
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa
File: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (raw, json)
Hash identifier: zPB7I5Zm5tTVFn74uACj7IJ7zTmHWqBzRiNxRU5/9yY=
Subject key identifier: 1B:B3:40:03:3B:E4:FE:20:9B:42:13:83:54:C7:FF:10:02:19:25:80
Certificate issuer: /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B
Certificate serial: 65FD9BB10DCD3FB2D7CC55CB1F32FD886B661D33
Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa
Signing time: Sat 06 Jun 2026 08:16:45 +0000
ROA not before: Sat 06 Jun 2026 08:11:45 +0000
ROA not after: Sat 05 Jun 2027 08:16:45 +0000
asID: 199518
IP address blocks: 2a07:54c1:4200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:fd:9b:b1:0d:cd:3f:b2:d7:cc:55:cb:1f:32:fd:88:6b:66:1d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B
Validity
Not Before: Jun 6 08:11:45 2026 GMT
Not After : Jun 5 08:16:45 2027 GMT
Subject: CN=1BB340033BE4FE209B42138354C7FF1002192580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:62:af:23:d1:07:6a:75:18:bf:8b:02:13:38:
07:d5:13:6b:9d:0c:10:30:e3:41:78:44:85:ba:07:
d3:5b:20:e8:f2:15:d0:65:80:08:66:52:a2:a2:ba:
e2:52:3a:82:ce:a4:a6:0f:0a:28:31:cd:5e:43:e3:
81:21:b2:c5:f5:4c:5c:4b:13:bf:8c:51:12:eb:f8:
e6:3d:5b:7e:b8:bb:2a:4c:cf:57:a1:93:28:c7:c1:
ca:65:42:aa:7c:4e:62:0b:8f:78:0e:98:c3:ca:c3:
50:03:ad:78:92:4e:39:37:d5:48:d1:d3:17:e7:1c:
dd:f5:ef:5a:0f:68:d0:fa:9e:34:f5:fe:b7:64:5e:
2f:50:a7:d9:6f:8e:3b:84:44:b3:a9:95:c8:6a:d3:
74:62:8a:3d:07:24:64:fb:5e:6f:e9:33:07:e3:df:
09:66:a7:b6:6d:e1:8e:15:07:26:c2:0e:70:15:a8:
91:fd:d1:c5:f7:db:60:f3:0b:77:5f:11:d5:ef:b1:
ff:3f:19:f4:c3:3d:cf:f1:cf:5e:c6:2c:c8:52:d1:
00:8e:ac:58:a6:8f:48:0f:92:ae:ab:2c:80:1e:81:
04:2b:c0:79:eb:c3:72:51:4d:42:66:c5:6a:03:d4:
b1:04:d3:32:ed:f2:08:ee:18:3d:e1:a1:0c:0b:6a:
6e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B3:40:03:3B:E4:FE:20:9B:42:13:83:54:C7:FF:10:02:19:25:80
X509v3 Authority Key Identifier:
keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1:4200::/40
Signature Algorithm: sha256WithRSAEncryption
31:14:b4:b6:0f:a4:47:36:93:27:fe:0f:fe:74:d3:eb:a3:e4:
22:d9:6e:25:92:b6:fe:05:b2:32:e2:46:b2:c9:4f:92:f6:81:
4a:b5:e2:0a:75:9e:08:a5:95:6b:0e:5a:ee:98:85:d3:0f:6e:
86:fe:03:5f:5e:41:a7:7c:e0:5e:cf:39:d2:82:03:22:04:ae:
49:e0:6b:d7:3d:6d:b0:a0:37:bc:a7:07:e6:18:b3:b3:f8:9c:
49:70:97:33:69:ce:3c:7b:e0:8f:02:bb:ab:47:19:fa:ae:23:
69:16:1a:b8:ab:2c:d3:c1:86:95:b8:77:15:79:78:45:e1:9f:
c5:83:dc:68:c0:f8:da:b7:f1:5a:e0:f2:ce:95:c2:45:cc:21:
a4:01:79:a5:6c:11:ea:1a:34:5a:80:9b:d3:98:51:76:a5:c9:
a9:ed:d9:ec:6a:87:cd:a3:34:61:ec:53:a2:e9:70:2b:b5:68:
e9:12:88:62:7b:77:98:05:e1:19:d2:2c:48:4a:c8:f0:a9:c2:
9c:6a:5e:98:c2:d8:63:95:c0:b7:e2:9e:2e:2d:0a:ff:95:57:
4f:e2:77:76:55:36:00:7b:7a:99:cc:72:d5:92:b8:bf:2a:a7:
25:61:09:bc:37:71:8e:81:f2:9a:e3:d0:e7:30:44:f1:97:de:
8b:47:63:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:40:45 2026 by rpki-client