
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa
File: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (raw, json)
Hash identifier: YjEWO425Fp9BmEsaR7rNNKxgXNYuMwOnITmnIsrwlT4=
Subject key identifier: 99:1A:7D:A0:FB:B1:9D:8C:AC:8B:D5:1F:38:2E:B2:0C:96:BC:05:18
Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Certificate serial: 01BFC10B41C595E22E8862D1AF252F3AB60542BE
Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa
Signing time: Fri 05 Jun 2026 19:42:17 +0000
ROA not before: Fri 05 Jun 2026 19:37:17 +0000
ROA not after: Fri 04 Jun 2027 19:42:17 +0000
asID: 216452
IP address blocks: 2a05:dfc1:8200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl
rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 22:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:bf:c1:0b:41:c5:95:e2:2e:88:62:d1:af:25:2f:3a:b6:05:42:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Validity
Not Before: Jun 5 19:37:17 2026 GMT
Not After : Jun 4 19:42:17 2027 GMT
Subject: CN=991A7DA0FBB19D8CAC8BD51F382EB20C96BC0518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:61:df:6d:93:8a:dd:6e:7e:13:c9:d9:2c:
3e:71:bf:24:8b:5c:1b:5d:2d:38:f4:ca:34:88:af:
55:42:06:74:43:ec:31:02:ab:23:e1:cd:72:cd:ba:
a3:bd:21:97:3d:98:74:5e:68:fc:71:e4:8c:ef:a2:
28:a8:92:ed:00:4d:8c:f5:8b:47:3f:18:b6:b9:09:
99:18:2a:19:91:0d:d1:9d:02:13:13:b3:4a:fd:80:
77:42:f6:8f:a1:92:51:4f:2c:13:96:24:4a:f4:44:
25:69:fe:c3:1d:eb:35:7f:82:0d:07:4d:a7:fc:4e:
7c:6a:d4:e0:8b:23:78:ca:4c:ac:e8:1d:6f:ec:51:
f7:47:1f:7d:52:f6:e0:22:bd:8d:e3:e5:4a:cc:0f:
7e:f4:9f:1f:fb:ca:92:0c:fb:94:bc:71:58:04:b4:
4c:d4:d4:3c:b6:fc:17:1e:6d:17:d1:45:ef:a0:e8:
d4:04:11:ec:66:2a:a0:1d:a9:45:7e:cb:43:6c:68:
2b:0f:54:e9:51:80:57:79:95:de:1f:7c:57:75:10:
dc:37:82:2f:2c:40:55:86:c0:f6:82:fd:54:dc:4a:
12:86:df:1e:ed:f8:02:76:78:a8:d0:3d:ce:63:17:
56:3c:08:39:58:c5:87:cd:fc:ad:72:ff:96:65:4e:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1A:7D:A0:FB:B1:9D:8C:AC:8B:D5:1F:38:2E:B2:0C:96:BC:05:18
X509v3 Authority Key Identifier:
keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8200::/40
Signature Algorithm: sha256WithRSAEncryption
76:b0:6c:ca:62:f4:9b:59:ba:ef:4b:0b:8c:8d:65:f8:08:91:
80:1a:c1:86:9e:ac:ae:4a:41:00:15:9d:07:7a:4b:44:22:49:
c7:0f:f4:ff:c2:63:54:cf:1c:82:e8:c2:f9:a5:4a:63:23:50:
ea:03:3d:94:45:ba:52:d7:d5:84:b1:52:fe:f9:b5:4c:c9:50:
33:1d:b6:a8:7a:c3:78:d7:7f:84:51:d3:58:db:8a:2f:a9:56:
44:3f:14:c8:61:8f:7a:07:87:78:c9:be:4a:ff:30:18:ce:51:
3f:ff:70:12:e6:6d:f9:93:26:79:f0:d4:cc:ec:4f:01:79:bd:
d9:10:73:34:95:05:30:9e:d4:74:70:77:59:0b:c7:25:16:c4:
bd:e5:3e:6e:8a:5d:79:78:22:f2:0f:4a:c3:be:99:b1:f5:36:
ba:00:44:d3:21:c3:c9:db:27:42:d2:33:e9:25:cc:11:ce:e4:
5e:82:f2:4b:1d:9f:97:7d:f6:d5:dc:c4:48:82:45:bd:8a:17:
1c:b7:9a:67:57:48:7a:b4:b9:2e:72:43:7d:b7:bb:32:88:fd:
37:f6:bf:75:7a:82:30:ff:d3:d1:77:34:ca:cd:3b:da:9c:8a:
20:1e:67:b5:00:17:9e:46:ea:29:1a:35:9c:99:a5:9f:20:6a:
8a:07:8b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:32:48 2026 by rpki-client