
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373131303a3a2f34382d3438203d3e20323030373439.roa
File: 326131343a373538313a373131303a3a2f34382d3438203d3e20323030373439.roa (raw, json)
Hash identifier: c+4T7+4/6EYuwr0w078C7HkblI/Iv3X62IXJuhWidCM=
Subject key identifier: 2A:01:CD:37:A6:B8:1F:E2:05:59:B7:CF:8C:CC:97:0F:36:FF:9B:6A
Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial: 739B2DC09ABDA9830E6D4F42FD9F90BED8ED1615
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373131303a3a2f34382d3438203d3e20323030373439.roa
Signing time: Sun 04 Oct 2026 11:52:35 +0000
ROA not before: Sun 04 Oct 2026 11:47:35 +0000
ROA not after: Sun 03 Oct 2027 11:52:35 +0000
asID: 200749
IP address blocks: 2a14:7581:7110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:9b:2d:c0:9a:bd:a9:83:0e:6d:4f:42:fd:9f:90:be:d8:ed:16:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
Validity
Not Before: Oct 4 11:47:35 2026 GMT
Not After : Oct 3 11:52:35 2027 GMT
Subject: CN=2A01CD37A6B81FE20559B7CF8CCC970F36FF9B6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:db:09:39:e1:20:f8:67:89:78:f9:85:f1:
68:cd:21:1f:8d:90:a8:4f:78:c3:7d:9c:c2:0c:87:
07:23:9c:0a:59:2d:44:a4:43:24:ea:c6:52:47:ca:
38:6f:da:bb:67:56:a4:a4:ff:06:4a:08:1d:1f:29:
5f:ce:a3:32:ce:8d:f9:8b:75:6a:92:09:2f:4f:1e:
4e:85:5d:e9:39:e6:fd:21:2b:bf:d4:40:5f:03:52:
e9:2d:3e:f1:6e:ec:8e:0d:3d:89:60:f0:44:25:d2:
db:a3:fa:f7:58:10:46:04:71:8b:cf:82:e4:0e:db:
08:b2:b4:df:ba:9d:5f:5a:35:c7:95:7d:38:23:77:
df:b6:94:d4:c2:aa:2c:d0:29:a7:e0:37:26:54:c3:
00:ef:7b:4e:c0:55:74:16:6b:c8:96:e0:ad:03:ba:
4c:c3:1e:7a:31:3d:6b:a1:7b:fa:c5:b2:f0:ce:df:
27:b8:3b:d6:3e:ad:b1:7e:54:00:50:92:8a:fe:5a:
a5:cd:31:f1:7c:cc:ac:78:d8:19:3f:b6:f5:0a:62:
7b:f0:47:34:4a:03:80:b8:37:67:c7:1c:6d:aa:9a:
87:04:c1:7f:14:39:55:16:4f:96:e3:7e:be:02:6f:
c9:e6:e8:02:51:23:96:61:cb:ae:6d:ec:a2:53:14:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:01:CD:37:A6:B8:1F:E2:05:59:B7:CF:8C:CC:97:0F:36:FF:9B:6A
X509v3 Authority Key Identifier:
keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373131303a3a2f34382d3438203d3e20323030373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:7110::/48
Signature Algorithm: sha256WithRSAEncryption
76:a8:01:dd:46:33:90:84:4b:17:51:b0:43:f0:18:5b:26:7f:
28:5c:bd:d9:82:22:69:8b:fc:3f:94:34:2a:92:6d:38:f7:f1:
52:f0:32:f1:15:54:57:4a:7f:a4:0c:66:a8:8b:c0:b5:0d:47:
3b:96:09:f7:8d:d9:c1:c3:a3:64:69:c0:ae:d8:0f:9b:bc:56:
9f:fe:03:fb:63:8d:8d:22:ef:95:66:a9:9f:1d:fc:5f:79:1f:
2c:d4:d9:7c:d9:41:e0:68:12:f0:8f:61:93:5d:83:0c:3d:38:
7a:b9:57:cd:92:26:db:ed:72:e0:43:8b:1a:4d:ba:15:f9:44:
88:16:40:10:cb:79:34:f6:ed:2f:29:95:f9:0f:64:94:d5:35:
e1:e5:22:27:d3:a6:c8:8e:43:26:80:e0:55:d0:93:2c:19:80:
b5:3a:b4:32:bf:89:19:17:8a:19:d5:c4:5a:11:19:92:45:1a:
cb:9b:42:23:d2:e1:71:34:01:0e:7e:bb:82:ac:5b:f0:65:bb:
62:8a:46:bc:4f:4a:8a:fa:da:26:cd:f4:40:68:b4:66:e2:cc:
d3:7d:b2:63:5e:28:11:56:fd:17:d9:1d:33:b0:6f:7b:e0:cf:
3f:4c:12:62:a5:b7:e0:e7:8a:12:f5:59:b9:e1:4d:fc:68:5c:
97:22:ce:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:47:40 2026 by rpki-client