
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa
File: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (raw, json)
Hash identifier: g+zrmwdq6hWdyayuUZ4HEI1hjl4/P26SKw7jOnKO8XQ=
Subject key identifier: 06:D0:FC:FA:3B:E6:90:5A:55:BE:4E:26:2E:C6:8A:0B:11:82:A2:FB
Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E
Certificate serial: 3D3DB41AC5CE9047AC4AEBE3A7706E3C16EC28E6
Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa
Signing time: Thu 04 Jun 2026 19:37:44 +0000
ROA not before: Thu 04 Jun 2026 19:32:44 +0000
ROA not after: Thu 03 Jun 2027 19:37:44 +0000
asID: 214723
IP address blocks: 2a0a:6044:ba02::/47 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:3d:b4:1a:c5:ce:90:47:ac:4a:eb:e3:a7:70:6e:3c:16:ec:28:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E
Validity
Not Before: Jun 4 19:32:44 2026 GMT
Not After : Jun 3 19:37:44 2027 GMT
Subject: CN=06D0FCFA3BE6905A55BE4E262EC68A0B1182A2FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:38:b6:b6:db:2d:4f:8d:fc:48:45:49:e4:
1a:f3:a7:db:07:ce:ea:da:59:9b:4a:f3:5b:b7:65:
b4:0d:87:d9:96:b3:bc:c5:24:f4:a8:30:7e:cd:65:
19:c2:18:99:7e:4b:76:d7:d3:a3:9c:73:4c:c7:01:
e2:02:8c:fe:37:aa:85:f9:ed:27:07:20:0f:58:81:
79:92:60:88:14:d1:c8:3a:8a:5a:96:f8:bd:89:72:
fa:4e:e0:18:76:b1:33:4d:b4:a2:41:ed:ed:3b:06:
63:3c:e9:b9:25:a1:78:89:9a:34:20:68:98:e4:06:
1e:e5:72:68:d5:ac:04:51:c6:43:1a:9e:ad:60:9e:
56:eb:80:48:53:5d:6b:9d:9f:9a:d7:d5:1a:d1:69:
71:17:51:70:a9:a3:4d:df:ce:c3:38:37:07:51:50:
f0:52:9d:ff:74:d8:49:9b:18:ab:d6:a6:e3:7b:38:
d6:c7:6f:4c:6d:28:3f:d5:c5:59:0e:a4:bc:8b:67:
e8:e3:82:75:7e:9d:b6:90:ef:98:cf:cb:14:4d:61:
9a:7f:40:df:e6:36:26:63:e2:67:f2:98:a3:7b:70:
83:93:11:54:d4:45:4d:1f:5a:bb:33:4a:77:43:5c:
45:61:22:ef:3d:3d:0e:13:86:fd:bd:5d:4d:62:fa:
d6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D0:FC:FA:3B:E6:90:5A:55:BE:4E:26:2E:C6:8A:0B:11:82:A2:FB
X509v3 Authority Key Identifier:
keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ba02::/47
Signature Algorithm: sha256WithRSAEncryption
1f:63:3b:bb:c2:2c:b2:00:8e:44:64:b2:ff:60:12:fd:fe:d9:
2f:8e:d2:e3:69:ca:2a:91:7d:4d:50:14:de:37:f8:5c:dd:6f:
fe:95:e2:c3:33:c6:b2:a6:e6:04:3d:f4:7e:47:91:14:d9:01:
7d:2f:fc:fa:23:8c:9a:4c:6b:e5:57:85:e8:cb:ce:8e:d1:35:
72:cf:d5:9d:81:fd:64:6c:2b:7a:fc:b9:23:79:d8:ea:80:01:
1e:ae:05:40:7e:ee:d8:84:17:6d:e7:2c:bf:fe:e0:db:7d:e0:
b4:4d:6d:7b:fd:10:19:9e:5e:ca:22:58:bd:b1:6e:e0:35:bf:
59:39:78:5f:24:2d:4a:0b:c0:47:fa:9a:14:d4:0a:59:85:86:
15:01:b1:dc:6b:0f:08:9f:6b:04:2f:83:fa:7e:59:88:92:ce:
be:25:bb:42:29:17:01:0e:33:55:d5:99:b9:0c:50:f1:6c:62:
37:b3:a4:85:0c:f0:06:da:83:5e:86:64:44:d3:6b:6e:ac:89:
e0:f7:0b:62:8d:1d:41:63:62:70:78:dd:35:5b:8b:bc:4e:3b:
e1:ea:1d:59:96:f4:39:f8:28:55:a1:15:70:05:d9:92:4d:c8:
19:44:df:6b:67:d5:bf:09:e5:5f:ff:2f:c2:1b:8a:92:24:29:
75:e7:22:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:22:31 2026 by rpki-client