
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa
File: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (raw, json)
Hash identifier: Me4H7YZgZygEIvpxgeeEc04IMatngbdJsoUf/hlBlAQ=
Subject key identifier: 71:AB:18:6D:27:FC:7F:13:AC:E3:32:9C:73:99:DB:DB:27:76:71:54
Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E
Certificate serial: 6177381E1077BA89BE0577B033BFE3166D78A2B8
Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa
Signing time: Thu 04 Jun 2026 19:37:43 +0000
ROA not before: Thu 04 Jun 2026 19:32:43 +0000
ROA not after: Thu 03 Jun 2027 19:37:43 +0000
asID: 214723
IP address blocks: 2a0a:6044:ba00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:77:38:1e:10:77:ba:89:be:05:77:b0:33:bf:e3:16:6d:78:a2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E
Validity
Not Before: Jun 4 19:32:43 2026 GMT
Not After : Jun 3 19:37:43 2027 GMT
Subject: CN=71AB186D27FC7F13ACE3329C7399DBDB27767154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:70:53:9a:37:7f:49:19:a9:3c:91:81:e3:
c4:77:f8:2b:3f:03:18:b5:5a:85:9a:3f:bf:70:cc:
04:97:c2:8d:84:84:57:3d:9d:2b:13:1d:28:30:7f:
83:b1:1f:53:08:c0:73:0b:ef:87:54:d5:bd:fa:c4:
ff:c3:d3:24:21:11:8c:51:c2:7a:ac:d7:7a:3a:28:
dd:99:52:9a:7f:cd:24:e5:04:80:f7:6c:04:17:69:
68:f5:ca:50:03:5e:5b:d8:a2:43:f4:4a:1c:0a:f4:
e5:89:a6:48:09:ef:34:6b:80:60:f7:fd:41:86:43:
1d:0e:f0:3c:7b:22:c3:d5:a2:68:01:74:69:b7:6d:
48:ce:3a:30:c6:e1:e1:49:11:a1:4d:a1:20:12:46:
14:3a:6e:2f:27:34:e0:55:93:8c:54:d0:ff:4c:f4:
5e:7a:c0:66:eb:25:0d:53:d5:96:cb:fb:96:34:db:
62:a3:86:52:6b:f4:d6:63:2e:6e:a2:47:7b:1e:af:
ac:8a:29:22:ea:dc:16:dd:4c:07:15:2d:e7:85:08:
ae:75:23:77:10:ea:4b:14:75:90:9b:33:fb:4c:18:
8a:6a:0f:34:65:b6:6e:e2:3f:3a:df:e8:37:f8:57:
e3:a1:ee:42:e2:68:6f:74:9d:c8:08:7f:7b:41:7b:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AB:18:6D:27:FC:7F:13:AC:E3:32:9C:73:99:DB:DB:27:76:71:54
X509v3 Authority Key Identifier:
keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ba00::/40
Signature Algorithm: sha256WithRSAEncryption
82:4d:1a:d8:a8:c2:f3:ba:2a:7e:6d:26:28:62:ab:46:c7:65:
c2:63:3a:56:97:56:6f:6c:a5:b1:e7:2b:23:5b:da:f1:90:6a:
e5:51:85:cc:10:74:d8:8b:ba:48:2d:8e:c9:2d:41:cf:34:f8:
81:9d:00:45:f4:b1:23:0d:a6:92:4e:cd:9d:9c:09:98:32:ec:
49:d0:4f:f2:cd:da:92:cc:8b:68:ba:d5:89:0b:93:10:f3:93:
d0:52:b8:dc:6d:3f:3c:fd:2e:84:1f:70:82:13:0f:a4:ed:6b:
be:20:38:d2:c1:37:e8:a3:c5:a4:3d:0b:93:29:88:38:1e:f5:
cc:ab:5b:1a:2d:3a:df:d6:7c:b0:7c:89:55:89:d2:79:1a:30:
3c:ed:e4:61:57:67:49:b0:75:96:a2:0c:a1:cb:b6:02:c8:f9:
16:7b:cf:41:0c:65:b1:dc:1f:4f:0f:c5:0f:0c:42:95:04:42:
ab:25:6f:05:48:c0:52:82:8e:56:bf:fc:26:e1:f4:81:8e:10:
d3:9c:90:f1:06:f8:72:58:4c:15:33:b7:c5:1c:73:11:fb:eb:
09:6b:65:6d:d6:80:ef:1a:d6:4b:52:1a:04:9a:ec:83:08:ec:
d7:8a:a2:5e:5e:ec:7f:70:52:76:1b:f0:15:da:e0:35:c4:89:
e0:44:b5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:42:11 2026 by rpki-client