
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313331303a3a2f34382d3438203d3e20323139333738.roa
File: 323630323a663932613a313331303a3a2f34382d3438203d3e20323139333738.roa (raw, json)
Hash identifier: 2abPogFVO3AZeK+6DUurbrEIuu7IiEjmU5YsKoHZI5A=
Subject key identifier: 10:62:9E:AB:76:B1:8C:1A:8B:EC:BD:51:11:A7:5F:5E:29:3E:6A:6E
Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial: 05C3831634BD3B68A77F8EC5DCD155B2DBCA4591
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313331303a3a2f34382d3438203d3e20323139333738.roa
Signing time: Mon 07 Sep 2026 08:31:27 +0000
ROA not before: Mon 07 Sep 2026 08:26:27 +0000
ROA not after: Mon 06 Sep 2027 08:31:27 +0000
asID: 219378
IP address blocks: 2602:f92a:1310::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 02:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:c3:83:16:34:bd:3b:68:a7:7f:8e:c5:dc:d1:55:b2:db:ca:45:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Validity
Not Before: Sep 7 08:26:27 2026 GMT
Not After : Sep 6 08:31:27 2027 GMT
Subject: CN=10629EAB76B18C1A8BECBD5111A75F5E293E6A6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:5e:72:d5:90:3b:45:2c:7b:cf:b2:e8:e8:
ac:d2:b7:5f:50:25:bd:2c:9f:84:a2:bf:73:d3:f8:
1e:ef:38:c5:ec:17:9b:af:92:0d:19:7d:88:8b:1a:
da:54:ed:bc:05:8c:8e:3c:ec:32:b7:b4:79:87:4b:
e0:14:ac:97:ba:3d:c6:8d:cb:ec:68:ff:0b:32:80:
c0:40:9f:28:4a:3e:df:ea:6a:90:79:dc:14:ba:bb:
b3:0c:26:e1:da:3a:7b:aa:56:18:23:4c:c8:81:65:
d7:a8:11:91:a5:e0:e9:15:d3:be:c3:a6:97:d5:4e:
a3:7a:21:b0:d8:a6:3d:89:6a:78:94:4a:3e:c2:76:
0a:5c:f4:f6:8e:80:5b:c1:7d:f9:17:d7:d7:56:07:
88:f5:5a:3f:8f:db:26:a7:dd:ab:ed:ed:a8:74:20:
31:f1:25:dd:cb:25:bd:7e:ae:4c:0a:42:be:90:d6:
d4:a0:c2:27:c0:00:65:1b:d3:22:97:2c:e4:35:39:
35:12:c5:7a:0e:ef:fe:5a:cb:c9:48:2e:48:bc:c6:
01:83:11:bd:17:fe:20:b0:2e:2c:85:e0:6d:eb:47:
5a:23:97:9c:b9:c9:6f:ef:db:d2:13:63:a0:ba:fa:
1f:23:81:e3:3e:a3:f4:ec:ca:33:28:42:f8:b7:25:
6c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:62:9E:AB:76:B1:8C:1A:8B:EC:BD:51:11:A7:5F:5E:29:3E:6A:6E
X509v3 Authority Key Identifier:
keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313331303a3a2f34382d3438203d3e20323139333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:1310::/48
Signature Algorithm: sha256WithRSAEncryption
a6:e0:7c:0f:5f:50:01:d0:1e:89:ce:97:ff:c7:3f:ba:71:79:
19:49:5e:7c:d9:cf:4d:4b:f5:00:6d:38:0a:89:c6:64:30:e2:
27:28:86:a7:c6:d7:80:df:89:98:bd:07:41:bd:44:60:f7:ef:
03:a1:8b:0d:8d:11:b6:54:01:99:6f:36:df:a4:da:f9:d4:a6:
66:9a:6d:59:77:a2:bb:0b:23:47:a5:ab:97:b4:27:8e:13:7f:
dc:06:92:1c:4b:52:45:54:88:9d:46:aa:5c:fa:f2:e5:92:ba:
77:4c:05:cf:a0:05:d9:f2:0e:75:52:15:e1:88:bc:67:60:9d:
47:3c:3a:7a:f1:d0:7c:86:c3:ba:53:c8:c7:3b:3d:6c:45:6e:
dc:ed:7f:f8:7f:48:dc:f7:ca:1f:2d:80:50:eb:95:2a:9d:57:
16:cc:1e:c4:50:54:92:3e:c8:09:b7:ff:81:3d:d8:cf:37:a2:
74:0c:f9:4b:61:9c:b5:4c:98:d9:87:fd:4a:34:78:68:21:e8:
fc:0a:d5:37:2a:03:f7:aa:92:3e:bd:f2:70:2c:bb:d0:9e:a7:
66:d0:51:03:11:fc:33:8d:ff:4e:2e:0b:e6:38:09:e0:d4:71:
f3:ea:69:13:2c:ea:0f:1c:a8:b1:64:04:1a:e0:e0:de:a0:2b:
f3:01:75:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:35:52 2026 by rpki-client