
$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3731613a3a2f34382d3438203d3e20313938303235.roa
File: 326131343a373538303a3731613a3a2f34382d3438203d3e20313938303235.roa (raw, json)
Hash identifier: yIwjUp+pk1woMU8lwmcXHAIx44NeSrJC0raTX/yZajA=
Subject key identifier: 28:C9:18:D1:FB:D8:D9:35:DE:96:91:DF:32:FE:BE:DB:1D:D4:07:83
Certificate issuer: /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial: 2D5DAE58BFD42054D63A4D86DED53C83C9DB2EDA
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3731613a3a2f34382d3438203d3e20313938303235.roa
Signing time: Tue 04 Nov 2025 16:22:42 +0000
ROA not before: Tue 04 Nov 2025 16:17:42 +0000
ROA not after: Tue 03 Nov 2026 16:22:42 +0000
asID: 198025
IP address blocks: 2a14:7580:71a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:5d:ae:58:bf:d4:20:54:d6:3a:4d:86:de:d5:3c:83:c9:db:2e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Validity
Not Before: Nov 4 16:17:42 2025 GMT
Not After : Nov 3 16:22:42 2026 GMT
Subject: CN=28C918D1FBD8D935DE9691DF32FEBEDB1DD40783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:34:5a:66:ca:5f:53:df:ab:1b:05:cf:a1:
f2:75:f1:90:94:c0:f9:92:40:10:34:bc:b8:3a:b7:
50:9f:4b:68:a1:79:07:7b:81:e0:f0:93:e3:de:77:
69:0e:40:82:ca:c9:36:0e:c4:dc:e4:17:48:af:d3:
0f:cc:5d:33:42:71:7f:f4:da:b0:8c:63:42:05:fc:
26:f4:60:8e:d2:c5:43:d3:f8:65:6f:a2:6b:9d:b7:
3f:ed:e8:d0:e0:40:63:f4:6f:e8:5d:3b:70:e8:70:
71:da:13:e8:97:9d:bd:f4:dd:2f:53:c4:0b:89:60:
d0:18:65:7d:68:d6:cc:e1:c7:dc:20:42:8f:70:80:
c5:ff:65:8b:5a:c1:8f:d6:58:d5:46:35:97:25:4d:
61:90:05:c7:65:36:80:37:bd:e3:5b:5f:87:0e:e2:
0e:95:3b:41:4c:e9:c8:bd:4e:2a:08:13:17:3b:38:
c7:22:29:3d:ac:f6:94:09:35:f9:cf:71:46:0d:cd:
ca:8e:15:ae:a5:0b:ea:aa:33:27:ed:86:77:85:00:
25:6e:32:ca:2b:b0:76:83:70:58:df:60:0f:5f:03:
df:49:fd:6f:91:83:3a:7b:7c:d5:c1:3b:3a:fc:71:
cc:34:9b:e0:0e:41:4c:47:e0:af:c0:23:87:f5:f0:
f2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C9:18:D1:FB:D8:D9:35:DE:96:91:DF:32:FE:BE:DB:1D:D4:07:83
X509v3 Authority Key Identifier:
keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3731613a3a2f34382d3438203d3e20313938303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:71a::/48
Signature Algorithm: sha256WithRSAEncryption
36:e2:62:e6:be:28:6e:c6:30:60:94:89:7b:e3:8d:72:67:e5:
c9:a9:ae:87:a3:83:15:25:30:0e:81:f6:15:c4:7f:db:56:9c:
94:ad:47:a4:16:8d:63:7e:07:96:48:ad:1b:51:3a:66:12:be:
24:db:d5:08:de:b9:4a:6b:e5:51:a0:56:be:f7:7c:39:9f:57:
6d:25:65:0d:ee:01:d5:f0:6f:c2:cc:4a:2e:05:a0:45:a9:eb:
32:b9:00:34:78:f7:9e:60:03:49:8e:6e:40:b6:fd:6d:df:3a:
ea:7f:b8:12:70:14:88:3e:4d:68:52:3c:fb:89:5c:17:43:b4:
5f:07:1e:57:1c:43:d5:ec:d6:08:ce:65:db:ae:4b:9e:27:d3:
7d:0e:f3:c6:9f:22:02:9b:d8:f8:2e:1a:1a:a6:7f:60:c6:80:
3c:78:92:70:a0:d0:c5:7a:f4:f3:89:b5:e9:12:9c:38:f4:58:
b9:0d:85:64:12:95:a7:60:55:82:61:f9:36:ca:14:2c:f1:b5:
3a:aa:1f:c9:fc:47:a4:39:ae:a4:c3:bd:0b:25:04:71:30:d7:
9e:55:ce:f1:4c:40:46:92:ca:5a:c0:59:5e:66:3b:3c:50:8a:
16:fa:8d:32:95:d4:b2:8d:c2:b8:5b:b6:89:7b:2d:6a:da:19:
76:f7:8f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:36:45 2025 by rpki-client