$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: vSG/KpzDEQq4+JfLwpPzzStdyH6/Om/hRZHdOZi4zzw= Subject key identifier: 3E:03:91:09:01:94:5C:FE:D0:35:BA:80:DE:D9:3C:DC:DE:0C:27:DD Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 0C4E64DC23E5195F06C8BF09203588FF5C6A4796 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa Signing time: Fri 04 Jul 2025 19:52:53 +0000 ROA not before: Fri 04 Jul 2025 19:47:53 +0000 ROA not after: Fri 03 Jul 2026 19:52:53 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e10::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:4e:64:dc:23:e5:19:5f:06:c8:bf:09:20:35:88:ff:5c:6a:47:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Jul 4 19:47:53 2025 GMT Not After : Jul 3 19:52:53 2026 GMT Subject: CN=3E03910901945CFED035BA80DED93CDCDE0C27DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e1:2e:33:f9:44:b2:d8:4c:29:07:ff:3d:cd: b8:89:3c:da:57:a9:13:55:a4:36:31:ce:a7:ec:80: f3:bd:2b:72:de:e8:1e:b3:d4:c3:a1:4a:27:e1:0f: cc:07:00:fa:88:14:87:59:2c:8a:8f:08:8a:cd:e6: 78:07:97:4e:fe:c8:ce:bb:86:ca:d8:42:f1:84:b4: 38:0f:29:ca:1a:e9:5d:0f:89:d5:02:1b:64:eb:f9: 0d:ab:7f:95:3c:23:c8:f5:3c:ca:79:7b:1e:9a:2f: fd:6a:e2:fa:be:c1:79:80:5d:60:cc:30:81:d6:87: e7:35:8f:52:d0:86:73:6b:0d:96:49:e2:2a:1b:d1: cd:46:48:7e:fb:8c:94:7a:90:1c:ae:50:dc:d3:f2: de:b6:b8:ae:f7:a3:65:a1:12:0a:ea:cc:2d:72:8f: b6:13:55:0d:98:55:b6:99:16:1e:ce:9f:d6:c5:37: ed:be:e6:01:e2:04:e6:68:f1:a7:bd:40:f5:36:65: 75:0f:f0:54:6f:76:2f:5b:69:b4:d7:fb:4f:ea:94: 8f:9b:b3:2f:14:de:5e:8f:9c:29:7b:a5:fe:32:d1: 4c:95:6b:6d:82:5c:72:54:fa:48:a7:c2:4a:95:4f: 23:74:28:1e:0a:0b:94:ed:9a:ba:93:ce:55:1f:3d: f9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:03:91:09:01:94:5C:FE:D0:35:BA:80:DE:D9:3C:DC:DE:0C:27:DD X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e10::/44 Signature Algorithm: sha256WithRSAEncryption 78:5a:6a:a1:75:e2:59:24:33:6d:bb:51:cd:f0:88:e8:45:43: 02:82:82:c1:85:02:66:ba:7d:00:ee:e3:66:82:37:6e:45:85: 3c:85:4c:79:d8:e0:db:20:ff:03:29:31:12:b0:86:a3:4b:c1: 1f:70:e0:b5:61:2d:a5:25:c7:ed:de:67:f1:24:ed:d6:1f:6c: 22:9f:cd:96:c4:9e:76:f8:f2:33:df:5d:15:fd:59:72:e3:25: ef:03:e7:4c:88:f5:6d:4c:53:66:21:c5:29:e1:94:27:a4:ac: a9:1f:f4:a3:df:89:09:23:8c:70:c9:f7:74:64:eb:d7:76:ef: 26:07:8d:79:f6:7c:75:52:78:2c:fc:ec:0b:a8:83:8b:98:47: 23:51:8f:37:09:7a:14:aa:cc:55:38:d7:a7:cc:88:fb:d0:26: fb:26:76:1b:b2:39:82:f6:c6:17:59:2f:73:a7:0b:68:c4:f3: c0:4a:81:bd:17:bd:7d:ef:30:66:a5:59:7a:3a:b8:10:f6:66: 6c:9e:cc:e6:d9:89:b8:68:e1:c3:e8:79:a8:77:21:72:55:0f: 17:69:08:02:eb:7b:f0:61:0f:22:bf:f4:5b:d4:f1:62:6a:c3: 1b:39:ce:90:9b:7f:94:c2:1d:aa:89:4b:f6:89:9a:9c:59:10: 3b:0d:39:a8 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUDE5k3CPlGV8GyL8JIDWI/1xqR5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNTA3MDQxOTQ3NTNaFw0yNjA3MDMxOTUyNTNaMDMxMTAvBgNV BAMTKDNFMDM5MTA5MDE5NDVDRkVEMDM1QkE4MERFRDkzQ0RDREUwQzI3REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN4S4z+USy2EwpB/89zbiJPNpX qRNVpDYxzqfsgPO9K3Le6B6z1MOhSifhD8wHAPqIFIdZLIqPCIrN5ngHl07+yM67 hsrYQvGEtDgPKcoa6V0PidUCG2Tr+Q2rf5U8I8j1PMp5ex6aL/1q4vq+wXmAXWDM MIHWh+c1j1LQhnNrDZZJ4iob0c1GSH77jJR6kByuUNzT8t62uK73o2WhEgrqzC1y j7YTVQ2YVbaZFh7On9bFN+2+5gHiBOZo8ae9QPU2ZXUP8FRvdi9babTX+0/qlI+b sy8U3l6PnCl7pf4y0UyVa22CXHJU+kinwkqVTyN0KB4KC5TtmrqTzlUfPfnBAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUPgORCQGUXP7QNbqA3tk83N4MJ90wHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTMxMzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY4QMA0GCSqGSIb3DQEB CwUAA4IBAQB4WmqhdeJZJDNtu1HN8IjoRUMCgoLBhQJmun0A7uNmgjduRYU8hUx5 2ODbIP8DKTESsIajS8EfcOC1YS2lJcft3mfxJO3WH2win82WxJ52+PIz310V/Vly 4yXvA+dMiPVtTFNmIcUp4ZQnpKypH/Sj34kJI4xwyfd0ZOvXdu8mB4159nx1Ungs /OwLqIOLmEcjUY83CXoUqsxVONenzIj70Cb7JnYbsjmC9sYXWS9zpwtoxPPASoG9 F7197zBmpVl6OrgQ9mZsnszm2Ym4aOHD6HmodyFyVQ8XaQgC63vwYQ8iv/Rb1PFi asMbOc6Qm3+Uwh2qiUv2iZqcWRA7DTmo -----END CERTIFICATE-----Generated at Wed Nov 5 11:53:21 2025 by rpki-client