$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539333a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a386539333a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: 9BnzY4Ur2mggBHfF+3vv9GwC67YL2+FuBPyIm0Q5bHA= Subject key identifier: 6B:09:CB:DA:BD:A7:66:B1:48:BA:BD:72:14:C8:C8:16:0E:1A:85:97 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 64558704194CC555324613BDFFD4C14BF2775093 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539333a3a2f34382d3438203d3e203538333339.roa Signing time: Sun 29 Mar 2026 05:33:58 +0000 ROA not before: Sun 29 Mar 2026 05:28:58 +0000 ROA not after: Sun 28 Mar 2027 05:33:58 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e93::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 22:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:55:87:04:19:4c:c5:55:32:46:13:bd:ff:d4:c1:4b:f2:77:50:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Mar 29 05:28:58 2026 GMT Not After : Mar 28 05:33:58 2027 GMT Subject: CN=6B09CBDABDA766B148BABD7214C8C8160E1A8597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e1:fe:f7:b6:ed:ed:44:2f:5b:e1:af:c9:f8: ae:cd:09:ed:8c:49:89:a8:08:30:1a:53:70:fa:b3: d7:f6:f7:53:94:dd:15:0b:a5:b8:68:e2:ec:b9:d5: cd:a0:aa:1d:12:2c:91:f6:ed:c9:70:10:f9:cf:a6: 9f:11:2b:90:c1:45:c4:d0:ab:db:61:ca:39:37:77: 08:18:94:05:3f:a9:5b:d3:9e:c9:b1:74:35:71:27: 79:1f:53:c9:4d:a1:71:8b:41:39:83:e0:6a:f6:67: f7:3e:df:3c:1e:7d:d5:8d:2b:3f:6a:04:3b:6f:03: f3:1c:91:ea:80:51:d8:55:c3:f9:53:aa:0e:d2:07: 15:9b:36:24:55:10:64:56:2a:5c:04:46:b0:90:a6: c1:48:69:6e:f6:62:79:40:92:89:f1:63:c4:53:14: ee:a6:56:7b:1f:0f:e9:54:f4:d5:da:60:53:b5:e4: 16:4d:1b:8d:d8:d6:05:7f:66:60:4c:d4:c4:79:69: b4:bd:cf:90:e8:63:76:fc:59:e1:a3:00:73:c7:da: aa:ac:23:7f:0b:d9:cb:68:64:34:d2:95:b3:88:66: d6:93:d2:9d:5c:a3:bd:54:c6:2f:e0:80:38:2f:f6: bd:be:1b:35:f1:7c:b0:bf:71:8a:f7:af:28:a4:26: e7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:09:CB:DA:BD:A7:66:B1:48:BA:BD:72:14:C8:C8:16:0E:1A:85:97 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539333a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e93::/48 Signature Algorithm: sha256WithRSAEncryption a2:d0:39:04:e7:e1:75:a5:40:d8:2c:be:c2:df:0f:04:db:00: 2a:e4:17:29:81:96:5f:75:86:25:52:ef:1e:95:f4:29:ad:b0: 93:bd:3b:f3:9e:fc:d4:cd:e5:8f:4d:a2:92:1a:47:ab:ed:07: 29:c6:72:fa:a7:90:29:61:d6:0e:65:05:65:aa:52:bb:0d:25: d1:58:52:78:ce:ee:2c:0a:ac:7a:ba:d8:f2:ec:cd:51:e4:15: 37:cf:c7:3d:4f:2a:f5:fb:bd:ec:c2:d3:eb:1a:33:17:d0:0d: 24:ae:cb:94:44:70:69:05:a7:18:30:d6:0a:5e:b5:dc:83:ab: 3c:c5:df:c4:6e:42:5a:bc:81:5b:05:10:3b:45:46:5b:42:3f: 3e:8d:f7:65:52:c4:44:2c:98:88:0d:da:2c:dd:ba:a2:68:8b: bb:ef:38:c4:d1:a7:2b:17:94:c2:6e:82:af:dc:b3:7b:6a:cf: 20:b3:d9:b2:e4:b4:f0:29:8a:82:47:5a:91:e2:d7:33:62:c1: f2:ca:93:50:6d:85:3b:0a:56:bb:a9:11:49:bc:86:fe:e2:b0: 39:32:04:f2:22:b8:a8:62:1e:99:cd:30:89:7c:a8:b8:38:70: 6a:8c:dd:54:07:e1:b0:f4:95:b1:60:d8:67:5a:f1:b2:33:54: 7e:0e:1a:f9 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUZFWHBBlMxVUyRhO9/9TBS/J3UJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjAzMjkwNTI4NThaFw0yNzAzMjgwNTMzNThaMDMxMTAvBgNV BAMTKDZCMDlDQkRBQkRBNzY2QjE0OEJBQkQ3MjE0QzhDODE2MEUxQTg1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4f73tu3tRC9b4a/J+K7NCe2M SYmoCDAaU3D6s9f291OU3RULpbho4uy51c2gqh0SLJH27clwEPnPpp8RK5DBRcTQ q9thyjk3dwgYlAU/qVvTnsmxdDVxJ3kfU8lNoXGLQTmD4Gr2Z/c+3zwefdWNKz9q BDtvA/MckeqAUdhVw/lTqg7SBxWbNiRVEGRWKlwERrCQpsFIaW72YnlAkonxY8RT FO6mVnsfD+lU9NXaYFO15BZNG43Y1gV/ZmBM1MR5abS9z5DoY3b8WeGjAHPH2qqs I38L2ctoZDTSlbOIZtaT0p1co71Uxi/ggDgv9r2+GzXxfLC/cYr3ryikJue9AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUawnL2r2nZrFIur1yFMjIFg4ahZcwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM5MzMzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwY6TMA0GCSqGSIb3DQEB CwUAA4IBAQCi0DkE5+F1pUDYLL7C3w8E2wAq5BcpgZZfdYYlUu8elfQprbCTvTvz nvzUzeWPTaKSGker7QcpxnL6p5ApYdYOZQVlqlK7DSXRWFJ4zu4sCqx6utjy7M1R 5BU3z8c9Tyr1+73swtPrGjMX0A0krsuURHBpBacYMNYKXrXcg6s8xd/EbkJavIFb BRA7RUZbQj8+jfdlUsRELJiIDdos3bqiaIu77zjE0acrF5TCboKv3LN7as8gs9my 5LTwKYqCR1qR4tczYsHyypNQbYU7Cla7qRFJvIb+4rA5MgTyIrioYh6ZzTCJfKi4 OHBqjN1UB+Gw9JWxYNhnWvGyM1R+Dhr5 -----END CERTIFICATE-----Generated at Sat Apr 11 11:46:39 2026 by rpki-client