
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626137653a3a2f34382d3438203d3e20313939353138.roa
File: 326130613a363034303a626137653a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier: wQCSXfUitadFHqKjKe8NWt6UbMgOvdQ9vSj233OT9/o=
Subject key identifier: 06:47:0D:3E:88:FB:7A:32:FD:71:8A:AC:25:9C:5F:4C:D7:68:39:BF
Certificate issuer: /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial: 6FC917522A2868EA2A527436720E3880E40BAE39
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626137653a3a2f34382d3438203d3e20313939353138.roa
Signing time: Sat 25 Oct 2025 01:17:21 +0000
ROA not before: Sat 25 Oct 2025 01:12:21 +0000
ROA not after: Sat 24 Oct 2026 01:17:21 +0000
asID: 199518
IP address blocks: 2a0a:6040:ba7e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:c9:17:52:2a:28:68:ea:2a:52:74:36:72:0e:38:80:e4:0b:ae:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Validity
Not Before: Oct 25 01:12:21 2025 GMT
Not After : Oct 24 01:17:21 2026 GMT
Subject: CN=06470D3E88FB7A32FD718AAC259C5F4CD76839BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:f5:45:61:e6:74:d2:89:db:0c:e9:cc:ac:
45:8c:d3:c1:44:e2:70:62:d7:8d:85:00:d4:a3:e8:
87:cf:07:ad:b6:64:49:f0:14:99:4a:47:4f:f5:c9:
98:ee:a4:f9:3b:92:22:02:00:b3:c7:e2:0e:59:d9:
06:5a:b3:2b:ca:66:6f:6e:41:51:19:37:a4:6e:19:
23:09:04:ed:a0:1f:74:73:57:0e:8e:7c:45:75:33:
70:c9:83:37:d6:70:c7:e9:81:60:ae:11:d1:24:ae:
63:ab:2c:46:38:d2:65:3a:2d:fa:d4:9c:8f:78:c9:
27:af:e8:97:b5:20:f8:2c:ee:da:d4:78:46:24:2e:
2a:d9:ad:64:f1:1d:2c:74:63:af:92:f9:fe:b7:9f:
00:67:8f:f8:c1:06:58:03:22:a2:3e:e0:bd:7d:b3:
cc:07:aa:9c:20:14:b7:77:69:40:48:6c:63:05:e0:
97:72:3a:1b:d7:a1:85:59:c0:1d:28:9c:66:56:63:
43:24:71:80:6f:b2:fe:04:13:8d:a9:5e:53:d2:19:
63:f7:b5:96:70:ce:52:13:c0:6c:bd:7b:df:77:9d:
4d:9e:c6:c9:1b:22:cc:48:20:fd:ae:aa:74:88:2c:
4a:e6:65:59:84:f4:4a:3d:3a:0e:c3:13:32:91:ab:
c7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:47:0D:3E:88:FB:7A:32:FD:71:8A:AC:25:9C:5F:4C:D7:68:39:BF
X509v3 Authority Key Identifier:
keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626137653a3a2f34382d3438203d3e20313939353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:ba7e::/48
Signature Algorithm: sha256WithRSAEncryption
15:98:0e:45:95:7e:c1:c3:12:23:db:d8:f1:47:9c:52:c0:69:
7f:d9:7c:5d:cd:98:3c:a5:73:18:71:7b:86:18:73:f4:60:58:
8c:9b:33:72:1f:54:7a:4e:8b:7c:8b:08:79:5d:97:ff:fc:b8:
e6:65:ce:a0:80:ab:ed:18:ba:85:fd:73:f8:4a:b3:f8:b5:9f:
12:17:39:c4:0f:06:7f:48:4c:66:75:73:c3:54:0d:a7:42:dd:
8a:d4:95:08:4c:88:55:68:0e:a0:50:9b:c0:13:91:fe:4f:50:
72:11:fc:e6:5f:3f:e2:6d:8e:3a:5f:12:03:94:4d:19:b1:f7:
1b:41:1b:af:22:86:a1:5e:25:86:70:03:65:91:d6:1b:a7:79:
fd:7b:4c:99:b6:6c:ce:e0:bc:65:82:a1:ec:12:94:0e:4e:42:
b9:f9:9d:57:68:6e:e8:13:7c:90:ba:1e:c5:56:e0:e9:e9:ea:
6e:61:5d:4a:68:11:2c:04:10:99:04:16:ad:51:3f:8a:63:5f:
cf:c5:00:1b:ea:c0:40:fc:04:de:51:dc:46:28:b5:4a:08:8c:
fc:0a:ee:5f:40:ab:c4:46:69:92:f6:24:ab:e2:af:f2:3e:7f:
0e:ea:29:ab:2e:e4:aa:53:99:a7:62:dd:ed:13:79:3b:60:7b:
9d:bb:13:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:36:28 2025 by rpki-client