Hello,
BAE35EAis actually my key. I may not followed the release procedure, and I seem to have signed the key even though I should not.
Here is a PR to fix that: Remove external signature from Foreman 3.17 GPG key by ogajduse · Pull Request #2272 · theforeman/theforeman.org · GitHub
Apologies for the issues caused.