
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031613a3a2f34382d3438203d3e20323136303433.roa
File: 326130363a313238333a633031613a3a2f34382d3438203d3e20323136303433.roa (raw, json)
Hash identifier: CbEVvh7G+nPx+JIkl0IAkrWcbWTe+KHwxSFhvTA0qgA=
Subject key identifier: DE:8B:2D:F8:B7:DF:B7:1F:F4:93:23:BC:6C:2D:1C:2B:23:C0:07:7F
Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial: 0510204BD3EA065CA716C25F6DE6D3F0DEF03E61
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031613a3a2f34382d3438203d3e20323136303433.roa
Signing time: Fri 05 Jun 2026 16:35:05 +0000
ROA not before: Fri 05 Jun 2026 16:30:05 +0000
ROA not after: Fri 04 Jun 2027 16:35:05 +0000
asID: 216043
IP address blocks: 2a06:1283:c01a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:10:20:4b:d3:ea:06:5c:a7:16:c2:5f:6d:e6:d3:f0:de:f0:3e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Validity
Not Before: Jun 5 16:30:05 2026 GMT
Not After : Jun 4 16:35:05 2027 GMT
Subject: CN=DE8B2DF8B7DFB71FF49323BC6C2D1C2B23C0077F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:76:73:ea:f2:38:54:c2:92:68:ce:b7:41:
40:de:d7:f1:e3:7c:e7:18:94:34:4a:00:d0:33:22:
aa:c6:90:40:a8:cc:2c:fb:61:d0:3b:83:5d:a9:6e:
89:ab:aa:c8:64:e6:ee:a6:fa:58:6d:dd:98:ef:b0:
6d:c4:22:d0:9a:23:9e:69:8d:9f:93:64:7e:7a:8b:
06:c1:6d:bb:34:0e:6d:8b:e6:d1:bb:81:f4:69:95:
c6:65:f8:6a:d5:55:cb:2a:75:49:8c:4d:05:99:1d:
9e:26:e0:91:6a:72:bc:db:e8:b7:61:d6:25:30:92:
67:a2:40:0f:e0:84:bf:70:cf:8c:db:95:49:24:e5:
a6:1f:14:e0:1c:dc:3f:e1:96:1a:42:8f:ac:ac:56:
c6:17:43:cc:2a:63:3f:11:89:cb:ce:10:11:f2:56:
20:89:09:ff:ce:95:ba:72:7d:ec:e9:b8:4d:fe:df:
0c:d0:96:50:17:b8:be:d5:ce:43:29:81:74:da:bc:
5e:ca:08:1d:38:44:7e:46:c8:3c:8c:87:d7:ee:ce:
70:10:66:03:b4:12:e6:7a:df:82:ce:b9:37:5f:aa:
97:ba:79:17:52:64:07:4a:62:58:0d:21:10:8f:8f:
c1:3a:7a:e0:cf:da:e7:56:d5:02:4c:fa:40:8d:0c:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8B:2D:F8:B7:DF:B7:1F:F4:93:23:BC:6C:2D:1C:2B:23:C0:07:7F
X509v3 Authority Key Identifier:
keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031613a3a2f34382d3438203d3e20323136303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:c01a::/48
Signature Algorithm: sha256WithRSAEncryption
54:c9:14:25:49:61:c4:e2:4b:da:12:c4:e6:a7:ca:07:50:45:
1e:30:3e:2e:fa:6c:29:29:eb:06:cf:97:4d:2e:8b:75:8c:7b:
36:89:c8:e4:41:ee:e4:4a:23:3e:24:a0:f9:eb:15:73:53:33:
38:23:ba:3a:a6:bb:b6:0a:e6:8d:39:08:73:c2:a0:62:64:a7:
22:7e:6b:df:39:a9:5c:c1:33:a4:5d:19:ae:f6:59:cc:15:25:
2c:fc:d1:62:f5:b1:24:f3:47:78:89:97:06:e0:12:31:4d:c1:
9c:ba:29:7c:2c:f3:d3:67:75:74:a6:24:1c:9c:9f:16:15:3e:
cb:94:4d:d1:05:68:e7:78:db:92:3f:41:2e:ab:65:a1:09:4d:
4b:e9:2e:e4:56:26:1a:35:80:f9:b0:e2:8f:fe:08:8d:9c:e2:
c4:87:0f:03:4f:a8:34:2f:25:04:5f:ef:26:25:8a:ab:8c:ff:
f8:a4:ba:19:78:b2:30:ea:07:d9:97:30:f8:78:52:59:d4:87:
e4:cd:2c:18:86:e6:5f:91:31:af:d1:09:4c:56:82:c9:cf:a6:
0f:22:b9:e3:ae:a7:51:25:8b:29:82:69:f1:47:7d:0d:a7:58:
32:f3:e3:25:ca:c6:4f:29:c0:05:89:fc:62:f5:b0:08:31:19:
75:c2:bb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:49:27 2026 by rpki-client