
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/5/3133382e3138352e3232392e302f32342d3234203d3e203133353237.roa
File: 3133382e3138352e3232392e302f32342d3234203d3e203133353237.roa (raw, json)
Hash identifier: 1wmjrENM/HFytQhOpXDk97HzEcXML4J8nZNxJTfhj1c=
Subject key identifier: 19:F7:7C:01:A4:1A:45:BB:72:2C:E5:FE:51:37:F3:2C:0C:26:3E:0A
Certificate issuer: /CN=FA21395618BA2BB8D215B90F684562C4FCD86DF6
Certificate serial: 26816D69FB1DE79BEF4F78BC7C5BD2FBB60A694C
Authority key identifier: FA:21:39:56:18:BA:2B:B8:D2:15:B9:0F:68:45:62:C4:FC:D8:6D:F6
Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/FA21395618BA2BB8D215B90F684562C4FCD86DF6.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/5/3133382e3138352e3232392e302f32342d3234203d3e203133353237.roa
Signing time: Tue 11 Aug 2026 17:54:18 +0000
ROA not before: Tue 11 Aug 2026 17:49:18 +0000
ROA not after: Tue 10 Aug 2027 17:54:18 +0000
asID: 13527
IP address blocks: 138.185.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-pp.com/repo/GOOFL/5/FA21395618BA2BB8D215B90F684562C4FCD86DF6.crl
rsync://rpki-pp.com/repo/GOOFL/5/FA21395618BA2BB8D215B90F684562C4FCD86DF6.mft
rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/FA21395618BA2BB8D215B90F684562C4FCD86DF6.cer
rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl
rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 14 Aug 2026 10:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:81:6d:69:fb:1d:e7:9b:ef:4f:78:bc:7c:5b:d2:fb:b6:0a:69:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA21395618BA2BB8D215B90F684562C4FCD86DF6
Validity
Not Before: Aug 11 17:49:18 2026 GMT
Not After : Aug 10 17:54:18 2027 GMT
Subject: CN=19F77C01A41A45BB722CE5FE5137F32C0C263E0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:d4:72:c1:d5:8b:1e:0b:d5:7c:af:04:5b:
49:fc:aa:18:5f:18:e3:e7:a2:af:1b:01:da:05:b0:
b4:eb:a3:a1:56:c0:07:2a:3e:03:e1:dc:11:18:a2:
e7:5f:a4:a8:db:fd:8d:e4:f9:52:1a:c8:c7:f1:dd:
d9:d0:f2:7c:85:c5:d4:bd:41:2d:51:8e:59:0e:92:
cf:58:32:c4:21:cf:d8:b3:bf:c5:14:20:ed:b2:64:
aa:5d:cc:80:70:b3:a7:32:eb:91:06:c9:02:eb:53:
52:5a:7e:4c:a5:2a:ff:71:ac:90:c4:c7:b1:ee:38:
65:3b:8c:13:71:ca:da:e7:8b:a8:43:a2:b5:6a:59:
5d:ca:ad:da:ed:d8:48:eb:f9:1f:3c:1b:65:19:76:
6b:96:7c:51:36:52:75:d3:6c:07:f5:96:3d:92:ff:
29:1d:f3:ee:93:42:7a:36:bd:16:42:c6:ac:c1:c1:
83:4a:b5:6f:35:c4:e2:52:2a:8d:fd:08:ed:ca:00:
36:20:ab:d0:f1:71:b3:a4:97:46:4e:c2:92:7d:2b:
22:7a:40:aa:04:05:25:66:1f:69:ed:ee:82:88:9e:
80:34:10:5c:3f:c9:51:9d:58:49:f0:06:68:b5:70:
44:4c:01:6d:7f:3f:b9:32:3d:46:e4:4c:1f:0a:8e:
a3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:7C:01:A4:1A:45:BB:72:2C:E5:FE:51:37:F3:2C:0C:26:3E:0A
X509v3 Authority Key Identifier:
keyid:FA:21:39:56:18:BA:2B:B8:D2:15:B9:0F:68:45:62:C4:FC:D8:6D:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/5/FA21395618BA2BB8D215B90F684562C4FCD86DF6.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/FA21395618BA2BB8D215B90F684562C4FCD86DF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/5/3133382e3138352e3232392e302f32342d3234203d3e203133353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.229.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:25:7d:74:7b:27:6e:4e:99:fc:ca:08:8a:fc:9a:fa:38:fb:
97:71:55:c9:6a:ab:5e:cc:24:b8:c9:17:ab:c7:28:4d:6e:c4:
4c:d4:f7:f1:4a:be:be:d3:f7:5d:47:23:e8:7b:29:52:43:d0:
9b:c3:75:6b:91:f0:2e:c9:24:83:42:28:d7:7f:d0:b4:df:37:
90:73:a6:ce:3a:71:36:6a:17:d3:78:78:2f:98:dd:d4:ee:fa:
8c:20:d1:ba:62:e2:12:1f:fb:d0:b5:44:c6:29:7c:62:f3:eb:
f5:d2:11:88:8e:2e:89:3f:ed:b9:51:60:75:fd:1f:9e:35:4c:
b0:06:28:f3:d8:00:3a:82:ac:df:72:56:29:6d:62:71:f3:13:
49:40:2b:9b:25:24:15:b5:6e:b3:e6:df:ea:bb:e8:de:f3:6b:
db:f3:44:49:0a:fc:f2:e4:38:7c:5f:07:c8:3a:1c:a9:57:8d:
ee:83:c5:0a:43:cf:1a:35:93:1f:91:e1:88:c1:d8:e0:24:85:
34:c3:96:7f:07:96:fa:17:44:46:dd:3c:b6:c6:fd:16:fa:d6:
95:48:fc:de:fa:e7:c3:37:08:56:58:24:4a:5e:8d:3e:1a:97:
e5:b0:f7:54:af:ff:16:53:15:9a:3d:8a:7e:64:5a:d9:03:10:
ea:23:44:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:47:42 2026 by rpki-client