
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/4/3133382e3138352e3233312e302f32342d3234203d3e203437303635.roa
File: 3133382e3138352e3233312e302f32342d3234203d3e203437303635.roa (raw, json)
Hash identifier: XX8XLw5a5qX16bGuOG01HK9QEZ+CClZcUWiF/lH+Whs=
Subject key identifier: BD:1D:8D:58:00:48:28:3C:57:66:F6:54:6D:4B:42:D5:A1:F8:15:F8
Certificate issuer: /CN=0EE737362A63227799B760296110BD044DB7821A
Certificate serial: 39BE8CE066BC2A6D50C1CA5C3B5833E42A8036C6
Authority key identifier: 0E:E7:37:36:2A:63:22:77:99:B7:60:29:61:10:BD:04:4D:B7:82:1A
Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/0EE737362A63227799B760296110BD044DB7821A.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/4/3133382e3138352e3233312e302f32342d3234203d3e203437303635.roa
Signing time: Sun 14 Jun 2026 00:39:24 +0000
ROA not before: Sun 14 Jun 2026 00:34:24 +0000
ROA not after: Sun 13 Jun 2027 00:39:24 +0000
asID: 47065
IP address blocks: 138.185.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-pp.com/repo/GOOFL/4/0EE737362A63227799B760296110BD044DB7821A.crl
rsync://rpki-pp.com/repo/GOOFL/4/0EE737362A63227799B760296110BD044DB7821A.mft
rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/0EE737362A63227799B760296110BD044DB7821A.cer
rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl
rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 15 Jun 2026 04:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:be:8c:e0:66:bc:2a:6d:50:c1:ca:5c:3b:58:33:e4:2a:80:36:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE737362A63227799B760296110BD044DB7821A
Validity
Not Before: Jun 14 00:34:24 2026 GMT
Not After : Jun 13 00:39:24 2027 GMT
Subject: CN=BD1D8D580048283C5766F6546D4B42D5A1F815F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:62:4a:02:7f:4f:65:46:11:ce:79:57:89:
4b:07:4b:aa:9f:92:27:dd:01:38:25:e9:ed:a1:86:
2c:37:de:56:de:68:54:52:23:e2:93:8e:33:ec:cb:
d9:a4:3a:0b:f5:66:26:09:f0:b9:ea:70:7e:db:de:
31:b1:bd:e5:63:d5:59:95:d9:db:f4:41:b0:72:78:
52:0a:87:f4:26:b7:9c:5c:8e:7b:43:ee:fd:18:5d:
9f:78:10:2f:58:a0:64:6e:21:3f:7d:13:4e:1c:8b:
dc:00:12:54:38:57:dd:33:28:a6:4a:50:26:12:a0:
df:9a:46:6d:a9:a5:0f:82:ec:04:25:ac:80:a9:cb:
28:e8:5e:5c:31:60:a0:2f:d5:0f:bb:97:c8:e1:6f:
0d:de:9c:85:88:53:98:fc:cb:cd:20:be:61:89:1b:
9a:94:74:5c:5d:22:98:8b:e0:04:ba:5d:28:03:2a:
cb:c9:57:a9:25:81:27:cd:a9:14:e7:62:2e:de:40:
50:10:98:e0:92:de:03:81:d8:19:e9:44:db:68:f9:
48:b5:55:05:47:6f:69:ff:1f:32:a9:0c:bc:b2:ba:
b0:45:07:06:3d:73:15:47:ea:9b:19:88:9f:b1:da:
35:50:f2:5c:7e:92:27:d7:94:5e:62:1b:95:6b:36:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1D:8D:58:00:48:28:3C:57:66:F6:54:6D:4B:42:D5:A1:F8:15:F8
X509v3 Authority Key Identifier:
keyid:0E:E7:37:36:2A:63:22:77:99:B7:60:29:61:10:BD:04:4D:B7:82:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/4/0EE737362A63227799B760296110BD044DB7821A.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/0EE737362A63227799B760296110BD044DB7821A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/4/3133382e3138352e3233312e302f32342d3234203d3e203437303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.231.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f3:9f:a6:10:db:cb:aa:cc:81:b0:de:41:5e:7e:cc:10:7a:
cc:cd:cd:2d:46:5e:5a:49:6a:c8:29:a6:71:df:56:f2:d7:12:
81:91:b8:be:83:cd:8c:f5:fb:86:3c:7a:54:00:cd:be:4a:85:
0c:30:47:d3:fd:73:5a:85:b9:cc:08:39:4b:e7:46:e0:03:b9:
08:a5:ed:86:01:33:27:e2:e7:33:2e:ad:35:c1:18:f2:c6:37:
2a:21:4c:52:e3:06:26:1b:d9:12:39:9e:c0:17:af:59:3b:75:
eb:5b:69:40:5c:ef:d8:99:2e:08:28:9e:4e:08:28:fe:ec:98:
b1:81:05:3e:7f:86:bb:68:84:03:32:28:bc:77:64:1b:9a:4a:
ff:de:53:4e:f5:0b:b0:5b:cc:55:29:c0:e2:dc:60:8e:95:e6:
90:72:95:b2:f7:44:c7:ca:e1:3e:c1:fc:5a:13:77:c9:ed:e0:
9a:64:0c:3a:eb:db:bd:b4:90:0a:88:1e:89:ac:88:79:f5:40:
ed:0b:6e:37:c6:e7:93:ff:d9:8a:2d:43:4e:15:25:19:c2:38:
7f:72:96:89:8c:7f:ce:9d:b3:b5:de:5d:c9:ff:a7:c0:c8:d5:
16:a6:1c:e8:fe:fe:dc:15:51:0b:df:49:37:1a:81:0f:3c:eb:
30:f4:d5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 15:05:07 2026 by rpki-client