
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS139882.roa
File: AS139882.roa (raw, json)
Hash identifier: vp8btT2/yDtPZxRmWgFsAD4zbOKYNht4SYo7NuxysDM=
Subject key identifier: AA:CD:81:BA:5E:39:42:96:93:2C:F2:90:73:5A:81:34:15:12:6D:4F
Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial: 426856A559D848851A79FC5190CCDD7224EC25E5
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS139882.roa
Signing time: Fri 05 Jun 2026 08:45:54 +0000
ROA not before: Fri 05 Jun 2026 08:40:54 +0000
ROA not after: Fri 04 Jun 2027 08:45:54 +0000
asID: 139882
IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:68:56:a5:59:d8:48:85:1a:79:fc:51:90:cc:dd:72:24:ec:25:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Validity
Not Before: Jun 5 08:40:54 2026 GMT
Not After : Jun 4 08:45:54 2027 GMT
Subject: CN=AACD81BA5E394296932CF290735A813415126D4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:21:f9:92:e7:8d:fa:74:43:13:01:a1:ee:2a:
f1:1d:c8:40:1c:61:41:1f:89:f3:79:67:07:6f:83:
76:16:68:b5:93:6d:3c:3f:78:2e:fc:bc:84:55:44:
8b:fe:fe:73:a6:66:8e:73:5b:cb:cb:52:df:0b:fa:
b2:06:88:fa:7f:36:ac:58:c5:7c:25:6b:f4:25:22:
1d:e3:5a:c1:f9:07:88:94:54:ac:d3:69:7b:ad:bc:
da:40:31:dc:ea:11:13:fd:95:3d:7f:a9:20:b8:a2:
d2:61:a0:b0:73:22:3d:4e:5f:2d:8d:0f:83:2a:7d:
15:e5:3a:2b:8a:52:e9:41:f4:e7:e6:1b:af:ad:df:
72:aa:3c:52:50:5e:7b:5e:58:77:a1:ef:8f:64:fd:
05:a8:1b:ed:13:34:27:78:47:64:12:07:13:4e:80:
e0:13:83:70:3e:0c:56:2b:f9:f8:de:9e:d5:47:e1:
a0:18:e4:99:6b:64:9d:7e:67:a0:ec:f7:44:48:a2:
8a:b0:04:89:29:2d:31:ee:73:4e:35:6e:88:cd:eb:
1c:48:9b:57:02:23:93:76:4b:f4:01:f6:a8:eb:8c:
0c:1a:e7:22:a1:64:58:27:03:6d:34:67:0a:02:21:
35:0e:78:99:ca:45:39:41:8b:7e:70:75:0a:a0:bf:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CD:81:BA:5E:39:42:96:93:2C:F2:90:73:5A:81:34:15:12:6D:4F
X509v3 Authority Key Identifier:
keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS139882.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
7f:05:09:a2:10:fb:9b:05:8b:3d:c5:ba:d2:aa:06:8c:30:f1:
df:43:93:bf:bf:f5:fd:3c:30:39:6d:05:ec:19:82:79:8e:a2:
20:9a:49:8c:9d:29:c1:85:53:c5:2f:14:10:11:2e:a1:c7:f8:
90:9a:b7:89:ce:35:24:a2:60:37:ca:e5:c3:58:62:c5:b8:ee:
e8:fc:13:9a:89:9e:b7:6b:d9:05:d5:90:dc:a1:ae:6c:4f:e4:
35:bb:f5:5c:e4:0b:36:01:66:9a:7a:99:c8:93:6f:0f:f0:75:
36:24:48:1c:a0:f0:58:cd:d2:5e:42:0d:30:a8:42:f3:0c:e1:
0c:b8:eb:0e:58:98:04:2f:a0:f4:5d:7c:07:b1:e0:34:4d:0a:
78:78:1a:50:dd:28:9b:b1:ab:a6:dc:c2:5c:59:0b:fd:a7:d6:
79:49:24:99:66:e9:6a:f0:92:35:fb:b2:c6:a3:6d:f4:47:67:
e5:6d:6e:68:cc:b5:44:f0:b8:27:01:f8:11:30:21:33:49:2c:
83:88:4b:25:a9:ad:e2:0d:52:6a:ab:b2:76:39:92:a1:fa:52:
97:62:5d:84:de:ef:a3:e2:96:33:48:0e:15:5c:19:51:22:c9:
9b:f1:c9:8b:c2:84:69:c9:ef:1d:b5:ef:84:f7:b4:74:4c:ee:
a6:97:76:66
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUQmhWpVnYSIUaefxRkMzdciTsJeUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw
MzEyQ0VBODAeFw0yNjA2MDUwODQwNTRaFw0yNzA2MDQwODQ1NTRaMDMxMTAvBgNV
BAMTKEFBQ0Q4MUJBNUUzOTQyOTY5MzJDRjI5MDczNUE4MTM0MTUxMjZENEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4IfmS5436dEMTAaHuKvEdyEAc
YUEfifN5Zwdvg3YWaLWTbTw/eC78vIRVRIv+/nOmZo5zW8vLUt8L+rIGiPp/NqxY
xXwla/QlIh3jWsH5B4iUVKzTaXutvNpAMdzqERP9lT1/qSC4otJhoLBzIj1OXy2N
D4MqfRXlOiuKUulB9OfmG6+t33KqPFJQXnteWHeh749k/QWoG+0TNCd4R2QSBxNO
gOATg3A+DFYr+fjentVH4aAY5JlrZJ1+Z6Ds90RIooqwBIkpLTHuc041bojN6xxI
m1cCI5N2S/QB9qjrjAwa5yKhZFgnA200ZwoCITUOeJnKRTlBi35wdQqgv3TRAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUqs2Bul45QpaTLPKQc1qBNBUSbU8wHwYDVR0j
BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh
ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy
Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt
NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMTM5ODgyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU
wrALMA0GCSqGSIb3DQEBCwUAA4IBAQB/BQmiEPubBYs9xbrSqgaMMPHfQ5O/v/X9
PDA5bQXsGYJ5jqIgmkmMnSnBhVPFLxQQES6hx/iQmreJzjUkomA3yuXDWGLFuO7o
/BOaiZ63a9kF1ZDcoa5sT+Q1u/Vc5As2AWaaepnIk28P8HU2JEgcoPBYzdJeQg0w
qELzDOEMuOsOWJgEL6D0XXwHseA0TQp4eBpQ3Sibsaum3MJcWQv9p9Z5SSSZZulq
8JI1+7LGo230R2flbW5ozLVE8LgnAfgRMCEzSSyDiEslqa3iDVJqq7J2OZKh+lKX
Yl2E3u+j4pYzSA4VXBlRIsmb8cmLwoRpye8dte+E97R0TO6ml3Zm
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:26:10 2026 by rpki-client