$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539343a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a386539343a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: cGczpFZBAJkykbZZEW0BNk2TTrB+bSmdlNBgRdtZC5I= Subject key identifier: CC:45:38:79:DF:5B:71:64:13:7A:F9:40:F9:B1:1A:EF:12:7A:91:27 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 7F29DC8B0543DD549D755A318AB2657A9E8BD3A1 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539343a3a2f34382d3438203d3e203538333339.roa Signing time: Sun 29 Mar 2026 05:33:55 +0000 ROA not before: Sun 29 Mar 2026 05:28:55 +0000 ROA not after: Sun 28 Mar 2027 05:33:55 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e94::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 22:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:29:dc:8b:05:43:dd:54:9d:75:5a:31:8a:b2:65:7a:9e:8b:d3:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Mar 29 05:28:55 2026 GMT Not After : Mar 28 05:33:55 2027 GMT Subject: CN=CC453879DF5B7164137AF940F9B11AEF127A9127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:4a:97:ad:58:a3:1d:5b:20:c3:85:6e:6d: be:f4:5c:b6:f8:1f:77:b5:b2:93:45:1c:de:9b:f2: 21:6e:97:26:73:f4:94:14:2f:af:b9:0c:5d:80:c3: 3b:a5:37:04:3f:27:c5:7c:23:08:f3:a0:01:72:10: cd:ab:17:ea:1f:82:22:cd:39:a2:a3:88:61:f1:a7: 2f:02:24:8c:0d:de:a6:93:46:18:2a:e4:6b:68:60: b6:cd:15:51:a5:42:e8:f6:48:9c:af:f3:e5:a1:22: 75:fe:18:28:1c:d1:83:2a:2e:de:54:69:72:5d:92: b3:e9:af:89:5b:53:b6:38:7b:f9:4e:e2:13:bd:ae: 98:b8:60:65:89:c8:38:e0:9a:c7:da:e2:b9:c8:ad: b5:5f:13:51:01:01:82:1a:e1:fa:10:08:58:ce:e6: 6f:4e:ab:ec:23:8a:d3:40:35:2d:50:68:84:f6:2f: 2b:8e:a7:e7:35:a1:e0:1a:93:4a:e4:99:64:2b:b7: 2b:86:5b:27:69:c0:0a:0b:5e:9f:11:f2:8d:c0:23: 80:03:01:53:01:ba:d2:02:55:95:b6:68:51:2c:3e: 59:a9:9d:30:0d:5f:9a:fe:02:b8:01:94:fb:1e:5c: ca:c3:78:aa:cd:07:99:f3:c5:40:1d:7c:87:42:d0: 15:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:45:38:79:DF:5B:71:64:13:7A:F9:40:F9:B1:1A:EF:12:7A:91:27 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539343a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e94::/48 Signature Algorithm: sha256WithRSAEncryption 0e:d3:cc:c1:67:e7:6b:3a:d9:2a:73:20:5a:f1:bd:ab:39:f8: 28:80:be:4d:64:40:2e:54:b4:30:03:4d:1c:82:14:c4:a6:6f: e0:a4:f3:11:51:94:7f:3a:37:72:9a:f5:e6:9d:b5:66:ee:cb: bc:91:69:96:f8:32:c8:ab:12:e4:56:49:6a:d4:08:6e:7c:f4: 6e:41:aa:df:54:e2:d9:ba:8d:6d:7c:9d:5d:a4:ce:01:76:d8: 34:13:34:48:a7:ef:14:3a:c4:4e:ac:d7:c0:c2:b2:a3:f7:67: e7:20:f6:fb:31:d7:53:6f:f6:02:5a:63:2a:48:7b:45:cc:da: ca:b2:6b:7c:b5:c6:03:0b:ce:31:81:08:f8:24:68:d9:ce:d6: 09:6c:93:07:3a:16:2f:36:86:cd:0b:37:fc:cc:6e:63:4f:f5: 43:f1:af:77:48:68:c1:f5:21:7f:00:81:4d:04:68:df:38:7f: ee:b7:87:b4:01:db:36:21:08:37:59:cc:91:55:37:d2:25:1e: 45:7e:6b:b0:bc:7a:81:6b:3b:bc:d7:9c:67:b9:77:fd:16:29: bd:1c:bc:52:c9:84:99:18:4c:47:eb:12:ef:72:7b:69:74:48: 51:24:41:00:26:ed:a0:98:39:8e:b8:22:1e:e3:2b:98:98:0d: 2e:75:38:1b -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUfynciwVD3VSddVoxirJlep6L06EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjAzMjkwNTI4NTVaFw0yNzAzMjgwNTMzNTVaMDMxMTAvBgNV BAMTKENDNDUzODc5REY1QjcxNjQxMzdBRjk0MEY5QjExQUVGMTI3QTkxMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBcEqXrVijHVsgw4Vubb70XLb4 H3e1spNFHN6b8iFulyZz9JQUL6+5DF2AwzulNwQ/J8V8IwjzoAFyEM2rF+ofgiLN OaKjiGHxpy8CJIwN3qaTRhgq5GtoYLbNFVGlQuj2SJyv8+WhInX+GCgc0YMqLt5U aXJdkrPpr4lbU7Y4e/lO4hO9rpi4YGWJyDjgmsfa4rnIrbVfE1EBAYIa4foQCFjO 5m9Oq+wjitNANS1QaIT2LyuOp+c1oeAak0rkmWQrtyuGWydpwAoLXp8R8o3AI4AD AVMButICVZW2aFEsPlmpnTANX5r+ArgBlPseXMrDeKrNB5nzxUAdfIdC0BW7AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUzEU4ed9bcWQTevlA+bEa7xJ6kScwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM5MzQzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwY6UMA0GCSqGSIb3DQEB CwUAA4IBAQAO08zBZ+drOtkqcyBa8b2rOfgogL5NZEAuVLQwA00cghTEpm/gpPMR UZR/OjdymvXmnbVm7su8kWmW+DLIqxLkVklq1AhufPRuQarfVOLZuo1tfJ1dpM4B dtg0EzRIp+8UOsROrNfAwrKj92fnIPb7MddTb/YCWmMqSHtFzNrKsmt8tcYDC84x gQj4JGjZztYJbJMHOhYvNobNCzf8zG5jT/VD8a93SGjB9SF/AIFNBGjfOH/ut4e0 Ads2IQg3WcyRVTfSJR5FfmuwvHqBazu815xnuXf9Fim9HLxSyYSZGExH6xLvcntp dEhRJEEAJu2gmDmOuCIe4yuYmA0udTgb -----END CERTIFICATE-----Generated at Sat Apr 11 11:45:16 2026 by rpki-client