$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539393a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a386539393a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: vIJ7TmeMHqLYDYRKRFtmYa0ReNhv6GMuzvZq3RcDXVM= Subject key identifier: 5F:87:58:13:A6:D6:DF:30:5B:7F:38:03:B2:B8:A1:F5:EC:EF:EB:0F Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 5A1CC6E4C2F08DDC79C78ED4E2A20EEB86583FC8 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539393a3a2f34382d3438203d3e203538333339.roa Signing time: Sun 29 Mar 2026 05:33:40 +0000 ROA not before: Sun 29 Mar 2026 05:28:40 +0000 ROA not after: Sun 28 Mar 2027 05:33:40 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e99::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 22:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1c:c6:e4:c2:f0:8d:dc:79:c7:8e:d4:e2:a2:0e:eb:86:58:3f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Mar 29 05:28:40 2026 GMT Not After : Mar 28 05:33:40 2027 GMT Subject: CN=5F875813A6D6DF305B7F3803B2B8A1F5ECEFEB0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5f:e1:6a:fa:8a:d4:b0:f3:63:80:7b:3f:ce: 0c:5d:ae:c5:63:6d:04:58:2b:10:74:7f:97:58:c8: e0:47:39:04:36:46:cc:ad:85:55:e8:f2:10:94:15: 44:c4:1e:f8:43:96:03:d5:64:fe:d1:58:80:e6:64: 44:f1:3f:26:58:7d:6f:aa:35:34:63:9c:e8:0d:4e: af:3f:01:87:d1:89:7d:c3:0c:50:62:1c:c8:56:c8: d2:9b:13:50:de:e4:ee:26:f6:3d:d5:e8:d1:e0:38: 6e:76:79:3a:7f:fa:e5:12:28:0f:6b:fd:fd:80:0f: 3e:9e:c8:05:be:2f:b5:eb:f1:f6:c1:b0:0e:8b:b3: 88:0f:c1:48:0c:f7:00:8d:ce:b9:0a:28:d7:24:91: 87:7c:0c:0e:26:28:fd:ad:27:1a:db:16:1d:be:76: 56:87:1a:5f:8c:61:44:0b:5e:7a:c3:be:94:9d:15: ff:ee:be:29:f2:87:3e:14:9c:a6:72:b6:1b:77:21: d0:31:f8:ff:fa:09:52:7e:93:df:29:85:5a:2b:f4: e0:a4:d3:f2:64:8c:bb:2b:f9:e7:73:2a:4e:80:c2: 9b:67:04:9c:ec:4f:ee:51:ea:52:11:d3:f5:5d:02: f6:39:29:01:0a:e4:10:14:4f:d5:61:38:75:0f:56: 8a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:87:58:13:A6:D6:DF:30:5B:7F:38:03:B2:B8:A1:F5:EC:EF:EB:0F X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539393a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e99::/48 Signature Algorithm: sha256WithRSAEncryption 20:26:43:ba:ac:26:fa:1f:4a:0c:23:a1:de:0d:1c:5a:9d:57: 17:b3:4e:22:47:9c:1f:18:4e:da:27:91:fa:95:37:73:20:45: 7b:34:ef:a0:f7:48:03:57:d0:4f:28:02:36:db:dd:13:97:ca: 61:c8:ea:fa:36:e7:c8:8d:a0:0b:a2:2e:02:f2:35:88:c1:10: 1c:0a:46:94:74:77:5a:3e:2a:96:6f:7d:41:27:c7:b5:8b:88: 60:d4:6e:a6:7c:51:5a:b9:1e:11:c8:0f:b6:6f:ce:8f:79:ff: 87:fa:53:bd:07:cf:23:28:f4:30:82:bf:e0:3d:fa:dc:d9:6c: 46:d3:28:36:f4:7a:f3:27:e4:22:a0:94:98:a7:80:15:f8:85: 62:38:44:b7:c7:1d:e5:4a:fd:ef:6e:f9:c3:ce:f0:ae:62:a2: 01:d9:27:0f:d3:69:0a:7e:5f:eb:d5:d0:3e:fc:91:12:41:0c: ea:b2:d1:e2:d8:63:c2:7d:7e:cc:1d:01:89:70:c9:0b:11:17: d2:ef:5d:c7:de:3e:c9:f0:8b:a7:aa:d9:1b:9e:dd:8f:24:51: 13:c5:d7:77:e2:67:14:47:48:ba:93:64:39:8f:f4:26:60:b4: 82:ab:3d:3b:46:3f:89:f2:e1:b9:de:2c:97:dc:53:22:ab:64: 9e:01:e0:17 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUWhzG5MLwjdx5x47U4qIO64ZYP8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjAzMjkwNTI4NDBaFw0yNzAzMjgwNTMzNDBaMDMxMTAvBgNV BAMTKDVGODc1ODEzQTZENkRGMzA1QjdGMzgwM0IyQjhBMUY1RUNFRkVCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNX+Fq+orUsPNjgHs/zgxdrsVj bQRYKxB0f5dYyOBHOQQ2RsythVXo8hCUFUTEHvhDlgPVZP7RWIDmZETxPyZYfW+q NTRjnOgNTq8/AYfRiX3DDFBiHMhWyNKbE1De5O4m9j3V6NHgOG52eTp/+uUSKA9r /f2ADz6eyAW+L7Xr8fbBsA6Ls4gPwUgM9wCNzrkKKNckkYd8DA4mKP2tJxrbFh2+ dlaHGl+MYUQLXnrDvpSdFf/uvinyhz4UnKZytht3IdAx+P/6CVJ+k98phVor9OCk 0/JkjLsr+edzKk6AwptnBJzsT+5R6lIR0/VdAvY5KQEK5BAUT9VhOHUPVoprAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUX4dYE6bW3zBbfzgDsrih9ezv6w8wHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM5MzkzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwY6ZMA0GCSqGSIb3DQEB CwUAA4IBAQAgJkO6rCb6H0oMI6HeDRxanVcXs04iR5wfGE7aJ5H6lTdzIEV7NO+g 90gDV9BPKAI2290Tl8phyOr6NufIjaALoi4C8jWIwRAcCkaUdHdaPiqWb31BJ8e1 i4hg1G6mfFFauR4RyA+2b86Pef+H+lO9B88jKPQwgr/gPfrc2WxG0yg29HrzJ+Qi oJSYp4AV+IViOES3xx3lSv3vbvnDzvCuYqIB2ScP02kKfl/r1dA+/JESQQzqstHi 2GPCfX7MHQGJcMkLERfS713H3j7J8Iunqtkbnt2PJFETxdd34mcUR0i6k2Q5j/Qm YLSCqz07Rj+J8uG53iyX3FMiq2SeAeAX -----END CERTIFICATE-----Generated at Sat Apr 11 11:46:39 2026 by rpki-client