$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: cY5oExmQLWhvhLDvLbqW+uBbyk1VjOi3DKdni6lZX4E= Subject key identifier: B4:28:DC:BE:5F:DC:48:A5:68:71:AF:1B:82:0A:74:10:19:F0:26:44 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 7197FB34F2B513D1517822C66A77AF223CE2566A Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa Signing time: Fri 04 Jul 2025 19:52:52 +0000 ROA not before: Fri 04 Jul 2025 19:47:52 +0000 ROA not after: Fri 03 Jul 2026 19:52:52 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8ef0::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:97:fb:34:f2:b5:13:d1:51:78:22:c6:6a:77:af:22:3c:e2:56:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Jul 4 19:47:52 2025 GMT Not After : Jul 3 19:52:52 2026 GMT Subject: CN=B428DCBE5FDC48A56871AF1B820A741019F02644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3b:8e:b4:ee:67:bf:f5:22:e2:d3:a8:f0:c8: a9:81:8d:6b:0b:b3:d4:d5:8c:ab:44:4b:6e:3f:f1: 02:c1:4e:3e:9b:ee:f1:6a:9d:71:d3:b9:43:c6:ac: bc:4b:f0:c3:96:06:fe:6f:10:34:2e:af:f7:ac:d9: f8:53:b3:f9:25:35:c7:c2:f9:2e:2f:7d:a8:18:bd: 91:0c:a9:20:f2:05:dc:8f:af:e2:71:d3:67:76:da: ae:15:49:d5:89:f3:f3:94:6b:19:b4:17:4f:b1:60: 6a:92:50:16:37:a2:00:f6:35:03:03:fe:b4:78:a6: dd:7c:0b:ac:f4:9e:14:92:e0:92:36:d9:db:37:50: 1e:74:38:68:09:66:ab:e9:4f:17:df:df:fc:cf:2b: 6f:97:06:37:c7:df:b4:0f:18:44:0c:87:f2:e7:32: f5:a4:a5:9e:13:97:32:ab:ec:1a:5b:f7:b7:20:e5: 50:9c:da:55:bc:3d:d6:76:06:5d:c5:2a:d7:bb:46: ff:1e:fc:77:98:9b:78:87:b8:b6:00:53:56:bc:c4: 83:7c:cd:55:d1:4b:26:98:1f:a1:d9:26:8f:3a:e7: 94:56:8d:8f:82:9f:1f:36:bd:99:49:9c:95:0e:38: 27:4e:22:70:68:bb:bb:be:b3:41:d4:51:13:fe:ac: 46:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:28:DC:BE:5F:DC:48:A5:68:71:AF:1B:82:0A:74:10:19:F0:26:44 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8ef0::/44 Signature Algorithm: sha256WithRSAEncryption a3:2e:dd:ac:24:ba:a4:f0:6b:3a:0b:ae:4f:15:6f:d8:f9:52: 2b:7f:4e:43:9b:b2:e1:4e:85:2a:21:33:62:be:d6:14:12:fb: d8:75:e1:48:13:cc:b3:88:e9:7e:bc:cb:73:37:72:26:d7:73: 64:12:36:d7:29:07:fe:15:d1:29:b4:15:9a:c2:3c:cd:83:ab: 4d:db:52:56:d4:9d:19:bd:9c:5b:23:66:de:ba:29:6f:b0:2a: 4b:b5:0b:65:c8:f6:d6:20:39:4e:80:49:af:13:0b:f8:8b:d3: fd:58:74:37:a4:ce:92:67:0f:23:a9:7c:44:6a:e6:2a:36:aa: 8a:2d:76:75:80:13:03:7e:6e:d9:9e:9c:28:f7:6f:ef:f4:f1: f9:8e:d1:51:a3:ad:d7:4d:e0:6e:ca:36:36:ac:e2:8b:81:2f: 30:61:44:53:c5:be:d8:b9:62:7c:4d:e5:3d:3e:2f:c1:65:55: 43:d5:1e:cf:01:d2:0c:5b:3b:6a:71:2f:7d:e4:2d:de:7a:42: d7:70:2a:2f:50:55:8e:48:c1:38:32:ba:73:56:8b:72:32:78: 90:2a:4c:af:36:a7:63:e6:9d:da:e4:0d:9d:ec:ee:15:cf:43: 8a:3d:91:58:3b:ce:22:a8:45:09:4e:ac:76:3a:70:36:ed:5f: 1c:7d:be:90 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUcZf7NPK1E9FReCLGanevIjziVmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNTA3MDQxOTQ3NTJaFw0yNjA3MDMxOTUyNTJaMDMxMTAvBgNV BAMTKEI0MjhEQ0JFNUZEQzQ4QTU2ODcxQUYxQjgyMEE3NDEwMTlGMDI2NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdO4607me/9SLi06jwyKmBjWsL s9TVjKtES24/8QLBTj6b7vFqnXHTuUPGrLxL8MOWBv5vEDQur/es2fhTs/klNcfC +S4vfagYvZEMqSDyBdyPr+Jx02d22q4VSdWJ8/OUaxm0F0+xYGqSUBY3ogD2NQMD /rR4pt18C6z0nhSS4JI22ds3UB50OGgJZqvpTxff3/zPK2+XBjfH37QPGEQMh/Ln MvWkpZ4TlzKr7Bpb97cg5VCc2lW8PdZ2Bl3FKte7Rv8e/HeYm3iHuLYAU1a8xIN8 zVXRSyaYH6HZJo8655RWjY+Cnx82vZlJnJUOOCdOInBou7u+s0HUURP+rEarAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUtCjcvl/cSKVoca8bggp0EBnwJkQwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTY2MzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY7wMA0GCSqGSIb3DQEB CwUAA4IBAQCjLt2sJLqk8Gs6C65PFW/Y+VIrf05Dm7LhToUqITNivtYUEvvYdeFI E8yziOl+vMtzN3Im13NkEjbXKQf+FdEptBWawjzNg6tN21JW1J0ZvZxbI2beuilv sCpLtQtlyPbWIDlOgEmvEwv4i9P9WHQ3pM6SZw8jqXxEauYqNqqKLXZ1gBMDfm7Z npwo92/v9PH5jtFRo63XTeBuyjY2rOKLgS8wYURTxb7YuWJ8TeU9Pi/BZVVD1R7P AdIMWztqcS995C3eekLXcCovUFWOSME4MrpzVotyMniQKkyvNqdj5p3a5A2d7O4V z0OKPZFYO84iqEUJTqx2OnA27V8cfb6Q -----END CERTIFICATE-----Generated at Wed Nov 5 22:13:11 2025 by rpki-client