$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539623a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a386539623a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: j7rHWrGVWOClgXYTI/WXMNAzJUF1j8OH9FTXCB2uSyc= Subject key identifier: 21:0D:40:9B:A1:CC:C9:43:7B:C6:29:7A:FA:44:0C:31:0F:49:EA:E8 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 2F102777781A552942E944311BC59133B2830EE1 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539623a3a2f34382d3438203d3e203538333339.roa Signing time: Sun 29 Mar 2026 05:33:35 +0000 ROA not before: Sun 29 Mar 2026 05:28:35 +0000 ROA not after: Sun 28 Mar 2027 05:33:35 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e9b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 22:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:10:27:77:78:1a:55:29:42:e9:44:31:1b:c5:91:33:b2:83:0e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Mar 29 05:28:35 2026 GMT Not After : Mar 28 05:33:35 2027 GMT Subject: CN=210D409BA1CCC9437BC6297AFA440C310F49EAE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b4:58:9e:75:79:ee:24:36:25:41:65:29:91: ea:5b:a3:0b:f2:7a:0c:44:44:54:17:7d:dc:9c:13: f8:dd:34:d4:6a:79:e7:92:3d:33:ae:7c:c1:57:7c: 00:c5:96:13:aa:21:77:59:b4:39:17:68:3c:a1:78: 65:3b:85:d9:e1:e4:d6:86:c3:1f:89:22:95:58:c0: 1e:28:6c:74:29:b7:57:e2:6b:90:71:96:7d:c2:67: aa:e9:4d:a5:90:1c:99:2a:b2:71:19:bf:e9:12:57: 31:36:bb:40:8d:c6:d4:35:52:42:15:c5:a0:46:d7: 58:7e:97:9f:9c:ed:02:e4:e9:d9:54:51:57:75:62: 04:57:eb:1e:03:64:1d:8b:ce:5c:3c:ad:f9:a3:ed: c3:cf:08:42:6f:c9:a0:c0:5b:a7:65:06:06:84:43: 8f:09:a9:b4:5f:21:e2:1e:6d:c8:89:90:84:7f:9c: 82:8a:5e:e3:e7:40:a9:4d:56:1f:c7:9e:f4:6a:49: 09:ed:c0:b5:54:aa:50:51:88:15:ab:a3:78:49:64: 43:9e:17:0b:65:ff:7d:e8:ed:e0:bd:b6:12:94:71: 62:d0:53:42:91:1f:22:43:18:1f:66:24:88:4b:68: 20:30:14:f7:e0:0b:63:67:49:21:71:ac:da:0f:8d: ea:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0D:40:9B:A1:CC:C9:43:7B:C6:29:7A:FA:44:0C:31:0F:49:EA:E8 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539623a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e9b::/48 Signature Algorithm: sha256WithRSAEncryption 2f:d6:89:3d:13:70:c0:91:c6:b6:8c:a3:99:ea:94:1e:21:eb: 44:73:98:c8:61:00:f8:20:bc:53:4f:ed:d7:f6:cd:c9:5d:92: 8a:8d:6d:3a:d5:be:ed:84:2d:51:5b:ef:0e:33:d1:c6:03:89: a5:ac:07:ad:a1:88:f5:97:b5:65:cc:5c:04:40:62:b4:47:85: 87:8d:61:80:36:0e:7f:c9:0b:0f:78:9e:1f:b7:4f:28:b6:2a: e8:5f:aa:a2:11:a4:6b:2f:d6:be:01:6f:4b:6d:6c:72:fb:83: 6a:df:8a:ba:db:6c:94:1d:64:b1:19:49:21:ec:b9:e0:f4:e5: f1:5b:b6:cd:0e:f7:ad:02:c9:27:70:b6:d3:c4:35:8c:17:50: 2e:df:80:24:5f:da:15:41:80:ea:e2:89:e0:7d:75:a3:c6:03: b6:f9:9f:90:c1:0f:03:b7:24:55:19:30:dd:46:42:56:66:82: cf:c1:5e:4d:90:54:a6:d4:55:f0:13:0c:55:67:be:f7:d9:fa: ae:ea:62:51:bc:f5:b9:da:74:0d:48:b1:33:7c:cb:0e:f3:5f: 4d:99:0b:bb:fa:88:af:f5:df:d3:1c:8e:2b:6e:d1:c2:9e:d3: e8:26:54:8d:77:4c:2b:8f:ff:8a:b1:c6:a3:d6:a2:a5:0b:15: e3:82:0c:da -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIULxAnd3gaVSlC6UQxG8WRM7KDDuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjAzMjkwNTI4MzVaFw0yNzAzMjgwNTMzMzVaMDMxMTAvBgNV BAMTKDIxMEQ0MDlCQTFDQ0M5NDM3QkM2Mjk3QUZBNDQwQzMxMEY0OUVBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCctFiedXnuJDYlQWUpkepbowvy egxERFQXfdycE/jdNNRqeeeSPTOufMFXfADFlhOqIXdZtDkXaDyheGU7hdnh5NaG wx+JIpVYwB4obHQpt1fia5Bxln3CZ6rpTaWQHJkqsnEZv+kSVzE2u0CNxtQ1UkIV xaBG11h+l5+c7QLk6dlUUVd1YgRX6x4DZB2Lzlw8rfmj7cPPCEJvyaDAW6dlBgaE Q48JqbRfIeIebciJkIR/nIKKXuPnQKlNVh/HnvRqSQntwLVUqlBRiBWro3hJZEOe Fwtl/33o7eC9thKUcWLQU0KRHyJDGB9mJIhLaCAwFPfgC2NnSSFxrNoPjerVAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUIQ1Am6HMyUN7xil6+kQMMQ9J6ugwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM5NjIzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwY6bMA0GCSqGSIb3DQEB CwUAA4IBAQAv1ok9E3DAkca2jKOZ6pQeIetEc5jIYQD4ILxTT+3X9s3JXZKKjW06 1b7thC1RW+8OM9HGA4mlrAetoYj1l7VlzFwEQGK0R4WHjWGANg5/yQsPeJ4ft08o tiroX6qiEaRrL9a+AW9LbWxy+4Nq34q622yUHWSxGUkh7Lng9OXxW7bNDvetAskn cLbTxDWMF1Au34AkX9oVQYDq4ongfXWjxgO2+Z+QwQ8DtyRVGTDdRkJWZoLPwV5N kFSm1FXwEwxVZ7732fqu6mJRvPW52nQNSLEzfMsO819NmQu7+oiv9d/THI4rbtHC ntPoJlSNd0wrj/+Kscaj1qKlCxXjggza -----END CERTIFICATE-----Generated at Sat Apr 11 11:45:22 2026 by rpki-client