e:41:04:45:36:98:42:28: 95:6f:d4:a1:29:bf:ca:58:9d:18:7d:cd:15:2c:fd:58:a8:d5: 0e:0d:60:aa:07:8a:eb:30:f8:61:a3:56:54:7c:8c:2f:fe:d7: 57:83:6c:72:3c:a1:b1:1a:5b:52:20:2e:2c:0e:29:e4:9d:a0: 2d:4a:11:91:89:7d:fb:8c:b2:9c:d2:30:87:18:98:6e:6a:66: 8f:1e:17:93:dc:13:39:bb:06:22:7f:de:8d:f5:ed:0e:16:3a: a5:50:a7:43 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUB8MnDXQZiTQQnu88SuOjoEDJtRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjAzMjkwNTI3MzJaFw0yNzAzMjgwNTMyMzJaMDMxMTAvBgNV BAMTKDE0OTNERTk1QUI5MzgzMzczMEM5QkIwQzI4RTExMDY5MTREOTI3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/sqsarxGO47opauNzB0LVnEMg oHKwY9W+2sfSiTvNGU3T1qAwd4Ej410vXPn7XRL6lUZ28PR6KEVQG8YPEpIYBpqm 8z4/mQXTSaHdkij36a+zIb+Re0TR5JX1uAMrT7MRSJUfrNfdoO/Yls9KoC6NKyR0 Wa3pW9uZPr8omVGm+KyDBoZbAVW9YqnSR0cFFav8dUnE/A2Cg1gARB2SY3dlV9+r M8iaijre7BkCdfnPUBKkU9YbsMWwTqUY7o7uEyw9dE6ZkfJcLtrMme+CyFQowEcs eBYeusNececfZoS1N+LbI0IRjPS5dp9/MCPHA8b4+fYxVtMhZODJamihH/6jAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUFJPelauTgzcwybsMKOEQaRTZJxEwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM5MzAzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwY6QMA0GCSqGSIb3DQEB CwUAA4IBAQBVqDe+YjS3qcvu3aj9J6EhOwLb0Yrf7xu18SZnWy6053EIaOVteBb2 FbTA7qjTuaLIoGjcfm8npCR20+Zj100p4OX1KbM6cDRQenoAuCqYwwWcdoh6w9aP FFywS5h/QpePCn9INMqR6cb/4QbEWFYGd1R4hVRHrrihgcPqpTbbrNbRe4Hp5RCT yTlLoVW0F9Lpbj8/y12tnbKGjkEERTaYQiiVb9ShKb/KWJ0Yfc0VLP1YqNUODWCq B4rrMPhho1ZUfIwv/tdXg2xyPKGxGltSIC4sDinknaAtShGRiX37jLKc0jCHGJhu amaPHheT3BM5uwYif96N9e0OFjqlUKdD -----END CERTIFICATE-----Generated at Sat Apr 11 11:45:50 2026 by rpki-client