
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa
File: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (raw, json)
Hash identifier: YV5J5MkUPewoTX1hUWUWk2r1xYeLwwRy5/ujgo4sYdI=
Subject key identifier: F2:99:E6:42:A3:B2:E4:EE:09:2F:50:9E:A2:EB:39:38:A4:62:AC:A5
Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial: 664C3EC24EE595428C4018BBEFE1DB1BC3A928CA
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa
Signing time: Fri 05 Jun 2026 11:06:53 +0000
ROA not before: Fri 05 Jun 2026 11:01:53 +0000
ROA not after: Fri 04 Jun 2027 11:06:53 +0000
asID: 50755
IP address blocks: 2a0a:6040:b1f8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:4c:3e:c2:4e:e5:95:42:8c:40:18:bb:ef:e1:db:1b:c3:a9:28:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Validity
Not Before: Jun 5 11:01:53 2026 GMT
Not After : Jun 4 11:06:53 2027 GMT
Subject: CN=F299E642A3B2E4EE092F509EA2EB3938A462ACA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:bc:80:61:e4:50:3e:06:d9:e9:57:af:d6:
62:56:59:8f:03:67:ea:b3:b2:17:81:fc:38:dd:6c:
74:96:42:3b:d3:87:8e:e6:e8:57:d8:7e:7e:d0:90:
2b:e6:57:ba:af:11:d2:4b:eb:a9:7e:dd:a7:07:1a:
e9:7e:da:d9:31:68:fe:1c:2b:99:af:ad:82:10:08:
73:cc:1e:00:61:e7:40:e2:db:02:1c:f5:6e:ef:cb:
57:fe:f3:12:fc:9b:27:67:72:9f:87:bd:52:09:52:
11:18:6c:68:5e:8c:3f:33:9b:ba:47:43:4d:93:ea:
7a:6d:b3:84:6f:bd:70:80:5a:46:67:8e:6f:6d:df:
71:6a:bb:84:ca:85:c9:a4:6e:0f:47:c2:7b:81:46:
3e:76:d5:05:0a:33:22:c2:2a:18:62:45:5c:66:79:
b9:6e:db:07:ec:41:ba:9b:e7:55:10:28:c0:72:9e:
1b:45:d0:53:c4:2b:2e:72:88:59:0a:32:ab:a1:63:
e4:e7:a5:87:47:e1:4d:d1:5b:ad:99:2f:63:14:22:
7c:fc:43:71:a8:24:9f:25:b4:5e:c2:48:8b:8f:8d:
0a:4f:63:07:90:26:46:0b:65:15:9b:99:ab:67:b9:
b1:3b:fc:8f:ef:89:11:fe:51:51:e2:ee:d6:f1:40:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:99:E6:42:A3:B2:E4:EE:09:2F:50:9E:A2:EB:39:38:A4:62:AC:A5
X509v3 Authority Key Identifier:
keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:b1f8::/48
Signature Algorithm: sha256WithRSAEncryption
c3:b6:13:5e:d3:d2:74:8d:f8:5b:21:d1:5b:c7:65:8c:b6:b3:
9e:c8:98:e9:de:00:d5:a4:ea:27:c9:6f:6a:b9:4e:f9:6b:0e:
de:cb:5a:c8:a2:f2:4f:f5:69:fa:d0:18:53:30:f0:70:5d:be:
74:c2:2d:4b:3f:92:7a:45:61:2e:1f:bd:e1:45:b0:6e:7a:7a:
d7:ad:00:3c:fb:7e:8c:91:af:fe:2e:79:2f:f7:f0:e1:89:56:
3c:b2:10:dc:da:41:ff:e2:e6:12:83:64:90:79:a9:ed:87:cb:
93:d0:d7:35:8c:be:e1:27:72:01:94:b0:e6:cf:05:cd:17:70:
11:e2:61:f0:be:82:8e:04:fd:22:7e:5f:36:12:8b:09:e1:57:
2d:3e:b7:70:0d:9e:4a:8d:af:2e:cf:d6:d3:3b:85:08:9d:39:
3e:66:13:7d:9e:62:79:1c:e4:1f:12:a5:84:ac:c4:02:fd:65:
2a:a0:63:ca:93:c0:68:37:c1:02:b8:bd:63:77:f7:a3:85:f1:
6d:44:2f:27:96:08:b3:a3:39:1d:0c:e6:7f:42:23:e4:83:a5:
36:86:02:5d:5b:08:fd:e3:7e:e2:7c:2d:9e:8c:ba:6a:da:0d:
b2:e8:8a:ad:dc:35:3f:75:b2:8d:81:bb:d9:45:fd:3f:71:75:
81:f5:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:36:03 2026 by rpki-client