
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/326130623a346530373a356430303a3a2f34302d3438203d3e20323132333332.roa
File: 326130623a346530373a356430303a3a2f34302d3438203d3e20323132333332.roa (raw, json)
Hash identifier: cNvKxczcwJFS3GJIH6EumSrLueC7ahvzZOsrg7sLbR4=
Subject key identifier: 03:AC:40:6C:1F:E8:B3:6E:23:C7:B5:38:5D:11:82:79:FF:7B:DB:82
Certificate issuer: /CN=99EA551918C05BC3D918A731137DF0B86224F868
Certificate serial: 128722723695C24BDB6688407221D34DF86E43EB
Authority key identifier: 99:EA:55:19:18:C0:5B:C3:D9:18:A7:31:13:7D:F0:B8:62:24:F8:68
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/99EA551918C05BC3D918A731137DF0B86224F868.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/326130623a346530373a356430303a3a2f34302d3438203d3e20323132333332.roa
Signing time: Mon 12 Oct 2026 20:14:40 +0000
ROA not before: Mon 12 Oct 2026 20:09:40 +0000
ROA not after: Mon 11 Oct 2027 20:14:40 +0000
asID: 212332
IP address blocks: 2a0b:4e07:5d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/99EA551918C05BC3D918A731137DF0B86224F868.crl
rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/99EA551918C05BC3D918A731137DF0B86224F868.mft
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/99EA551918C05BC3D918A731137DF0B86224F868.cer
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 13:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:87:22:72:36:95:c2:4b:db:66:88:40:72:21:d3:4d:f8:6e:43:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99EA551918C05BC3D918A731137DF0B86224F868
Validity
Not Before: Oct 12 20:09:40 2026 GMT
Not After : Oct 11 20:14:40 2027 GMT
Subject: CN=03AC406C1FE8B36E23C7B5385D118279FF7BDB82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:03:28:7e:d0:2c:10:ec:48:34:fb:29:5b:
b9:5e:93:90:7a:aa:1f:36:6f:8f:03:99:78:67:47:
b2:6c:15:28:a6:ee:8e:01:90:15:36:47:52:30:d3:
07:30:68:34:81:7f:83:92:3f:c2:8b:f2:a2:48:b4:
12:94:a7:d2:5a:d6:ed:57:f1:a0:de:54:a1:11:e4:
b1:b9:5e:e4:62:c2:04:54:c9:0c:05:23:dd:fb:58:
b9:15:c6:44:47:fa:6c:30:1d:d8:40:44:23:cb:67:
8f:b6:5a:d9:62:fe:bd:0b:9d:ef:f1:e5:b5:3a:dd:
7e:9b:2a:9e:84:4b:5e:e2:c5:6b:75:6c:25:39:14:
4d:07:38:8d:ce:ae:0f:a4:14:ee:8d:93:57:e9:5a:
8d:e7:bb:e3:5b:d0:d1:21:7c:b7:45:bf:2c:b5:42:
57:df:fb:2f:44:a5:75:cb:5f:33:f0:1c:5d:37:0b:
19:bf:3f:95:da:72:4c:1c:38:96:d0:87:27:15:8c:
85:e2:e1:9e:c8:28:62:bc:07:a1:77:23:6a:48:09:
e0:7c:f1:2b:28:41:88:36:36:98:97:a4:bb:1d:c5:
95:4a:e0:46:83:db:6f:16:76:a7:db:4c:0e:fa:1c:
1b:90:4f:28:ec:92:cb:2e:74:29:ef:22:67:b1:d8:
3a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AC:40:6C:1F:E8:B3:6E:23:C7:B5:38:5D:11:82:79:FF:7B:DB:82
X509v3 Authority Key Identifier:
keyid:99:EA:55:19:18:C0:5B:C3:D9:18:A7:31:13:7D:F0:B8:62:24:F8:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/99EA551918C05BC3D918A731137DF0B86224F868.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/99EA551918C05BC3D918A731137DF0B86224F868.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/326130623a346530373a356430303a3a2f34302d3438203d3e20323132333332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:5d00::/40
Signature Algorithm: sha256WithRSAEncryption
19:0f:b9:d1:3b:2f:ab:c1:8d:43:3e:c7:5f:81:fd:13:1c:0f:
d3:a6:74:2e:08:1c:76:d7:16:73:3d:ee:c8:81:30:80:95:63:
d8:28:b0:58:c7:c0:60:2f:22:f8:77:de:e9:4d:b0:fb:31:26:
40:1c:23:d5:44:11:76:18:b7:0e:df:75:e0:69:7f:22:a7:7d:
cf:1f:4b:6a:e9:c2:79:09:a1:38:55:5a:6f:92:98:28:8c:a3:
e1:62:99:e8:97:ae:2c:2b:8c:6b:6d:61:5b:2d:f3:04:43:e0:
76:4b:bf:0d:80:a1:92:74:12:93:da:82:8b:f8:40:46:c1:af:
75:35:b2:2e:eb:f3:6b:6d:5a:17:94:bc:b1:a7:a9:2d:d3:70:
85:24:5a:76:f6:89:7b:6d:15:d9:53:d5:a8:50:71:a2:fe:e4:
6d:d5:2f:ae:0d:7c:5d:54:50:d8:70:a6:db:07:61:bd:ac:1b:
68:78:22:30:81:21:f8:75:05:76:d1:fc:c4:0b:bd:ca:9f:68:
fc:0d:fc:3b:7e:55:ea:c3:48:71:2a:a8:67:6c:9d:d6:0c:a4:
5f:8f:6b:40:7b:9a:49:0f:fb:b1:7f:d5:09:8d:72:e2:8f:2f:
39:aa:34:65:4a:71:d2:e2:96:cd:ec:5e:b8:5b:e8:11:50:48:
06:ec:e5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 03:27:50 2026 by rpki-client