
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa
File: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (raw, json)
Hash identifier: aHvhuFqDO1GB7QIZ+LV93NwGnOmb8RZNrGiJRajypMI=
Subject key identifier: 56:C2:97:F7:CA:CD:E6:FD:E5:7A:A4:A2:18:7F:C8:E6:78:E8:40:D2
Certificate issuer: /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Certificate serial: 6FC8F34A297ED70FACF1D4BB37A9D1DB6C4506CA
Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa
Signing time: Sat 05 Jul 2025 08:10:57 +0000
ROA not before: Sat 05 Jul 2025 08:05:57 +0000
ROA not after: Sat 04 Jul 2026 08:10:57 +0000
asID: 14618
IP address blocks: 2a0a:6040:3f80::/41 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 03:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:c8:f3:4a:29:7e:d7:0f:ac:f1:d4:bb:37:a9:d1:db:6c:45:06:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Validity
Not Before: Jul 5 08:05:57 2025 GMT
Not After : Jul 4 08:10:57 2026 GMT
Subject: CN=56C297F7CACDE6FDE57AA4A2187FC8E678E840D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:e6:80:6c:34:8a:5d:57:fa:5b:ff:a2:c2:
a3:b3:f7:32:d3:2b:19:7a:89:39:00:19:bd:54:fb:
88:16:da:16:21:d2:3f:9a:30:55:9e:20:17:7b:29:
16:9f:2a:78:f0:fa:1e:23:ad:f5:d5:dd:29:b7:a5:
1d:d6:5b:f1:73:4c:15:ff:86:67:1a:58:bb:d5:3b:
72:4a:29:af:85:44:99:fb:a7:ed:66:78:dc:7b:cb:
29:20:68:cc:b8:4d:9e:18:c4:7c:60:16:c3:0b:21:
2f:3f:90:58:b0:b7:c2:cc:40:e3:91:2d:3c:9e:1e:
c6:fc:c6:2d:f3:52:08:14:1b:e8:ba:1d:d7:f1:70:
de:8d:a2:f7:4b:48:11:19:51:a5:c0:78:ee:13:d2:
d4:8d:02:2f:3f:e7:43:eb:d1:e9:9d:a8:57:3f:b9:
85:7f:d1:6b:f2:17:25:db:af:62:39:99:68:a6:b0:
f6:82:e1:d9:8b:d3:92:e3:02:5b:5a:66:63:1a:68:
6a:4c:b7:0a:a5:31:28:71:e9:9f:e6:ae:78:3f:80:
d1:c6:70:d9:ba:be:86:39:f4:d0:b9:bf:19:06:bc:
2a:f3:e4:1d:66:34:9b:e8:09:a6:93:63:c3:3d:89:
48:d1:aa:c7:97:25:05:7c:ed:06:c3:46:ea:ec:fe:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C2:97:F7:CA:CD:E6:FD:E5:7A:A4:A2:18:7F:C8:E6:78:E8:40:D2
X509v3 Authority Key Identifier:
keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:3f80::/41
Signature Algorithm: sha256WithRSAEncryption
e5:e0:23:85:6b:66:4f:21:b3:ed:cc:3e:53:d7:32:02:b2:33:
06:3a:a8:3f:b2:19:c4:f5:db:4f:fb:9e:f2:51:25:de:2d:0b:
f9:ef:2b:cb:42:d9:b4:b4:22:2c:d4:8e:cb:35:83:35:b1:54:
6c:36:62:e1:73:b2:40:d6:40:94:11:15:f5:bd:ab:57:ba:8b:
3c:19:01:0f:a1:18:68:eb:2e:69:a3:1d:7b:22:81:4a:43:51:
a8:0b:d4:70:d5:0f:a4:e0:21:b4:fc:91:cc:9c:5c:1c:59:b4:
f1:7f:f0:cf:0b:c5:b2:11:da:d7:58:6f:70:b6:78:6e:5e:4a:
68:9d:62:84:12:a9:dd:3b:4d:d7:cf:81:62:33:31:c3:49:bb:
23:82:79:f4:a7:28:0b:03:45:46:99:42:8a:9c:aa:32:ea:07:
de:77:f4:1e:94:b2:7c:84:92:a4:cf:2b:23:50:14:8b:2f:7d:
79:f1:f2:12:85:9f:8d:89:33:4f:6c:9c:b7:d2:aa:39:79:9f:
db:15:a4:d9:b7:e5:30:2c:35:42:27:59:bd:d9:b3:b6:86:f2:
2b:92:d6:14:03:a4:9b:fc:6c:9f:28:8b:70:16:44:9d:f2:d5:
da:26:a7:d0:19:8e:97:e2:aa:0d:6a:2f:05:46:65:a2:4c:f4:
df:d6:80:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 16:18:11 2025 by rpki-client