
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa
File: 326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier: xTILrV2E7IYle/yTR05QbTq9gkx8nE5uUphpEGnWqJk=
Subject key identifier: 59:62:C9:99:51:94:30:86:02:E3:2D:79:CE:62:AD:22:6D:D8:0F:3A
Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial: 60AFB87EFD843BAF75E116B3D984ED51EA741A74
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa
Signing time: Fri 05 Jun 2026 19:58:11 +0000
ROA not before: Fri 05 Jun 2026 19:53:11 +0000
ROA not after: Fri 04 Jun 2027 19:58:11 +0000
asID: 58339
IP address blocks: 2a05:dfc1:5f20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 07:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:af:b8:7e:fd:84:3b:af:75:e1:16:b3:d9:84:ed:51:ea:74:1a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Validity
Not Before: Jun 5 19:53:11 2026 GMT
Not After : Jun 4 19:58:11 2027 GMT
Subject: CN=5962C9995194308602E32D79CE62AD226DD80F3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:ad:29:61:05:56:09:d4:eb:71:6d:89:91:
3b:b5:67:1e:22:b9:b5:b6:89:e3:21:a1:59:a5:d5:
64:db:f5:22:fb:f4:22:01:ed:31:3b:42:58:49:e7:
20:4b:e0:22:36:76:96:1b:b3:be:9d:3b:07:45:7b:
1a:87:f8:c4:dc:92:6b:2f:4f:da:c4:4c:48:33:7b:
4f:0d:32:8a:f0:23:e0:ff:25:75:bf:bd:e0:44:b9:
47:32:db:ec:3c:45:13:7f:49:16:a6:0e:e3:93:c8:
9f:43:f8:81:e2:14:d3:8c:41:30:e1:06:35:76:65:
b7:52:24:e0:ca:91:75:06:7f:c4:de:06:22:ad:9d:
ad:ff:34:8d:37:96:0b:45:4f:0d:df:14:85:3f:da:
89:f6:30:f0:cf:57:b8:45:75:79:25:ed:13:08:55:
a4:de:21:25:57:66:d0:2a:b2:26:15:d6:8b:7e:5d:
f5:61:b5:1d:b3:b9:d9:a2:c3:8d:80:0f:86:07:ff:
40:31:43:0d:f3:bb:a1:e8:ae:86:cc:55:c7:2a:6a:
6b:da:1e:f6:c3:2e:71:57:0a:9b:3c:07:55:72:bf:
18:6b:0f:7f:01:d8:bc:58:90:ce:7c:55:cd:e1:35:
13:64:bc:ee:86:46:67:e8:69:50:f4:9f:f7:65:f0:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:62:C9:99:51:94:30:86:02:E3:2D:79:CE:62:AD:22:6D:D8:0F:3A
X509v3 Authority Key Identifier:
keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:5f20::/48
Signature Algorithm: sha256WithRSAEncryption
0a:81:5b:13:ea:b9:20:d8:1b:9f:d2:56:56:99:c1:9e:52:ee:
af:ab:56:90:62:a3:b2:d9:79:d3:1e:a6:2a:5f:27:22:cd:35:
83:92:75:aa:b8:a5:16:72:c1:45:1a:65:3e:ed:d5:c8:f2:a8:
ff:0f:53:2d:79:e1:18:33:9f:f9:b5:01:31:63:92:8f:63:06:
5f:20:53:b8:7c:a5:dc:fb:68:92:0f:e6:f5:bd:99:e0:bc:35:
71:50:6a:f2:3a:ea:c6:89:b1:51:01:65:93:a6:15:76:e9:95:
d3:8e:8e:2c:6e:50:ba:73:d4:43:a4:f7:bb:d3:b5:6e:80:2f:
41:6b:84:af:9b:8a:86:af:ef:1b:59:7f:ba:13:d9:59:b7:8d:
4f:0e:e7:71:7f:1a:53:34:86:b9:5f:1b:d1:86:cb:13:e1:af:
60:a5:1a:f5:45:7b:df:69:f3:bd:2f:38:52:12:55:73:69:b5:
ca:88:6f:40:d5:9d:56:33:e2:36:ed:13:92:b7:4a:ab:0a:2e:
02:0c:a8:fd:c4:30:70:59:26:04:bc:4e:44:a8:7d:7a:c1:e8:
fb:da:d6:92:30:e7:9c:02:37:08:11:ac:7d:bf:57:1a:5f:a7:
d6:ef:92:13:4b:8f:ba:79:7b:af:73:4d:df:e1:73:9e:bd:ab:
47:64:ca:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:41 2026 by rpki-client