
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa
File: 326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier: HgRw2kp821luuctjBIQJG4LbX9LYd8h29GDZTYeNSTg=
Subject key identifier: 49:8C:76:BF:97:67:3B:62:C6:FC:AC:8E:80:00:E5:D5:CF:8E:C7:A7
Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial: 5F57513E913881FA6985E599477777C999B2649F
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa
Signing time: Fri 05 Jun 2026 19:58:11 +0000
ROA not before: Fri 05 Jun 2026 19:53:11 +0000
ROA not after: Fri 04 Jun 2027 19:58:11 +0000
asID: 58339
IP address blocks: 2a05:dfc1:5f30::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 07:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:57:51:3e:91:38:81:fa:69:85:e5:99:47:77:77:c9:99:b2:64:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Validity
Not Before: Jun 5 19:53:11 2026 GMT
Not After : Jun 4 19:58:11 2027 GMT
Subject: CN=498C76BF97673B62C6FCAC8E8000E5D5CF8EC7A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:bd:e1:4e:4a:bc:6b:69:a1:86:2b:74:66:37:
db:b7:39:2c:cd:de:f2:d3:60:67:34:41:ad:ef:e8:
f0:0e:6e:37:ba:da:fb:d4:59:90:cc:2f:d6:81:96:
05:d7:f5:e3:df:d7:1b:3c:83:f6:33:7d:5d:20:6c:
79:6e:5e:1e:f6:ee:a1:39:40:e9:28:ba:72:e3:f0:
42:4d:60:0a:cc:73:6e:bf:95:7b:bc:d3:79:be:09:
65:a3:dd:90:e9:f7:7a:8c:b5:ef:a9:0b:fe:fe:62:
a1:5e:37:c3:12:bd:1c:b3:5e:74:aa:66:63:91:17:
51:2f:6e:cd:fc:75:70:70:b9:6d:d2:7e:ad:22:50:
28:3b:fa:c1:e8:6d:3e:66:8f:1e:4a:1b:8b:b7:9f:
2a:07:5a:75:39:d1:09:76:fe:c7:b7:19:b0:70:22:
19:b2:6d:0d:b3:41:38:a3:1c:1a:5c:cf:01:cc:76:
52:19:bb:c8:50:e4:97:8b:c1:c4:7d:e6:13:07:cc:
52:f0:6f:ef:b8:5a:c9:39:16:4d:08:18:0d:47:00:
cd:b2:d4:d5:0c:67:dc:04:60:c1:f8:3c:8e:5f:46:
58:45:4e:40:4b:5b:c5:9b:31:ac:15:24:ab:99:d6:
16:5b:45:83:85:14:46:77:51:fa:23:a2:a3:ee:06:
14:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8C:76:BF:97:67:3B:62:C6:FC:AC:8E:80:00:E5:D5:CF:8E:C7:A7
X509v3 Authority Key Identifier:
keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:5f30::/48
Signature Algorithm: sha256WithRSAEncryption
7b:b7:26:97:94:e9:7c:51:43:3f:65:93:03:7f:47:c6:e6:14:
86:80:91:a3:56:1a:1e:77:02:c8:7a:4e:d0:58:23:57:12:8a:
c1:b4:ce:3f:05:6e:13:16:25:21:fd:7c:e9:68:f5:c2:c5:ed:
c4:b1:ad:84:1b:57:93:86:79:30:c2:5b:75:c3:ca:8c:fa:65:
50:73:4d:c7:57:9f:c8:dd:77:b9:47:03:bd:be:b1:a8:24:ec:
c0:a2:fc:61:c5:98:60:5a:fe:8a:e9:8d:b7:13:0a:9a:25:39:
e5:20:d8:d8:68:ee:35:cd:ef:65:64:ad:6e:2b:56:80:fa:fd:
9c:2b:e0:fc:57:37:21:64:3c:b3:4c:19:5b:aa:51:5b:1c:2c:
30:9a:38:f7:89:5e:a6:5d:e1:aa:79:bf:3e:ab:f5:22:a8:55:
ca:2c:08:eb:70:be:9d:1f:c0:46:23:d4:2b:1a:ae:15:bb:3c:
40:51:35:62:2a:1e:48:ff:19:29:5f:30:6c:4e:68:fe:00:2f:
fa:37:81:34:74:cf:4b:b4:72:ff:8c:f1:5e:cc:fa:c7:49:c0:
57:72:37:21:87:b9:32:1c:fd:69:b6:48:f9:49:62:c8:e2:db:
85:ac:ef:00:75:09:13:9a:2d:fb:29:f4:2f:9d:e9:80:47:ee:
f8:98:31:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:43 2026 by rpki-client