
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623333353a3a2f34382d3438203d3e20323132303439.roa
File: 326130363a313238333a623333353a3a2f34382d3438203d3e20323132303439.roa (raw, json)
Hash identifier: d+45dfTq4IAM7+cGtAS5eJ1pzeSk2j0GS5rLrf0H/EM=
Subject key identifier: 76:18:7F:96:86:65:E3:D4:E8:37:EA:8C:A6:35:38:97:B2:06:1E:EB
Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial: 55CCE9DB1B399B3EB2B0D2169725ADAB1E5B71B2
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623333353a3a2f34382d3438203d3e20323132303439.roa
Signing time: Fri 05 Jun 2026 16:35:04 +0000
ROA not before: Fri 05 Jun 2026 16:30:04 +0000
ROA not after: Fri 04 Jun 2027 16:35:04 +0000
asID: 212049
IP address blocks: 2a06:1283:b335::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 14:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:cc:e9:db:1b:39:9b:3e:b2:b0:d2:16:97:25:ad:ab:1e:5b:71:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Validity
Not Before: Jun 5 16:30:04 2026 GMT
Not After : Jun 4 16:35:04 2027 GMT
Subject: CN=76187F968665E3D4E837EA8CA6353897B2061EEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:69:4d:11:34:5a:f1:52:d8:a4:ad:be:5c:
24:71:0e:ae:a6:7d:03:1f:23:01:84:56:53:e8:2a:
26:21:46:2e:79:7d:64:81:28:10:9a:a1:13:8d:3d:
3b:7e:05:2d:16:5d:ce:52:92:93:40:d7:02:fa:02:
56:14:25:f1:f7:b5:76:67:da:c7:da:45:db:2c:84:
ef:96:5f:1c:26:f1:08:7a:a2:ae:c5:87:7c:ed:c6:
1a:ec:5c:42:0d:27:c2:1b:be:6c:7a:17:86:12:a3:
47:cb:b7:74:89:bf:89:00:d6:77:08:a0:37:41:1d:
ad:b4:4a:5d:c6:f9:99:4e:41:c5:73:c5:1a:ee:7a:
76:09:7a:46:27:36:70:6e:3a:fb:bd:fc:a4:93:97:
15:58:50:46:0f:4f:6c:3d:e0:48:27:2c:ff:d0:86:
85:80:f8:93:fd:1c:f6:5a:f5:8a:72:40:6a:97:d3:
6a:68:f5:d3:ac:19:60:75:4f:5b:df:44:fe:ba:42:
3d:84:63:3b:e8:b1:31:af:e6:a1:f8:28:80:f5:97:
b5:77:eb:24:3a:d4:17:b0:22:ee:07:a9:35:97:fb:
91:c0:44:53:d3:c6:ef:31:a4:b4:66:16:7f:65:ca:
7a:d7:84:49:b0:f3:69:4e:50:13:5f:16:0c:c4:18:
b2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:18:7F:96:86:65:E3:D4:E8:37:EA:8C:A6:35:38:97:B2:06:1E:EB
X509v3 Authority Key Identifier:
keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623333353a3a2f34382d3438203d3e20323132303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:b335::/48
Signature Algorithm: sha256WithRSAEncryption
52:f4:19:74:f0:13:11:f1:1f:b9:09:10:75:cd:3d:69:e4:0e:
c8:37:6d:00:5d:9f:6d:18:e4:8c:99:11:59:7d:32:b7:06:8c:
29:bb:27:16:a1:34:f4:34:b4:c2:cb:2d:a9:b9:cc:d9:c8:10:
01:cc:a5:3e:98:ee:bf:86:76:de:0b:6d:36:07:98:45:fb:fb:
4a:7e:5a:f2:32:b8:85:23:9a:83:e1:82:48:a0:d2:03:79:16:
2a:cc:88:e5:07:42:25:ea:8c:4d:a9:fe:02:04:44:21:74:30:
b3:24:d3:03:71:ec:8d:b7:7a:9c:24:35:26:aa:28:d5:f2:34:
00:85:48:47:14:51:4c:f2:21:b1:08:02:05:c3:d1:a0:9a:03:
38:d5:39:46:1f:91:b6:07:8d:3b:23:60:de:91:34:ae:25:b8:
23:dd:bf:c5:be:2d:1c:25:31:02:ea:8c:c4:c7:3f:21:e8:45:
0d:4c:c6:42:b1:26:66:a2:6e:40:83:dc:2a:21:92:8c:8d:46:
3e:cb:67:78:1c:cc:6c:61:ae:6e:e4:62:28:b3:69:67:05:f6:
dc:49:13:7a:83:e2:96:a6:b6:2b:46:c5:b3:eb:ae:a5:1e:e9:
43:00:02:58:9c:7e:fb:3d:4c:ec:cb:ce:1b:7a:d2:1f:8c:9f:
b3:25:9b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:57:28 2026 by rpki-client