
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f33382d3338203d3e20323030373439.roa
File: 326131343a373538313a373030303a3a2f33382d3338203d3e20323030373439.roa (raw, json)
Hash identifier: 6lMiktwmxTK6mKtvQFbyWiIpcSwrK0A55BvsAc8sJZM=
Subject key identifier: 6D:F1:03:AF:81:F1:F1:EC:C3:53:29:33:9A:B6:AB:C9:7A:94:73:DD
Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial: 60EE511E35A0D772DE0F2D0EF68A0E0FBBF277AB
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f33382d3338203d3e20323030373439.roa
Signing time: Sun 04 Oct 2026 11:52:34 +0000
ROA not before: Sun 04 Oct 2026 11:47:34 +0000
ROA not after: Sun 03 Oct 2027 11:52:34 +0000
asID: 200749
IP address blocks: 2a14:7581:7000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 20:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ee:51:1e:35:a0:d7:72:de:0f:2d:0e:f6:8a:0e:0f:bb:f2:77:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
Validity
Not Before: Oct 4 11:47:34 2026 GMT
Not After : Oct 3 11:52:34 2027 GMT
Subject: CN=6DF103AF81F1F1ECC35329339AB6ABC97A9473DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:bf:35:12:87:6b:66:5a:84:94:c8:f6:6f:
76:11:02:eb:6a:10:bb:49:d2:a4:d3:7d:64:56:41:
3a:ea:f9:fc:8e:2b:81:b4:13:1c:8a:be:09:0f:06:
80:52:7b:c2:82:21:d8:61:55:cc:b7:ef:6a:b5:da:
0d:c7:a8:f3:25:74:02:79:c0:c6:0c:a5:1c:cd:55:
0b:4c:c1:8f:f4:76:51:bb:a5:9a:32:a8:58:2b:09:
c8:fc:14:f6:d7:1e:52:28:97:1a:56:90:8e:d9:0d:
4e:87:28:57:9f:6f:16:ff:e9:61:06:d3:cf:95:31:
9b:9b:01:41:11:60:39:a7:a2:f6:85:2e:27:22:8c:
4c:51:18:6b:8e:ee:32:be:1c:25:c6:d9:b7:85:bc:
d4:dc:93:2c:5d:6b:68:ed:f6:8f:8b:1b:a5:dd:9c:
72:cf:a5:fa:7e:aa:38:74:9e:3f:09:77:dc:7a:e4:
d6:54:59:f7:4f:a7:83:54:5d:28:9b:38:4d:4c:cc:
1d:32:06:14:ab:29:a1:59:73:12:71:fe:5f:37:50:
be:68:b8:57:72:6f:6f:52:90:ed:a2:dd:c5:54:e8:
3c:91:c4:ab:99:74:c1:b3:b9:4a:4e:f0:bf:e7:50:
84:57:6e:25:d0:14:17:e7:f3:6e:f2:ce:fb:fc:0d:
4f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:03:AF:81:F1:F1:EC:C3:53:29:33:9A:B6:AB:C9:7A:94:73:DD
X509v3 Authority Key Identifier:
keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f33382d3338203d3e20323030373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:7000::/38
Signature Algorithm: sha256WithRSAEncryption
21:62:bb:32:78:9c:16:05:45:54:cb:0f:84:ff:0a:ae:27:b8:
33:32:26:57:39:e3:74:2d:7d:06:3f:ea:39:95:18:fb:c2:69:
59:e5:f8:b5:ff:fe:ca:3c:87:d3:f4:42:9f:5f:c7:a5:60:47:
5d:c6:fa:12:c1:71:6e:5e:65:59:a8:fa:ee:d1:b8:b6:83:91:
dd:57:8a:ac:94:d7:23:fd:9e:09:ed:cd:44:74:75:f4:4b:ab:
1d:ce:cf:98:42:c2:19:c1:8e:74:ec:8c:92:ba:7e:62:a6:32:
56:4a:5d:6d:81:2f:be:80:fa:72:12:88:5a:39:9e:43:f7:40:
f0:7c:7c:e0:1e:b7:22:1a:53:46:1a:e5:21:b1:63:97:d6:07:
49:4f:9b:40:8a:5d:97:35:e9:a9:1d:8b:14:b4:cb:0c:88:44:
e2:82:b9:40:9b:17:fc:25:17:35:71:81:8d:96:29:ac:45:ad:
11:69:ab:c9:56:f9:ca:95:f3:cb:35:03:b9:34:83:26:f4:0c:
cc:a0:3e:e0:ff:af:f9:c6:32:5e:2d:e1:dc:fd:72:18:89:69:
07:3e:1c:c9:11:fa:b9:6d:b4:50:aa:f5:1c:c6:ce:96:e7:62:
50:ed:b0:d8:82:58:f8:f4:b1:66:c8:8e:3c:4b:fd:3d:21:03:
52:11:cf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:18:10 2026 by rpki-client