$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539663a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a386539663a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: e/MfHzSZ/QWJukLvjoGiBnHmQ23ut6OUQxKFDgBvR70= Subject key identifier: 3C:8E:7D:87:33:3B:34:F5:8A:96:58:41:3E:E7:3F:C2:4F:AF:43:82 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 23142A4A0370B3D2743029277B06FF10FFBECBE5 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539663a3a2f34382d3438203d3e203538333339.roa Signing time: Sun 29 Mar 2026 05:33:17 +0000 ROA not before: Sun 29 Mar 2026 05:28:17 +0000 ROA not after: Sun 28 Mar 2027 05:33:17 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e9f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 22:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:14:2a:4a:03:70:b3:d2:74:30:29:27:7b:06:ff:10:ff:be:cb:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Mar 29 05:28:17 2026 GMT Not After : Mar 28 05:33:17 2027 GMT Subject: CN=3C8E7D87333B34F58A9658413EE73FC24FAF4382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8d:db:60:e0:37:cf:d0:6f:56:cc:2b:f6:66: 0c:d1:7f:4d:35:80:a1:a8:c6:80:45:9d:ee:04:22: f6:7e:af:d8:f8:4d:64:a4:ee:af:c8:92:5f:1c:eb: 8d:99:ce:cf:6e:a3:ab:da:50:f3:07:4f:af:f9:49: 62:a7:fb:d5:d8:12:49:2e:1b:8f:bb:6d:89:0f:e6: be:db:b5:9a:7e:96:33:4b:22:34:72:a2:f0:d6:c8: b1:bd:ef:18:8c:33:50:9a:5c:59:cb:af:df:78:c8: 38:4c:d0:10:97:6a:80:d3:9c:81:2e:59:4a:3b:41: af:2f:55:a4:dc:77:f0:03:c1:0f:dd:14:e0:30:99: 7d:d0:1f:71:b7:68:4d:1c:f2:f7:94:6f:7d:5d:e0: 96:e5:f9:ed:79:c7:68:62:78:3c:38:74:4e:32:cc: d7:ac:c4:ca:d0:08:35:ea:81:fe:71:cf:17:db:31: 2c:8f:5f:3a:3c:96:8d:b3:bb:38:55:aa:bb:cf:90: 61:d8:31:30:bc:2c:2d:fd:6b:01:44:d5:23:cb:44: 72:04:c1:30:31:79:21:0e:2e:95:38:75:ce:16:78: f8:79:c0:64:25:e7:99:cf:15:b4:05:7d:32:94:43: 71:85:8b:44:1b:58:04:b4:27:81:46:ba:73:f7:7c: e6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8E:7D:87:33:3B:34:F5:8A:96:58:41:3E:E7:3F:C2:4F:AF:43:82 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386539663a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e9f::/48 Signature Algorithm: sha256WithRSAEncryption 4a:5b:84:17:a7:a3:3f:11:a2:bb:ae:8d:e1:ba:ef:aa:55:87: 94:47:e2:1f:be:5c:93:6b:a6:62:73:54:c6:54:0c:91:ba:7b: 39:5b:bd:88:dc:16:f7:54:52:2e:df:a5:93:0b:59:a3:cc:df: 19:31:5a:ed:6e:17:d4:ac:fb:8f:d1:7f:fb:06:25:ad:fe:4e: 60:12:f3:e0:a0:a7:46:dd:a4:ac:9a:29:9e:6c:f8:17:1a:50: ac:a9:4a:1f:fa:cc:f7:44:f7:5e:a7:20:f2:0e:3d:8b:db:c8: 73:b3:12:06:fe:d6:18:53:2e:0f:ea:e5:d3:12:fb:6f:71:0a: 58:e7:fd:d5:e6:51:8d:71:dc:2c:5f:22:20:98:1e:20:77:5b: 45:5b:13:36:51:1a:ed:dc:41:50:e9:4a:4d:b2:89:0c:2d:09: 7d:d1:6c:dd:d4:ae:60:8a:66:e3:b6:b9:23:37:55:91:3a:c5: 60:ac:e1:fb:60:d1:84:d6:fb:3f:5b:7b:58:17:d9:02:63:a3: 25:b2:bd:1c:38:5e:91:1b:15:1f:80:a2:c7:bb:87:e5:08:71: a8:40:2c:6d:2d:65:ec:ad:98:81:6f:ba:8e:d4:bf:88:bd:de: 6c:df:c4:4f:b8:15:d2:04:f0:9e:de:76:ce:ec:fe:76:9c:0d: cc:dd:a5:4b -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUIxQqSgNws9J0MCknewb/EP++y+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjAzMjkwNTI4MTdaFw0yNzAzMjgwNTMzMTdaMDMxMTAvBgNV BAMTKDNDOEU3RDg3MzMzQjM0RjU4QTk2NTg0MTNFRTczRkMyNEZBRjQzODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdjdtg4DfP0G9WzCv2ZgzRf001 gKGoxoBFne4EIvZ+r9j4TWSk7q/Ikl8c642Zzs9uo6vaUPMHT6/5SWKn+9XYEkku G4+7bYkP5r7btZp+ljNLIjRyovDWyLG97xiMM1CaXFnLr994yDhM0BCXaoDTnIEu WUo7Qa8vVaTcd/ADwQ/dFOAwmX3QH3G3aE0c8veUb31d4Jbl+e15x2hieDw4dE4y zNesxMrQCDXqgf5xzxfbMSyPXzo8lo2zuzhVqrvPkGHYMTC8LC39awFE1SPLRHIE wTAxeSEOLpU4dc4WePh5wGQl55nPFbQFfTKUQ3GFi0QbWAS0J4FGunP3fOaJAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUPI59hzM7NPWKllhBPuc/wk+vQ4IwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM5NjYzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwY6fMA0GCSqGSIb3DQEB CwUAA4IBAQBKW4QXp6M/EaK7ro3huu+qVYeUR+IfvlyTa6Zic1TGVAyRuns5W72I 3Bb3VFIu36WTC1mjzN8ZMVrtbhfUrPuP0X/7BiWt/k5gEvPgoKdG3aSsmimebPgX GlCsqUof+sz3RPdepyDyDj2L28hzsxIG/tYYUy4P6uXTEvtvcQpY5/3V5lGNcdws XyIgmB4gd1tFWxM2URrt3EFQ6UpNsokMLQl90Wzd1K5gimbjtrkjN1WROsVgrOH7 YNGE1vs/W3tYF9kCY6Mlsr0cOF6RGxUfgKLHu4flCHGoQCxtLWXsrZiBb7qO1L+I vd5s38RPuBXSBPCe3nbO7P52nA3M3aVL -----END CERTIFICATE-----Generated at Sat Apr 11 11:45:09 2026 by rpki-client