
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS212294.roa
File: AS212294.roa (raw, json)
Hash identifier: AkkBy8gMc1wiqR7+B50DShDEHVdLbC2wn4SM5LFPXCk=
Subject key identifier: 56:03:32:28:1D:BB:EB:9C:E8:CA:1E:26:BE:68:D8:E5:08:43:D4:6A
Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial: 7DAA893BA435229CCA45AF1E8B61C9DBCF05AD1C
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS212294.roa
Signing time: Fri 05 Jun 2026 08:45:52 +0000
ROA not before: Fri 05 Jun 2026 08:40:52 +0000
ROA not after: Fri 04 Jun 2027 08:45:52 +0000
asID: 212294
IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:aa:89:3b:a4:35:22:9c:ca:45:af:1e:8b:61:c9:db:cf:05:ad:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Validity
Not Before: Jun 5 08:40:52 2026 GMT
Not After : Jun 4 08:45:52 2027 GMT
Subject: CN=560332281DBBEB9CE8CA1E26BE68D8E50843D46A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:8d:48:97:5e:87:f5:da:ca:2f:be:c1:4b:
96:6d:35:60:89:15:b4:fc:0f:32:42:b6:90:b4:6a:
53:8a:f5:ba:b9:c9:d9:92:35:66:fe:4d:d4:f9:f9:
3b:07:78:4b:c7:5e:7f:ed:be:c1:49:d5:51:eb:2e:
44:9d:3f:a3:63:eb:a8:2c:77:12:88:24:42:49:a1:
f7:58:dd:85:06:f0:21:44:14:9a:c9:83:7f:39:c9:
52:ee:1a:5a:73:12:6a:fb:c1:05:50:47:d7:af:bd:
b8:01:46:09:c7:32:b4:68:bd:28:ba:d9:51:d3:89:
68:58:10:22:3b:50:8e:bb:3b:0e:8c:00:7b:20:ad:
99:3a:14:0f:a4:21:37:78:b1:15:20:31:66:f4:85:
27:ea:5b:b2:eb:61:23:f6:23:ee:15:eb:0d:7d:20:
bb:00:e4:c4:9c:07:3e:1a:7d:9c:05:46:04:46:4a:
a4:ec:cd:ea:c1:70:35:6e:fe:30:68:19:e4:b8:a8:
47:b2:ed:0a:21:22:95:7b:07:59:78:a0:57:e0:a8:
88:5b:df:28:48:2a:11:e7:85:6c:e8:07:d4:34:cb:
6a:49:b4:1d:6b:11:01:8a:02:a0:e4:17:26:ea:82:
0e:35:dd:df:ed:67:78:44:98:e3:63:14:8e:31:b9:
de:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:03:32:28:1D:BB:EB:9C:E8:CA:1E:26:BE:68:D8:E5:08:43:D4:6A
X509v3 Authority Key Identifier:
keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS212294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
72:2d:a6:dc:3d:2f:28:be:29:77:81:45:6a:fa:23:e5:3c:61:
64:3a:b3:00:88:4f:04:da:f3:a4:63:c4:f2:70:f3:31:1b:32:
94:ba:95:b7:c7:f4:23:8e:d0:98:ba:3a:b1:0c:cd:7a:25:e6:
a2:5b:ae:4e:7e:8d:c5:5c:88:c7:5b:a9:9a:40:db:53:11:3f:
9f:c9:ea:e9:82:26:37:ae:64:44:e6:1c:b0:62:56:b0:ce:b1:
74:7e:e3:6d:49:f2:cd:52:d4:e7:c6:4d:ee:12:63:04:ad:65:
12:d0:31:37:1e:c9:26:5c:52:05:84:cd:fd:76:10:b7:d7:da:
55:5e:53:46:c4:b7:6e:db:8f:bb:76:29:d6:f3:b3:8a:88:0e:
c4:cc:c9:35:cf:50:8d:ff:28:1f:73:59:e5:0d:2a:31:a1:59:
97:4d:dd:70:63:00:70:e2:d9:67:ae:a6:83:d4:8e:e4:a6:92:
af:87:68:08:2b:17:a2:f8:85:53:5d:8f:44:2b:2e:12:92:f0:
a2:0d:eb:02:2d:31:2e:98:f5:8b:c2:61:91:87:d3:d2:90:61:
76:1b:a1:76:a6:56:63:d7:07:ca:1d:7e:a9:77:15:37:ec:3d:
19:7b:5a:04:2e:36:b7:b3:7d:b4:64:48:53:a7:45:9b:0f:5d:
a8:93:13:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:43:59 2026 by rpki-client