
$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a6630303a3a2f34302d3430203d3e20323134393736.roa
File: 326131343a373538333a6630303a3a2f34302d3430203d3e20323134393736.roa (raw, json)
Hash identifier: Rl24KpeRszfXP63EEYdjHphgvip3cAS9ZcbTz0D4RVw=
Subject key identifier: 62:E0:EB:D5:9B:C4:4D:C4:E9:36:E4:58:6D:7B:36:F0:C4:BD:42:65
Certificate issuer: /CN=A609E97AC39E3F53678C0C9422F89947B6146002
Certificate serial: 191A98A79E62E02E4579E0DBBFAE92F63A9031D3
Authority key identifier: A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
Subject info access: rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a6630303a3a2f34302d3430203d3e20323134393736.roa
Signing time: Sat 06 Sep 2025 10:48:09 +0000
ROA not before: Sat 06 Sep 2025 10:43:09 +0000
ROA not after: Sat 05 Sep 2026 10:48:09 +0000
asID: 214976
IP address blocks: 2a14:7583:f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl
rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 14:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1a:98:a7:9e:62:e0:2e:45:79:e0:db:bf:ae:92:f6:3a:90:31:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A609E97AC39E3F53678C0C9422F89947B6146002
Validity
Not Before: Sep 6 10:43:09 2025 GMT
Not After : Sep 5 10:48:09 2026 GMT
Subject: CN=62E0EBD59BC44DC4E936E4586D7B36F0C4BD4265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:01:9e:11:46:b4:5f:ba:a9:60:0f:9b:93:
8f:3c:b2:0e:60:8f:61:d7:fa:ef:f0:5a:3f:bb:14:
96:ab:c6:4e:e1:8e:cf:ed:d0:0b:81:66:db:17:1f:
f5:58:3d:80:40:28:e6:fc:4a:f6:e2:97:6c:3f:ac:
79:88:86:3c:5a:89:57:4a:b0:87:0b:fb:96:a1:9f:
2f:7c:d8:7b:57:68:ac:22:36:43:2a:f6:cb:62:68:
a1:a3:91:2f:e3:3f:3a:ef:48:8e:11:1a:62:96:9a:
07:23:97:b6:ce:40:9c:0d:4e:a0:a0:ee:8e:5c:25:
3a:e2:a6:db:23:25:40:8b:df:82:5a:f0:19:a2:fd:
ae:8a:86:4a:90:e2:ce:49:e2:48:fc:42:e6:dd:c0:
a5:f7:99:c3:2a:eb:95:08:5f:04:3d:06:a1:b8:73:
f6:37:8e:dc:ed:8f:9d:d4:74:99:b8:b9:a4:02:92:
cd:4e:fc:81:c1:7f:8c:e7:94:77:f4:0f:50:6e:cf:
90:99:45:dc:f6:f9:ae:47:40:2c:28:69:90:9f:1a:
2a:8e:bf:1f:ef:1e:a0:1d:83:dc:60:f1:34:aa:c8:
ad:0f:01:bc:6d:e8:48:1b:13:68:5a:9f:05:df:c9:
4a:02:43:de:92:04:1e:27:e8:43:66:d9:b2:30:e9:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E0:EB:D5:9B:C4:4D:C4:E9:36:E4:58:6D:7B:36:F0:C4:BD:42:65
X509v3 Authority Key Identifier:
keyid:A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a6630303a3a2f34302d3430203d3e20323134393736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:f00::/40
Signature Algorithm: sha256WithRSAEncryption
79:84:aa:e2:1a:67:94:10:0a:37:bf:79:6b:25:7a:de:ae:f6:
1e:d2:dc:aa:33:db:a3:dd:33:2c:1a:7d:ce:da:b8:11:5a:af:
6e:62:59:2b:72:ff:d5:21:e7:f0:db:dd:69:d3:68:d1:2b:d5:
d8:36:7c:3d:b9:3c:81:c1:1b:e6:da:5a:17:27:c7:e3:7c:ce:
72:79:4b:e2:02:73:af:22:0b:c4:1a:5f:1b:a3:eb:25:4a:8f:
39:7d:75:9b:71:21:cb:14:8a:ea:33:1a:52:49:eb:77:cd:93:
4f:79:37:84:da:64:5b:69:57:82:67:05:a3:ae:02:79:63:8b:
80:d9:0d:96:fb:ae:f8:fb:a2:5d:33:2c:de:b2:0a:e8:fa:14:
f8:68:a7:f7:78:84:70:09:93:4c:97:1d:31:a4:c5:9a:7a:c3:
16:59:25:b5:6e:2f:12:0d:9f:4d:f8:7d:bc:35:97:4a:d7:c4:
3a:9c:51:08:d7:cf:86:8d:b6:e2:cf:a0:2c:4a:c5:f8:d4:15:
3d:c9:2b:80:3b:54:aa:f6:1e:d1:42:56:32:a6:45:e5:a5:e1:
81:c1:dc:95:b6:b6:ae:8c:2b:4d:d2:d1:b2:2c:d2:44:d4:de:
bd:e8:75:5e:15:42:7e:0e:a3:b5:12:a6:59:a5:e9:f0:bf:49:
83:e1:0c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 02:33:17 2025 by rpki-client