$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539633a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a386539633a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: YOdqQetpmOynPRKuauHvjfejbhsrdY940iFgiv+10GE= Subject key identifier: 71:40:04:B3:64:A5:11:1A:AD:73:84:F3:DC:3F:AB:1A:23:BD:AE:2A Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 75CED5471B7F40767517628BFD92E11A26C7C1F9 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539633a3a2f34382d3438203d3e203538333339.roa Signing time: Sun 29 Mar 2026 05:33:27 +0000 ROA not before: Sun 29 Mar 2026 05:28:27 +0000 ROA not after: Sun 28 Mar 2027 05:33:27 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e9c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 22:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ce:d5:47:1b:7f:40:76:75:17:62:8b:fd:92:e1:1a:26:c7:c1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Mar 29 05:28:27 2026 GMT Not After : Mar 28 05:33:27 2027 GMT Subject: CN=714004B364A5111AAD7384F3DC3FAB1A23BDAE2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4c:a8:cd:19:1a:98:e3:2a:e6:72:bc:a5:b8: c7:53:5b:9b:8f:ca:10:e3:85:76:47:60:4d:e0:54: 36:97:d7:c0:65:54:e7:48:66:b0:22:0b:51:7b:1f: f5:53:37:be:9c:43:35:83:1d:6f:94:5b:fe:0f:f8: 25:4d:9f:90:5b:42:98:de:bb:9c:6b:88:8f:6e:6d: 84:b7:a8:d1:55:44:4e:9c:eb:be:ad:a8:c4:e5:b3: 86:da:13:d1:3a:60:c4:b5:06:c3:ec:9b:88:6b:05: 78:8e:70:8c:e7:1e:31:69:b8:72:79:90:0a:27:7c: 2d:72:00:30:5b:80:08:46:01:e4:a6:33:25:6e:3b: b8:c2:bf:5d:80:a7:d7:76:24:ee:16:35:76:70:24: 60:e5:9d:24:fd:9c:1e:0d:26:b8:80:c9:c3:5e:dc: 33:9d:cd:25:ee:b7:62:c6:0d:3c:59:61:08:3c:8d: db:02:70:4b:4f:53:11:aa:90:4a:41:34:ee:f5:fc: 9a:53:42:c2:d3:cf:11:66:d3:6b:49:d8:b3:bb:00: 34:67:5a:c7:30:5c:7d:41:86:7b:ad:3c:92:bd:4c: d5:5b:54:fc:ca:c0:e1:0a:c9:e2:6e:31:28:9e:03: 8d:2c:7d:70:1a:34:80:0e:61:f9:2d:40:3f:76:47: 7a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:40:04:B3:64:A5:11:1A:AD:73:84:F3:DC:3F:AB:1A:23:BD:AE:2A X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539633a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e9c::/48 Signature Algorithm: sha256WithRSAEncryption 6d:d1:2e:8e:21:94:fe:d6:b7:14:dd:30:0a:8e:d8:a5:ec:55: fe:00:ed:ce:01:f0:5f:4c:f7:65:4a:06:b4:b8:64:33:f2:66: 16:5e:98:5c:79:22:2f:8f:25:97:3e:f7:3b:03:23:38:15:99: 24:66:06:44:d9:10:51:e1:40:dd:31:c5:f5:9c:ae:1b:ed:e2: d9:57:aa:7e:2b:3d:e9:63:a2:dd:bb:f8:22:e2:78:cd:6c:58: ec:0e:64:87:bb:05:98:7d:51:cd:00:4f:b1:d7:4b:50:a9:ee: 73:82:78:c1:e0:98:64:cc:aa:3a:be:ce:00:15:a2:73:ef:07: 55:3d:c1:23:ff:3f:fe:f7:9e:00:96:9d:ab:d6:63:57:80:e6: 66:c1:18:49:94:a6:ba:2b:ab:19:91:98:64:76:ee:30:fd:31: 42:5b:5f:54:c3:d9:34:b5:b7:f3:07:3f:d3:eb:45:e5:41:6f: 1c:bb:60:02:14:11:1b:a8:a9:b7:1b:c8:47:db:52:b6:e4:6b: f7:30:bf:63:e7:39:3d:61:72:08:a5:5b:91:e8:6f:53:13:5e: 5a:92:af:2b:6f:0c:10:6e:38:49:b4:3c:01:76:0f:10:2e:33: f3:f7:f4:12:b7:69:d5:ec:89:b1:c5:bb:f5:12:cc:23:ef:d9: 4f:e8:23:59 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUdc7VRxt/QHZ1F2KL/ZLhGibHwfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjAzMjkwNTI4MjdaFw0yNzAzMjgwNTMzMjdaMDMxMTAvBgNV BAMTKDcxNDAwNEIzNjRBNTExMUFBRDczODRGM0RDM0ZBQjFBMjNCREFFMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTKjNGRqY4yrmcryluMdTW5uP yhDjhXZHYE3gVDaX18BlVOdIZrAiC1F7H/VTN76cQzWDHW+UW/4P+CVNn5BbQpje u5xriI9ubYS3qNFVRE6c676tqMTls4baE9E6YMS1BsPsm4hrBXiOcIznHjFpuHJ5 kAonfC1yADBbgAhGAeSmMyVuO7jCv12Ap9d2JO4WNXZwJGDlnST9nB4NJriAycNe 3DOdzSXut2LGDTxZYQg8jdsCcEtPUxGqkEpBNO71/JpTQsLTzxFm02tJ2LO7ADRn WscwXH1BhnutPJK9TNVbVPzKwOEKyeJuMSieA40sfXAaNIAOYfktQD92R3oJAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUcUAEs2SlERqtc4Tz3D+rGiO9riowHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM5NjMzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwY6cMA0GCSqGSIb3DQEB CwUAA4IBAQBt0S6OIZT+1rcU3TAKjtil7FX+AO3OAfBfTPdlSga0uGQz8mYWXphc eSIvjyWXPvc7AyM4FZkkZgZE2RBR4UDdMcX1nK4b7eLZV6p+Kz3pY6Ldu/gi4njN bFjsDmSHuwWYfVHNAE+x10tQqe5zgnjB4JhkzKo6vs4AFaJz7wdVPcEj/z/+954A lp2r1mNXgOZmwRhJlKa6K6sZkZhkdu4w/TFCW19Uw9k0tbfzBz/T60XlQW8cu2AC FBEbqKm3G8hH21K25Gv3ML9j5zk9YXIIpVuR6G9TE15akq8rbwwQbjhJtDwBdg8Q LjPz9/QSt2nV7Imxxbv1Eswj79lP6CNZ -----END CERTIFICATE-----Generated at Sat Apr 11 11:45:18 2026 by rpki-client