
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa
File: 326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier: nuQuacT441Ry1SaRabhePu25JpBYpB9vL54QuR3fQ8w=
Subject key identifier: 70:52:03:51:D1:31:0F:21:A0:B6:7B:CA:E3:DA:D3:54:C3:F3:20:3C
Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial: 29CB932C9A78EE8BE3B0A4EE22976E3E0F114E52
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa
Signing time: Fri 05 Jun 2026 19:58:11 +0000
ROA not before: Fri 05 Jun 2026 19:53:11 +0000
ROA not after: Fri 04 Jun 2027 19:58:11 +0000
asID: 58339
IP address blocks: 2a05:dfc1:5f60::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 07:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:cb:93:2c:9a:78:ee:8b:e3:b0:a4:ee:22:97:6e:3e:0f:11:4e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Validity
Not Before: Jun 5 19:53:11 2026 GMT
Not After : Jun 4 19:58:11 2027 GMT
Subject: CN=70520351D1310F21A0B67BCAE3DAD354C3F3203C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:f2:7f:d3:80:46:2a:74:be:38:7f:5b:3b:
b6:8c:90:e5:bc:22:42:5c:79:bd:05:75:cd:3c:b0:
e5:af:e6:40:fd:f2:66:51:e6:7e:38:a1:fe:1b:fa:
a5:05:08:45:3c:df:47:e6:eb:87:9d:f4:e2:63:19:
55:bf:70:6e:32:4d:7c:46:36:e7:04:89:bf:4d:f9:
a5:fe:c0:e6:2d:d1:08:1c:49:f5:5c:dd:89:ac:bd:
06:18:e1:ca:c6:01:67:e6:2d:37:9b:aa:17:fe:b0:
a8:2d:28:eb:88:be:6f:81:46:98:02:e8:03:21:bf:
d8:fa:7a:48:fa:3a:f2:ec:7e:b3:08:8d:e3:51:50:
b8:58:de:bd:26:a0:79:c3:46:97:f2:7f:b7:68:07:
5c:81:22:93:0d:14:8b:fe:5e:93:65:45:70:61:e5:
87:eb:b8:46:bc:cb:95:10:00:97:f8:fd:d9:2f:e0:
4c:8a:ce:1c:a8:3f:85:05:5c:a6:07:b6:55:cb:60:
b1:c8:24:e8:52:68:06:b4:ab:c8:49:ed:1f:57:36:
ee:0f:16:91:6f:42:31:61:34:fb:46:00:0c:d7:3f:
37:cd:b9:68:7c:ef:85:35:d9:ce:4f:28:78:3a:f8:
1b:34:13:f5:6c:18:51:44:eb:e4:39:70:c6:1f:d4:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:52:03:51:D1:31:0F:21:A0:B6:7B:CA:E3:DA:D3:54:C3:F3:20:3C
X509v3 Authority Key Identifier:
keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:5f60::/44
Signature Algorithm: sha256WithRSAEncryption
05:19:78:32:77:9d:8e:88:7e:f2:1a:d9:89:2e:0d:22:44:ef:
8e:d7:fd:47:b2:a1:3e:76:e8:52:9a:18:11:74:c7:85:f4:13:
c7:c3:f7:a5:8a:b6:23:35:91:5f:ea:7b:e4:cc:3f:0c:79:8e:
dd:87:48:ca:3a:ee:8c:10:4a:ab:91:87:71:27:33:e3:0e:9d:
fa:72:60:63:ee:2e:e5:58:2a:15:43:55:6f:28:47:99:ef:15:
80:fc:45:2f:1a:bf:c7:33:0e:17:0b:91:38:fc:9c:b8:ca:6c:
e9:98:b2:6d:95:a2:16:ee:0c:dd:99:d1:7b:ac:d6:52:4f:30:
e2:fa:52:8a:b7:5d:31:26:32:9b:b9:d5:71:d3:79:d0:04:3f:
cd:14:48:8b:19:85:28:ed:b6:b8:db:73:0e:90:5b:46:de:91:
1c:d7:b4:1f:91:f8:02:1a:44:b5:2c:c1:a4:4f:78:9f:c8:f8:
bd:a9:0b:34:04:9a:4e:42:5c:14:69:e2:50:05:d5:d8:7b:c2:
63:35:44:07:d4:06:04:b6:fd:db:a3:cc:21:93:a5:eb:d3:13:
79:ed:e5:94:5e:00:2e:b9:b6:2f:f7:13:5a:e6:0c:33:8a:dd:
1c:61:49:39:70:0d:18:8c:58:0f:44:76:ae:06:04:b0:f2:f1:
a3:54:9d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:48 2026 by rpki-client