
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa
File: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (raw, json)
Hash identifier: VPCifaYotKDxeBBkkXW6HF/0neQ4fTWKc9o0aOWVmJ8=
Subject key identifier: 87:1E:A5:CD:AB:3F:8E:38:FE:09:74:BA:C6:61:23:E5:2B:66:D3:7A
Certificate issuer: /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
Certificate serial: 3959A1EAD89F03C8A5F48048CF9818D034527488
Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa
Signing time: Fri 05 Jun 2026 00:39:21 +0000
ROA not before: Fri 05 Jun 2026 00:34:21 +0000
ROA not after: Fri 04 Jun 2027 00:39:21 +0000
asID: 50104
IP address blocks: 2a06:a005:d2d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:59:a1:ea:d8:9f:03:c8:a5:f4:80:48:cf:98:18:d0:34:52:74:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
Validity
Not Before: Jun 5 00:34:21 2026 GMT
Not After : Jun 4 00:39:21 2027 GMT
Subject: CN=871EA5CDAB3F8E38FE0974BAC66123E52B66D37A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:c5:b0:eb:5d:3d:f0:88:c8:11:cf:60:43:
82:00:d6:3c:0f:b2:92:cf:2e:97:9e:41:84:52:f3:
d8:68:a0:60:a9:29:27:aa:10:cd:07:87:9a:26:fb:
70:6b:dc:4e:77:b7:1e:8f:bb:4a:0b:35:04:33:47:
23:94:15:47:46:31:fa:4a:7e:33:15:0e:eb:89:f3:
5c:43:32:71:46:a9:1b:51:4b:ec:c8:6d:8a:1d:f5:
73:0f:ab:98:ba:8f:20:be:9e:64:12:82:f5:98:bf:
cf:6f:bd:60:01:b7:3e:a1:ab:19:ca:b6:ad:73:32:
c5:8d:43:d8:b8:c1:6a:50:c3:02:d5:f8:44:c3:41:
dc:f5:09:d6:d7:db:fa:05:63:31:6b:c1:7e:6a:2a:
59:a4:de:9c:3c:d2:01:3a:f9:37:c3:ff:35:0a:5c:
84:0b:e4:bd:7c:13:d5:13:b7:2b:7b:3f:11:2e:63:
d9:e9:c0:32:b6:0a:38:02:ff:04:a6:29:f9:96:50:
b5:8a:b0:1f:ce:47:50:44:91:57:7b:db:52:2b:83:
9b:f6:41:48:be:df:b3:64:4c:f0:c5:44:9f:16:5b:
1d:6e:42:00:6d:66:c4:e5:26:e5:79:b5:b3:d6:ac:
2e:9b:bc:a2:f5:38:5a:6b:40:be:69:5c:44:d5:98:
b8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1E:A5:CD:AB:3F:8E:38:FE:09:74:BA:C6:61:23:E5:2B:66:D3:7A
X509v3 Authority Key Identifier:
keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2d::/48
Signature Algorithm: sha256WithRSAEncryption
00:25:61:e8:92:0d:c6:83:51:08:bc:58:56:c8:b3:58:2a:70:
60:92:aa:0d:a7:5d:7e:03:58:18:2d:43:59:d6:41:26:fe:ee:
31:50:67:ca:6b:01:b5:24:99:da:19:c0:5f:2b:82:09:4e:2a:
b1:88:68:e9:3d:16:67:e6:e8:c8:73:de:6d:63:0b:38:91:75:
40:97:e8:ad:dc:94:34:37:d5:4c:9c:35:7c:d8:c9:98:1e:15:
48:d6:f2:98:9d:38:2d:a0:eb:8c:80:70:d1:74:96:5b:69:61:
a5:3f:ff:81:c8:f6:f8:a4:15:9f:04:5f:a6:ac:04:5a:73:0c:
4b:f4:cd:63:96:2e:bf:62:d3:f4:d0:d3:db:e7:cd:5c:b0:39:
0d:0d:e4:38:df:ce:4e:a9:91:6d:00:c8:90:3f:e3:fc:36:42:
ea:f1:06:76:a3:d8:a4:77:b6:ee:7b:83:9a:83:b5:84:7c:85:
70:23:ce:07:97:84:d3:9a:ef:7a:2b:4c:58:ba:20:57:5a:94:
c0:f7:4f:27:38:67:08:c2:e2:70:5d:12:96:3b:89:4b:ad:0d:
c8:fe:08:54:7e:67:f6:d5:7b:9a:2e:08:cd:ec:b5:fd:be:0f:
df:0c:6e:49:f1:b5:d0:58:87:e8:9d:b5:c3:e9:f7:3d:70:1f:
76:28:07:22
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUOVmh6tifA8il9IBIz5gY0DRSdIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVE
OEQ2M0E2MjAeFw0yNjA2MDUwMDM0MjFaFw0yNzA2MDQwMDM5MjFaMDMxMTAvBgNV
BAMTKDg3MUVBNUNEQUIzRjhFMzhGRTA5NzRCQUM2NjEyM0U1MkI2NkQzN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH7cWw61098IjIEc9gQ4IA1jwP
spLPLpeeQYRS89hooGCpKSeqEM0Hh5om+3Br3E53tx6Pu0oLNQQzRyOUFUdGMfpK
fjMVDuuJ81xDMnFGqRtRS+zIbYod9XMPq5i6jyC+nmQSgvWYv89vvWABtz6hqxnK
tq1zMsWNQ9i4wWpQwwLV+ETDQdz1CdbX2/oFYzFrwX5qKlmk3pw80gE6+TfD/zUK
XIQL5L18E9UTtyt7PxEuY9npwDK2CjgC/wSmKfmWULWKsB/OR1BEkVd721Irg5v2
QUi+37NkTPDFRJ8WWx1uQgBtZsTlJuV5tbPWrC6bvKL1OFprQL5pXETVmLiFAgMB
AAGjggJ2MIICcjAdBgNVHQ4EFgQUhx6lzas/jjj+CXS6xmEj5Stm03owHwYDVR0j
BBgwFoAUZXjnlmIABJbrFUDYvY+mXtjWOmIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk
OGM0LzgvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2M0E2Mi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2
M0E2Mi5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQt
ZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0LzgvMzI2MTMwMzYzYTYxMzAzMDM1
M2E2NDMyNjQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMwMzEzMDM0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKgagBQ0tMA0GCSqGSIb3DQEBCwUAA4IBAQAAJWHokg3Gg1EIvFhWyLNY
KnBgkqoNp11+A1gYLUNZ1kEm/u4xUGfKawG1JJnaGcBfK4IJTiqxiGjpPRZn5ujI
c95tYws4kXVAl+it3JQ0N9VMnDV82MmYHhVI1vKYnTgtoOuMgHDRdJZbaWGlP/+B
yPb4pBWfBF+mrARacwxL9M1jli6/YtP00NPb581csDkNDeQ4385OqZFtAMiQP+P8
NkLq8QZ2o9ikd7bue4Oag7WEfIVwI84Hl4TTmu96K0xYuiBXWpTA908nOGcIwuJw
XRKWO4lLrQ3I/ghUfmf21XuaLgjN7LX9vg/fDG5J8bXQWIfonbXD6fc9cB92KAci
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:05:17 2026 by rpki-client