
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666530303a3a2f34302d313238203d3e20323138393935.roa
File: 326131333a633863343a666530303a3a2f34302d313238203d3e20323138393935.roa (raw, json)
Hash identifier: hztUOv3Nvb2GeqYrkrClKfNlsIU3N2NuQsxYmiLUBO0=
Subject key identifier: FE:20:43:22:0A:08:4A:E6:B6:E3:4F:F8:98:F2:E2:4A:E2:49:3F:A2
Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
Certificate serial: 54EF9FCED6BE13BA888991E4AC24F894081EEE5E
Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666530303a3a2f34302d313238203d3e20323138393935.roa
Signing time: Tue 11 Aug 2026 10:34:57 +0000
ROA not before: Tue 11 Aug 2026 10:29:57 +0000
ROA not after: Tue 10 Aug 2027 10:34:57 +0000
asID: 218995
IP address blocks: 2a13:c8c4:fe00::/40 maxlen: 128
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl
rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 20:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ef:9f:ce:d6:be:13:ba:88:89:91:e4:ac:24:f8:94:08:1e:ee:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
Validity
Not Before: Aug 11 10:29:57 2026 GMT
Not After : Aug 10 10:34:57 2027 GMT
Subject: CN=FE2043220A084AE6B6E34FF898F2E24AE2493FA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:30:f2:6d:80:a8:d9:10:cd:52:68:59:f7:
45:ce:1e:a3:07:7d:50:36:a0:77:0e:b1:9e:00:e4:
87:ff:58:26:39:3f:42:b8:32:44:08:5b:99:0b:6c:
2e:6c:39:60:80:31:d0:6a:4a:45:92:90:4f:0d:30:
db:63:0c:11:80:51:3b:9f:d8:1d:1d:0a:a4:e6:3e:
d5:c6:15:82:99:7f:d2:7e:c0:e8:12:85:e8:60:cd:
fa:6d:75:57:b6:b7:58:34:d2:a4:0c:79:8d:0b:ba:
c6:01:f4:54:74:be:2d:66:12:f7:2c:5a:5e:b8:a2:
dd:8f:53:ef:a8:e7:5f:6c:5c:55:15:fd:d9:d7:36:
c6:83:4f:c4:c4:f1:6e:91:ba:2a:c8:1a:73:50:40:
cb:77:a6:e1:78:e8:b1:e7:1a:59:47:37:0d:5c:0c:
7a:0b:8b:99:6d:b8:c6:0b:87:9e:f3:36:7c:14:61:
ba:31:f8:26:ec:79:5f:93:59:22:1c:74:86:21:b5:
a5:35:b6:3a:48:1c:4b:a4:a4:7c:4b:b1:3e:47:03:
a5:e7:6c:8b:e5:4e:87:ed:3c:6f:25:5c:ec:59:d1:
34:61:98:70:d7:e3:89:7e:3b:23:ee:5b:30:f2:f3:
2b:a2:a8:3b:77:67:a6:9b:d0:cf:e0:6d:ee:2b:70:
86:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:20:43:22:0A:08:4A:E6:B6:E3:4F:F8:98:F2:E2:4A:E2:49:3F:A2
X509v3 Authority Key Identifier:
keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666530303a3a2f34302d313238203d3e20323138393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c8c4:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
93:87:7b:67:c0:e7:f4:f3:ba:c0:ac:d4:e0:fe:bb:b7:ce:5e:
08:2e:7f:3e:cb:df:00:5d:eb:da:89:06:24:4d:b3:bc:50:16:
41:9a:1b:7e:af:10:31:1f:e1:5e:f8:32:90:38:3d:ad:35:82:
b2:fe:99:c3:fe:99:52:43:7f:1f:b5:04:5d:1c:1b:35:c7:d2:
9d:77:b6:82:de:fd:a7:3c:51:bc:17:cf:52:fb:19:a1:4f:4d:
e7:83:9c:fe:ba:7d:95:26:8c:88:2e:c8:ff:6c:d4:5c:d2:37:
56:92:9a:01:b1:76:e0:e9:18:c2:29:c1:3c:32:f4:14:d0:c1:
75:e8:60:6d:3d:36:72:a5:a5:e5:60:8b:ae:ca:0f:7b:d0:f5:
d4:c4:4d:6c:4c:d4:73:37:51:56:bc:fb:8a:47:6d:88:91:59:
87:d7:d7:ca:92:b8:17:ab:df:fe:74:6c:10:bd:ed:2f:51:af:
4a:bf:e9:1f:f7:f1:aa:c5:bd:ed:4a:ae:19:89:da:e5:8b:dc:
2d:41:0f:e2:bb:ae:6d:d3:db:bf:38:8d:30:5c:a4:c1:a2:03:
c3:42:21:7a:b1:7e:e5:06:6b:6e:9c:f4:9a:bc:dd:7f:e6:7c:
e4:88:c4:23:94:61:e0:30:39:e0:9c:1b:60:91:dd:33:c7:a4:
b8:51:55:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 01:47:51 2026 by rpki-client