$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539643a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a386539643a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: 19S4rzVjrm83HtETgc1LLSRtLbcXymeLpFII6QeOslI= Subject key identifier: CB:83:9E:D3:D8:1C:87:16:45:88:10:60:53:69:F6:16:40:9E:29:7D Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 271AD7BA3CE55B10F1CAFA5B68E045E41B29BE30 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539643a3a2f34382d3438203d3e203538333339.roa Signing time: Sun 29 Mar 2026 05:33:24 +0000 ROA not before: Sun 29 Mar 2026 05:28:24 +0000 ROA not after: Sun 28 Mar 2027 05:33:24 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e9d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 22:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1a:d7:ba:3c:e5:5b:10:f1:ca:fa:5b:68:e0:45:e4:1b:29:be:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Mar 29 05:28:24 2026 GMT Not After : Mar 28 05:33:24 2027 GMT Subject: CN=CB839ED3D81C8716458810605369F616409E297D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:65:71:6a:2d:21:71:32:4e:0c:10:23:c0:fa: cc:d2:95:93:98:4a:6d:61:3b:33:57:19:ec:0b:32: de:bd:4a:a6:35:55:3f:4b:fe:15:1f:f2:19:0a:2f: 06:f5:29:da:6d:0f:be:5b:47:c6:62:95:37:f8:f4: 3d:e1:e2:71:31:38:14:3b:58:da:13:50:71:e7:51: 87:47:f0:7a:76:87:a9:83:7f:dc:d9:a3:f8:cf:b2: 0e:ae:3f:f6:20:d4:3b:4e:12:d4:8e:e5:f1:19:9f: ec:cc:34:38:af:11:4c:c1:4f:8b:bb:3b:42:03:7a: 05:89:3b:bd:8a:08:8f:36:9e:d4:3a:7e:30:eb:ad: fb:2a:7e:a8:02:b0:a9:2d:a1:26:06:72:d5:e2:de: c7:a6:4e:25:08:96:28:37:16:91:f4:0c:b5:d8:cd: 69:3f:f0:3a:9f:b4:cd:03:79:11:a9:1f:92:eb:82: 32:0d:a6:92:d5:dd:8e:df:56:10:9c:6a:34:66:c7: 0f:8d:a9:5a:58:6b:3c:76:7f:96:6a:1b:b2:eb:35: e5:f3:42:ea:09:f0:83:ba:55:e1:e6:99:8b:22:ef: ae:fb:f2:40:64:5f:83:7c:d7:af:44:a6:1f:5b:48: 3e:20:e7:bd:59:6b:e0:85:6f:61:e4:27:ff:f7:67: 59:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:83:9E:D3:D8:1C:87:16:45:88:10:60:53:69:F6:16:40:9E:29:7D X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539643a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e9d::/48 Signature Algorithm: sha256WithRSAEncryption 70:e2:f7:f5:78:b0:bb:19:d2:c3:2a:3a:2c:f9:a4:4e:67:1e: 55:f4:4a:04:f7:88:6e:f2:6f:24:2e:b3:fb:01:53:aa:26:1f: 14:17:2b:bd:b3:a0:b3:da:ed:a0:b9:9d:d1:26:82:e6:2a:00: e9:0b:a8:74:01:3f:45:49:ed:7e:fe:a2:48:31:13:24:f6:24: 9b:9e:64:c9:22:4b:85:83:28:d4:77:e5:68:97:0b:dc:35:96: 37:e7:9c:e6:f5:b5:62:30:ce:a6:31:2f:0b:a3:a5:49:0b:a2: cf:ee:34:02:76:90:42:ac:5e:ab:4c:73:fa:09:35:35:5f:85: d8:b6:2a:8f:4e:5a:ab:df:8c:f5:2c:ea:e7:f0:28:58:bb:ff: 72:c4:fa:45:eb:eb:6e:74:d9:d0:d4:dc:af:50:4d:77:6d:5b: ef:a9:a9:2c:d9:ef:92:9e:36:6a:1b:5d:4d:b3:c7:36:fb:f0: 45:d1:45:89:aa:e6:af:8a:99:a2:15:b8:94:06:f9:24:aa:ae: 0d:ae:9b:cb:45:24:c2:58:f2:85:a9:92:4c:e6:70:94:0e:a4: e0:de:18:19:81:cf:74:15:a1:70:39:8a:95:8f:eb:20:bf:d4: 1d:40:e0:8c:9f:a8:29:fa:f1:40:17:e8:c7:36:f6:f1:0d:81: f2:d3:35:49 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUJxrXujzlWxDxyvpbaOBF5BspvjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjAzMjkwNTI4MjRaFw0yNzAzMjgwNTMzMjRaMDMxMTAvBgNV BAMTKENCODM5RUQzRDgxQzg3MTY0NTg4MTA2MDUzNjlGNjE2NDA5RTI5N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrZXFqLSFxMk4MECPA+szSlZOY Sm1hOzNXGewLMt69SqY1VT9L/hUf8hkKLwb1KdptD75bR8ZilTf49D3h4nExOBQ7 WNoTUHHnUYdH8Hp2h6mDf9zZo/jPsg6uP/Yg1DtOEtSO5fEZn+zMNDivEUzBT4u7 O0IDegWJO72KCI82ntQ6fjDrrfsqfqgCsKktoSYGctXi3semTiUIlig3FpH0DLXY zWk/8DqftM0DeRGpH5LrgjINppLV3Y7fVhCcajRmxw+NqVpYazx2f5ZqG7LrNeXz QuoJ8IO6VeHmmYsi76778kBkX4N8169Eph9bSD4g571Za+CFb2HkJ//3Z1knAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUy4Oe09gchxZFiBBgU2n2FkCeKX0wHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM5NjQzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwY6dMA0GCSqGSIb3DQEB CwUAA4IBAQBw4vf1eLC7GdLDKjos+aROZx5V9EoE94hu8m8kLrP7AVOqJh8UFyu9 s6Cz2u2guZ3RJoLmKgDpC6h0AT9FSe1+/qJIMRMk9iSbnmTJIkuFgyjUd+Volwvc NZY355zm9bViMM6mMS8Lo6VJC6LP7jQCdpBCrF6rTHP6CTU1X4XYtiqPTlqr34z1 LOrn8ChYu/9yxPpF6+tudNnQ1NyvUE13bVvvqaks2e+SnjZqG11Ns8c2+/BF0UWJ quavipmiFbiUBvkkqq4NrpvLRSTCWPKFqZJM5nCUDqTg3hgZgc90FaFwOYqVj+sg v9QdQOCMn6gp+vFAF+jHNvbxDYHy0zVJ -----END CERTIFICATE-----Generated at Sat Apr 11 11:45:10 2026 by rpki-client