
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa
File: 326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier: 3zcLOq83RWOcc1XUV6XlEafqYD/qNk2p40hm0gbuYr4=
Subject key identifier: D1:FA:69:3E:CC:83:4D:56:F1:76:BF:5F:AD:E3:87:23:38:07:57:DD
Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial: 348218473B89C760B81561BDE58635000223D7B9
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa
Signing time: Fri 05 Jun 2026 19:58:11 +0000
ROA not before: Fri 05 Jun 2026 19:53:11 +0000
ROA not after: Fri 04 Jun 2027 19:58:11 +0000
asID: 58339
IP address blocks: 2a05:dfc1:8ee0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 07:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:82:18:47:3b:89:c7:60:b8:15:61:bd:e5:86:35:00:02:23:d7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Validity
Not Before: Jun 5 19:53:11 2026 GMT
Not After : Jun 4 19:58:11 2027 GMT
Subject: CN=D1FA693ECC834D56F176BF5FADE38723380757DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:ed:a9:c6:42:0b:18:fa:71:e4:94:4e:1c:
4a:02:57:8e:f4:2c:88:17:e0:5c:5f:32:f3:ba:78:
a3:b6:4e:80:30:99:9c:72:f1:6f:ca:96:5f:ce:5b:
3c:7b:e5:e8:1f:b7:79:83:d0:dc:5e:73:35:d7:2f:
48:02:7c:0d:73:fc:78:7c:c0:64:ef:a5:61:f6:07:
63:4c:9e:0b:88:a9:6e:bc:b8:1a:fd:46:e6:21:9d:
6f:43:90:52:1f:be:1a:57:51:85:4a:57:8f:12:3f:
af:73:1b:24:a8:b1:6c:63:98:c8:49:6d:7c:78:47:
2d:86:7c:f8:f7:f7:85:7d:9e:78:4f:76:03:72:da:
8c:4a:f2:31:ec:c2:23:e9:ae:f8:2c:73:02:ef:90:
02:da:18:85:c8:ec:c0:7d:77:83:ef:bb:51:db:88:
a3:23:50:3a:f6:af:fb:16:10:d9:b7:b9:0f:9e:1e:
b5:c3:a9:15:69:32:a6:80:db:b1:67:8d:03:86:26:
98:c0:9f:ae:5c:d4:f2:bd:57:20:c5:81:17:d3:f7:
08:15:b6:77:e5:62:0f:7e:44:2f:e0:43:94:1e:a5:
a6:58:04:bb:17:a6:22:f6:cb:e1:96:76:25:01:c7:
ec:6e:7b:b3:e7:11:57:86:fb:61:25:ae:72:1d:d8:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FA:69:3E:CC:83:4D:56:F1:76:BF:5F:AD:E3:87:23:38:07:57:DD
X509v3 Authority Key Identifier:
keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8ee0::/44
Signature Algorithm: sha256WithRSAEncryption
73:08:63:91:ae:17:f6:a0:c5:f1:88:08:23:73:12:8a:5f:0f:
69:d5:64:8f:bc:c1:30:d7:ed:52:60:f3:5c:af:a0:c5:c8:e7:
29:32:c6:5f:5e:e2:79:75:bd:02:7a:84:ef:e4:6b:f3:38:5e:
33:1e:69:88:35:69:06:d3:6d:e8:d8:ef:19:38:35:3b:b6:25:
0c:57:90:de:c1:29:62:a1:9b:b5:43:b6:42:54:ed:b3:58:f3:
f0:d0:39:33:87:7a:5f:c3:82:09:ae:d5:37:e5:e1:20:7e:be:
24:0e:2b:fd:e6:b2:d7:27:34:25:71:c1:c3:d7:7b:2c:a6:f9:
eb:59:0b:fb:b4:ac:2a:d0:23:01:ab:1b:38:af:b6:db:fe:a5:
c5:78:0d:15:fc:bc:c7:73:b9:98:be:21:56:f2:9f:3e:02:0a:
2e:a1:21:d5:61:7d:02:1e:92:23:b5:fa:7b:f3:63:cf:8a:ca:
00:32:39:60:ea:75:ee:11:20:ce:83:c6:20:00:e0:3c:43:8e:
8a:22:90:88:49:73:04:dc:74:51:98:ad:f3:25:93:89:2a:d4:
98:71:28:a7:c5:cb:ad:53:c4:a6:d3:bc:40:d2:ba:6e:0a:c5:
8e:23:50:95:18:6c:23:1e:04:a5:f1:0d:82:c2:cd:e9:96:d5:
91:ab:bd:79
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUNIIYRzuJx2C4FWG95YY1AAIj17kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD
OEZCQzlDMzAeFw0yNjA2MDUxOTUzMTFaFw0yNzA2MDQxOTU4MTFaMDMxMTAvBgNV
BAMTKEQxRkE2OTNFQ0M4MzRENTZGMTc2QkY1RkFERTM4NzIzMzgwNzU3REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZl+2pxkILGPpx5JROHEoCV470
LIgX4FxfMvO6eKO2ToAwmZxy8W/Kll/OWzx75egft3mD0NxeczXXL0gCfA1z/Hh8
wGTvpWH2B2NMnguIqW68uBr9RuYhnW9DkFIfvhpXUYVKV48SP69zGySosWxjmMhJ
bXx4Ry2GfPj394V9nnhPdgNy2oxK8jHswiPprvgscwLvkALaGIXI7MB9d4Pvu1Hb
iKMjUDr2r/sWENm3uQ+eHrXDqRVpMqaA27FnjQOGJpjAn65c1PK9VyDFgRfT9wgV
tnflYg9+RC/gQ5QepaZYBLsXpiL2y+GWdiUBx+xue7PnEVeG+2ElrnId2D11AgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQU0fppPsyDTVbxdr9freOHIzgHV90wHwYDVR0j
BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl
MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG
M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy
OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTY1MzAzYTNhMmYzNDM0MmQzNDM0
MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY7gMA0GCSqGSIb3DQEB
CwUAA4IBAQBzCGORrhf2oMXxiAgjcxKKXw9p1WSPvMEw1+1SYPNcr6DFyOcpMsZf
XuJ5db0CeoTv5GvzOF4zHmmINWkG023o2O8ZODU7tiUMV5DewSlioZu1Q7ZCVO2z
WPPw0Dkzh3pfw4IJrtU35eEgfr4kDiv95rLXJzQlccHD13sspvnrWQv7tKwq0CMB
qxs4r7bb/qXFeA0V/LzHc7mYviFW8p8+AgouoSHVYX0CHpIjtfp782PPisoAMjlg
6nXuESDOg8YgAOA8Q46KIpCISXME3HRRmK3zJZOJKtSYcSinxcutU8Sm07xA0rpu
CsWOI1CVGGwjHgSl8Q2Cws3pltWRq715
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:50 2026 by rpki-client