
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/323630323a663530633a6330303a3a2f34382d313238203d3e20323035393431.roa
File: 323630323a663530633a6330303a3a2f34382d313238203d3e20323035393431.roa (raw, json)
Hash identifier: cWyW4xHleqLk84rEzGTR8NRbqNQlRwAtCtLspkb3tV8=
Subject key identifier: B9:D9:45:DC:1D:87:4D:54:C8:95:64:C6:26:05:75:49:0E:78:A3:37
Certificate issuer: /CN=D6D172D72D23BAC1F197C131AD720E6E8230B003
Certificate serial: 47A6CC2DF8F21EB2EDF9C87718CDE7251A77C248
Authority key identifier: D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03
Authority info access: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/323630323a663530633a6330303a3a2f34382d313238203d3e20323035393431.roa
Signing time: Sat 23 May 2026 16:51:22 +0000
ROA not before: Sat 23 May 2026 16:46:22 +0000
ROA not after: Sat 22 May 2027 16:51:22 +0000
asID: 205941
IP address blocks: 2602:f50c:c00::/48 maxlen: 128
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl
rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 29 May 2026 06:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a6:cc:2d:f8:f2:1e:b2:ed:f9:c8:77:18:cd:e7:25:1a:77:c2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6D172D72D23BAC1F197C131AD720E6E8230B003
Validity
Not Before: May 23 16:46:22 2026 GMT
Not After : May 22 16:51:22 2027 GMT
Subject: CN=B9D945DC1D874D54C89564C6260575490E78A337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:c1:1c:b0:40:17:bf:bb:b1:64:3e:72:21:
63:33:ea:d9:3b:35:d3:e8:26:d3:db:9f:f6:64:9b:
c9:1d:e0:38:52:d5:75:f0:6d:f8:c4:df:67:e4:5a:
a1:09:0a:43:c2:45:4d:b7:bf:e5:ec:7a:5d:d0:4a:
71:14:6c:5f:85:2b:9b:8d:40:a2:d5:04:b9:a0:33:
c9:40:13:07:65:0b:21:dd:a0:1a:43:cb:e2:62:a3:
cd:6b:e7:dc:97:8e:81:04:4e:5d:61:71:44:a4:da:
58:f3:39:2b:7d:35:6e:e0:b8:90:b7:b4:43:3f:2e:
56:53:1d:20:04:40:ed:27:7f:56:ef:97:d8:a9:f8:
14:03:6c:bc:e1:62:a7:1f:df:84:51:0f:95:e4:aa:
60:a0:53:a4:15:87:d0:b0:1e:8f:c2:3f:c9:89:23:
f3:17:26:21:7f:e2:a9:f6:66:b8:84:ac:25:bc:5e:
24:37:c8:92:5f:1e:af:9d:d0:fc:67:e1:a5:ba:6f:
41:e8:3d:84:2a:f4:ab:17:67:8d:13:52:fc:0d:ab:
f4:2a:55:ea:34:2d:e9:a8:d8:80:5e:3b:e7:a8:6a:
6e:e7:3e:eb:df:db:00:92:24:1f:99:65:f0:9d:b6:
66:f3:ed:72:13:6e:1a:be:85:ad:d3:d4:aa:e8:c2:
32:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D9:45:DC:1D:87:4D:54:C8:95:64:C6:26:05:75:49:0E:78:A3:37
X509v3 Authority Key Identifier:
keyid:D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/323630323a663530633a6330303a3a2f34382d313238203d3e20323035393431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f50c:c00::/48
Signature Algorithm: sha256WithRSAEncryption
88:aa:fc:a1:7f:10:4b:15:3f:77:d8:8c:a4:ab:df:0e:8e:c9:
60:cc:d2:ca:bd:a2:6c:f7:57:6c:50:fd:9b:f6:ab:be:0d:83:
93:4b:6a:80:83:71:fa:90:d5:ae:c5:27:87:fb:d0:32:bb:6b:
4d:3e:99:b1:08:36:5c:ae:fa:56:95:9d:0d:e0:45:1b:10:ea:
3c:6e:8d:04:2b:a0:50:bf:e0:13:f8:5f:59:ac:7c:19:1f:42:
c3:2d:91:5f:47:02:4d:f6:c2:d7:57:d2:33:b2:43:a3:c9:55:
54:ec:c4:e8:6a:cc:34:2d:73:ff:c3:8a:14:f1:ef:81:4f:d2:
fc:de:0d:31:49:31:c1:13:48:da:24:15:4b:19:76:b9:0a:c7:
f9:1b:8f:f6:5d:1f:31:28:58:ea:47:7d:47:af:bd:a7:79:41:
85:5e:e7:a1:ad:79:57:7a:16:da:ac:7d:51:ae:3e:70:49:b8:
86:ce:db:58:cd:aa:bc:78:77:2c:35:bd:e0:ad:3a:04:e0:97:
da:ae:16:ab:dc:4f:bb:23:65:3b:ff:80:99:c9:7f:5f:3b:de:
3d:a8:e2:22:18:41:2f:7d:53:7d:27:36:db:01:20:49:7f:5f:
4e:27:2d:7b:a7:75:a2:e1:e0:ea:b5:e6:7f:b2:32:b8:b4:be:
2d:bf:13:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:02:55 2026 by rpki-client