$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539363a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a386539363a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: jm+wNYz1r5RymBD9uSAzSVfojvfPFXGKpELpmZHyNyA= Subject key identifier: 85:6E:0C:7E:BD:01:57:F2:7E:CE:B4:AB:68:09:C0:F9:30:9E:8A:6F Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 4293E8FF5E99A17010FE6567DB9CD6C5CFF50E6E Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539363a3a2f34382d3438203d3e203538333339.roa Signing time: Sun 29 Mar 2026 05:33:49 +0000 ROA not before: Sun 29 Mar 2026 05:28:49 +0000 ROA not after: Sun 28 Mar 2027 05:33:49 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e96::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 22:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:93:e8:ff:5e:99:a1:70:10:fe:65:67:db:9c:d6:c5:cf:f5:0e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Mar 29 05:28:49 2026 GMT Not After : Mar 28 05:33:49 2027 GMT Subject: CN=856E0C7EBD0157F27ECEB4AB6809C0F9309E8A6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:ae:22:a9:3a:fa:a4:a3:ef:31:88:99:09: a8:ad:a9:ea:ef:c0:c6:cb:8f:7e:25:66:58:89:db: 78:be:fc:b1:4f:bc:e8:ee:46:7d:24:cd:dc:2c:3d: 13:46:82:ea:88:17:39:9e:f7:a5:5a:7e:b0:1d:1b: 91:7f:f4:d6:55:ba:f6:e4:dc:27:e2:78:40:ef:20: 87:1e:5a:fe:78:74:4c:ac:b4:e8:7e:41:ed:ac:9a: 38:c6:f8:e1:44:e7:03:e0:0f:b8:8c:a1:42:73:11: 51:43:bd:6d:5a:9d:31:86:8b:84:4e:ca:e2:0a:bd: 46:73:e7:0d:1b:fb:e2:30:d5:46:73:44:0f:e3:99: f2:e5:4d:4d:97:04:ae:67:1d:30:1b:a4:4a:d4:0b: 7d:fa:eb:a1:8b:69:52:18:da:7a:d3:6d:11:6c:85: 60:7c:e4:0b:ee:d1:34:79:f6:fd:ce:50:2e:18:22: c3:27:d0:af:8d:86:10:ca:d1:df:f9:51:36:51:09: a7:6d:20:78:2d:b3:c1:54:98:90:2c:a3:e7:f4:5d: c9:92:bd:3b:3c:65:70:73:06:86:0b:e5:0d:86:86: bf:80:0a:8c:75:20:2b:a2:be:0f:73:d3:00:fb:1b: 61:a6:f3:52:b6:1d:3b:8e:3f:66:06:ca:fd:87:c1: 04:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6E:0C:7E:BD:01:57:F2:7E:CE:B4:AB:68:09:C0:F9:30:9E:8A:6F X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539363a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e96::/48 Signature Algorithm: sha256WithRSAEncryption 8a:d0:ae:cd:54:c5:96:fd:e5:a5:fd:90:fc:21:24:9e:e2:79: 3b:82:2c:f4:ff:1b:a1:35:f2:72:a8:32:32:6c:d5:84:1d:f3: 13:25:eb:a0:6c:d1:05:78:90:a2:ed:d5:28:86:b4:c5:52:97: 72:b5:7d:07:cc:47:41:c9:de:d7:46:7f:bf:4a:28:6c:48:d1: e7:e7:9b:d5:93:e8:41:2e:0a:68:e7:92:8d:94:83:db:41:ec: 69:30:bc:29:a6:45:77:60:d1:b2:98:30:f4:57:56:26:f6:e1: f6:b5:be:4a:99:13:99:a9:50:25:c2:15:ae:19:8d:7c:86:8a: 41:33:75:f9:c3:48:29:b6:b8:e6:ae:4e:d9:62:6d:59:a2:a4: 93:7a:b4:99:e6:04:4e:e8:65:ab:7a:5d:e3:13:75:7c:a4:ba: b4:fe:0e:00:cf:aa:26:84:12:bd:83:f7:c0:43:66:e4:70:23: 40:59:7f:60:84:95:71:dc:33:c1:a6:79:d9:ed:11:db:3c:14: 0c:26:3e:a3:69:f6:63:d2:9b:55:ee:13:9a:86:71:50:ee:24: 35:f1:fa:22:b7:aa:7d:03:4c:e5:04:23:a4:83:98:20:8a:bb: 52:56:fe:48:ae:42:29:8f:12:ae:0f:a7:9d:3b:6d:67:b3:8d: e4:b4:b3:e8 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUQpPo/16ZoXAQ/mVn25zWxc/1Dm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjAzMjkwNTI4NDlaFw0yNzAzMjgwNTMzNDlaMDMxMTAvBgNV BAMTKDg1NkUwQzdFQkQwMTU3RjI3RUNFQjRBQjY4MDlDMEY5MzA5RThBNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Cq4iqTr6pKPvMYiZCaitqerv wMbLj34lZliJ23i+/LFPvOjuRn0kzdwsPRNGguqIFzme96VafrAdG5F/9NZVuvbk 3CfieEDvIIceWv54dEystOh+Qe2smjjG+OFE5wPgD7iMoUJzEVFDvW1anTGGi4RO yuIKvUZz5w0b++Iw1UZzRA/jmfLlTU2XBK5nHTAbpErUC33666GLaVIY2nrTbRFs hWB85Avu0TR59v3OUC4YIsMn0K+NhhDK0d/5UTZRCadtIHgts8FUmJAso+f0XcmS vTs8ZXBzBoYL5Q2Ghr+ACox1ICuivg9z0wD7G2Gm81K2HTuOP2YGyv2HwQRJAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUhW4Mfr0BV/J+zrSraAnA+TCeim8wHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM5MzYzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwY6WMA0GCSqGSIb3DQEB CwUAA4IBAQCK0K7NVMWW/eWl/ZD8ISSe4nk7giz0/xuhNfJyqDIybNWEHfMTJeug bNEFeJCi7dUohrTFUpdytX0HzEdByd7XRn+/SihsSNHn55vVk+hBLgpo55KNlIPb QexpMLwppkV3YNGymDD0V1Ym9uH2tb5KmROZqVAlwhWuGY18hopBM3X5w0gptrjm rk7ZYm1ZoqSTerSZ5gRO6GWrel3jE3V8pLq0/g4Az6omhBK9g/fAQ2bkcCNAWX9g hJVx3DPBpnnZ7RHbPBQMJj6jafZj0ptV7hOahnFQ7iQ18foit6p9A0zlBCOkg5gg irtSVv5IrkIpjxKuD6edO21ns43ktLPo -----END CERTIFICATE-----Generated at Sat Apr 11 11:45:17 2026 by rpki-client