
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/326130353a646663353a3a2f34372d3437203d3e20323033303639.roa
File: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (raw, json)
Hash identifier: TnOKZ29z57WPuuAiM1ZmtS5ep5yz6fX+hNHGNg6nE64=
Subject key identifier: 0D:09:2F:2B:6C:D5:B7:06:0F:29:BD:D0:E0:D3:25:DB:55:35:94:93
Certificate issuer: /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Certificate serial: 54F39FAA66C1162BD6A5257552AA93D84BB15DF3
Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/326130353a646663353a3a2f34372d3437203d3e20323033303639.roa
Signing time: Fri 05 Jun 2026 00:19:24 +0000
ROA not before: Fri 05 Jun 2026 00:14:24 +0000
ROA not after: Fri 04 Jun 2027 00:19:24 +0000
asID: 203069
IP address blocks: 2a05:dfc5::/47 maxlen: 47
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:f3:9f:aa:66:c1:16:2b:d6:a5:25:75:52:aa:93:d8:4b:b1:5d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Validity
Not Before: Jun 5 00:14:24 2026 GMT
Not After : Jun 4 00:19:24 2027 GMT
Subject: CN=0D092F2B6CD5B7060F29BDD0E0D325DB55359493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8b:50:20:ff:79:3c:9d:f5:02:27:b1:e2:50:
ea:c5:6e:e6:77:a7:01:3b:0f:78:0f:c8:74:1d:2f:
4a:ef:3a:c6:6d:aa:2c:9a:34:06:58:30:1a:76:af:
3e:9d:d9:46:a8:48:67:c3:be:13:30:12:db:96:fe:
7a:9b:ef:87:49:17:8d:fb:ac:d3:41:9a:a6:b5:7b:
0d:02:4c:eb:be:a2:c3:e2:53:60:9e:5a:87:a2:25:
66:8f:77:0d:50:d1:80:dc:47:98:96:af:8b:7a:85:
15:48:2f:4d:fd:75:fe:30:ee:4d:7e:4b:de:57:a8:
4b:8d:60:b8:92:53:08:54:c2:2c:80:8f:1b:c6:74:
88:77:74:9b:49:ef:57:67:63:20:d9:a6:6e:17:e7:
ff:95:3e:2d:32:07:f9:cd:f6:5c:0b:6c:79:1e:98:
6f:0d:61:42:7f:40:90:3b:d4:47:5c:2b:5b:e1:6a:
8a:41:52:ff:2e:56:29:e1:75:a9:c5:45:3c:e0:15:
a8:ba:70:0f:4b:24:b4:21:b9:4f:b8:b7:11:31:92:
18:20:cb:7f:c7:56:a9:58:df:67:a5:40:da:19:11:
79:3b:9c:ad:f2:b2:b7:3b:50:84:a5:86:a0:10:e4:
34:a4:24:33:7e:ed:2c:41:b1:5f:4c:4e:f3:aa:70:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:09:2F:2B:6C:D5:B7:06:0F:29:BD:D0:E0:D3:25:DB:55:35:94:93
X509v3 Authority Key Identifier:
keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/326130353a646663353a3a2f34372d3437203d3e20323033303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc5::/47
Signature Algorithm: sha256WithRSAEncryption
70:d8:f0:02:d5:86:32:ed:cc:16:78:59:6e:ed:16:fc:bb:59:
0f:fd:fe:ea:1a:78:71:d0:ad:05:42:14:f8:8b:ae:1d:22:8d:
b3:c6:06:1b:12:59:61:07:f2:8d:fb:73:93:f4:9a:5f:52:fd:
a9:bc:f9:18:88:bd:72:1f:dc:70:d3:14:01:7a:6d:d7:41:1b:
b9:b3:e7:53:9a:df:39:13:7e:15:20:ea:7a:6c:fb:e3:8e:6c:
86:cf:10:c6:cf:13:95:ef:9f:19:36:56:2b:a7:74:ac:c5:1a:
6d:92:af:e4:7c:1f:e2:d2:61:44:59:8e:9f:c9:93:86:c4:1d:
88:2b:d4:3d:ed:e1:d7:83:88:a4:22:22:50:9d:ed:43:85:a2:
e9:20:fe:3a:c9:b6:44:96:c7:b8:7c:1f:7f:60:85:91:51:49:
1f:4d:aa:e1:4a:a2:61:e7:28:34:6a:99:a9:62:8c:ed:ce:db:
22:96:6b:5d:83:0a:92:bb:13:d2:39:c7:ae:b0:a0:65:da:df:
c7:07:3d:b0:c9:53:9d:e7:df:86:2b:eb:ca:f4:32:cc:93:37:
f6:7f:ba:81:64:2a:e2:f9:8f:b2:80:c2:5d:64:a3:35:01:4a:
9f:a9:3d:dd:53:57:23:39:2a:4c:04:b5:50:81:5b:7c:53:fb:
a6:14:ec:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:02:15 2026 by rpki-client