
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa
File: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier: M+XKjYxBTHtjkzc8U29w8G5bFlSY71eD0eQWnk4BUcU=
Subject key identifier: FA:76:7A:FD:27:31:1A:62:F4:A6:8C:A5:BF:27:EF:AA:A1:57:0F:C2
Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial: 0B72C6D2D28DCC3FE82D7A31AF6BD931C53473FB
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa
Signing time: Fri 05 Jun 2026 11:06:49 +0000
ROA not before: Fri 05 Jun 2026 11:01:49 +0000
ROA not after: Fri 04 Jun 2027 11:06:49 +0000
asID: 200676
IP address blocks: 2a0a:6040:b1f3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:72:c6:d2:d2:8d:cc:3f:e8:2d:7a:31:af:6b:d9:31:c5:34:73:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Validity
Not Before: Jun 5 11:01:49 2026 GMT
Not After : Jun 4 11:06:49 2027 GMT
Subject: CN=FA767AFD27311A62F4A68CA5BF27EFAAA1570FC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:99:d9:14:b1:f0:b7:4b:e1:d0:eb:0b:4d:
d9:9e:58:28:5a:f1:3a:e8:dc:7b:aa:6b:51:9d:5d:
07:9e:66:55:46:6b:2e:60:15:4e:ef:4e:49:74:cb:
ba:64:17:41:eb:af:92:73:4d:11:81:d0:60:92:95:
98:23:a2:79:74:96:29:ec:0a:70:0f:91:fa:c2:c7:
0d:75:00:c4:f0:38:85:93:ef:6f:b0:39:c0:a5:62:
49:21:f5:62:b3:47:30:48:c6:62:52:5e:40:73:00:
f3:86:2f:dc:53:d6:a1:69:2b:d3:4a:26:3d:2a:a4:
e3:31:41:1a:b6:59:5e:fd:89:f6:68:60:79:f4:50:
85:2d:2a:bd:b5:3a:55:e9:71:20:cc:d9:1d:af:ec:
64:20:17:2f:f1:27:7f:dc:b2:84:7f:83:b2:25:92:
7e:35:99:d0:e8:58:f2:ff:dd:d6:43:25:81:94:32:
37:1c:67:b6:a9:df:c3:f7:81:42:15:43:c7:ac:04:
58:c2:e0:c7:29:43:9d:49:56:4e:2d:af:39:21:77:
7b:cf:ed:56:e4:18:f6:e5:e2:4f:ab:dc:6e:83:3b:
a2:49:e3:8d:0b:69:80:c5:bd:0f:99:a0:22:d9:64:
2e:2e:de:83:38:20:d5:af:b2:32:62:0a:8b:7e:45:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:76:7A:FD:27:31:1A:62:F4:A6:8C:A5:BF:27:EF:AA:A1:57:0F:C2
X509v3 Authority Key Identifier:
keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:b1f3::/48
Signature Algorithm: sha256WithRSAEncryption
2b:cc:43:6d:b9:b3:9e:a9:f6:24:78:4c:21:82:0c:c0:8d:88:
29:3a:04:e3:32:e4:1d:d0:b8:81:47:ad:4a:38:94:76:37:8f:
c1:6b:04:01:07:89:e9:a4:dd:12:0b:37:a4:a9:2f:80:20:85:
03:3f:51:47:aa:6f:e8:4a:13:5c:cd:a9:40:b5:9c:31:97:c4:
aa:6c:03:c0:1c:04:43:9f:d0:25:89:98:a2:03:01:7d:ad:d7:
8f:28:04:f8:5c:f6:51:0d:b6:b3:9b:31:7c:41:56:25:f0:10:
a8:a9:9a:75:20:be:79:2c:9c:9c:c7:ef:b0:59:c1:81:39:68:
5a:46:01:45:47:06:74:f2:69:51:0c:42:34:17:6c:be:3c:b8:
ea:b7:8d:6b:ba:0f:21:c9:b4:b9:e8:77:82:83:4b:76:f7:68:
19:64:09:7f:5a:5b:0b:49:f3:d9:df:4f:ca:80:fe:ef:82:78:
67:a3:f8:fd:da:54:45:d1:f9:8d:26:03:56:7f:18:d3:e1:73:
ba:fd:0d:a5:a9:eb:97:ed:df:7e:52:c0:e6:27:8b:b7:0d:a6:
1a:c5:34:a2:f9:09:f5:c2:6e:b5:3e:71:c7:ae:73:21:74:42:
83:62:d9:85:91:d9:79:e4:27:19:ed:04:4c:07:60:db:09:f0:
7a:83:4a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:29:11 2026 by rpki-client