$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539373a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a386539373a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: Zn2ODhNnRzcfYawPHrEJihftuvTS2mT4y0IePSfxBoU= Subject key identifier: C9:7A:8B:CF:D1:CC:7A:C8:F5:22:C4:F4:D0:4B:AA:A9:DA:7B:46:0B Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 1A5CF4FAFA626E0F0A9BDCDB69B48760C43D2A4F Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539373a3a2f34382d3438203d3e203538333339.roa Signing time: Sun 29 Mar 2026 05:33:46 +0000 ROA not before: Sun 29 Mar 2026 05:28:46 +0000 ROA not after: Sun 28 Mar 2027 05:33:46 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e97::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 22:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5c:f4:fa:fa:62:6e:0f:0a:9b:dc:db:69:b4:87:60:c4:3d:2a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Mar 29 05:28:46 2026 GMT Not After : Mar 28 05:33:46 2027 GMT Subject: CN=C97A8BCFD1CC7AC8F522C4F4D04BAAA9DA7B460B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:36:35:1c:2f:ca:ab:a3:45:6f:96:ec:20:0a: 6b:af:47:5f:2c:af:4b:07:19:e5:66:f3:3f:ef:4a: 9f:2b:92:67:73:63:0e:08:5d:36:27:52:30:04:37: 8d:18:21:80:32:18:d5:c5:f7:27:94:a8:65:e4:1e: 79:bb:af:c8:ae:77:d1:e1:4f:ff:7a:3a:d3:18:48: 51:23:0c:e8:6d:8f:ee:9e:ae:e0:5c:24:5b:2f:b2: 49:48:47:58:bb:95:d9:bc:22:34:3f:4f:09:7a:ac: 22:d5:36:dc:23:5c:8f:64:aa:2c:d9:3b:00:3c:07: ea:61:22:2c:65:aa:ab:52:c5:53:78:94:b7:27:45: 52:67:05:29:53:ee:0a:6b:9e:75:d6:9b:d1:1b:5d: bd:6a:ef:08:31:31:fa:9a:51:62:92:2e:51:02:69: e6:9d:e3:78:f4:05:12:17:a5:1d:cd:28:fd:52:e1: 57:ed:5a:ed:9c:84:14:17:e8:69:1c:a1:11:81:a2: 85:b2:b4:02:17:5c:f2:44:fc:41:f2:d5:ab:65:18: 84:84:cf:be:8c:ec:32:2c:8e:9b:4e:c6:dd:55:f4: c2:c3:f9:0a:eb:c5:7f:b4:84:ba:84:b3:a6:54:5e: 1f:3e:dc:19:95:9a:6f:44:f1:37:c2:65:20:9f:f8: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7A:8B:CF:D1:CC:7A:C8:F5:22:C4:F4:D0:4B:AA:A9:DA:7B:46:0B X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539373a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e97::/48 Signature Algorithm: sha256WithRSAEncryption 39:1b:7e:10:04:f1:66:0a:3c:8a:e4:a3:3e:84:b1:48:b7:6a: d1:fd:39:ae:9d:85:b8:ca:5e:78:1e:41:cb:d2:20:c2:86:4d: 69:ad:cb:fc:2b:96:32:eb:6d:e7:bf:e3:0c:23:92:2b:e6:4d: b8:c9:ed:30:37:fb:c1:c7:c4:d4:78:8f:ab:e5:b2:62:4c:35: 37:26:09:8a:ee:d3:26:c4:38:55:9c:2e:7b:99:ef:c7:c5:95: b9:6e:8a:aa:89:d9:40:28:48:6a:30:61:8f:af:cd:7c:8d:22: 40:e5:70:be:5a:a4:05:bb:01:34:f5:f3:47:ba:6c:36:ab:cd: d7:8a:d2:31:e7:4f:96:98:31:ff:82:6e:26:58:dd:20:d8:c7: b2:3e:d8:42:9e:14:a5:a9:93:61:3a:1c:f5:b3:74:fe:6b:01: 08:23:ff:b0:e3:3b:a6:3b:7b:1f:55:68:69:13:12:c2:10:12: 9a:3b:83:de:df:8a:ce:69:01:c2:75:de:b3:d7:5e:d3:9c:9c: 35:26:f3:19:8e:d0:76:bf:ab:36:f6:49:22:a7:99:a2:33:bf: c8:42:9a:3e:7d:4b:6b:b1:ff:e4:86:db:a8:37:b6:4d:4f:a1: f9:ec:50:4d:21:6e:61:90:3b:5a:ef:92:c7:20:3b:72:34:2f: 1a:b8:0a:38 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUGlz0+vpibg8Km9zbabSHYMQ9Kk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjAzMjkwNTI4NDZaFw0yNzAzMjgwNTMzNDZaMDMxMTAvBgNV BAMTKEM5N0E4QkNGRDFDQzdBQzhGNTIyQzRGNEQwNEJBQUE5REE3QjQ2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbNjUcL8qro0VvluwgCmuvR18s r0sHGeVm8z/vSp8rkmdzYw4IXTYnUjAEN40YIYAyGNXF9yeUqGXkHnm7r8iud9Hh T/96OtMYSFEjDOhtj+6eruBcJFsvsklIR1i7ldm8IjQ/Twl6rCLVNtwjXI9kqizZ OwA8B+phIixlqqtSxVN4lLcnRVJnBSlT7gprnnXWm9EbXb1q7wgxMfqaUWKSLlEC aead43j0BRIXpR3NKP1S4VftWu2chBQX6GkcoRGBooWytAIXXPJE/EHy1atlGISE z76M7DIsjptOxt1V9MLD+QrrxX+0hLqEs6ZUXh8+3BmVmm9E8TfCZSCf+AUhAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUyXqLz9HMesj1IsT00Euqqdp7RgswHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM5MzczYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwY6XMA0GCSqGSIb3DQEB CwUAA4IBAQA5G34QBPFmCjyK5KM+hLFIt2rR/TmunYW4yl54HkHL0iDChk1prcv8 K5Yy623nv+MMI5Ir5k24ye0wN/vBx8TUeI+r5bJiTDU3JgmK7tMmxDhVnC57me/H xZW5boqqidlAKEhqMGGPr818jSJA5XC+WqQFuwE09fNHumw2q83XitIx50+WmDH/ gm4mWN0g2MeyPthCnhSlqZNhOhz1s3T+awEII/+w4zumO3sfVWhpExLCEBKaO4Pe 34rOaQHCdd6z117TnJw1JvMZjtB2v6s29kkip5miM7/IQpo+fUtrsf/khtuoN7ZN T6H57FBNIW5hkDta75LHIDtyNC8auAo4 -----END CERTIFICATE-----Generated at Sat Apr 11 11:46:41 2026 by rpki-client