$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386565303a3a2f34372d3437203d3e203538333339.roa File: 326130353a646663313a386565303a3a2f34372d3437203d3e203538333339.roa (raw, json) Hash identifier: ETKgDCtU/KrS5nnAlWhtNOeXpehSHJdFeN024GWUtUQ= Subject key identifier: EB:91:BC:71:27:75:C8:65:DC:78:6E:05:32:53:05:3C:3C:87:CE:CC Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 50EE12339E3A51B46B21D4CDF58074A84D40AFC2 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386565303a3a2f34372d3437203d3e203538333339.roa Signing time: Thu 02 Apr 2026 03:19:16 +0000 ROA not before: Thu 02 Apr 2026 03:14:16 +0000 ROA not after: Thu 01 Apr 2027 03:19:16 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8ee0::/47 maxlen: 47 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 22:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ee:12:33:9e:3a:51:b4:6b:21:d4:cd:f5:80:74:a8:4d:40:af:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Apr 2 03:14:16 2026 GMT Not After : Apr 1 03:19:16 2027 GMT Subject: CN=EB91BC712775C865DC786E053253053C3C87CECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5f:3b:69:bb:11:ff:7a:2c:2a:ab:ca:8e:e8: 8b:1e:0b:c4:1f:9a:f0:16:09:0d:be:91:e2:9a:74: 2c:a7:33:5a:3b:5e:9f:8a:4f:91:6e:e2:e7:06:92: 0c:ba:01:5a:7e:ce:cf:87:aa:6a:7d:c6:3c:3a:ad: f8:19:39:ce:12:d6:79:7a:e5:27:63:5e:e7:28:58: 8a:dd:58:63:06:bd:11:0f:81:1e:e5:ca:49:84:2b: b2:21:c5:3d:60:32:9b:b4:ac:fb:b2:e6:66:84:57: 0f:5b:be:a3:77:6a:ea:70:2d:4f:80:70:30:55:e7: 27:f0:68:59:c8:f0:ac:90:64:a1:85:04:58:b4:5c: 62:fb:48:03:d7:19:b6:7e:10:9d:55:33:54:15:c9: 7e:67:f8:5c:c4:f5:bc:6e:1f:fd:25:31:ca:ce:a4: cb:20:a3:ca:7d:26:6d:43:e5:68:3a:2a:ff:4f:e1: de:f5:db:2b:b0:38:10:bc:ec:1a:c2:72:f0:2a:0d: 67:20:ba:e0:4f:49:7e:9b:16:df:a9:fc:16:53:f3: b4:70:2c:20:a2:bc:a6:db:99:11:2f:38:54:ed:8d: a9:2d:10:51:b1:90:84:03:46:ed:ac:3b:dc:e6:02: e2:8b:0a:6f:bf:8e:3c:5f:32:f6:f4:ba:e1:8b:15: f9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:91:BC:71:27:75:C8:65:DC:78:6E:05:32:53:05:3C:3C:87:CE:CC X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386565303a3a2f34372d3437203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8ee0::/47 Signature Algorithm: sha256WithRSAEncryption 33:ae:23:f9:0b:15:69:68:df:80:7a:3c:ed:df:7d:0b:3c:31: 56:ef:24:13:92:0b:9d:38:28:48:c6:9b:ca:88:6b:7e:54:c0: ca:72:8e:d8:c6:0e:8d:81:dc:f6:36:5e:a8:71:ad:99:04:bb: 09:2b:84:c0:7f:c9:f7:98:39:b3:f5:32:c9:62:23:8e:c7:60: 51:f0:d0:3c:d9:1d:40:3a:3d:52:52:b2:6b:5d:e6:e6:83:00: 4c:39:94:47:eb:86:52:ae:55:18:20:09:31:c9:6a:da:14:25: 5a:46:c0:5f:42:f2:ab:3d:3f:9e:84:d6:1d:86:d3:51:25:ec: d9:68:fe:82:cf:c7:a8:9f:92:52:cf:7a:c9:28:e0:96:de:a2: 74:5a:a5:c9:2c:af:d0:67:0e:15:ce:58:29:24:f1:2e:bd:89: ac:44:59:e1:5b:c4:38:7a:ba:43:a4:77:76:2b:d0:9b:91:6f: 28:9c:f5:c7:c5:db:95:da:77:a5:bb:ae:c1:d3:67:a2:a9:f0: d1:da:14:17:31:31:62:23:5c:d3:9f:47:66:54:47:58:f4:cc: 9b:b8:8c:8a:91:c0:18:1c:db:c3:76:b3:b6:71:65:ac:d0:fc: a3:f6:54:50:90:7c:21:50:5e:24:cf:b2:73:16:35:54:19:0d: eb:65:85:ea -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUUO4SM546UbRrIdTN9YB0qE1Ar8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjA0MDIwMzE0MTZaFw0yNzA0MDEwMzE5MTZaMDMxMTAvBgNV BAMTKEVCOTFCQzcxMjc3NUM4NjVEQzc4NkUwNTMyNTMwNTNDM0M4N0NFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmXztpuxH/eiwqq8qO6IseC8Qf mvAWCQ2+keKadCynM1o7Xp+KT5Fu4ucGkgy6AVp+zs+Hqmp9xjw6rfgZOc4S1nl6 5SdjXucoWIrdWGMGvREPgR7lykmEK7IhxT1gMpu0rPuy5maEVw9bvqN3aupwLU+A cDBV5yfwaFnI8KyQZKGFBFi0XGL7SAPXGbZ+EJ1VM1QVyX5n+FzE9bxuH/0lMcrO pMsgo8p9Jm1D5Wg6Kv9P4d712yuwOBC87BrCcvAqDWcguuBPSX6bFt+p/BZT87Rw LCCivKbbmREvOFTtjaktEFGxkIQDRu2sO9zmAuKLCm+/jjxfMvb0uuGLFfmfAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU65G8cSd1yGXceG4FMlMFPDyHzswwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTY1MzAzYTNhMmYzNDM3MmQzNDM3 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgXfwY7gMA0GCSqGSIb3DQEB CwUAA4IBAQAzriP5CxVpaN+Aejzt330LPDFW7yQTkgudOChIxpvKiGt+VMDKco7Y xg6Ngdz2Nl6oca2ZBLsJK4TAf8n3mDmz9TLJYiOOx2BR8NA82R1AOj1SUrJrXebm gwBMOZRH64ZSrlUYIAkxyWraFCVaRsBfQvKrPT+ehNYdhtNRJezZaP6Cz8eon5JS z3rJKOCW3qJ0WqXJLK/QZw4VzlgpJPEuvYmsRFnhW8Q4erpDpHd2K9CbkW8onPXH xduV2nelu67B02eiqfDR2hQXMTFiI1zTn0dmVEdY9MybuIyKkcAYHNvDdrO2cWWs 0Pyj9lRQkHwhUF4kz7JzFjVUGQ3rZYXq -----END CERTIFICATE-----Generated at Sat Apr 11 11:45:11 2026 by rpki-client