
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa
File: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (raw, json)
Hash identifier: 7mp0zmnlMvREYQITFuGqaUnQo4881uWLywgG1Fg4GUU=
Subject key identifier: B6:D0:54:DB:DB:77:C9:FA:56:D4:89:2C:80:AB:FD:7E:7C:72:47:D8
Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial: 30E7E9CE39A41F107776CE236C07110DD2E794EC
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa
Signing time: Fri 17 Apr 2026 17:01:31 +0000
ROA not before: Fri 17 Apr 2026 16:56:31 +0000
ROA not after: Fri 16 Apr 2027 17:01:31 +0000
asID: 44817
IP address blocks: 2a14:7581:4540::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e7:e9:ce:39:a4:1f:10:77:76:ce:23:6c:07:11:0d:d2:e7:94:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Validity
Not Before: Apr 17 16:56:31 2026 GMT
Not After : Apr 16 17:01:31 2027 GMT
Subject: CN=B6D054DBDB77C9FA56D4892C80ABFD7E7C7247D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:51:11:9d:d6:45:99:4c:a5:42:bf:c0:9b:ce:
e0:00:c9:a2:cd:72:2d:fa:b2:7d:a2:1c:10:18:39:
23:91:5a:5c:57:5c:78:97:d5:78:78:fd:25:e8:26:
04:0b:e3:53:87:06:26:b7:66:12:74:67:72:1d:52:
21:de:3f:f2:b4:1f:cc:26:61:99:61:d9:04:e9:79:
39:9d:41:2e:6d:c4:1f:b8:01:25:1c:96:5b:68:4c:
d1:b5:ce:9e:5d:40:78:14:3e:28:98:bd:d7:9f:7e:
5e:99:f1:d7:13:ee:a7:a5:f0:1e:46:27:16:4e:54:
14:d5:cf:42:b8:6f:08:92:51:06:0e:1e:c6:d7:df:
6b:b8:1c:35:68:b7:80:51:42:d3:ac:ef:77:2f:58:
aa:d3:ef:e6:5d:c6:f9:78:be:e2:11:43:bc:d8:19:
43:70:d0:fa:bb:22:ba:1e:aa:aa:38:c2:7d:77:7d:
c3:ae:40:13:97:a6:24:f9:ec:23:61:bf:92:a7:80:
43:fd:17:3f:7b:24:3b:2a:70:de:69:98:78:43:17:
d9:53:f0:70:13:32:b3:a4:90:2a:34:61:90:5a:d3:
b0:a7:90:40:60:d3:6a:a3:85:e4:c5:a3:6b:6b:a2:
d2:d2:16:63:92:aa:28:09:2c:74:6b:bf:ea:68:6b:
bc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D0:54:DB:DB:77:C9:FA:56:D4:89:2C:80:AB:FD:7E:7C:72:47:D8
X509v3 Authority Key Identifier:
keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:4540::/44
Signature Algorithm: sha256WithRSAEncryption
ab:f0:db:e5:e4:7f:c2:48:68:b1:4d:e9:dd:67:19:03:6d:a6:
5d:52:c7:5b:16:bc:aa:2e:19:a9:55:f8:3e:20:1e:6f:a0:d1:
0b:d4:c9:7e:7d:b3:2d:93:55:3b:cb:a5:ca:7e:3f:07:83:36:
b2:5b:01:74:f4:63:10:ef:4f:15:d4:61:dd:fb:8e:73:42:8f:
33:03:7c:ff:15:3e:e4:3f:25:72:4a:6a:21:8e:f1:fa:5f:d8:
f2:43:bb:95:72:d7:b5:24:3d:5b:06:7b:ba:17:5d:f2:71:31:
5a:86:80:aa:7c:7e:96:82:00:96:37:de:9c:60:73:f4:57:f9:
7e:f6:f3:8b:b7:61:c3:f5:c8:a4:24:71:54:23:e1:72:35:61:
f7:92:0c:12:02:06:19:bd:ff:e7:0d:e2:94:b6:e7:e1:51:db:
af:26:4c:b4:b8:83:ee:81:cf:cc:72:98:f0:37:3a:58:82:ec:
d7:9e:27:7d:6e:56:75:81:5e:ff:0e:9f:e2:0a:ee:17:b7:cd:
2e:67:b6:3e:64:81:0a:43:81:6f:20:6c:e6:c2:35:ac:49:54:
15:34:1c:65:1e:7e:24:b9:1a:20:a0:01:ad:9a:39:4d:37:42:
a3:b0:25:9c:ca:92:47:8b:8f:49:a7:f3:ad:8f:e1:fb:1f:d9:
fb:1b:36:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:11:03 2026 by rpki-client