
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa
File: 326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier: KxJ7XF8Z2VNL2LPTKDndZcM/etl1/MxhPowc5xh/Txk=
Subject key identifier: 93:60:A9:DA:5C:DD:62:9F:02:74:0B:28:67:79:08:DA:06:49:14:DB
Certificate issuer: /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial: 0CA39FE6FA01FDB108C83388D6A37533EA05AF3C
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa
Signing time: Sat 05 Jul 2025 09:32:31 +0000
ROA not before: Sat 05 Jul 2025 09:27:31 +0000
ROA not after: Sat 04 Jul 2026 09:32:31 +0000
asID: 199518
IP address blocks: 2a0a:6040:ba57::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:a3:9f:e6:fa:01:fd:b1:08:c8:33:88:d6:a3:75:33:ea:05:af:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Validity
Not Before: Jul 5 09:27:31 2025 GMT
Not After : Jul 4 09:32:31 2026 GMT
Subject: CN=9360A9DA5CDD629F02740B28677908DA064914DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:08:48:92:ef:4a:71:8b:6b:58:3f:b0:54:
2f:e6:11:1e:76:65:76:02:c6:9a:e4:61:4e:54:2e:
d3:ff:07:a0:1f:9a:66:f3:60:f4:9f:9d:c2:8a:09:
36:fa:27:91:40:d1:ca:6c:5e:5f:c3:1d:3a:09:c7:
0e:c1:21:6b:49:00:28:fc:08:8b:bf:2a:ae:27:fb:
0e:37:07:ce:61:e5:e4:a5:c7:b3:45:f1:41:67:fc:
9e:de:f3:0e:1b:4c:de:8f:32:62:39:8e:9d:f8:90:
b4:f0:73:d6:d3:85:02:0a:05:08:d7:75:08:8d:0d:
76:03:ff:75:b7:d3:ae:25:69:ac:a2:01:f1:c2:e6:
4c:39:77:6a:64:b1:8c:9f:cf:36:b8:d4:06:42:70:
75:8f:f9:0d:76:5b:eb:dd:0b:b0:5b:11:29:fd:cf:
cb:7e:84:6d:e9:f9:e1:eb:43:04:fe:c5:ad:76:a4:
21:f4:f8:32:75:98:ce:79:a1:8d:a3:cf:3f:ad:53:
42:7d:2d:56:80:b5:83:e4:75:bd:58:93:a4:00:27:
06:e9:f7:6e:2e:12:a1:88:ec:50:20:e7:f4:7d:10:
06:7e:eb:90:38:ad:ad:9e:7b:b5:39:7e:f7:9f:b7:
f3:6b:ea:5b:49:f0:3c:6d:7d:3f:8b:aa:02:e2:4c:
4c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:60:A9:DA:5C:DD:62:9F:02:74:0B:28:67:79:08:DA:06:49:14:DB
X509v3 Authority Key Identifier:
keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:ba57::/48
Signature Algorithm: sha256WithRSAEncryption
b4:ff:25:6a:a9:1f:5b:a9:ab:48:4e:f6:bc:3b:a5:b3:91:d7:
dc:44:15:cb:20:4d:f2:2e:39:1c:56:25:01:71:90:14:37:75:
cd:d8:cf:3b:4e:d8:2e:53:a0:31:24:2c:f9:00:81:b9:85:e8:
94:89:70:09:99:a4:64:7e:c5:d2:2e:f7:30:2d:c5:84:da:07:
a0:15:f1:f3:07:99:f8:74:7c:8a:23:52:f4:a0:85:85:14:5e:
7d:a7:59:5c:b5:f7:38:bd:52:c1:d3:b4:8f:56:da:69:34:4a:
f5:4e:b7:4e:36:82:33:88:7e:c0:13:bb:2a:1a:74:f4:a5:8f:
36:e9:53:3e:69:fb:a0:fa:64:c0:8d:7c:04:ff:9c:72:41:bb:
35:94:08:ba:42:0b:5f:df:02:3b:a7:b8:8d:00:31:f0:c4:cb:
0c:ec:ec:f8:26:ed:1c:73:7a:bc:cc:31:81:de:53:08:2c:91:
a5:ac:35:59:64:62:b5:17:82:26:70:e8:0c:ba:83:fc:6e:34:
0b:4c:16:b6:b7:2d:76:f9:22:66:c9:cc:6d:ed:52:1d:5e:0f:
0a:a8:7d:88:4d:e4:4c:07:5b:72:32:74:22:5a:9f:c1:2c:33:
3d:d6:de:aa:d7:a2:ed:d8:84:02:02:fe:f0:23:fa:a6:fe:63:
3d:c8:2c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:50:25 2025 by rpki-client