$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539653a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a386539653a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: OoTJBvvZzpzOcqWAj8DrvoDs31SDKxKdR5vGLURM57A= Subject key identifier: D2:C5:FB:1F:48:49:39:AA:AE:50:3B:27:40:9B:ED:34:C1:6A:05:15 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 21EEFABDDC11D20895A5D6D8288AE962C4D3ABF8 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539653a3a2f34382d3438203d3e203538333339.roa Signing time: Sun 29 Mar 2026 05:33:21 +0000 ROA not before: Sun 29 Mar 2026 05:28:21 +0000 ROA not after: Sun 28 Mar 2027 05:33:21 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e9e::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 22:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ee:fa:bd:dc:11:d2:08:95:a5:d6:d8:28:8a:e9:62:c4:d3:ab:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Mar 29 05:28:21 2026 GMT Not After : Mar 28 05:33:21 2027 GMT Subject: CN=D2C5FB1F484939AAAE503B27409BED34C16A0515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a6:f0:20:21:fe:d8:17:af:57:25:ba:19:96: 3f:d4:23:3b:4e:2d:da:35:9f:d6:1f:6f:e1:36:12: d2:8e:30:bf:d2:52:c4:a2:a6:8f:20:96:f0:19:ec: d1:47:99:31:b1:cb:95:4a:11:db:f4:6f:cf:d0:73: d2:35:ea:2e:48:d3:ac:0e:02:44:e8:50:e5:f4:2d: 1a:d5:a5:f1:da:5f:1f:aa:9c:51:04:9b:83:27:b3: 46:e1:d4:e5:d0:19:43:a1:89:5c:6b:d6:e5:41:40: db:39:a2:76:cb:ef:df:b1:c6:03:ac:be:0f:a9:e8: 43:54:49:86:2d:47:64:42:20:c4:32:99:30:44:b9: 57:c7:21:ff:c1:c2:07:5e:69:29:2d:f1:1d:1c:7b: d1:e0:4f:6d:00:3e:d4:cd:dc:64:34:8e:b4:9c:c0: f7:a3:1b:da:bb:cd:8c:bf:7a:28:73:08:51:97:d7: 5a:03:de:86:af:2a:7b:95:7f:d2:49:91:7f:8d:28: ad:f5:45:ab:b3:f4:bf:7e:8d:59:79:ef:56:8b:a6: b8:60:6d:2d:1a:71:7f:2f:b8:d3:2f:e6:ac:c1:4c: 77:8b:91:82:bf:6e:33:a2:64:5c:2e:45:33:d6:ef: bb:16:29:f0:78:f1:07:8a:4e:11:42:43:a4:17:f7: 1d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C5:FB:1F:48:49:39:AA:AE:50:3B:27:40:9B:ED:34:C1:6A:05:15 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539653a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e9e::/48 Signature Algorithm: sha256WithRSAEncryption 58:45:5a:6e:6b:e4:a4:8f:9e:41:22:38:09:74:d4:fd:e8:ff: c7:dc:3d:0a:f5:ce:bb:07:12:59:b9:11:07:24:95:e1:de:24: 6b:ba:17:d2:cd:4e:5f:8b:57:de:39:c8:85:8c:ef:e4:50:3e: d6:04:1d:c7:01:df:ae:50:41:9f:e5:68:ef:4e:0b:42:d5:f8: 16:3f:35:a8:e0:12:ab:18:05:f1:af:a2:83:74:c1:76:64:55: 0e:d9:03:6e:7a:07:dc:ef:75:37:a5:ff:29:e1:0e:91:b3:19: 3b:e1:f6:fa:59:b9:fd:c0:8c:66:a4:a0:e4:0c:3e:52:bb:76: c8:b5:b1:ab:ff:01:c0:34:3e:04:ba:e8:cd:8f:53:e8:b3:ba: 3e:40:b1:f5:a5:9a:a7:c0:b1:03:7f:f1:53:6e:81:63:40:7c: 96:ef:95:e8:f7:77:1b:02:8d:19:92:b4:29:e6:32:df:1b:aa: a2:4e:85:02:f6:83:18:9d:28:39:6d:de:30:be:a7:d6:00:5c: ab:24:4b:85:d0:95:16:68:34:0a:07:2c:4e:bd:ab:f3:91:2c: 92:d0:05:96:4d:63:67:f1:ad:e7:b2:8a:01:6f:e0:1f:d1:5e: 37:5c:55:69:ad:da:2b:65:bd:79:9f:3c:d2:fb:16:85:6c:77: aa:56:3f:b3 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUIe76vdwR0giVpdbYKIrpYsTTq/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjAzMjkwNTI4MjFaFw0yNzAzMjgwNTMzMjFaMDMxMTAvBgNV BAMTKEQyQzVGQjFGNDg0OTM5QUFBRTUwM0IyNzQwOUJFRDM0QzE2QTA1MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWpvAgIf7YF69XJboZlj/UIztO Ldo1n9Yfb+E2EtKOML/SUsSipo8glvAZ7NFHmTGxy5VKEdv0b8/Qc9I16i5I06wO AkToUOX0LRrVpfHaXx+qnFEEm4Mns0bh1OXQGUOhiVxr1uVBQNs5onbL79+xxgOs vg+p6ENUSYYtR2RCIMQymTBEuVfHIf/BwgdeaSkt8R0ce9HgT20APtTN3GQ0jrSc wPejG9q7zYy/eihzCFGX11oD3oavKnuVf9JJkX+NKK31Rauz9L9+jVl571aLprhg bS0acX8vuNMv5qzBTHeLkYK/bjOiZFwuRTPW77sWKfB48QeKThFCQ6QX9x3dAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU0sX7H0hJOaquUDsnQJvtNMFqBRUwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM5NjUzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwY6eMA0GCSqGSIb3DQEB CwUAA4IBAQBYRVpua+Skj55BIjgJdNT96P/H3D0K9c67BxJZuREHJJXh3iRruhfS zU5fi1feOciFjO/kUD7WBB3HAd+uUEGf5WjvTgtC1fgWPzWo4BKrGAXxr6KDdMF2 ZFUO2QNuegfc73U3pf8p4Q6Rsxk74fb6Wbn9wIxmpKDkDD5Su3bItbGr/wHAND4E uujNj1Pos7o+QLH1pZqnwLEDf/FTboFjQHyW75Xo93cbAo0ZkrQp5jLfG6qiToUC 9oMYnSg5bd4wvqfWAFyrJEuF0JUWaDQKByxOvavzkSyS0AWWTWNn8a3nsooBb+Af 0V43XFVprdorZb15nzzS+xaFbHeqVj+z -----END CERTIFICATE-----Generated at Sat Apr 11 11:45:16 2026 by rpki-client