
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a3a2f33322d3438203d3e203438373030.roa
File: 326130363a313238333a3a2f33322d3438203d3e203438373030.roa (raw, json)
Hash identifier: fxjXoOkAlWKdih3/cBUfNd379GhR70eDfe3wIOO06B8=
Subject key identifier: 96:68:67:E4:CC:1B:64:FC:31:3B:93:68:CD:EE:C8:E0:2C:EE:B8:A7
Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial: 39CD9F7FF457A313420E0E563A5D38E9D3D2D4C7
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a3a2f33322d3438203d3e203438373030.roa
Signing time: Fri 05 Jun 2026 16:35:05 +0000
ROA not before: Fri 05 Jun 2026 16:30:05 +0000
ROA not after: Fri 04 Jun 2027 16:35:05 +0000
asID: 48700
IP address blocks: 2a06:1283::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:cd:9f:7f:f4:57:a3:13:42:0e:0e:56:3a:5d:38:e9:d3:d2:d4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Validity
Not Before: Jun 5 16:30:05 2026 GMT
Not After : Jun 4 16:35:05 2027 GMT
Subject: CN=966867E4CC1B64FC313B9368CDEEC8E02CEEB8A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:b1:a4:79:36:c7:57:3d:4d:2b:e6:b8:11:
7e:3a:44:53:51:20:c9:d5:7f:70:be:5d:a8:97:d1:
07:82:17:37:6b:2d:db:21:11:57:23:a7:72:9a:84:
7b:74:14:0a:c5:e9:4a:90:d4:bf:f2:d0:ce:6a:9d:
bb:37:3d:09:3f:6b:b9:83:b0:89:91:6e:af:9d:d3:
92:38:e0:1b:e9:28:61:c5:41:6e:9b:b2:31:c5:f7:
30:1c:0b:04:ef:c9:da:c4:d0:9e:65:6d:72:9f:97:
12:81:74:f8:ce:54:dc:2c:fb:1b:5b:2f:2d:10:fc:
52:f8:f4:60:76:a7:45:63:f5:dc:1d:6e:c6:50:b8:
d3:5e:8a:2e:35:5a:b5:a7:df:a3:b2:53:4f:18:5b:
88:35:2d:82:15:77:11:ae:53:7e:74:f2:5a:ea:71:
e8:44:2c:46:86:14:90:ae:2e:54:a3:e6:c2:74:46:
80:f4:7c:8b:ac:4a:51:e2:29:fc:b1:e1:49:17:19:
37:1f:0a:a3:bb:21:c4:12:a4:f3:fb:f5:29:54:7c:
aa:bc:cb:82:4a:c8:95:bf:85:a9:f5:3c:a1:42:77:
09:6b:29:b7:5b:0b:f5:e2:39:7d:4f:fe:5d:e6:cd:
20:de:41:da:21:2d:ca:15:0f:5c:54:e0:3e:9d:eb:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:68:67:E4:CC:1B:64:FC:31:3B:93:68:CD:EE:C8:E0:2C:EE:B8:A7
X509v3 Authority Key Identifier:
keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a3a2f33322d3438203d3e203438373030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283::/32
Signature Algorithm: sha256WithRSAEncryption
15:19:a2:d7:67:09:e4:e7:83:30:b8:9e:0e:e3:45:ec:25:2b:
af:db:92:b0:40:19:1a:a1:94:1a:ed:c7:c8:b7:12:d9:74:f2:
0e:8a:ad:f7:68:03:d0:21:19:1b:53:d4:58:ce:6e:92:1c:b2:
45:ca:75:2a:82:32:b2:76:42:00:9b:ea:6c:56:68:e6:5d:69:
23:2f:10:43:cd:df:5b:c3:ce:5f:a9:97:da:95:8b:b4:4f:7f:
b6:9f:4f:93:b1:db:18:ad:c8:87:00:54:b3:7e:0b:9c:5d:99:
70:8f:c3:b7:b0:96:1f:72:38:0c:7d:8c:3b:49:67:b9:53:ac:
cf:84:8d:30:ce:a6:c0:7a:18:8f:c4:96:4c:4e:ba:a1:a6:f6:
12:b8:90:b5:21:1d:e2:bf:85:09:6d:4f:3f:2a:ca:e7:d8:b1:
d0:e0:b7:61:32:17:49:e1:b2:6b:af:28:d8:17:1c:c9:22:52:
26:20:06:4c:99:e6:f7:68:21:ca:13:e1:8e:bf:77:4b:a3:62:
37:96:b9:36:e1:48:b7:98:ad:e5:af:32:3f:86:a5:bf:a1:c1:
4d:b1:a3:8d:d8:49:7a:6b:a1:bb:50:91:f9:4c:c6:64:7c:43:
43:0d:82:b5:ea:cc:02:89:4f:2b:c8:c0:9b:2b:eb:32:45:a1:
bd:fe:5c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:14:41 2026 by rpki-client