
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS54148.roa
File: AS54148.roa (raw, json)
Hash identifier: gK1Nuk2cTaYcbBGDObbuiDLnfCwIZOzmZwN7Enf0rto=
Subject key identifier: 03:E3:A4:BB:F8:A9:16:AA:99:5E:96:D5:5E:7A:30:9C:2E:99:C9:0C
Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial: 4F4BE0AD4433E540DA6D8DF910C6C8CFDA0831E1
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS54148.roa
Signing time: Fri 05 Jun 2026 08:45:52 +0000
ROA not before: Fri 05 Jun 2026 08:40:52 +0000
ROA not after: Fri 04 Jun 2027 08:45:52 +0000
asID: 54148
IP address blocks: 2a07:54c4:175b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:4b:e0:ad:44:33:e5:40:da:6d:8d:f9:10:c6:c8:cf:da:08:31:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Validity
Not Before: Jun 5 08:40:52 2026 GMT
Not After : Jun 4 08:45:52 2027 GMT
Subject: CN=03E3A4BBF8A916AA995E96D55E7A309C2E99C90C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:90:11:ca:22:11:62:c5:f9:c7:c9:46:3e:84:
e3:c2:70:c9:cd:50:86:35:07:ef:91:b9:ea:0f:78:
d0:28:dd:1d:d3:bc:8c:cd:f2:47:3a:26:9a:8a:b6:
f2:d5:97:c5:b1:64:78:9d:0d:29:fe:15:52:aa:a5:
24:83:0e:93:8f:b3:5b:f8:b8:ff:61:d7:60:1f:c1:
5e:2d:78:93:2b:9b:c5:76:ce:03:08:5f:a5:c3:38:
6f:62:cd:64:4d:a1:d7:7a:83:2e:b9:b4:55:ef:77:
e7:31:27:3f:1c:12:a0:80:a7:24:14:ad:90:e7:16:
67:6e:54:97:5e:37:45:9f:97:a3:9d:d4:68:89:28:
41:e3:79:41:35:5b:28:d2:c2:20:95:09:a1:2e:0f:
82:38:ad:b4:9f:29:46:8f:31:15:eb:7f:b6:34:fd:
cd:d8:ff:a3:3f:a2:74:5d:52:1f:86:51:de:fd:88:
47:9e:2b:dc:b1:77:38:1c:b6:ed:d4:5a:c0:2f:4f:
f7:70:a7:46:09:64:ec:37:39:42:da:7b:b9:61:69:
2c:77:68:68:fe:3c:3d:9f:b2:16:2b:de:50:ef:2a:
63:3d:16:17:eb:6c:b9:80:9d:ac:9c:6a:ba:64:79:
40:26:b8:cd:e6:5c:33:d3:a1:1c:26:cd:51:46:4b:
08:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E3:A4:BB:F8:A9:16:AA:99:5E:96:D5:5E:7A:30:9C:2E:99:C9:0C
X509v3 Authority Key Identifier:
keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS54148.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c4:175b::/48
Signature Algorithm: sha256WithRSAEncryption
a4:b9:f3:3f:b0:80:96:23:90:4a:e7:3a:4f:cd:36:cb:b1:43:
54:a9:2b:34:43:34:50:9f:8e:f2:88:4f:03:e6:71:4b:9c:69:
1c:71:02:48:1d:df:5a:1c:dd:5c:f0:7f:02:e3:dd:46:d4:11:
aa:e3:59:62:e4:09:2b:3c:9a:d0:38:ed:22:fa:8f:41:1e:ed:
5c:98:9d:64:a7:c8:26:38:ff:97:93:b8:7f:6c:bd:58:0a:4d:
20:b7:ba:49:8d:d1:7f:21:10:cf:a1:8e:cc:23:72:bb:96:bd:
6e:29:e0:ca:c5:33:ae:33:11:be:d6:ff:c8:9b:bd:49:e9:b8:
58:6c:4b:8a:58:35:15:63:21:55:62:c8:5f:5c:64:a4:72:79:
8d:00:fb:65:e7:c0:fd:a9:f2:47:ea:e1:90:63:78:45:54:8c:
9e:94:53:44:f5:e5:e9:96:03:50:ed:82:37:92:aa:d3:28:d7:
a3:91:88:30:cb:32:ef:c9:aa:3e:96:fd:f8:53:d4:66:b9:c2:
5c:28:81:81:9a:01:20:f0:ac:49:76:42:5f:96:3b:7c:d9:0b:
fa:cd:80:b6:03:db:92:c4:cd:8b:b8:73:ab:6d:3b:06:eb:f9:
ad:3d:74:df:b4:ad:31:fe:44:be:bc:8a:0e:94:99:b9:b9:cc:
94:02:88:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:43:52 2026 by rpki-client