
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa
File: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (raw, json)
Hash identifier: 8KHKZ6yYYM4r4ctRfPeSiTlSU7jaEuT/g972q+E+CDU=
Subject key identifier: 17:EA:6D:1B:74:FF:4F:7C:BD:C0:AB:AA:82:D2:4A:91:AB:9A:97:6B
Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Certificate serial: 56EE7315D83D1A8DE6DB784B9335416421AFF077
Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa
Signing time: Fri 05 Jun 2026 17:00:30 +0000
ROA not before: Fri 05 Jun 2026 16:55:30 +0000
ROA not after: Fri 04 Jun 2027 17:00:30 +0000
asID: 215147
IP address blocks: 2a06:1283:c110::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ee:73:15:d8:3d:1a:8d:e6:db:78:4b:93:35:41:64:21:af:f0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Validity
Not Before: Jun 5 16:55:30 2026 GMT
Not After : Jun 4 17:00:30 2027 GMT
Subject: CN=17EA6D1B74FF4F7CBDC0ABAA82D24A91AB9A976B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:55:37:48:8b:50:8b:4c:2e:12:a8:ed:f5:
5e:11:35:50:3f:ad:b9:df:42:0a:10:3d:b6:25:6a:
79:df:f6:5a:46:9d:6f:c4:0e:8c:0a:47:41:67:93:
b2:98:dc:79:00:19:f7:b1:09:d9:72:f3:08:de:10:
e9:89:5d:f7:85:59:38:90:45:04:12:40:fa:97:ad:
21:10:ed:e4:74:bc:59:54:7b:4a:73:c5:32:e2:5a:
22:99:e6:d3:46:e4:a6:c0:1e:b5:80:a5:99:4c:c9:
90:31:7d:ff:be:48:70:46:be:a8:ff:14:93:76:39:
0b:d1:96:70:a9:b5:1c:12:2b:30:5c:c0:5c:da:3c:
c3:59:05:2a:00:d9:68:61:58:98:ea:a3:dc:af:b6:
05:ad:84:7d:71:6e:74:f9:0d:e3:80:cc:db:ce:c4:
10:c8:4e:17:4e:33:9c:9e:2f:c7:72:84:63:76:cf:
d6:95:53:37:7e:0a:97:49:b3:6b:e5:fd:de:4d:6b:
d1:2b:89:be:97:d2:df:24:85:4c:24:7c:31:7b:5b:
11:d0:dc:57:e4:fe:1d:2e:d1:65:66:92:b5:ee:42:
03:e7:b2:a6:46:fb:1b:59:0c:ae:a4:0a:b3:de:33:
56:94:04:40:6a:bc:42:12:d9:d2:33:48:bc:20:c1:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EA:6D:1B:74:FF:4F:7C:BD:C0:AB:AA:82:D2:4A:91:AB:9A:97:6B
X509v3 Authority Key Identifier:
keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:c110::/44
Signature Algorithm: sha256WithRSAEncryption
4d:bc:11:16:f6:20:0f:49:8b:38:86:57:ca:b1:d9:2c:bf:a3:
4a:c2:b8:78:94:21:3e:39:65:fb:bd:ad:72:5f:78:0e:a5:ab:
ea:00:77:ee:9e:53:94:5c:50:06:50:48:ac:e8:f7:22:d2:5e:
1a:5d:e1:d2:cb:b3:30:2a:12:b4:2c:62:4f:1b:48:70:0d:41:
02:ea:95:3f:c1:1e:5d:d6:1d:32:e8:1f:16:8c:27:54:00:bc:
a3:cc:f0:0e:69:99:cb:0d:ea:6a:92:14:da:cd:ba:34:d3:09:
e0:7b:44:91:3c:0f:2c:2d:dd:f3:04:8b:85:e7:35:ac:0a:fc:
f3:31:91:d7:36:95:57:bd:84:3b:eb:22:9d:39:53:54:cd:5b:
f4:30:cd:e9:b6:3f:ec:30:b9:f7:05:3d:21:a4:d7:51:cb:03:
12:00:83:3e:7d:89:39:42:46:de:30:85:b7:02:25:fb:80:cd:
f1:29:59:c6:49:b5:20:89:a8:a0:3d:b1:f9:41:c3:dc:bb:3e:
52:8b:0b:9a:65:e7:a6:9a:1c:5f:cb:d4:84:fe:73:a1:93:36:
de:47:87:2b:ce:c1:56:22:a8:a0:8c:66:6c:d3:60:2f:be:52:
77:d5:34:52:d4:8e:1c:ef:ad:c2:fb:89:6e:cc:1b:e3:c7:78:
9a:42:5b:09
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUVu5zFdg9Go3m23hLkzVBZCGv8HcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz
QTdBOEIyQzAeFw0yNjA2MDUxNjU1MzBaFw0yNzA2MDQxNzAwMzBaMDMxMTAvBgNV
BAMTKDE3RUE2RDFCNzRGRjRGN0NCREMwQUJBQTgyRDI0QTkxQUI5QTk3NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzA1U3SItQi0wuEqjt9V4RNVA/
rbnfQgoQPbYlannf9lpGnW/EDowKR0Fnk7KY3HkAGfexCdly8wjeEOmJXfeFWTiQ
RQQSQPqXrSEQ7eR0vFlUe0pzxTLiWiKZ5tNG5KbAHrWApZlMyZAxff++SHBGvqj/
FJN2OQvRlnCptRwSKzBcwFzaPMNZBSoA2WhhWJjqo9yvtgWthH1xbnT5DeOAzNvO
xBDIThdOM5yeL8dyhGN2z9aVUzd+CpdJs2vl/d5Na9Erib6X0t8khUwkfDF7WxHQ
3Ffk/h0u0WVmkrXuQgPnsqZG+xtZDK6kCrPeM1aUBEBqvEIS2dIzSLwgwUrhAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUF+ptG3T/T3y9wKuqgtJKkaual2swHwYDVR0j
BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4
MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz
YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB
MDY0M0NBQzNBN0E4QjJDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz
NjNhMzEzMjM4MzMzYTYzMzEzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz
MTM1MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKgYSg8EQMA0GCSqGSIb3DQEBCwUAA4IBAQBN
vBEW9iAPSYs4hlfKsdksv6NKwrh4lCE+OWX7va1yX3gOpavqAHfunlOUXFAGUEis
6Pci0l4aXeHSy7MwKhK0LGJPG0hwDUEC6pU/wR5d1h0y6B8WjCdUALyjzPAOaZnL
DepqkhTazbo00wnge0SRPA8sLd3zBIuF5zWsCvzzMZHXNpVXvYQ76yKdOVNUzVv0
MM3ptj/sMLn3BT0hpNdRywMSAIM+fYk5QkbeMIW3AiX7gM3xKVnGSbUgiaigPbH5
QcPcuz5SiwuaZeemmhxfy9SE/nOhkzbeR4crzsFWIqigjGZs02AvvlJ31TRS1I4c
763C+4luzBvjx3iaQlsJ
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:11:43 2026 by rpki-client