
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa
File: 326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier: BbseIIPAFTrEC9bJ2ha0z1c5ZrxC3gmRm0iEv5igugs=
Subject key identifier: 38:6A:D6:1F:7C:32:38:37:77:70:55:59:7A:C4:37:18:5A:DA:34:50
Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial: 5802494D4E4B8CCE3F1C1F941759E38DE31019DD
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa
Signing time: Fri 05 Jun 2026 19:58:11 +0000
ROA not before: Fri 05 Jun 2026 19:53:11 +0000
ROA not after: Fri 04 Jun 2027 19:58:11 +0000
asID: 58339
IP address blocks: 2a05:dfc1:8eb0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 07:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:02:49:4d:4e:4b:8c:ce:3f:1c:1f:94:17:59:e3:8d:e3:10:19:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Validity
Not Before: Jun 5 19:53:11 2026 GMT
Not After : Jun 4 19:58:11 2027 GMT
Subject: CN=386AD61F7C323837777055597AC437185ADA3450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:59:95:25:77:27:16:c1:ed:59:6f:9e:6f:1e:
4e:a3:4f:58:01:1e:d4:09:99:33:0f:ce:7c:60:5f:
20:65:7c:3f:5e:82:e5:4d:e3:b0:3f:94:09:26:c6:
71:13:34:a5:fe:43:1b:8a:8b:f3:d6:42:c0:f7:fe:
ca:af:2e:8c:cb:69:86:fd:fd:5c:ce:40:17:6c:84:
41:9f:00:04:46:22:8f:c5:93:59:8a:ec:03:38:15:
81:22:78:99:ac:0e:0e:7f:0a:6f:f4:52:e9:c0:0f:
e9:f9:b4:f3:54:8b:e5:00:fa:f4:58:fb:92:c9:6e:
5f:b3:18:32:46:59:f8:48:61:fe:1c:20:c6:38:40:
1e:b2:ea:b4:35:0c:58:4a:7a:4e:87:12:ef:ce:bd:
0f:93:1b:6f:f1:b3:1c:da:d8:74:ab:52:fb:ce:45:
aa:35:62:b0:c6:fc:19:eb:4b:6a:20:50:a2:19:85:
27:bc:95:6a:af:1f:12:3d:cb:5b:77:06:ee:5a:d4:
c3:d5:56:d8:7c:f2:e2:85:90:15:09:70:da:66:79:
55:88:64:18:0e:a5:d0:dc:15:f0:bb:87:fa:07:3e:
13:3d:6b:d3:99:28:86:85:07:35:9b:59:0f:20:0f:
b7:24:e5:f2:24:95:45:3c:3b:50:64:f7:fa:1a:ce:
ab:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6A:D6:1F:7C:32:38:37:77:70:55:59:7A:C4:37:18:5A:DA:34:50
X509v3 Authority Key Identifier:
keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8eb0::/44
Signature Algorithm: sha256WithRSAEncryption
83:73:3b:7a:01:c2:b2:13:4c:ce:41:c8:ea:24:11:32:f2:ad:
bb:07:b9:36:73:37:1e:d3:56:47:5a:cd:bb:b4:47:f1:66:a5:
f6:47:50:ed:0f:94:5a:ee:47:b2:29:64:35:38:1d:f3:4d:69:
d7:1f:14:4a:b9:2e:de:97:a8:44:b8:40:2b:07:6f:88:ca:ef:
5e:ac:a8:41:06:4f:df:89:87:4f:f0:37:50:02:1c:54:c0:5c:
ac:cf:be:23:37:b9:e4:77:f7:ba:e8:3f:75:b9:73:6d:0a:42:
39:70:60:df:96:d2:e3:35:79:35:b5:45:31:a9:8a:a1:88:d7:
61:dc:4c:67:e9:9c:a4:0f:73:40:df:bb:2e:47:2c:1a:28:bf:
98:ba:26:8f:1b:94:0b:a8:05:4a:30:ef:09:5b:ef:f2:f6:23:
1c:f2:6f:dd:50:75:d6:a5:cf:af:26:61:f9:09:02:6f:be:04:
c6:36:14:7c:67:a6:a6:ad:b2:ff:5c:2a:08:92:c4:b1:5a:e6:
bf:be:c1:c0:97:c1:d4:24:7a:0c:ce:f0:cc:c1:f8:55:32:79:
14:6f:3c:c9:cb:d9:d2:b8:2e:99:41:f4:90:dc:d5:4e:d4:ef:
e7:1a:f6:12:0b:16:97:17:18:d9:64:ca:f8:e1:4a:1c:ad:29:
c0:39:54:3c
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUWAJJTU5LjM4/HB+UF1njjeMQGd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD
OEZCQzlDMzAeFw0yNjA2MDUxOTUzMTFaFw0yNzA2MDQxOTU4MTFaMDMxMTAvBgNV
BAMTKDM4NkFENjFGN0MzMjM4Mzc3NzcwNTU1OTdBQzQzNzE4NUFEQTM0NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLWZUldycWwe1Zb55vHk6jT1gB
HtQJmTMPznxgXyBlfD9eguVN47A/lAkmxnETNKX+QxuKi/PWQsD3/sqvLozLaYb9
/VzOQBdshEGfAARGIo/Fk1mK7AM4FYEieJmsDg5/Cm/0UunAD+n5tPNUi+UA+vRY
+5LJbl+zGDJGWfhIYf4cIMY4QB6y6rQ1DFhKek6HEu/OvQ+TG2/xsxza2HSrUvvO
Rao1YrDG/BnrS2ogUKIZhSe8lWqvHxI9y1t3Bu5a1MPVVth88uKFkBUJcNpmeVWI
ZBgOpdDcFfC7h/oHPhM9a9OZKIaFBzWbWQ8gD7ck5fIklUU8O1Bk9/oazqtJAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUOGrWH3wyODd3cFVZesQ3GFraNFAwHwYDVR0j
BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl
MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG
M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy
OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTYyMzAzYTNhMmYzNDM0MmQzNDM0
MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY6wMA0GCSqGSIb3DQEB
CwUAA4IBAQCDczt6AcKyE0zOQcjqJBEy8q27B7k2czce01ZHWs27tEfxZqX2R1Dt
D5Ra7keyKWQ1OB3zTWnXHxRKuS7el6hEuEArB2+Iyu9erKhBBk/fiYdP8DdQAhxU
wFysz74jN7nkd/e66D91uXNtCkI5cGDfltLjNXk1tUUxqYqhiNdh3Exn6ZykD3NA
37suRywaKL+YuiaPG5QLqAVKMO8JW+/y9iMc8m/dUHXWpc+vJmH5CQJvvgTGNhR8
Z6amrbL/XCoIksSxWua/vsHAl8HUJHoMzvDMwfhVMnkUbzzJy9nSuC6ZQfSQ3NVO
1O/nGvYSCxaXFxjZZMr44UocrSnAOVQ8
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:46 2026 by rpki-client