$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386563303a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a386563303a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: /9Vbr9C3Iy3GtVk3+PjVk8o42drkCR/wClzvxOvEOEc= Subject key identifier: 5D:CC:74:6E:27:3F:31:B4:6C:BE:9F:90:54:DC:84:95:93:57:2A:9D Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 080A88FEAF5B1318A0EA6BB1400732215573DBAA Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386563303a3a2f34382d3438203d3e203538333339.roa Signing time: Thu 02 Apr 2026 03:19:03 +0000 ROA not before: Thu 02 Apr 2026 03:14:03 +0000 ROA not after: Thu 01 Apr 2027 03:19:03 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 22:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0a:88:fe:af:5b:13:18:a0:ea:6b:b1:40:07:32:21:55:73:db:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Apr 2 03:14:03 2026 GMT Not After : Apr 1 03:19:03 2027 GMT Subject: CN=5DCC746E273F31B46CBE9F9054DC849593572A9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:da:12:c7:2b:7a:de:97:8a:c1:d2:44:9f: 2e:6d:86:32:3a:f0:46:14:34:99:4a:e5:a8:05:ee: 64:db:9e:e3:79:e4:0f:59:64:a0:16:36:53:12:72: 34:83:69:81:ec:2b:bf:da:28:d6:14:de:5c:f1:b3: 8e:6f:d9:53:34:3f:69:8f:9d:f8:16:68:de:d6:a7: 82:f5:c5:a4:bb:ec:3c:9c:5b:94:bb:fc:b2:3a:db: ea:d2:56:e5:be:72:34:03:82:a3:2d:4a:91:93:3f: 07:56:f6:72:fd:fb:f1:f4:7d:6d:85:b0:ff:e0:77: b8:f0:80:1a:d6:cd:4f:8a:8f:f4:13:48:86:41:41: 3b:d3:3b:b2:fe:24:e6:3d:5c:d9:24:8f:3a:50:2e: ae:d7:b5:e7:6c:52:62:9a:b8:80:9d:6f:af:f1:05: 36:c5:51:f3:5c:5e:c6:c8:c4:36:d2:58:97:35:d8: f3:f4:ba:2b:d2:d9:8c:09:0d:4c:fd:20:f6:cc:73: 41:5d:87:56:f8:52:e2:0b:50:7d:ee:4c:f1:cc:48: c3:44:a9:40:af:53:35:84:c3:b5:fb:f9:da:d6:45: 7d:f5:43:c5:f4:28:ba:96:2e:aa:ee:1a:14:c1:9c: b7:8a:10:92:6e:d4:40:47:93:c5:ce:b2:d6:80:38: ee:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CC:74:6E:27:3F:31:B4:6C:BE:9F:90:54:DC:84:95:93:57:2A:9D X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386563303a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8ec0::/48 Signature Algorithm: sha256WithRSAEncryption 1b:3b:56:ce:de:1a:de:03:6d:5c:6a:1d:89:fd:4f:70:32:d6: 29:d0:c7:7d:09:fe:c0:e7:0a:fc:14:24:7f:98:f6:9e:48:4f: e5:63:6c:07:c8:99:9a:a1:42:a3:4f:cc:b2:f3:88:5d:9e:57: 44:14:bf:a5:74:3e:13:e7:dc:74:c0:32:57:67:e9:17:48:2d: f9:9e:68:e9:cc:31:7c:4d:06:12:5b:cc:6a:a0:68:ff:ce:14: 7e:42:02:f1:77:fd:21:07:a5:c3:26:30:64:ee:17:7f:ff:5a: 16:b7:92:26:68:dc:42:04:dc:f3:8f:8c:6e:74:94:07:6e:48: ad:03:d2:a2:ab:63:ad:7e:92:29:d4:fd:49:04:58:98:a8:dc: 70:41:bd:4d:d9:76:4a:f9:c7:9f:ee:1e:9b:5d:f6:e6:a2:a1: 83:6d:d5:20:ee:95:46:3d:2f:25:0f:54:9c:60:ac:ca:ab:a2: 51:11:73:b1:09:6e:86:09:dc:5f:47:0e:b6:b5:f9:4f:4b:2e: 52:b5:92:7c:fc:a3:7d:11:bf:06:33:b4:a0:f7:40:b7:13:80: 3b:dc:56:45:a2:5e:e9:58:3c:6b:0a:3f:2a:c8:b8:44:49:b2: 7d:74:5d:7e:95:71:34:7f:3a:11:fd:37:b4:ea:33:25:0b:e9: 6a:c8:c0:a3 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUCAqI/q9bExig6muxQAcyIVVz26owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjA0MDIwMzE0MDNaFw0yNzA0MDEwMzE5MDNaMDMxMTAvBgNV BAMTKDVEQ0M3NDZFMjczRjMxQjQ2Q0JFOUY5MDU0REM4NDk1OTM1NzJBOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyyNoSxyt63peKwdJEny5thjI6 8EYUNJlK5agF7mTbnuN55A9ZZKAWNlMScjSDaYHsK7/aKNYU3lzxs45v2VM0P2mP nfgWaN7Wp4L1xaS77DycW5S7/LI62+rSVuW+cjQDgqMtSpGTPwdW9nL9+/H0fW2F sP/gd7jwgBrWzU+Kj/QTSIZBQTvTO7L+JOY9XNkkjzpQLq7XtedsUmKauICdb6/x BTbFUfNcXsbIxDbSWJc12PP0uivS2YwJDUz9IPbMc0Fdh1b4UuILUH3uTPHMSMNE qUCvUzWEw7X7+drWRX31Q8X0KLqWLqruGhTBnLeKEJJu1EBHk8XOstaAOO5hAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUXcx0bic/MbRsvp+QVNyElZNXKp0wHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTYzMzAzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwY7AMA0GCSqGSIb3DQEB CwUAA4IBAQAbO1bO3hreA21cah2J/U9wMtYp0Md9Cf7A5wr8FCR/mPaeSE/lY2wH yJmaoUKjT8yy84hdnldEFL+ldD4T59x0wDJXZ+kXSC35nmjpzDF8TQYSW8xqoGj/ zhR+QgLxd/0hB6XDJjBk7hd//1oWt5ImaNxCBNzzj4xudJQHbkitA9Kiq2OtfpIp 1P1JBFiYqNxwQb1N2XZK+cef7h6bXfbmoqGDbdUg7pVGPS8lD1ScYKzKq6JREXOx CW6GCdxfRw62tflPSy5StZJ8/KN9Eb8GM7Sg90C3E4A73FZFol7pWDxrCj8qyLhE SbJ9dF1+lXE0fzoR/Te06jMlC+lqyMCj -----END CERTIFICATE-----Generated at Sat Apr 11 11:45:22 2026 by rpki-client