
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa
File: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (raw, json)
Hash identifier: 43/Hl3X+BREyxQjjJV5Oda1rLTc1IyLJ2mCyE8ROtmI=
Subject key identifier: 30:E0:17:3C:49:41:0B:49:9E:02:B8:6B:AE:52:6E:EF:EE:DF:20:0F
Certificate issuer: /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Certificate serial: 1BB3214A5C781E24DDB443C225A28423132A2013
Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa
Signing time: Fri 05 Jun 2026 00:19:25 +0000
ROA not before: Fri 05 Jun 2026 00:14:25 +0000
ROA not after: Fri 04 Jun 2027 00:19:25 +0000
asID: 203069
IP address blocks: 2a05:dfc5:10::/47 maxlen: 47
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b3:21:4a:5c:78:1e:24:dd:b4:43:c2:25:a2:84:23:13:2a:20:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Validity
Not Before: Jun 5 00:14:25 2026 GMT
Not After : Jun 4 00:19:25 2027 GMT
Subject: CN=30E0173C49410B499E02B86BAE526EEFEEDF200F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:39:3a:22:17:c3:c1:2e:03:95:df:d6:c0:
ba:80:cb:3e:7b:77:71:73:91:25:b7:d1:29:b2:ee:
02:14:d7:97:ce:2d:a4:4c:92:ba:64:e9:78:69:d0:
ed:5e:e1:aa:0e:d5:f0:61:bd:95:54:c4:2a:b4:6a:
7e:cb:d1:35:5e:42:e7:de:f4:5b:ba:d2:22:b4:e0:
97:21:ac:e1:59:f0:f5:20:6c:7a:7b:ed:96:61:1f:
d2:8e:ee:06:f9:eb:b6:ae:62:35:3c:e1:e4:f3:b3:
a1:04:90:d4:a1:7c:df:c2:75:2f:65:1c:84:4a:20:
e7:c5:98:74:b1:d1:39:12:4e:38:c7:0c:ec:ce:16:
8e:e8:23:b8:c9:dc:db:23:42:2d:ad:27:43:45:3d:
aa:c2:3c:f3:3f:33:d1:3d:06:7c:7f:3c:d1:52:a0:
e4:37:7d:14:9b:29:f6:61:60:b8:cb:64:c0:a6:d3:
8f:a9:34:4f:f0:61:13:aa:33:98:50:c5:c2:9a:3c:
4c:b4:5f:e4:f9:4b:54:27:6d:9a:2d:c1:18:41:4e:
ad:61:93:a7:32:e2:f9:df:0e:b9:c0:d4:25:0e:4f:
d0:b0:92:4e:9a:33:66:cf:56:cd:3b:37:3c:c6:41:
f5:43:ef:ce:49:98:56:36:3b:ce:5c:6b:9f:0a:24:
57:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E0:17:3C:49:41:0B:49:9E:02:B8:6B:AE:52:6E:EF:EE:DF:20:0F
X509v3 Authority Key Identifier:
keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc5:10::/47
Signature Algorithm: sha256WithRSAEncryption
27:15:e9:81:e4:6e:25:cd:94:7b:99:87:a4:f6:55:37:24:db:
40:94:a8:f7:21:65:5a:9c:c5:8a:ee:bd:49:8d:e7:71:89:cb:
d0:25:92:76:38:94:79:06:c7:5d:df:d4:d3:a2:57:ca:61:90:
23:cf:e9:0f:a9:95:01:38:b7:72:04:a3:9d:3a:41:38:00:09:
ee:5a:9b:0b:a8:84:dc:f1:38:3a:6d:31:d0:c8:81:0d:18:18:
bd:6e:8f:7c:40:60:06:19:f6:d2:1c:01:23:dc:9f:75:ad:cc:
d2:f4:55:69:cb:e2:e8:5a:2d:29:bf:cc:78:d5:9a:a7:9f:4a:
26:2a:22:d7:09:b2:00:a3:ca:c4:98:cc:b3:56:e5:92:b7:ff:
9b:a7:dd:74:4c:b6:d7:3d:25:24:40:25:c6:b3:3d:58:17:e8:
7a:63:4f:38:68:a3:59:cd:0b:ed:bc:ab:e8:30:8c:bc:e4:17:
b2:b8:82:20:f7:5d:88:de:de:a1:2e:c7:91:e1:b2:68:b9:a2:
df:aa:60:66:9c:63:a2:5f:71:81:c0:6f:18:3d:14:95:a2:25:
fc:16:0a:b2:c9:48:a4:48:cd:c2:0e:33:b8:fc:fb:84:5e:e8:
5b:bb:b1:05:63:48:a1:06:74:f4:dd:5c:6e:22:8c:35:df:a0:
a5:57:a5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:18:15 2026 by rpki-client