
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS926.roa
File: AS926.roa (raw, json)
Hash identifier: MYcjI/P0vu+e3Aj1kR//4oD7ZKN4Y1+Xfm0vRZkWD18=
Subject key identifier: E6:C0:F4:E5:9C:7D:EB:AC:94:E3:2B:87:B1:F9:48:7E:5B:72:3F:EC
Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial: 461E99EF84E2CFA07AEB0984BB8FF12860EAED77
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS926.roa
Signing time: Fri 05 Jun 2026 08:45:51 +0000
ROA not before: Fri 05 Jun 2026 08:40:51 +0000
ROA not after: Fri 04 Jun 2027 08:45:51 +0000
asID: 926
IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:1e:99:ef:84:e2:cf:a0:7a:eb:09:84:bb:8f:f1:28:60:ea:ed:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Validity
Not Before: Jun 5 08:40:51 2026 GMT
Not After : Jun 4 08:45:51 2027 GMT
Subject: CN=E6C0F4E59C7DEBAC94E32B87B1F9487E5B723FEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:9f:5b:98:af:b9:68:a8:55:83:09:97:7c:
31:f3:ca:f0:4c:67:94:a9:8f:40:1b:26:a8:7a:72:
51:82:10:09:dd:0d:05:a4:af:86:3a:e6:c4:36:2e:
b3:f0:2d:d8:9b:a6:0f:51:ae:03:c2:32:0e:a0:69:
89:28:8b:4e:38:93:12:bd:3b:8b:a2:75:10:90:33:
87:60:f6:6e:c5:68:81:e5:7c:79:d6:b1:a9:d1:67:
eb:0b:28:58:26:30:97:0e:a4:b5:b7:ed:d2:e1:6f:
fa:a5:d6:42:ed:0a:d4:3a:c8:a8:c8:ea:6a:08:82:
48:f8:a7:7b:be:ce:7c:2a:0d:f0:05:bc:e7:48:97:
80:f9:de:67:66:ee:57:53:42:53:13:57:71:07:cc:
27:8b:92:1b:24:0a:b7:d8:93:7e:2a:d3:f0:d8:26:
58:01:e8:09:1c:06:de:97:eb:4f:78:43:a6:fd:ec:
55:1c:cf:6b:56:22:f2:7e:5e:8c:a0:ed:85:9c:d2:
01:4f:7c:49:2d:bd:08:81:a4:61:f2:71:52:25:07:
80:66:dd:42:06:3b:17:37:8a:b8:30:1a:74:7c:35:
64:e3:64:27:6d:94:25:41:c3:63:09:de:1b:2e:96:
05:82:c8:c0:40:12:b7:20:a8:cb:96:82:e5:05:fa:
df:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C0:F4:E5:9C:7D:EB:AC:94:E3:2B:87:B1:F9:48:7E:5B:72:3F:EC
X509v3 Authority Key Identifier:
keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS926.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
33:79:2c:33:2b:a4:2f:d9:7d:ad:6b:63:e0:a2:59:b9:c1:22:
2b:6b:a5:72:ed:97:55:07:c0:8e:98:b9:d5:91:9a:6d:56:20:
10:3b:1e:8d:8c:ce:56:08:6f:d3:f2:e5:bf:1d:5d:db:ac:fa:
9f:eb:0a:02:92:3e:1f:a0:19:2f:05:14:cb:fd:d1:f1:06:44:
ab:f3:ab:48:a5:db:1e:ba:ce:75:06:3b:87:77:77:07:de:cb:
eb:f5:72:87:97:0b:2a:58:01:e4:f8:fd:ef:7f:5f:19:3e:d4:
1a:25:13:bc:a2:f1:4e:5a:fb:c6:68:cc:df:e6:9e:ed:61:8c:
97:3f:7a:37:f3:9c:72:0c:8d:10:f6:eb:e1:fc:4d:bc:9e:18:
98:5c:c8:cc:2d:48:ef:1f:66:4b:74:df:c8:74:2e:59:6e:cf:
25:18:b2:5c:93:1b:21:52:0e:3f:c0:27:ff:cf:6a:49:1d:9b:
d0:7c:58:4c:2e:35:af:09:67:d0:66:6b:db:8e:3f:01:25:12:
17:0c:d6:c3:04:6a:6b:e0:1b:dc:fd:06:b7:a4:3d:12:cc:9f:
71:34:6f:f6:aa:7c:94:fa:6f:56:d4:08:ae:24:b8:b0:1d:d7:
94:0d:54:cb:e3:00:e0:f8:73:64:78:78:a4:48:b7:3f:ce:ab:
ae:2a:a6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:25:18 2026 by rpki-client