
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa
File: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (raw, json)
Hash identifier: gotlPq13MIgn9CpWrSq139KCagvKTA63f16ENY1QYXI=
Subject key identifier: 19:DB:D4:E4:5B:CE:5C:42:A9:BB:76:9F:E4:72:B5:98:4D:12:BA:57
Certificate issuer: /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
Certificate serial: 22145BD60F3BD4A31B5E7AD9BD537E8B1C775B08
Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa
Signing time: Fri 05 Jun 2026 22:39:22 +0000
ROA not before: Fri 05 Jun 2026 22:34:22 +0000
ROA not after: Fri 04 Jun 2027 22:39:22 +0000
asID: 152368
IP address blocks: 2a0a:6040:4400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 12:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:14:5b:d6:0f:3b:d4:a3:1b:5e:7a:d9:bd:53:7e:8b:1c:77:5b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
Validity
Not Before: Jun 5 22:34:22 2026 GMT
Not After : Jun 4 22:39:22 2027 GMT
Subject: CN=19DBD4E45BCE5C42A9BB769FE472B5984D12BA57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:66:30:ec:dc:91:3e:73:af:b9:24:4e:43:
53:a7:aa:a9:a4:7b:ed:69:de:f3:21:bc:9e:10:ab:
c4:b4:fd:82:db:58:37:ce:18:3b:19:2d:25:b7:8a:
ba:65:b0:c5:cb:5b:c8:1c:04:f5:a2:17:48:23:3e:
62:35:01:c9:da:b3:f7:31:39:29:d1:3d:ef:3e:53:
05:a7:f5:08:83:6d:71:55:8d:7e:35:88:3d:cc:7a:
59:6c:75:bc:fa:b5:0a:0a:fe:1c:84:c6:4a:00:bd:
d8:22:25:d3:3c:4b:bd:ca:fb:94:0c:0e:af:eb:0c:
11:9a:8f:44:7b:93:5e:17:18:87:37:f2:91:e9:be:
06:ab:85:27:5e:d0:e7:93:aa:6a:0b:4e:92:f2:ad:
af:e6:d8:84:8e:5b:8c:b1:53:ee:ec:f6:50:c1:4e:
33:c3:29:9c:99:3e:b0:dd:b8:23:13:58:8f:d5:2c:
5d:8f:65:02:ae:87:8f:ab:57:47:b0:5c:7d:21:a9:
cf:e0:2b:a8:29:73:b9:24:7e:ff:51:70:17:6a:a3:
47:75:c1:88:da:35:8c:b4:c1:17:b6:bb:e4:fd:53:
19:a2:f7:8b:09:e9:85:11:45:13:b2:a2:b7:f1:9b:
50:b5:b0:a0:6b:f6:f7:cc:07:35:63:cf:f9:7b:bd:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DB:D4:E4:5B:CE:5C:42:A9:BB:76:9F:E4:72:B5:98:4D:12:BA:57
X509v3 Authority Key Identifier:
keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:4400::/48
Signature Algorithm: sha256WithRSAEncryption
5d:2f:f5:ed:a4:55:2f:d0:41:2c:3f:70:47:a2:9b:62:d5:a8:
3f:d7:f5:6b:e2:96:b7:38:3c:24:6b:db:5f:b6:2b:bb:30:f0:
de:da:2a:d1:b1:12:76:18:cc:f5:8a:9c:79:b7:f1:1c:9e:de:
31:a1:31:95:06:83:e1:77:41:a2:f6:41:8d:47:3a:5b:fe:92:
ce:d0:16:07:f1:20:db:05:c1:b3:6c:fb:1f:dd:d8:71:f3:cd:
36:14:ee:64:19:e1:f5:db:df:24:a5:a7:1d:cc:b0:dd:b4:88:
3a:78:6a:97:db:b0:73:09:fa:ee:77:86:15:30:a8:19:18:a5:
6d:3c:38:d6:bd:17:18:52:4b:79:07:ee:53:34:a4:bf:c0:80:
81:87:67:49:40:66:82:a6:61:87:84:37:57:38:15:42:bf:af:
ad:d9:98:3d:31:a1:a7:7e:9b:24:c3:06:35:87:0c:da:08:6f:
01:1c:f2:8f:86:0e:b8:e3:b0:94:86:4e:40:a3:3f:c1:7d:c5:
c3:58:02:e5:4f:e0:87:5a:5d:3c:a5:20:b0:a2:0f:d4:52:69:
1c:2f:f4:12:2d:4a:39:e6:3c:96:10:e9:99:d3:78:43:4d:2d:
15:fe:8d:87:33:d1:5c:5b:49:58:0a:a6:26:87:aa:9b:15:5a:
cc:8f:70:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:30:53 2026 by rpki-client