
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633061303a3a2f34342d3438203d3e20323135373338.roa
File: 326130363a313238333a633061303a3a2f34342d3438203d3e20323135373338.roa (raw, json)
Hash identifier: qoiavUAAgodG63jkm/v1R3+NKJTu8ZS9cDYFQZyxSm4=
Subject key identifier: E3:46:0D:16:87:6E:8A:9B:7D:D1:62:60:22:08:01:B8:21:C4:6A:4B
Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial: 76E28054BD99A2C798B82F91E50C98947291597B
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633061303a3a2f34342d3438203d3e20323135373338.roa
Signing time: Fri 05 Jun 2026 16:35:05 +0000
ROA not before: Fri 05 Jun 2026 16:30:05 +0000
ROA not after: Fri 04 Jun 2027 16:35:05 +0000
asID: 215738
IP address blocks: 2a06:1283:c0a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e2:80:54:bd:99:a2:c7:98:b8:2f:91:e5:0c:98:94:72:91:59:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Validity
Not Before: Jun 5 16:30:05 2026 GMT
Not After : Jun 4 16:35:05 2027 GMT
Subject: CN=E3460D16876E8A9B7DD16260220801B821C46A4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8d:a1:24:ad:9c:17:9f:eb:35:48:aa:e8:9b:
8e:c2:5c:0b:8a:52:1b:ef:ab:b6:a6:e7:97:e9:18:
c4:5d:28:13:a3:89:d5:de:d0:d1:cd:b6:c7:53:00:
1d:aa:b0:1a:aa:93:9c:02:a9:c9:6d:29:56:f0:47:
c7:2a:1d:98:e0:3e:ef:77:87:bf:ec:87:5c:2f:ec:
c4:c9:17:70:64:16:ed:5b:e7:05:55:d1:d8:f0:c2:
80:9e:b7:10:ce:24:da:cf:e9:ea:ba:53:b8:96:14:
2e:f1:63:b4:a8:52:18:b8:cb:6c:62:cd:18:a2:00:
b5:ee:6e:cd:2d:e7:56:9d:a8:e4:17:d4:c2:57:d2:
43:93:23:fc:12:12:73:49:25:d7:a0:7f:29:e7:e3:
7a:0c:18:6e:8c:aa:86:f5:5f:88:c3:82:d8:0b:1b:
e4:a6:b6:ca:f0:d2:f5:be:76:27:7e:4c:b7:bb:00:
1d:04:e8:ae:8b:c6:b9:5d:6c:1c:34:18:c2:2c:7c:
26:19:03:04:6c:12:47:74:07:51:c2:06:c7:b1:3e:
ab:12:3f:21:3c:22:de:17:40:a1:b8:34:c0:3a:a9:
72:e8:33:44:53:6b:f2:52:6d:61:26:f0:4f:6d:1e:
cf:db:5f:a4:29:d8:14:d8:d4:31:ea:31:7a:c0:c0:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:46:0D:16:87:6E:8A:9B:7D:D1:62:60:22:08:01:B8:21:C4:6A:4B
X509v3 Authority Key Identifier:
keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633061303a3a2f34342d3438203d3e20323135373338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:c0a0::/44
Signature Algorithm: sha256WithRSAEncryption
a0:b7:5d:88:83:67:26:af:4b:51:3e:c3:9b:dd:4d:47:2a:75:
0c:19:f4:2b:35:aa:22:37:74:79:b1:e6:69:37:a5:33:70:58:
fe:73:d3:21:20:82:04:d0:ab:07:38:8f:3c:6e:fb:bc:64:4d:
ce:6e:4c:4f:98:c8:f4:4f:9d:78:ca:62:d7:7d:d5:69:2b:87:
cb:70:7f:5b:fb:68:59:66:37:30:c6:f8:bb:1e:7c:0d:43:f6:
8c:f9:fc:21:65:94:11:ec:a3:07:b2:62:d0:d9:ec:77:ea:89:
51:28:77:47:82:ac:49:7c:90:3a:e9:e4:d2:9b:7e:ef:6b:76:
fd:4d:37:ce:8c:93:8e:4c:3d:df:f9:8f:a0:c8:58:65:36:8c:
87:c6:5b:d5:dc:d1:99:4c:a9:bd:89:a7:f3:a0:2c:e1:bc:83:
56:59:25:12:83:28:c9:c4:61:90:52:a2:ab:6e:7a:e2:10:54:
a3:13:b3:4d:79:c9:cd:a9:74:5a:ff:38:14:43:29:19:c7:0d:
e3:a9:6c:7d:f1:75:a9:0d:ba:b2:54:68:90:b2:66:63:7e:76:
2e:dc:fc:dc:db:bc:e7:07:2d:e8:1a:bc:fb:cd:61:34:33:12:
42:f5:d9:d6:83:e9:ad:ef:1c:33:2c:ed:19:f0:85:e7:1f:63:
fa:2f:a1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:20:20 2026 by rpki-client