
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/3135352e3130332e3235302e302f32342d3234203d3e20323132303334.roa
File: 3135352e3130332e3235302e302f32342d3234203d3e20323132303334.roa (raw, json)
Hash identifier: vFsfLtXifEPclvz93gDK73bkEeIrvx8m8FwVJdoxlHk=
Subject key identifier: C5:75:A9:27:44:FE:77:02:CE:94:2D:38:8A:CE:8E:38:44:E1:88:C3
Certificate issuer: /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Certificate serial: 7D0CB0FEDBD98E3EE3068DF0B731BD8E934D570E
Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/3135352e3130332e3235302e302f32342d3234203d3e20323132303334.roa
Signing time: Mon 23 Feb 2026 22:09:56 +0000
ROA not before: Mon 23 Feb 2026 22:04:56 +0000
ROA not after: Mon 22 Feb 2027 22:09:56 +0000
asID: 212034
IP address blocks: 155.103.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 21:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:0c:b0:fe:db:d9:8e:3e:e3:06:8d:f0:b7:31:bd:8e:93:4d:57:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Validity
Not Before: Feb 23 22:04:56 2026 GMT
Not After : Feb 22 22:09:56 2027 GMT
Subject: CN=C575A92744FE7702CE942D388ACE8E3844E188C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a3:82:ac:cf:fa:45:9e:12:3b:0b:11:45:c8:
b2:3c:4a:cf:c2:df:96:93:97:3e:bd:61:cb:2b:47:
a4:7a:17:28:5e:a5:3c:74:e9:1c:7d:d2:a2:1f:41:
a7:34:42:f8:a1:56:f4:95:03:b9:9f:17:9f:98:94:
cd:ce:5f:c6:8d:ed:f4:9b:60:58:e5:41:7e:94:5f:
b9:1e:05:f4:3c:5c:3c:15:29:68:e4:e5:93:f8:3e:
90:26:d9:73:7c:bc:8a:50:33:8e:fc:14:54:ad:9a:
be:ef:35:f0:83:a3:c3:b0:e6:05:a9:25:d3:ba:1c:
82:b2:52:88:8e:3d:1c:9f:b3:85:c7:12:ae:e1:ad:
c1:f2:7a:7b:b4:18:77:21:57:cd:2d:c7:a0:e3:cb:
5d:f1:43:52:b3:e2:fb:16:f1:5f:e0:d4:8f:ce:bc:
7f:87:0f:e2:20:5b:ea:73:c1:bf:d5:32:f1:1f:7e:
6a:c5:99:d0:6d:44:8d:4e:31:97:d3:14:a8:42:bb:
45:8e:ed:22:d7:2c:90:93:d1:13:b6:33:c0:44:05:
de:ca:bc:15:2d:e8:77:a2:05:64:49:9c:05:a1:22:
c6:98:16:53:5d:8e:86:d3:65:23:14:07:1d:c5:b0:
90:0b:cf:9a:18:8b:d2:a3:bc:b6:ec:e0:77:e8:b0:
90:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:75:A9:27:44:FE:77:02:CE:94:2D:38:8A:CE:8E:38:44:E1:88:C3
X509v3 Authority Key Identifier:
keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/3135352e3130332e3235302e302f32342d3234203d3e20323132303334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.103.250.0/24
Signature Algorithm: sha256WithRSAEncryption
66:86:3b:1f:7f:f3:d9:77:b0:78:94:09:52:80:70:f1:49:77:
1a:29:bd:5c:03:03:76:98:e7:e9:b2:69:9a:9f:27:be:d5:50:
ae:29:56:52:f0:69:a4:86:32:6e:e1:fa:fd:fc:e4:f4:89:13:
92:79:68:8a:c1:f9:07:fa:5e:11:4b:cd:71:42:31:8c:6b:c3:
a6:5a:a5:e1:e5:6d:52:4b:42:05:78:f2:5c:8b:00:14:87:7f:
a3:3c:9b:84:34:95:1c:91:db:d6:d9:46:a3:ec:f4:af:53:46:
8d:6b:40:17:55:58:f3:e3:64:37:58:87:bc:a7:d1:d8:e3:1c:
bf:3c:86:de:b2:59:e7:7c:14:2a:3f:d2:cc:f1:e8:95:87:84:
7e:d5:c0:cb:3e:da:37:f4:af:34:89:1e:24:b3:c3:57:18:6e:
8b:f6:a9:a9:f9:8c:51:7e:e2:2e:b5:55:81:63:08:3f:83:e6:
0e:ce:4e:da:eb:bf:fb:24:ea:40:de:44:ae:1a:6a:35:23:e7:
24:d4:ea:f3:16:41:c2:b4:b6:8e:f1:b6:1c:ac:81:7e:4d:13:
0f:05:d3:f8:ef:64:15:4c:31:2b:98:c3:bc:e0:d2:52:a4:f2:
9b:39:55:3c:a4:6c:e6:5a:67:fb:e4:07:d5:0e:6e:ce:c3:73:
3a:d6:3b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:11:55 2026 by rpki-client