
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa
File: 326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa (raw, json)
Hash identifier: FpxciHRMcu92Dgeo/aZLzLKwNXy6EGrJgcdVPAlKEdg=
Subject key identifier: 3B:1D:17:4E:8D:C1:28:AA:D2:73:53:50:BB:CF:0C:8D:0A:62:F5:4D
Certificate issuer: /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Certificate serial: 08680A7BF26B3BCD2F331318501B951A09E2EA3F
Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa
Signing time: Sat 06 Jun 2026 08:19:40 +0000
ROA not before: Sat 06 Jun 2026 08:14:40 +0000
ROA not after: Sat 05 Jun 2027 08:19:40 +0000
asID: 203069
IP address blocks: 2a0a:6040:1100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:68:0a:7b:f2:6b:3b:cd:2f:33:13:18:50:1b:95:1a:09:e2:ea:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Validity
Not Before: Jun 6 08:14:40 2026 GMT
Not After : Jun 5 08:19:40 2027 GMT
Subject: CN=3B1D174E8DC128AAD2735350BBCF0C8D0A62F54D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:73:d6:59:98:06:4e:61:ab:50:6c:dc:4f:
08:e9:3a:0d:2d:fe:9f:3a:78:ba:5c:33:49:ea:1d:
0b:a7:d2:ad:39:df:c1:cf:d1:93:6c:fa:a7:bb:3f:
c2:3f:af:dc:6f:29:f8:d1:7f:e5:f6:31:36:f3:57:
97:b7:28:ea:68:60:f6:af:a9:28:d4:53:7f:7b:37:
0c:68:64:aa:fd:98:00:02:02:9d:2b:ef:d8:10:b1:
ee:ad:f8:fd:30:91:9c:c7:e6:bb:3f:c4:a0:6f:16:
df:58:11:d5:70:08:93:60:40:9d:7a:0d:a0:ed:b8:
58:9b:5a:dd:a6:28:3a:aa:00:8a:27:17:0f:d9:57:
0e:c6:b0:56:19:92:a9:b6:f8:78:31:ba:90:f6:fe:
ba:c1:2d:30:ef:fb:8b:1f:4f:04:2f:ee:48:a1:b4:
28:9c:e1:64:95:b0:60:78:58:a5:03:ba:03:c7:8e:
10:71:b0:eb:5e:76:91:37:33:32:1b:79:0d:18:99:
0d:8d:3b:cc:dd:7a:7c:64:f6:9e:a2:71:a4:66:de:
5c:c9:f1:e5:d0:5b:15:50:4d:47:f9:15:4d:a4:89:
c2:30:01:57:89:36:ee:98:22:92:0a:5a:3e:ac:59:
4a:af:86:eb:e3:dd:8f:72:45:72:c9:a7:38:c0:49:
f8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1D:17:4E:8D:C1:28:AA:D2:73:53:50:BB:CF:0C:8D:0A:62:F5:4D
X509v3 Authority Key Identifier:
keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:1100::/40
Signature Algorithm: sha256WithRSAEncryption
4c:77:53:97:c8:17:20:19:37:8b:81:1f:9a:45:e1:b0:78:9a:
29:8e:c5:e8:25:d8:e8:7d:1e:40:5b:7b:e3:20:b2:eb:60:e6:
09:ed:0f:bf:4f:57:33:f5:83:c9:ff:d0:6e:f9:50:fa:ee:b8:
7b:64:41:21:72:27:39:c6:95:ce:1a:34:d3:76:d8:97:e2:3f:
90:4a:8e:62:56:73:96:43:2c:37:20:88:45:71:d8:2c:6a:ea:
d1:f1:81:22:e5:32:9a:65:f7:32:ff:52:4f:0c:db:7e:ad:29:
64:ba:61:b8:0c:7b:d8:59:cb:02:d3:b6:4b:b4:eb:68:50:f4:
f2:fe:74:22:fa:2e:b9:07:b7:76:f8:35:88:d4:36:aa:74:08:
87:16:56:9b:04:0d:21:20:2e:f0:88:29:fe:ed:61:8c:ff:33:
e1:e9:fd:06:76:a8:d8:68:fd:14:a6:8b:82:3a:a0:50:e5:3c:
8d:b3:d9:8a:e3:e8:e8:85:2a:2b:a6:b7:1c:42:02:73:1b:76:
30:c6:e6:77:4d:03:c9:5c:29:06:98:65:c5:e7:b4:2b:c0:c4:
5e:2c:f1:05:dc:de:3d:c8:4c:5b:73:3e:9c:75:7e:b0:2d:d8:
9b:85:df:ad:6b:4f:31:61:46:0e:34:21:f2:2c:29:18:c1:aa:
6c:d7:d5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:04:25 2026 by rpki-client