
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa
File: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (raw, json)
Hash identifier: Hi/9N+5IQGx093OQEgbXr/N8qqlN06r+epXMCIP3zqE=
Subject key identifier: A7:A9:50:83:A1:96:F5:67:E7:9E:8A:83:EE:FC:CE:86:96:5B:18:B2
Certificate issuer: /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
Certificate serial: 2AEF674731BFBE08CE387E866B7DB180CEDA4271
Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa
Signing time: Fri 05 Jun 2026 22:39:22 +0000
ROA not before: Fri 05 Jun 2026 22:34:22 +0000
ROA not after: Fri 04 Jun 2027 22:39:22 +0000
asID: 50104
IP address blocks: 2a0a:6040:4400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ef:67:47:31:bf:be:08:ce:38:7e:86:6b:7d:b1:80:ce:da:42:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
Validity
Not Before: Jun 5 22:34:22 2026 GMT
Not After : Jun 4 22:39:22 2027 GMT
Subject: CN=A7A95083A196F567E79E8A83EEFCCE86965B18B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e6:c7:d0:22:c1:09:76:e6:d3:3a:37:d1:dd:
91:81:2b:db:13:e5:4e:e8:0d:12:b9:34:f6:c6:3b:
97:1c:8a:f2:a4:18:77:30:9c:dd:a3:a7:60:4a:f5:
6e:09:20:6b:64:30:94:08:d7:8f:74:3a:d1:a3:b7:
bd:1b:9f:fe:cf:85:d0:7e:cf:63:6b:cc:b3:2d:f4:
b3:7f:eb:0f:c3:26:d1:1e:c6:16:89:fe:ec:e0:13:
9d:47:04:ba:63:16:a7:04:ec:1b:c4:fb:ba:3c:c1:
2f:5b:6d:ed:99:5b:43:d5:f8:88:c9:8e:f4:17:8b:
97:e6:59:74:dd:c5:22:53:62:48:3a:d9:cf:74:fa:
9d:59:11:93:ba:9f:da:0b:cb:f6:a5:eb:23:29:b6:
1a:7d:49:1f:be:af:98:af:2c:41:e7:fa:11:5b:d3:
3c:92:89:57:b6:ec:b0:d3:e2:fb:14:15:10:44:50:
2e:fe:7f:45:a2:77:2f:01:0c:cc:9a:74:54:0c:e8:
28:d5:85:c3:e3:e0:4b:33:31:ce:1c:13:45:3d:4b:
2a:ac:14:8e:1d:bb:06:e3:b6:77:e9:45:2d:2e:e1:
53:af:89:b6:7b:b8:51:33:29:aa:d4:2a:86:fd:ad:
07:2c:af:79:c2:34:40:f3:31:d5:bf:28:c9:59:f0:
cb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A9:50:83:A1:96:F5:67:E7:9E:8A:83:EE:FC:CE:86:96:5B:18:B2
X509v3 Authority Key Identifier:
keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:4400::/48
Signature Algorithm: sha256WithRSAEncryption
ac:9e:7a:fb:9f:40:eb:3b:a8:9d:35:bd:ea:9a:b8:f6:18:1a:
ca:4b:8e:94:ef:0b:70:7b:55:5c:21:91:fa:da:7e:10:2d:d0:
97:0e:4a:2e:53:ad:4c:c3:ae:4f:de:1c:c8:62:c3:cb:6c:3a:
3c:e7:3c:50:84:d0:1b:2c:07:51:bf:bb:4c:de:7a:7d:39:e4:
da:9d:8d:cc:a8:07:ab:bf:56:ea:1e:47:d2:f1:b8:5c:ae:14:
cc:52:12:b2:7e:3d:5a:0e:89:82:ee:5e:8f:75:3d:a1:e5:fe:
0e:cf:0c:1a:27:8b:6d:43:7c:22:84:7d:75:ab:19:44:e4:69:
5b:a7:6b:fe:27:17:fe:85:f9:d3:60:40:77:fd:b7:f3:06:9c:
4f:70:80:ba:6c:1c:2b:9a:84:15:8e:ca:13:7d:f1:ef:61:d9:
d7:93:aa:82:00:79:ba:77:1f:61:f7:20:29:78:f6:9d:45:33:
51:99:3d:b5:39:74:a3:44:43:5d:c2:87:63:da:0a:0e:4c:49:
b5:2f:ed:99:6b:4d:8e:d4:df:1e:95:02:cb:bf:00:a5:a6:89:
c8:7b:9f:8b:5c:f7:cf:2a:fc:05:8a:fe:82:2f:65:01:21:93:
88:67:76:87:f5:f3:c2:65:93:f4:31:b7:d5:46:e2:cf:f6:2f:
11:00:70:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:38:14 2026 by rpki-client