$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356631303a3a2f34382d3438203d3e20313338313930.roa File: 326130353a646663313a356631303a3a2f34382d3438203d3e20313338313930.roa (raw, json) Hash identifier: OXRuIjnaNSajA8iGnhHNZuHrBWkw73Xfcn/Uj57PDVY= Subject key identifier: 43:D9:B9:06:5C:59:F5:0B:1D:EC:71:83:81:20:29:4A:61:8D:2D:15 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 041343ED2F1EA92F2E81494A405D8245B28F701E Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356631303a3a2f34382d3438203d3e20313338313930.roa Signing time: Sat 11 Oct 2025 06:22:57 +0000 ROA not before: Sat 11 Oct 2025 06:17:57 +0000 ROA not after: Sat 10 Oct 2026 06:22:57 +0000 asID: 138190 IP address blocks: 2a05:dfc1:5f10::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:13:43:ed:2f:1e:a9:2f:2e:81:49:4a:40:5d:82:45:b2:8f:70:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Oct 11 06:17:57 2025 GMT Not After : Oct 10 06:22:57 2026 GMT Subject: CN=43D9B9065C59F50B1DEC71838120294A618D2D15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:93:68:c2:bb:33:50:2a:3d:cf:bd:f5:f6:9f: 2c:a8:2c:1e:47:d4:95:82:9c:c7:ae:33:74:da:56: 67:a1:7a:3f:ad:1f:c5:94:b6:e0:63:5e:26:f2:56: 0d:9f:f3:05:b4:64:6a:64:90:8c:68:4b:69:09:bf: 6f:be:cb:c5:e6:07:7e:8d:cc:b3:4e:5a:d1:10:0d: 9a:49:59:bc:c2:fd:90:6a:1d:64:ff:b3:8c:0a:5f: 5a:32:7b:55:a4:0e:7f:be:38:84:e1:8f:de:61:17: 26:ad:bf:d6:0c:d4:00:01:88:e6:e5:ff:34:02:f8: 87:38:fe:74:25:11:5c:66:2b:ad:de:05:79:91:7d: 41:ff:e5:3b:51:de:f4:19:cb:2c:a5:8d:c6:2f:ae: 99:50:81:57:d7:0e:d0:66:fc:56:c4:40:e9:ee:00: 9c:8b:f6:24:7f:a0:3b:cd:5c:03:d6:48:b0:ce:3f: ce:13:64:ca:cd:1e:a9:dc:5b:38:9d:eb:ec:7b:d6: a4:e5:3b:6f:2e:65:4d:9f:01:ad:b8:39:52:9b:1a: 2a:e2:d1:5b:e4:13:a7:e0:20:4c:23:e2:c7:8d:c2: b2:d7:6b:f9:24:be:12:fb:d6:58:37:de:10:cb:03: 54:66:bf:bc:5c:23:f4:29:8d:bc:87:89:0c:69:f9: e2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D9:B9:06:5C:59:F5:0B:1D:EC:71:83:81:20:29:4A:61:8D:2D:15 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356631303a3a2f34382d3438203d3e20313338313930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f10::/48 Signature Algorithm: sha256WithRSAEncryption 51:cc:f2:cb:12:be:79:3f:08:ab:38:1c:81:cf:67:e4:c8:c8: 12:74:13:4d:8f:74:c2:66:82:dd:ff:e3:2d:68:92:7f:62:59: a5:e6:69:84:e9:b4:1b:39:90:f2:f7:39:a6:b6:9f:66:30:d6: 5f:41:1d:bf:33:d4:45:f9:c9:8d:d9:b4:d9:b7:d9:91:df:10: 5d:8a:f0:14:3e:a8:93:69:cb:93:e3:e7:54:4b:3b:90:71:1a: 04:b6:eb:67:85:be:7d:45:86:74:0a:85:85:72:04:46:d3:6a: a6:69:22:69:16:8a:cf:f1:a7:68:7c:63:10:91:6e:49:ff:61: e6:8e:61:4c:5b:f6:1c:6a:38:e2:06:de:bf:e0:40:19:bd:ad: 77:27:84:a3:56:09:a6:c3:2b:f7:85:33:6f:76:12:8f:3b:c4: ea:a0:37:d3:93:c0:c0:c8:61:28:37:05:59:14:d0:5d:c7:b7: bc:f1:bd:d3:25:c8:5b:3b:ea:a4:68:bf:57:a2:be:fa:64:95: 07:59:e8:9f:34:a4:2b:66:58:f4:28:a9:af:c5:ff:4b:b7:40: 4b:9d:db:1f:f9:c7:3d:95:93:3a:3d:1f:98:2f:09:30:0e:63: 49:9f:a4:9d:53:06:67:47:50:c5:c8:13:aa:57:ee:b7:dd:2d: f2:cb:5d:74 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUBBND7S8eqS8ugUlKQF2CRbKPcB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNTEwMTEwNjE3NTdaFw0yNjEwMTAwNjIyNTdaMDMxMTAvBgNV BAMTKDQzRDlCOTA2NUM1OUY1MEIxREVDNzE4MzgxMjAyOTRBNjE4RDJEMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfk2jCuzNQKj3PvfX2nyyoLB5H 1JWCnMeuM3TaVmehej+tH8WUtuBjXibyVg2f8wW0ZGpkkIxoS2kJv2++y8XmB36N zLNOWtEQDZpJWbzC/ZBqHWT/s4wKX1oye1WkDn++OIThj95hFyatv9YM1AABiObl /zQC+Ic4/nQlEVxmK63eBXmRfUH/5TtR3vQZyyyljcYvrplQgVfXDtBm/FbEQOnu AJyL9iR/oDvNXAPWSLDOP84TZMrNHqncWzid6+x71qTlO28uZU2fAa24OVKbGiri 0VvkE6fgIEwj4seNwrLXa/kkvhL71lg33hDLA1Rmv7xcI/QpjbyHiQxp+eL9AgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUQ9m5BlxZ9Qsd7HGDgSApSmGNLRUwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMxMzAzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMTMzMzgzMTM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBd/BXxAwDQYJKoZIhvcN AQELBQADggEBAFHM8ssSvnk/CKs4HIHPZ+TIyBJ0E02PdMJmgt3/4y1okn9iWaXm aYTptBs5kPL3Oaa2n2Yw1l9BHb8z1EX5yY3ZtNm32ZHfEF2K8BQ+qJNpy5Pj51RL O5BxGgS262eFvn1FhnQKhYVyBEbTaqZpImkWis/xp2h8YxCRbkn/YeaOYUxb9hxq OOIG3r/gQBm9rXcnhKNWCabDK/eFM292Eo87xOqgN9OTwMDIYSg3BVkU0F3Ht7zx vdMlyFs76qRov1eivvpklQdZ6J80pCtmWPQoqa/F/0u3QEud2x/5xz2Vkzo9H5gv CTAOY0mfpJ1TBmdHUMXIE6pX7rfdLfLLXXQ= -----END CERTIFICATE-----Generated at Mon Oct 20 10:21:54 2025 by rpki-client