
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437653a3a2f34382d3438203d3e20313530323839.roa
File: 323630323a663932613a613437653a3a2f34382d3438203d3e20313530323839.roa (raw, json)
Hash identifier: HJhbeBIyN7j+cfMcORgmlgmT0q4RK+5k+fM+/J3jIAM=
Subject key identifier: DF:98:16:B7:2F:13:34:90:67:7B:E6:93:3C:AA:EF:C7:D4:C5:15:AE
Certificate issuer: /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial: 1227649F70760AAD70E191A1473F6F98F482DA07
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437653a3a2f34382d3438203d3e20313530323839.roa
Signing time: Fri 24 Oct 2025 17:08:54 +0000
ROA not before: Fri 24 Oct 2025 17:03:54 +0000
ROA not after: Fri 23 Oct 2026 17:08:54 +0000
asID: 150289
IP address blocks: 2602:f92a:a47e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 16:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:27:64:9f:70:76:0a:ad:70:e1:91:a1:47:3f:6f:98:f4:82:da:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Validity
Not Before: Oct 24 17:03:54 2025 GMT
Not After : Oct 23 17:08:54 2026 GMT
Subject: CN=DF9816B72F133490677BE6933CAAEFC7D4C515AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2f:df:b6:49:48:54:7b:b1:74:92:8e:82:63:
ee:92:5d:af:bd:55:f5:32:09:e4:51:23:73:44:ec:
f0:62:78:c2:61:59:75:dd:db:ea:ec:44:b5:4b:cc:
11:ad:9b:b1:43:27:5a:bd:63:e3:75:23:7e:5f:7f:
c7:d0:03:c5:cb:3f:7c:a7:78:bc:89:10:ca:04:7f:
fb:2b:e9:49:73:15:b6:b3:cb:dc:2f:e5:20:f0:f6:
ba:c7:d6:35:c5:5a:84:c9:4f:57:39:fb:78:23:2b:
5c:3c:47:ae:11:cb:da:1f:38:6c:39:9b:8d:05:ca:
cd:a8:7d:b5:8e:76:d2:f7:83:1d:fe:0d:3d:55:e6:
e2:65:cd:52:f5:aa:9d:70:a9:d4:65:4e:e8:d7:a1:
19:80:3d:79:15:f5:55:a3:22:32:da:cf:ec:69:b8:
04:6b:46:41:e9:85:c5:a8:2d:57:47:73:65:7d:ad:
b2:15:d3:5e:02:99:04:f4:93:c6:76:1d:87:62:77:
c8:3e:d0:6f:1b:16:52:af:f9:1b:dd:b5:aa:2e:df:
ee:b5:6d:46:bf:d3:d0:9b:9b:e2:81:71:d5:d0:31:
2a:bd:ad:a5:12:2b:7a:63:bc:59:2a:71:4b:d1:da:
a5:88:66:4e:d4:41:05:9d:67:5f:90:b3:a3:a1:aa:
bf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:98:16:B7:2F:13:34:90:67:7B:E6:93:3C:AA:EF:C7:D4:C5:15:AE
X509v3 Authority Key Identifier:
keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437653a3a2f34382d3438203d3e20313530323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:a47e::/48
Signature Algorithm: sha256WithRSAEncryption
1e:1c:e4:b8:50:b4:18:43:d8:c1:c9:55:66:18:d0:e4:08:cf:
3d:ad:37:e0:2b:4f:b0:20:83:37:15:b0:c0:3f:4c:fc:c0:9b:
cd:53:48:dd:89:e1:00:6b:61:c1:b3:b0:c3:04:a8:02:66:ca:
d2:90:f4:be:eb:35:08:de:44:7e:b5:8e:8a:9a:a0:5c:55:e0:
ad:a0:01:3b:c4:cf:ff:af:fe:fe:e0:de:04:12:22:2e:25:09:
8b:57:ef:c4:2e:58:8f:ab:c1:d7:97:da:1f:64:31:2d:56:b1:
b4:c5:19:9a:43:da:bc:11:2f:e9:c4:75:a4:ee:cb:c0:d7:86:
47:ae:49:44:8b:25:1d:3f:f3:db:51:0a:8e:77:a5:f6:c9:8e:
d7:bb:6e:c9:0a:1d:71:25:98:ab:63:23:df:be:b2:de:22:bd:
36:00:e7:30:b5:82:b7:a9:8b:45:6b:6b:7a:7c:16:36:b8:c0:
85:59:0e:11:7e:9c:66:32:5a:0c:2b:eb:06:27:d5:41:be:76:
92:7b:cb:54:cc:0d:97:8a:6c:2c:12:a2:3b:0a:f5:2e:7c:33:
d3:e1:38:e9:82:64:a4:b2:a4:f2:e4:be:19:34:c2:c5:a1:6e:
a5:b4:5f:bc:1d:95:7d:fa:c8:e5:da:49:10:e1:f0:44:2a:05:
31:29:b3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:14:28 2025 by rpki-client