
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa
File: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (raw, json)
Hash identifier: 6l17BEGEadHzOxPzpMo5FbQnljDpn3QSKtCpe2uNXE8=
Subject key identifier: CD:67:E8:B0:91:CF:0D:81:C4:CD:3A:3C:1A:32:24:82:BB:C4:6D:31
Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial: 388F2F6A44CBC82648D4443854DD71FD6021C910
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa
Signing time: Fri 05 Jun 2026 20:46:05 +0000
ROA not before: Fri 05 Jun 2026 20:41:05 +0000
ROA not after: Fri 04 Jun 2027 20:46:05 +0000
asID: 215087
IP address blocks: 2a06:9f81:30fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:8f:2f:6a:44:cb:c8:26:48:d4:44:38:54:dd:71:fd:60:21:c9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Validity
Not Before: Jun 5 20:41:05 2026 GMT
Not After : Jun 4 20:46:05 2027 GMT
Subject: CN=CD67E8B091CF0D81C4CD3A3C1A322482BBC46D31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:88:ca:71:b4:5e:b8:4e:25:41:c3:26:52:
a9:10:ab:59:ce:2a:56:d1:98:76:cf:3a:4c:93:60:
83:c9:f2:ff:39:44:55:bd:f5:a9:4e:98:b6:98:53:
56:97:01:1b:db:eb:c3:29:d7:63:5c:27:79:43:24:
95:3b:54:75:17:5e:4d:51:2d:f8:ae:ef:86:e7:5d:
93:05:52:ac:a1:cf:5f:b8:2e:b1:8d:59:77:d8:a0:
78:ee:71:b8:20:1c:32:de:09:a3:63:a4:25:a5:d2:
0e:96:95:2f:00:c5:11:8b:6b:3d:20:ad:4c:a6:4b:
ee:08:9c:0d:87:78:6b:6e:97:97:ef:da:56:1e:c9:
cd:9c:51:07:9a:5c:e7:e6:5a:63:6f:ed:b4:2b:e4:
d3:75:55:37:d9:40:1c:15:e9:a1:47:1a:dd:97:7b:
51:bd:82:36:38:19:96:72:d2:88:3c:78:85:48:32:
54:a4:d3:55:62:9a:29:50:ff:09:75:36:a2:26:dd:
be:26:96:01:02:71:b2:c1:84:6a:ed:af:2c:c6:43:
01:5e:60:a3:c3:0e:d0:e5:3c:df:8f:35:f5:36:c6:
08:21:3a:00:1a:b5:2c:fa:0b:a2:e3:f7:a8:7d:e5:
da:89:b2:ff:84:7c:5c:e1:b5:63:ce:60:f1:ec:e1:
d0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:67:E8:B0:91:CF:0D:81:C4:CD:3A:3C:1A:32:24:82:BB:C4:6D:31
X509v3 Authority Key Identifier:
keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:30fe::/48
Signature Algorithm: sha256WithRSAEncryption
96:30:af:0d:a7:cf:38:a2:cb:b3:3c:a1:68:a7:67:68:ef:b0:
88:b1:09:fb:0f:a7:e5:a6:42:af:59:7a:20:bc:ff:0a:33:29:
36:dd:d7:3b:b3:7a:4d:cf:9b:1b:62:42:3a:4d:09:d2:71:2e:
d5:46:25:27:c2:97:44:c1:79:2c:9b:ef:45:56:4a:d5:9e:36:
ca:50:21:6c:81:31:d7:04:a5:ad:f1:85:5b:9a:09:ba:53:b3:
aa:52:df:41:4c:3a:c2:2a:1c:51:9a:14:ba:75:e9:37:2e:16:
3a:04:db:77:52:df:fe:57:5f:3a:83:f0:e3:31:47:05:ef:32:
28:c1:e3:d4:db:f7:58:bf:fc:4c:29:12:2a:57:6a:72:fb:f7:
a9:00:45:63:56:ea:8a:9f:4a:0b:1d:8d:89:03:8b:4b:79:4c:
44:54:fb:81:f5:f8:3d:4f:52:d4:6f:54:1d:a3:71:0a:de:bc:
22:1a:60:82:29:28:c7:3d:a8:24:99:3e:92:47:cd:51:9f:bf:
fc:a6:5d:65:2a:96:aa:ab:8f:12:94:1f:44:a8:54:f6:7d:9f:
a0:70:3d:0e:ae:d3:a3:82:44:9f:d8:5d:4e:59:85:cb:d8:60:
72:8f:1c:cf:c2:05:c4:d1:82:34:10:1a:bc:80:e4:d3:20:29:
4f:a7:6e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:35:39 2026 by rpki-client