
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/326130623a346530373a363130333a3a2f34382d3438203d3e20323130363332.roa
File: 326130623a346530373a363130333a3a2f34382d3438203d3e20323130363332.roa (raw, json)
Hash identifier: R8edTsZwje2HhgGaCzDrUpKv5hszBEq9JO3MDKNHPqg=
Subject key identifier: F1:74:90:50:F2:74:92:AF:FA:19:A9:1F:9E:32:F3:DA:48:C2:DD:3C
Certificate issuer: /CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484
Certificate serial: 5E0458CFFD4616E2B6C7E2E159682B14460E7A8F
Authority key identifier: 79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/326130623a346530373a363130333a3a2f34382d3438203d3e20323130363332.roa
Signing time: Mon 23 Feb 2026 09:19:26 +0000
ROA not before: Mon 23 Feb 2026 09:14:26 +0000
ROA not after: Mon 22 Feb 2027 09:19:26 +0000
asID: 210632
IP address blocks: 2a0b:4e07:6103::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl
rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:15:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:04:58:cf:fd:46:16:e2:b6:c7:e2:e1:59:68:2b:14:46:0e:7a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484
Validity
Not Before: Feb 23 09:14:26 2026 GMT
Not After : Feb 22 09:19:26 2027 GMT
Subject: CN=F1749050F27492AFFA19A91F9E32F3DA48C2DD3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9f:f8:dd:e6:7f:4e:ee:b9:a0:c7:8e:17:93:
b5:af:ea:3c:3c:50:6f:61:f2:3e:35:d9:fa:87:e6:
0f:c0:de:df:d0:08:cb:57:7f:85:33:a4:c5:e1:99:
07:56:89:23:f4:5f:e9:6f:ff:fe:74:83:c9:ff:a6:
a1:9b:6a:88:1a:d0:82:fd:90:aa:0d:6d:d4:97:2c:
7e:c1:99:2c:f1:ec:ad:9c:c2:d8:48:a0:f5:bf:21:
1c:f0:e6:5c:bc:af:bb:98:5a:e4:a0:3b:c8:c6:3c:
58:7e:c8:48:9b:92:99:9f:2b:32:df:b9:fe:77:32:
2e:79:10:15:6b:fc:28:4f:cd:e3:06:d8:ed:37:5d:
f0:99:ec:7b:56:9b:49:d5:6b:d2:f5:d1:ad:00:20:
b3:70:a4:72:8e:9c:a6:be:07:2a:a3:bd:7a:9e:f8:
6f:5a:0b:82:41:c7:e6:13:0f:d8:83:a0:0c:0e:b1:
27:3e:37:bc:f6:ea:4d:98:9b:44:53:83:a1:fa:d1:
b7:c9:6b:4a:e2:07:be:da:b2:bc:ec:61:cf:ac:ab:
97:00:52:b0:c4:4f:0a:e4:88:b4:f7:31:5d:7c:b4:
f9:35:02:20:8b:85:d9:6d:0a:08:d1:3b:af:03:47:
23:ef:cd:4c:fd:14:83:fe:56:07:cb:ef:3b:d1:87:
5a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:74:90:50:F2:74:92:AF:FA:19:A9:1F:9E:32:F3:DA:48:C2:DD:3C
X509v3 Authority Key Identifier:
keyid:79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/326130623a346530373a363130333a3a2f34382d3438203d3e20323130363332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:6103::/48
Signature Algorithm: sha256WithRSAEncryption
45:02:b4:f5:08:4e:bd:02:b5:c9:75:a7:35:b5:9a:7b:fa:8c:
8a:77:78:25:57:f7:4b:e5:4b:bc:8a:67:f4:b9:c1:a3:f7:93:
1c:72:c8:54:5c:d2:b6:f4:86:4a:8b:5d:d5:3c:38:c4:b0:57:
b1:af:1c:6d:96:b7:4c:4d:27:aa:b3:1a:45:66:97:a3:07:78:
07:ea:4d:ef:6a:a6:8c:f2:b6:61:73:63:7a:d8:e5:c2:cf:f6:
76:d0:82:aa:c0:a1:96:b4:87:50:87:b6:09:af:1a:4e:6a:69:
95:ee:1f:54:51:6a:30:55:3e:a7:fb:96:53:74:f2:84:81:6d:
08:1e:e2:f3:78:fa:16:1e:94:4d:20:28:4d:fd:95:1b:e6:52:
1e:c3:c9:a8:42:41:46:cd:3b:0a:22:20:7b:78:3f:35:57:78:
de:ba:7f:3b:0d:db:2e:6c:ce:a0:50:8c:ba:83:e4:40:73:19:
d6:2f:bb:55:60:09:ef:19:2a:0f:c9:da:e0:9c:8b:a0:d2:1b:
6c:9a:d7:0d:8d:fe:e6:cd:d3:d9:cb:82:c6:21:08:7c:78:6d:
4f:23:2e:02:da:c2:5a:ca:9f:2c:09:56:55:49:b7:58:41:db:
90:e9:31:fb:c6:8f:79:61:71:8a:27:61:c9:e4:02:4e:cc:18:
13:fd:4c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:46:03 2026 by rpki-client