
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa
File: 326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier: Pu+o5Qt+GUTQByPJh2n/w1MKY9fWe51IxUQ6plkkAdc=
Subject key identifier: FD:CE:68:00:B5:1D:13:89:93:59:1A:F9:66:1E:F7:1C:80:B6:A9:AA
Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial: 0F22AE15DF9F3A6BC09F05D02A611B4C95A8FEF2
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa
Signing time: Fri 05 Jun 2026 19:58:12 +0000
ROA not before: Fri 05 Jun 2026 19:53:12 +0000
ROA not after: Fri 04 Jun 2027 19:58:12 +0000
asID: 58339
IP address blocks: 2a05:dfc1:8e10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 07:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:22:ae:15:df:9f:3a:6b:c0:9f:05:d0:2a:61:1b:4c:95:a8:fe:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Validity
Not Before: Jun 5 19:53:12 2026 GMT
Not After : Jun 4 19:58:12 2027 GMT
Subject: CN=FDCE6800B51D138993591AF9661EF71C80B6A9AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:8b:bd:0a:e5:08:15:c7:a8:9e:40:65:4d:
c6:a2:43:8c:35:f6:65:77:7c:f0:c0:25:a3:aa:2f:
a4:57:0e:bb:73:38:15:d5:c7:b2:44:34:a0:08:a5:
3a:6c:35:76:12:0a:5c:d7:c9:3c:7f:f0:c6:5f:23:
54:c4:63:f9:c0:4c:bb:96:e7:8a:70:b3:36:c9:3d:
54:5a:16:e9:b4:71:ec:31:e1:67:f8:e6:95:a5:e5:
ca:1c:0b:be:14:fc:89:b9:ca:1c:bf:0f:23:34:3c:
21:62:0e:aa:72:bf:c6:66:1a:44:09:ef:71:75:87:
07:a3:d8:06:31:9f:3a:fd:39:ef:df:63:7e:c9:08:
89:13:27:2d:e3:c3:ed:a1:f3:fc:89:99:7d:29:4e:
fb:4e:06:1c:32:e8:c1:3a:e2:1c:2d:b0:0a:e6:00:
b7:22:c1:d7:88:0b:48:e3:e1:8d:d0:c7:83:eb:de:
b6:88:05:14:03:27:b5:6b:28:de:11:ca:cf:6b:af:
00:08:81:d1:a7:be:fe:7f:91:06:aa:95:3e:bc:88:
b5:19:3d:83:47:a2:0d:65:20:67:1c:de:03:8e:5c:
78:22:84:8b:f9:7b:4b:a2:f8:73:8e:a8:f1:ef:57:
94:2e:b6:89:8d:6f:70:04:2e:86:eb:05:5b:70:89:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CE:68:00:B5:1D:13:89:93:59:1A:F9:66:1E:F7:1C:80:B6:A9:AA
X509v3 Authority Key Identifier:
keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8e10::/44
Signature Algorithm: sha256WithRSAEncryption
36:77:18:a7:2a:4c:95:5e:9c:bd:cd:37:f6:7b:8c:ed:65:42:
a8:13:3f:f0:c9:23:0b:78:16:85:fd:80:0c:c6:47:dc:7b:14:
76:ad:04:fe:ba:c0:e9:6a:85:df:fe:5b:e4:05:9f:ff:54:ed:
59:b9:aa:b3:fc:0a:22:4b:7f:bf:91:c0:13:a9:79:8d:07:0e:
ef:56:44:8f:4b:da:f9:03:e8:16:5f:2d:a9:01:37:e0:13:e3:
ea:6c:93:01:d3:e5:96:e9:eb:6c:b1:c0:8b:14:61:f7:19:45:
00:a9:a5:ec:4d:e6:05:ab:be:d2:2a:53:26:e6:7a:c0:31:40:
f9:ff:b5:e9:f8:32:94:42:99:a2:52:52:8f:26:bc:38:95:1d:
e5:a3:3e:5c:cc:65:64:b0:6a:89:6e:b7:14:20:b8:1d:48:dd:
cd:5c:cc:57:a0:db:19:6f:08:03:90:ca:01:a9:93:db:c8:20:
a5:08:61:f8:be:c3:c7:06:9d:a9:00:7d:fb:4b:8e:99:c6:3f:
f3:91:85:d4:04:59:03:f0:36:29:6f:9b:da:ba:d6:a1:dc:1b:
a1:6f:fa:8a:df:03:77:d2:6a:9e:35:f2:cc:2b:ad:86:66:76:
cf:f2:69:2f:f8:3d:e3:33:60:73:ed:07:17:41:63:ce:ca:65:
74:dc:99:b6
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUDyKuFd+fOmvAnwXQKmEbTJWo/vIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD
OEZCQzlDMzAeFw0yNjA2MDUxOTUzMTJaFw0yNzA2MDQxOTU4MTJaMDMxMTAvBgNV
BAMTKEZEQ0U2ODAwQjUxRDEzODk5MzU5MUFGOTY2MUVGNzFDODBCNkE5QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC94u9CuUIFceonkBlTcaiQ4w1
9mV3fPDAJaOqL6RXDrtzOBXVx7JENKAIpTpsNXYSClzXyTx/8MZfI1TEY/nATLuW
54pwszbJPVRaFum0cewx4Wf45pWl5cocC74U/Im5yhy/DyM0PCFiDqpyv8ZmGkQJ
73F1hwej2AYxnzr9Oe/fY37JCIkTJy3jw+2h8/yJmX0pTvtOBhwy6ME64hwtsArm
ALciwdeIC0jj4Y3Qx4Pr3raIBRQDJ7VrKN4Rys9rrwAIgdGnvv5/kQaqlT68iLUZ
PYNHog1lIGcc3gOOXHgihIv5e0ui+HOOqPHvV5QutomNb3AELobrBVtwieMFAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQU/c5oALUdE4mTWRr5Zh73HIC2qaowHwYDVR0j
BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl
MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG
M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy
OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTMxMzAzYTNhMmYzNDM0MmQzNDM0
MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY4QMA0GCSqGSIb3DQEB
CwUAA4IBAQA2dxinKkyVXpy9zTf2e4ztZUKoEz/wySMLeBaF/YAMxkfcexR2rQT+
usDpaoXf/lvkBZ//VO1Zuaqz/AoiS3+/kcATqXmNBw7vVkSPS9r5A+gWXy2pATfg
E+PqbJMB0+WW6etsscCLFGH3GUUAqaXsTeYFq77SKlMm5nrAMUD5/7Xp+DKUQpmi
UlKPJrw4lR3loz5czGVksGqJbrcUILgdSN3NXMxXoNsZbwgDkMoBqZPbyCClCGH4
vsPHBp2pAH37S46Zxj/zkYXUBFkD8DYpb5vautah3Buhb/qK3wN30mqeNfLMK62G
ZnbP8mkv+D3jM2Bz7QcXQWPOymV03Jm2
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:47 2026 by rpki-client