
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313331323a3a2f34382d3438203d3e20323138363638.roa
File: 323630323a663932613a313331323a3a2f34382d3438203d3e20323138363638.roa (raw, json)
Hash identifier: f80iTdu7za4AW4DcB+cRQ2OS4C0PCRgkme6PHzcmwr4=
Subject key identifier: 41:D1:06:47:5F:BF:E5:4B:37:D7:5E:D8:49:82:B1:A4:EF:DF:55:98
Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial: 776DE253D45B916A9D358DD6F840521CDF7A3E8D
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313331323a3a2f34382d3438203d3e20323138363638.roa
Signing time: Thu 17 Sep 2026 10:53:11 +0000
ROA not before: Thu 17 Sep 2026 10:48:11 +0000
ROA not after: Thu 16 Sep 2027 10:53:11 +0000
asID: 218668
IP address blocks: 2602:f92a:1312::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 02:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:6d:e2:53:d4:5b:91:6a:9d:35:8d:d6:f8:40:52:1c:df:7a:3e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Validity
Not Before: Sep 17 10:48:11 2026 GMT
Not After : Sep 16 10:53:11 2027 GMT
Subject: CN=41D106475FBFE54B37D75ED84982B1A4EFDF5598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:75:a7:2d:3d:7d:44:7f:53:14:d0:bf:6d:b0:
da:b1:01:38:38:49:a6:67:93:8d:4c:2d:72:b2:ca:
d0:f5:12:bf:a2:92:68:80:08:90:d5:ab:13:fc:8e:
cb:6e:2b:2e:51:78:9b:b5:e8:e3:28:b7:51:19:d1:
ef:1f:cc:f0:7a:47:de:2e:1c:ab:19:2b:81:ad:ca:
4b:e6:a5:1c:52:66:ae:61:3f:13:c1:34:fe:44:88:
99:b7:ec:12:5a:e4:68:77:fd:c4:87:90:1b:46:9c:
7e:5f:47:3f:ef:8d:e1:93:b4:cd:bd:ce:a1:8c:5e:
b6:0e:7d:13:b5:fe:91:6b:c3:0e:64:06:9b:94:7c:
39:20:71:d2:b7:bf:b0:91:44:96:64:b2:8a:a8:b2:
3d:9e:ff:f9:54:97:7f:25:0c:60:1a:73:5c:32:03:
c7:41:9f:b1:1c:4f:51:b0:59:87:fc:a7:c1:50:7e:
55:71:9a:fe:e5:87:f3:a9:18:2b:d0:bb:2f:c5:61:
aa:6a:ce:0c:4e:93:7c:81:7f:eb:66:5a:94:64:d3:
f2:fe:65:ce:6c:c1:50:75:f1:3f:4e:cb:18:0f:6d:
f2:00:9c:f3:96:92:42:7e:32:38:75:89:38:bf:23:
70:b6:fb:a2:eb:da:be:08:1e:f7:c1:22:7e:50:8d:
70:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D1:06:47:5F:BF:E5:4B:37:D7:5E:D8:49:82:B1:A4:EF:DF:55:98
X509v3 Authority Key Identifier:
keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313331323a3a2f34382d3438203d3e20323138363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:1312::/48
Signature Algorithm: sha256WithRSAEncryption
44:69:5e:c2:23:8d:99:39:10:a1:aa:de:bb:b2:ef:fd:f7:48:
d7:55:dd:12:88:24:11:1a:58:b2:55:f7:31:14:77:0e:dd:d4:
68:96:e8:3f:03:bb:07:71:5f:87:80:5f:27:9e:aa:53:00:9c:
16:93:42:64:39:02:96:bd:09:c8:0b:f2:e4:4d:15:e5:cb:47:
3d:4f:be:02:0a:4f:37:04:ca:42:58:c7:68:86:89:30:38:81:
b0:68:0c:93:58:75:d5:92:2d:34:ab:4d:29:24:3a:97:47:ac:
a9:21:ad:6c:47:2c:ca:fb:ef:04:e1:b7:a6:89:2a:3f:af:ed:
4a:08:e7:1b:35:09:08:5f:84:7f:47:d6:dc:61:dc:6c:8a:99:
2f:84:7e:dc:8f:58:aa:55:a4:5b:ca:69:4f:9f:36:2e:01:27:
29:9d:4b:12:92:1d:99:02:93:00:df:de:7b:50:e0:bd:f7:3f:
c6:28:02:53:65:1d:18:a2:f2:ee:a0:4f:20:2d:c0:e1:14:d5:
69:0d:65:f9:52:25:04:d3:34:cd:bd:4a:23:5d:07:76:52:65:
2d:5f:77:78:a6:68:ac:a4:1f:44:cf:5d:d6:0f:7e:d0:84:07:
1c:4d:92:09:9c:ff:48:7f:8c:34:60:a0:56:cc:d7:2d:e0:23:
eb:9a:e2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:36:07 2026 by rpki-client