
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa
File: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier: DlTS9/n3nMzPBzhKqYlsCkDKeu9i4KOh/svpSxWmqkM=
Subject key identifier: 7F:75:8F:25:06:D6:D5:A6:D0:B6:F6:73:D1:5B:39:A7:A9:43:4C:5E
Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial: 2B12C7D0D57781608767C280257E4AA556FE957A
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa
Signing time: Fri 05 Jun 2026 11:06:53 +0000
ROA not before: Fri 05 Jun 2026 11:01:53 +0000
ROA not after: Fri 04 Jun 2027 11:06:53 +0000
asID: 0
IP address blocks: 2a0a:6040:b1ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:58:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:12:c7:d0:d5:77:81:60:87:67:c2:80:25:7e:4a:a5:56:fe:95:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Validity
Not Before: Jun 5 11:01:53 2026 GMT
Not After : Jun 4 11:06:53 2027 GMT
Subject: CN=7F758F2506D6D5A6D0B6F673D15B39A7A9434C5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:e7:54:a8:59:6d:9c:cb:d7:d2:95:1b:d8:
1a:73:7a:70:ca:0c:bd:03:c3:fa:a7:4d:90:b6:f0:
fe:1e:07:b3:1c:21:56:44:1e:9c:56:95:c8:ed:5a:
b9:96:b2:0c:3e:65:ac:9e:1b:99:be:83:5c:41:08:
59:87:a1:75:43:5d:95:3f:10:5e:1e:cf:55:8a:04:
54:7e:e0:63:56:ee:fc:a7:21:af:07:89:0b:fc:d2:
6a:a2:dc:cc:19:da:37:60:ca:e7:41:a4:7c:74:10:
82:1e:d5:b2:80:ef:55:ac:79:3f:a0:a8:0b:ee:9e:
43:f6:fd:04:e8:f8:11:90:cf:e4:63:ce:40:e6:46:
cd:90:83:b6:b6:b3:3e:3c:7c:53:21:0a:a8:f8:5c:
98:9e:f0:76:df:ba:5a:51:9a:a6:88:d0:ab:ad:2c:
5b:bb:ce:35:82:be:ff:28:8e:42:64:7d:43:ca:cd:
23:74:6c:21:d2:44:42:cb:15:10:de:1f:d5:e0:0b:
c5:71:b3:02:38:f9:a7:5b:c5:24:6a:e0:ea:cc:0f:
1a:a1:08:7a:84:b7:f1:a0:1f:ae:51:aa:7c:a9:7c:
a7:6a:28:a5:d4:d4:d3:42:5a:51:40:04:8c:1c:b9:
8b:04:67:1e:2e:d3:26:3a:06:46:f8:2e:23:06:f8:
28:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:75:8F:25:06:D6:D5:A6:D0:B6:F6:73:D1:5B:39:A7:A9:43:4C:5E
X509v3 Authority Key Identifier:
keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:b1ff::/48
Signature Algorithm: sha256WithRSAEncryption
6d:05:56:c5:80:fa:20:ab:7b:42:52:6e:f4:61:76:1d:13:48:
0b:80:e3:7a:73:eb:e7:ba:38:88:0b:16:05:89:af:ae:7c:87:
dc:b2:47:34:3d:1c:ca:04:af:94:75:36:e6:0b:81:b0:c3:65:
6d:e6:eb:03:f9:4c:e0:ff:32:5f:7a:19:4e:f8:da:ed:e0:1f:
fe:56:55:04:05:60:03:c7:e2:95:b7:e1:f6:a5:fe:33:9c:34:
5e:a8:e4:0a:8c:3e:bd:b5:5f:3f:6f:a5:9b:04:82:a8:b8:09:
8b:bc:ba:0e:3c:4b:bf:be:57:c3:c6:75:df:ea:33:7a:22:bf:
f9:ff:5b:78:74:90:ce:1e:95:10:f4:d1:08:31:d8:b3:11:b6:
21:d6:89:d3:5b:78:fb:32:2f:66:31:cb:be:b8:63:aa:0d:f1:
ae:86:f8:e6:43:e7:88:68:cf:81:78:08:a6:95:1a:a3:1b:84:
20:a5:5a:e9:32:b8:f4:d1:d3:63:f9:ee:29:ca:29:ec:f4:e8:
34:49:0c:2a:cd:bf:b7:5c:2b:ec:1a:07:13:f8:5d:49:a5:66:
5a:e8:6a:be:ec:70:32:ac:1e:92:39:9f:0c:fa:ae:70:be:c5:
69:4f:41:76:08:1c:36:23:da:19:b4:33:18:42:d3:2d:da:a3:
06:3c:be:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:14:26 2026 by rpki-client