
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3530303a3a2f34302d3438203d3e20323134393239.roa
File: 326130363a396634313a3530303a3a2f34302d3438203d3e20323134393239.roa (raw, json)
Hash identifier: vhj3ge0HFLUitKaN+s5zDz0PPLk5IVtPYbDDdzjfCRg=
Subject key identifier: B9:F7:F8:77:19:CB:6B:6B:03:B7:FB:E7:9B:64:06:67:F1:44:02:8C
Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial: 6B8954E08B5C162DF05D4FA6ACCA83184EF5EC14
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3530303a3a2f34302d3438203d3e20323134393239.roa
Signing time: Sun 02 Aug 2026 09:46:51 +0000
ROA not before: Sun 02 Aug 2026 09:41:51 +0000
ROA not after: Sun 01 Aug 2027 09:46:51 +0000
asID: 214929
IP address blocks: 2a06:9f41:500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 06:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:89:54:e0:8b:5c:16:2d:f0:5d:4f:a6:ac:ca:83:18:4e:f5:ec:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
Validity
Not Before: Aug 2 09:41:51 2026 GMT
Not After : Aug 1 09:46:51 2027 GMT
Subject: CN=B9F7F87719CB6B6B03B7FBE79B640667F144028C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:57:63:b0:07:37:fd:28:c7:14:d8:27:cf:f2:
b6:30:7e:d5:55:ac:57:55:0e:2f:ff:e0:fb:ca:4a:
61:36:78:ea:a7:72:d0:70:03:20:09:3d:96:f9:f7:
4d:3a:75:24:6b:c4:ff:b4:c8:80:62:00:29:88:78:
5c:2e:03:ec:6a:a4:c5:4e:cf:0c:6f:75:ad:38:58:
91:72:79:be:27:d0:e2:fa:6d:e2:00:a8:e3:95:8c:
3e:10:ac:df:af:18:9f:7f:e2:16:64:d2:d9:5a:7c:
45:45:a8:b2:64:98:d5:e3:f7:3f:c9:de:e7:7b:b4:
88:71:2b:5f:12:f2:df:0e:ef:99:b2:89:af:1a:c0:
ab:30:bd:e6:be:54:53:a4:66:8a:f5:3e:a6:0f:0a:
a7:6d:78:b4:e4:0a:a9:a0:78:fb:1e:89:9c:50:ca:
de:67:6a:47:3a:9b:c8:3f:52:9b:79:bd:54:6f:bb:
8a:e8:f3:c3:e8:1e:9b:3f:da:68:a2:1a:11:fe:dd:
fc:c1:ed:77:eb:81:9a:69:ba:59:e0:00:05:0e:40:
2f:01:e7:51:42:cd:df:86:5a:2c:4d:57:91:2d:83:
ad:c3:47:13:fc:39:9a:43:76:3b:f3:06:4e:9e:9b:
29:72:0f:68:c2:49:83:26:d6:48:2c:ad:1c:8a:1d:
cd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F7:F8:77:19:CB:6B:6B:03:B7:FB:E7:9B:64:06:67:F1:44:02:8C
X509v3 Authority Key Identifier:
keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3530303a3a2f34302d3438203d3e20323134393239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f41:500::/40
Signature Algorithm: sha256WithRSAEncryption
50:96:ad:f5:1c:40:e1:f3:6f:26:75:93:09:56:15:4b:1d:af:
ab:19:0e:cb:29:12:69:eb:99:d5:c4:b0:5d:63:ff:bd:5e:b5:
b9:a1:0e:42:9a:cf:89:64:c5:e0:2f:44:6d:97:69:ed:5e:35:
60:8f:38:99:3d:a2:9d:f0:f0:72:7a:c2:07:61:93:e5:29:b0:
45:9e:b4:d4:e4:34:fa:ca:c8:27:81:9b:71:90:4e:aa:ae:c8:
2b:7f:fd:25:81:c3:9b:c3:6b:87:3b:50:75:8a:67:cf:ee:eb:
68:cc:07:fc:1f:e9:9e:e6:c0:58:de:92:7e:c7:62:ce:09:44:
6c:d5:51:09:f1:f1:3c:af:dd:fe:41:76:7b:3c:55:7f:3e:95:
d5:45:83:b1:cb:ec:f5:68:17:03:d7:3e:76:1f:88:1c:3f:f1:
81:20:81:cd:57:34:f6:d5:03:7b:d8:b0:93:38:b9:b7:07:49:
a1:e1:57:3e:18:98:1f:88:84:80:75:72:8a:6b:26:54:94:00:
0b:74:31:db:26:5e:4a:9f:d9:69:16:b7:67:ed:f9:60:23:1c:
b5:69:88:7c:d6:0f:32:84:1b:b0:ba:0d:f1:ee:57:b6:cf:88:
73:64:89:94:4b:11:7c:ff:31:20:f8:36:b4:63:c7:e4:5a:0c:
0d:23:b6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 21:55:54 2026 by rpki-client