$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539383a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a386539383a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: gK7JdoHZC3+Wl/k3qre05DMsZUNG6oPR9OE2Yr1GOEU= Subject key identifier: AA:38:F8:2C:9A:45:EB:B8:4A:FE:3A:27:B1:BD:DB:12:91:9C:23:E2 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 2049FD50334DF2F21DA3E1F47060064B014F09FB Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539383a3a2f34382d3438203d3e203538333339.roa Signing time: Sun 29 Mar 2026 05:33:43 +0000 ROA not before: Sun 29 Mar 2026 05:28:43 +0000 ROA not after: Sun 28 Mar 2027 05:33:43 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e98::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 22:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:49:fd:50:33:4d:f2:f2:1d:a3:e1:f4:70:60:06:4b:01:4f:09:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Mar 29 05:28:43 2026 GMT Not After : Mar 28 05:33:43 2027 GMT Subject: CN=AA38F82C9A45EBB84AFE3A27B1BDDB12919C23E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:e1:c3:af:32:f0:82:bd:12:34:a6:ae:f8: 4b:de:7f:91:37:5d:1b:f9:21:1c:d7:d7:c6:9b:b9: 69:ef:08:cb:05:3f:09:08:11:39:1b:e9:9f:68:3c: de:17:2e:a3:c9:03:79:68:c9:75:a3:dd:fd:97:fd: 8b:ea:c2:7e:e1:c1:02:39:a4:28:9a:6f:dc:3f:b2: d4:66:8f:2f:4d:a5:92:6b:06:58:16:bc:4b:29:79: 85:2a:d9:69:ed:52:d6:0b:f2:7c:31:6f:29:4b:f4: 12:16:10:ad:f7:06:0b:0d:ba:fb:f3:97:ac:ee:51: 96:56:8e:5e:18:a5:4e:04:82:8c:4c:46:c2:c1:6d: 34:80:ae:79:54:79:db:c3:03:86:a5:c5:cb:1e:c0: 41:65:c4:cf:b9:bb:ae:b1:a8:aa:af:b9:ea:9d:0e: a0:0b:8c:24:3e:21:15:00:0a:f7:78:02:1e:c0:fd: ba:37:1b:7b:1e:78:80:16:4a:81:80:a9:2e:78:32: 12:1a:15:4d:94:73:71:03:76:77:3c:d0:cc:d4:83: e0:f2:b1:e7:4a:b3:22:11:59:5d:b4:a4:dd:3b:1e: 5f:f5:76:14:43:ec:93:df:b2:30:bd:d8:b2:0c:47: 04:c2:20:37:e7:4d:ce:40:37:63:cb:c4:e4:30:f7: 0c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:38:F8:2C:9A:45:EB:B8:4A:FE:3A:27:B1:BD:DB:12:91:9C:23:E2 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539383a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e98::/48 Signature Algorithm: sha256WithRSAEncryption a6:4b:d9:40:e7:39:a6:cc:27:95:09:a5:e1:e6:59:09:c7:f4: ca:69:3e:40:f8:8e:c2:02:36:73:49:db:5a:c8:c1:dc:f6:e6: 8b:58:07:69:6c:24:f0:8e:41:0b:72:24:b7:52:c1:d5:71:e3: 41:d9:f3:6b:54:4d:a6:dd:43:4e:88:db:de:82:70:3c:ac:46: cc:79:3f:51:5c:b1:63:12:4a:c9:28:54:d4:63:ee:57:68:17: ff:aa:92:9b:a3:65:70:b1:b7:f2:89:5a:22:ae:c5:3e:18:d8: 75:24:be:63:d3:b0:9b:6e:f6:5e:26:e7:86:84:ed:fa:e5:ef: 63:f9:f4:95:25:39:15:64:6d:9a:0c:8e:fe:25:32:b0:ab:3c: 8b:18:67:df:b8:37:a0:59:a1:8d:bf:30:11:65:26:2c:42:2b: 9a:55:a4:28:54:f5:07:24:55:df:af:e9:98:ba:58:b7:94:88: c7:f4:6c:c7:a3:cf:eb:32:2e:43:c1:f4:90:ca:d8:ad:59:7d: 36:c6:c3:31:52:9e:f9:4a:6a:6a:d5:54:47:2f:59:6e:46:96: 22:11:81:b9:cc:ae:93:cc:76:49:7f:95:73:d3:8e:38:18:96: 56:18:22:44:c4:7e:9f:b3:f5:89:46:f0:6f:ce:4d:09:12:d3: 9b:37:c6:66 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUIEn9UDNN8vIdo+H0cGAGSwFPCfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjAzMjkwNTI4NDNaFw0yNzAzMjgwNTMzNDNaMDMxMTAvBgNV BAMTKEFBMzhGODJDOUE0NUVCQjg0QUZFM0EyN0IxQkREQjEyOTE5QzIzRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy9eHDrzLwgr0SNKau+Evef5E3 XRv5IRzX18abuWnvCMsFPwkIETkb6Z9oPN4XLqPJA3loyXWj3f2X/Yvqwn7hwQI5 pCiab9w/stRmjy9NpZJrBlgWvEspeYUq2WntUtYL8nwxbylL9BIWEK33BgsNuvvz l6zuUZZWjl4YpU4EgoxMRsLBbTSArnlUedvDA4alxcsewEFlxM+5u66xqKqvueqd DqALjCQ+IRUACvd4Ah7A/bo3G3seeIAWSoGAqS54MhIaFU2Uc3EDdnc80MzUg+Dy sedKsyIRWV20pN07Hl/1dhRD7JPfsjC92LIMRwTCIDfnTc5AN2PLxOQw9wzpAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUqjj4LJpF67hK/jonsb3bEpGcI+IwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM5MzgzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwY6YMA0GCSqGSIb3DQEB CwUAA4IBAQCmS9lA5zmmzCeVCaXh5lkJx/TKaT5A+I7CAjZzSdtayMHc9uaLWAdp bCTwjkELciS3UsHVceNB2fNrVE2m3UNOiNvegnA8rEbMeT9RXLFjEkrJKFTUY+5X aBf/qpKbo2VwsbfyiVoirsU+GNh1JL5j07CbbvZeJueGhO365e9j+fSVJTkVZG2a DI7+JTKwqzyLGGffuDegWaGNvzARZSYsQiuaVaQoVPUHJFXfr+mYuli3lIjH9GzH o8/rMi5DwfSQytitWX02xsMxUp75Smpq1VRHL1luRpYiEYG5zK6TzHZJf5Vz0444 GJZWGCJExH6fs/WJRvBvzk0JEtObN8Zm -----END CERTIFICATE-----Generated at Sat Apr 11 11:46:40 2026 by rpki-client