
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3133302e31322e39332e302f32342d3234203d3e203236393534.roa
File: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (raw, json)
Hash identifier: S/etqWBsJQE1xpnfTaF1R7YzxtdtexqAS5yykGH5s5A=
Subject key identifier: 15:84:81:63:9A:39:FD:14:78:C5:CB:16:1E:01:06:98:A1:3A:8F:34
Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
Certificate serial: 0E62EB478E57780473D7C991F61F59ADAF6747B9
Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3133302e31322e39332e302f32342d3234203d3e203236393534.roa
Signing time: Sat 12 Sep 2026 04:32:41 +0000
ROA not before: Sat 12 Sep 2026 04:27:41 +0000
ROA not after: Sat 11 Sep 2027 04:32:41 +0000
asID: 26954
IP address blocks: 130.12.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 10:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:62:eb:47:8e:57:78:04:73:d7:c9:91:f6:1f:59:ad:af:67:47:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
Validity
Not Before: Sep 12 04:27:41 2026 GMT
Not After : Sep 11 04:32:41 2027 GMT
Subject: CN=158481639A39FD1478C5CB161E010698A13A8F34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:09:d2:3f:85:d5:29:1e:62:b4:e9:94:df:
de:4d:e9:39:c7:10:91:88:a3:98:4b:76:5f:0b:12:
cc:64:cd:f7:2b:4f:1c:bd:90:17:57:6f:53:81:30:
85:81:95:2a:5f:b2:0a:1b:96:f6:54:7c:84:f7:e5:
85:3a:8b:cc:34:0a:af:88:71:c3:5e:1c:41:d9:84:
8b:d5:08:a5:0d:ee:89:de:d1:b6:92:cc:0f:ff:34:
1c:9c:af:97:3d:e0:1f:a2:0f:6f:ca:cd:78:9c:b0:
38:3d:97:2d:58:f8:b1:a1:3d:5b:50:ea:0a:ea:61:
a4:26:8e:bf:88:3a:40:b5:c3:50:df:6d:15:7d:c4:
57:71:86:02:f8:4f:a3:66:a0:7c:38:d9:dd:e1:a3:
86:47:51:6c:81:5f:0d:19:7a:bf:d0:e3:de:62:bb:
15:6b:7f:4b:5d:ac:44:1a:f8:f8:7c:8e:4c:8c:7f:
48:47:cb:0d:a6:4f:03:7a:f2:4f:c0:04:92:4b:42:
62:c9:c6:6a:ad:68:7f:68:fd:93:36:51:ae:a4:56:
65:b7:1c:06:3d:75:b9:0c:4e:6b:c1:b1:7f:0e:9a:
9a:a7:3c:13:a2:d9:96:a3:d5:1e:e0:57:25:69:52:
52:ea:e1:68:42:36:c6:9d:83:f2:fb:c8:53:b5:93:
2f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:84:81:63:9A:39:FD:14:78:C5:CB:16:1E:01:06:98:A1:3A:8F:34
X509v3 Authority Key Identifier:
keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3133302e31322e39332e302f32342d3234203d3e203236393534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.12.93.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:63:05:d4:46:83:dc:5f:83:3f:85:5f:e9:35:1a:4d:58:89:
8c:2b:ae:5a:2c:f4:88:8a:b9:92:60:af:4d:95:f4:51:00:e9:
08:b7:cc:86:05:cb:cf:2f:24:28:34:f2:47:45:b8:44:6e:71:
da:aa:db:e8:60:2c:ce:5c:1d:7e:d9:cf:cc:34:47:d1:df:07:
77:b3:45:81:36:11:44:87:63:0d:7b:52:04:a2:0d:c6:ee:9f:
38:69:8d:f1:4b:cf:3b:7c:f6:0f:3f:6d:a7:cb:f1:37:91:40:
2a:9f:1b:5a:c4:a4:dc:1a:15:c7:b0:2b:32:c7:76:d7:f7:a6:
1a:aa:90:d3:e5:8a:db:08:4b:c9:c1:96:ec:2c:37:f3:12:ca:
cc:75:9f:ea:7a:b5:e4:b2:a6:97:29:b1:fc:64:a0:9d:82:88:
0f:1c:07:00:77:9d:35:fc:41:29:2c:e1:6d:f9:9f:44:e5:74:
40:06:3d:51:a9:89:e7:14:f0:28:7b:9f:2a:eb:27:f1:85:cd:
ed:0b:49:d8:87:e5:45:b6:70:6a:67:da:b8:eb:32:25:3c:93:
27:b1:2b:5a:f5:c3:17:69:6f:79:ac:4d:f6:b0:48:2d:b2:8f:
83:b6:54:08:bd:eb:d1:13:d8:75:db:64:df:54:50:10:46:48:
fc:02:95:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:02:52 2026 by rpki-client