
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa
File: 326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (raw, json)
Hash identifier: Z56So/SucnY7gPFXl/vIBeo0fdzrYh66Z52M8rAJo6s=
Subject key identifier: 90:B4:D9:D2:9F:80:29:00:BB:49:24:E2:7B:FE:7F:7E:7E:18:A2:EE
Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial: 72A0473B19CF36559A80D3FC654BBDC6EA3A3778
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa
Signing time: Fri 05 Jun 2026 20:46:07 +0000
ROA not before: Fri 05 Jun 2026 20:41:07 +0000
ROA not after: Fri 04 Jun 2027 20:46:07 +0000
asID: 214765
IP address blocks: 2a06:9f81:3040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:a0:47:3b:19:cf:36:55:9a:80:d3:fc:65:4b:bd:c6:ea:3a:37:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Validity
Not Before: Jun 5 20:41:07 2026 GMT
Not After : Jun 4 20:46:07 2027 GMT
Subject: CN=90B4D9D29F802900BB4924E27BFE7F7E7E18A2EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:a0:9b:cd:6b:f1:fb:5e:70:78:98:f1:96:
81:37:cc:ab:62:59:ab:5b:da:31:98:11:05:f8:9d:
28:49:7a:8b:d3:6a:c0:c1:e7:7a:d2:f4:29:16:27:
40:98:57:c7:15:22:03:d7:ef:8c:d3:34:e6:cb:0c:
e9:48:b8:f2:f3:f1:47:69:41:9b:6e:97:99:bf:97:
04:e7:0d:12:68:39:ad:02:2d:fc:c3:ac:5b:30:16:
5e:28:57:4c:c8:f4:2d:8e:d2:05:68:9e:85:b7:88:
88:52:51:ce:9c:ac:ad:f6:48:80:0e:e9:3b:29:3e:
9c:75:08:7a:a3:39:d4:98:6c:6d:03:47:c2:cf:07:
db:5d:25:aa:f9:8e:4d:19:ba:4e:b9:c7:63:74:50:
78:9b:e8:15:4f:b7:c9:19:6e:cf:a3:b3:98:4b:19:
58:d3:61:86:45:26:5a:25:80:4b:ef:a1:a8:bd:cf:
9a:b7:2a:9b:10:72:2d:4a:2e:7c:05:ee:ce:99:6b:
3e:c5:f9:95:2d:77:79:f5:30:58:f6:3b:f3:2f:d9:
19:f9:f6:13:2f:31:08:71:56:b0:c4:3b:c5:8a:7f:
48:c5:96:3f:4b:86:55:5b:b5:72:78:58:98:b7:7b:
64:ad:9c:d0:82:38:ed:df:ab:a9:9f:f3:ea:19:98:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B4:D9:D2:9F:80:29:00:BB:49:24:E2:7B:FE:7F:7E:7E:18:A2:EE
X509v3 Authority Key Identifier:
keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3040::/48
Signature Algorithm: sha256WithRSAEncryption
44:7a:5d:29:2f:c0:7b:b8:0b:8e:04:6e:74:b4:a7:04:97:4e:
33:1f:7c:20:95:6e:d0:de:75:88:3a:8f:33:ce:4f:3b:cf:4b:
c6:a7:c3:44:82:35:0f:0e:0a:5e:a7:82:92:86:c7:79:ce:88:
ab:de:d5:cb:d7:a0:95:ae:84:2d:b0:36:4c:17:66:25:5a:7e:
b1:d9:8d:56:0d:96:9e:df:d1:2c:a4:84:bc:31:31:25:74:6d:
4c:57:fa:9c:cc:0e:5d:b6:f5:75:2c:81:e3:12:33:27:00:b1:
07:99:ef:4b:d1:a2:c7:a5:c0:e0:63:ba:ca:b6:7c:68:aa:89:
21:7a:4f:21:76:e5:14:bc:82:37:42:b7:ee:12:a0:6c:ab:91:
b0:2f:c8:ec:84:2e:5d:fc:3d:0f:b2:76:d2:20:2c:3f:f2:1e:
bb:2d:25:7e:66:ee:a5:3d:0f:15:d1:c1:dd:03:f7:e3:b1:7c:
55:28:a6:55:1f:52:10:7d:51:17:e2:87:19:66:9f:41:7d:b6:
65:41:41:4b:89:a9:54:f6:ae:a4:72:fc:09:9a:3a:61:bb:21:
34:ef:0c:b5:40:17:e7:4b:12:b6:53:06:94:28:2e:60:96:f9:
36:9f:2f:4d:4f:d5:26:f3:51:f0:de:ea:ca:b6:17:69:ac:7a:
fd:84:a7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:50:59 2026 by rpki-client