
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa
File: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (raw, json)
Hash identifier: Xs+sIvX39wrcDJ0C6PsHrcRsnlkL3LVKpC1QcmMP3Gg=
Subject key identifier: CA:CC:55:7A:E0:56:29:89:F0:27:43:AE:11:2F:FE:65:25:8C:9E:87
Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Certificate serial: 406D1B7F4B1F23A7C18B4B35E310BC64C8C7D344
Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa
Signing time: Fri 05 Jun 2026 23:10:31 +0000
ROA not before: Fri 05 Jun 2026 23:05:31 +0000
ROA not after: Fri 04 Jun 2027 23:10:31 +0000
asID: 216107
IP address blocks: 2a05:dfc1:9300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:6d:1b:7f:4b:1f:23:a7:c1:8b:4b:35:e3:10:bc:64:c8:c7:d3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Validity
Not Before: Jun 5 23:05:31 2026 GMT
Not After : Jun 4 23:10:31 2027 GMT
Subject: CN=CACC557AE0562989F02743AE112FFE65258C9E87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c2:3b:4f:09:f7:03:12:9d:b3:c1:aa:55:d1:
00:89:84:1e:22:b1:d5:80:f4:ad:8b:0c:d1:e6:74:
35:a7:3d:71:4e:f4:e9:fc:b1:17:3e:82:f6:46:fd:
4c:97:ea:3e:05:03:d6:bb:bd:8e:7d:3f:b1:44:46:
3b:71:73:b0:1d:f0:11:fb:9a:66:3e:1d:c8:5e:61:
f8:fb:8e:23:e6:32:1f:ee:36:85:79:a1:25:e6:9b:
5d:34:49:be:20:d4:76:d5:b3:a3:dc:3f:e0:04:a4:
b5:a4:f6:a9:72:14:b5:4b:6c:84:de:43:a4:21:d3:
23:c6:3d:1d:1b:65:c6:b0:4f:9e:ce:8f:19:ba:78:
cc:b1:7a:fd:76:de:7d:fe:75:5a:80:f0:d6:75:bc:
27:6f:cb:1e:78:b0:6e:b9:76:88:5a:9d:b4:12:77:
5f:10:7e:ea:38:1d:05:59:da:59:c3:18:e3:61:1a:
1a:d1:e5:ab:89:bc:53:67:e3:1c:cd:fd:b1:49:cd:
b0:03:ce:4b:74:43:ee:fa:99:db:bf:3e:d7:5a:f6:
d5:5f:d0:9e:22:af:c0:a8:89:4a:67:f1:eb:4f:ef:
8a:7a:e2:c5:6b:55:41:38:04:ea:1b:60:85:17:2a:
3e:b6:7f:2d:1d:2d:11:0a:a5:36:4f:45:d6:67:30:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CC:55:7A:E0:56:29:89:F0:27:43:AE:11:2F:FE:65:25:8C:9E:87
X509v3 Authority Key Identifier:
keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:9300::/40
Signature Algorithm: sha256WithRSAEncryption
d2:42:0b:b7:73:14:d3:99:cc:48:87:f4:a1:fd:f6:fb:14:7e:
de:a4:1f:a3:2c:6e:6c:d6:34:5b:b5:12:c6:25:44:2e:00:c8:
e4:d4:a4:8a:5e:18:91:83:70:15:3e:f8:cb:34:07:17:ea:35:
e0:af:27:9f:c9:7f:2b:1d:b3:f6:a3:15:26:93:04:d8:d3:32:
29:00:4b:07:94:62:d2:30:be:04:aa:e3:65:53:47:d0:1b:c2:
6d:43:4b:40:e8:38:3c:ad:6d:d3:b7:6d:dc:5a:f5:77:48:70:
3b:42:43:4f:5c:47:bf:26:48:bd:9c:66:cd:6b:b6:64:74:d8:
93:b7:10:6d:9f:85:90:e6:5e:c0:9c:0c:46:66:fa:13:f1:8c:
29:3a:6d:18:03:20:5b:20:4d:40:45:75:99:ac:15:c7:df:6b:
bd:27:ab:37:45:4e:d4:4c:22:a2:1f:28:72:bb:11:63:3c:68:
59:47:64:c4:2c:c2:b1:1d:16:53:4f:55:06:c1:21:af:ac:fb:
f6:e3:49:14:f8:14:d6:26:11:2b:83:9c:16:24:f0:3a:ad:c7:
86:e8:55:66:c3:4b:31:5b:9a:2e:05:dd:a5:07:7e:0d:d6:c7:
7c:b0:f0:24:e4:f9:e0:06:47:a2:e8:bb:4e:6a:b0:da:1d:9a:
93:dc:75:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:39:11 2026 by rpki-client