
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa
File: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier: nr0EeUwFCYdT0u41I7YugdCfJTvW+lp7pLcoJPTRJ7Q=
Subject key identifier: 55:17:E2:23:2C:6E:91:7A:B4:8E:08:C1:B1:85:87:DC:7E:FA:52:F6
Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial: 539C0E8903399508416E28C186E1AD6331044DEC
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa
Signing time: Fri 05 Jun 2026 11:06:49 +0000
ROA not before: Fri 05 Jun 2026 11:01:49 +0000
ROA not after: Fri 04 Jun 2027 11:06:49 +0000
asID: 200676
IP address blocks: 2a0a:6040:b1f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:9c:0e:89:03:39:95:08:41:6e:28:c1:86:e1:ad:63:31:04:4d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Validity
Not Before: Jun 5 11:01:49 2026 GMT
Not After : Jun 4 11:06:49 2027 GMT
Subject: CN=5517E2232C6E917AB48E08C1B18587DC7EFA52F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:84:8b:11:dc:85:8c:41:2a:be:61:3c:5d:
2a:9c:25:fc:bb:dc:f2:7d:9d:9f:b5:48:a1:12:a3:
82:44:46:cc:d4:f0:93:d6:58:36:5c:8b:cc:84:c0:
2d:7e:d7:cd:fa:46:3a:01:34:24:c4:39:43:9a:e8:
1a:b1:2f:fd:1a:bb:9b:86:5c:88:a1:5f:97:c4:62:
95:f3:e8:7d:87:f5:8c:f1:e0:ae:e0:7f:25:90:06:
76:08:2d:3e:1f:fe:2e:8a:be:39:40:3a:8c:7d:8f:
10:2f:39:16:c5:0d:1d:e0:fa:07:ba:cf:c2:39:6a:
28:e8:1f:53:4b:38:d6:87:63:a7:4b:9c:c1:c7:7e:
81:86:96:49:01:60:c7:58:65:53:49:90:f3:21:bb:
04:d0:83:71:d3:af:7d:b2:be:01:16:12:71:bd:6a:
1a:4d:93:1c:31:df:29:75:f2:63:7b:c9:23:43:a6:
aa:70:53:25:97:72:5a:5b:ea:b0:0a:a7:42:ab:56:
4d:ac:b1:53:9e:6c:48:66:13:a4:16:51:87:0e:0c:
04:a6:00:b1:2e:8d:d0:47:db:89:11:62:97:4e:95:
eb:44:13:2c:34:87:80:49:b7:4c:16:20:ce:44:8d:
55:b1:0e:de:6a:91:f5:cd:00:ae:9a:55:cc:25:0e:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:17:E2:23:2C:6E:91:7A:B4:8E:08:C1:B1:85:87:DC:7E:FA:52:F6
X509v3 Authority Key Identifier:
keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:b1f0::/48
Signature Algorithm: sha256WithRSAEncryption
51:46:e8:16:f6:89:29:eb:52:61:bf:7c:9c:02:7f:7e:eb:f6:
a9:b1:e6:67:07:e9:81:d3:68:16:42:12:76:e5:97:e4:c1:83:
6e:08:30:48:47:86:ac:fb:38:c3:30:77:2d:24:68:2e:72:71:
97:72:70:3d:b8:23:95:fa:c2:6d:7d:34:e1:bc:56:22:e6:a0:
b0:56:8d:71:60:97:87:25:ce:ee:d6:eb:7a:bc:ee:d3:3e:fa:
fd:ea:89:40:25:b0:9c:18:53:bc:b0:6f:c7:00:85:62:ef:2f:
5e:8c:89:eb:8f:66:53:11:7c:2e:02:0b:90:1e:24:6e:17:f6:
6d:4c:fc:a2:5e:49:b9:bb:e8:0e:08:27:27:42:77:83:f7:59:
cb:f5:70:81:66:52:8b:99:d0:38:1f:cd:f1:a0:c9:0d:12:69:
e9:02:d8:8c:21:6b:df:de:04:fd:bf:81:74:e0:74:a4:fa:d4:
5d:3a:d1:6f:32:f7:72:29:a8:e5:d0:8a:01:56:88:57:25:3a:
c3:fd:e8:9b:d2:8c:be:a6:88:63:23:f7:0e:fd:29:96:44:b1:
81:00:01:8e:96:59:9a:57:92:8b:b5:64:5e:41:2c:4b:79:2a:
cd:77:af:0d:df:c2:6e:31:8a:b4:c8:f8:e1:5a:a8:d7:26:0a:
1b:7a:2a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:03:41 2026 by rpki-client