
$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3763623a3a2f34382d3438203d3e20313938303235.roa
File: 326131343a373538303a3763623a3a2f34382d3438203d3e20313938303235.roa (raw, json)
Hash identifier: qzul46YAnC0dhe1Mr0VkNNr8LTd0RQOHaKUfiXALF6U=
Subject key identifier: 3F:2D:E7:8A:43:F1:EB:21:AD:0A:3C:D7:E8:F3:CF:FD:48:F9:6B:D6
Certificate issuer: /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial: 5FA70788767447ACC444EF62A74111AF17054886
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3763623a3a2f34382d3438203d3e20313938303235.roa
Signing time: Sat 27 Sep 2025 06:07:51 +0000
ROA not before: Sat 27 Sep 2025 06:02:51 +0000
ROA not after: Sat 26 Sep 2026 06:07:51 +0000
asID: 198025
IP address blocks: 2a14:7580:7cb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a7:07:88:76:74:47:ac:c4:44:ef:62:a7:41:11:af:17:05:48:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Validity
Not Before: Sep 27 06:02:51 2025 GMT
Not After : Sep 26 06:07:51 2026 GMT
Subject: CN=3F2DE78A43F1EB21AD0A3CD7E8F3CFFD48F96BD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:58:ec:38:47:5b:a8:6e:a5:5d:b3:91:09:df:
d6:a7:8e:0a:d1:06:32:9b:bb:4f:9a:6c:a2:0e:59:
90:3d:8b:ff:3d:8e:10:98:fe:c2:72:58:c1:c7:51:
fb:6c:9f:ca:06:3e:81:f8:1e:e0:06:ff:e7:7c:50:
ad:2a:74:74:f0:81:d4:7d:ef:62:f8:68:00:ca:c8:
c2:da:1c:8c:8b:ee:e5:d2:60:cd:d4:e7:57:14:39:
80:13:89:d9:0a:7c:78:68:bd:d5:9e:40:21:a7:88:
e0:2f:5a:cf:32:da:5a:29:d3:7c:4d:ad:b6:50:73:
03:be:ca:a4:1e:b8:54:5f:17:aa:44:b0:24:31:2b:
cc:45:5b:f7:85:83:78:3b:5c:1e:64:71:aa:84:8a:
a1:8a:bd:03:bc:6a:0e:35:97:d3:72:23:7d:c6:91:
07:3e:07:80:a4:c6:ce:e3:9f:4b:6c:b2:d6:bf:87:
bb:93:85:32:56:a8:2b:df:5f:32:cb:db:04:15:c6:
5c:a3:04:c2:65:93:85:f7:17:6b:6f:bd:cf:ec:a8:
9b:0f:15:14:e2:53:68:10:f0:9d:48:2e:03:12:e8:
ba:d5:2e:d1:5e:33:29:09:65:2b:45:66:4c:98:f3:
c3:b0:36:47:04:3d:47:60:d0:88:2c:5a:57:d6:f0:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2D:E7:8A:43:F1:EB:21:AD:0A:3C:D7:E8:F3:CF:FD:48:F9:6B:D6
X509v3 Authority Key Identifier:
keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3763623a3a2f34382d3438203d3e20313938303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:7cb::/48
Signature Algorithm: sha256WithRSAEncryption
15:8f:56:92:ed:52:94:ba:e9:f2:36:62:3d:03:69:9b:b0:8a:
88:5c:dd:3d:6d:d8:7a:0a:9c:87:95:14:2f:e9:fe:e7:b8:47:
ca:75:58:27:6d:54:8b:80:c1:01:3a:1f:6c:59:74:b5:08:00:
b1:81:17:2a:64:32:17:67:b5:e9:45:15:57:21:4f:2f:80:2c:
52:01:a0:bf:ba:9f:98:e4:14:98:1e:c0:01:d5:c4:16:f2:41:
92:26:1f:39:33:a7:56:85:05:29:10:59:e6:64:9a:88:9a:07:
be:9d:33:b5:a9:a7:6d:1a:d5:f1:f0:a0:20:33:74:d9:26:65:
3e:8a:fe:58:e4:88:99:c8:aa:59:23:54:7d:e9:ee:93:00:fa:
1e:8c:bb:e3:7f:80:b1:aa:71:e6:e2:bf:03:be:9f:12:e0:0d:
27:fc:51:9a:2e:46:af:bf:2e:77:d6:bc:cd:ee:ad:8c:ba:60:
13:09:b1:99:12:fd:3b:b6:f0:81:41:5a:bd:36:2d:fe:6b:21:
13:bd:f0:c8:29:94:39:ec:d0:de:58:70:e3:ba:91:2d:79:ab:
46:96:66:bd:8a:c4:f6:7f:25:19:6d:82:4a:30:1d:4c:ac:14:
bc:87:6c:d3:af:8f:16:01:26:5a:48:8d:b6:a3:24:11:90:57:
81:94:8e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:36:46 2025 by rpki-client