
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3930303a3a2f34302d3438203d3e20323134393239.roa
File: 326130363a396634313a3930303a3a2f34302d3438203d3e20323134393239.roa (raw, json)
Hash identifier: +AMN4bGgppj9vi32rQAsxbtShvgpXDGYgBVZExdRGNA=
Subject key identifier: 9C:9F:BE:53:CC:95:CF:75:01:BD:F6:F1:5D:17:53:65:75:6B:19:D0
Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial: 52088F77A18F6FBA216286FF812E29E6BE7B1910
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3930303a3a2f34302d3438203d3e20323134393239.roa
Signing time: Mon 03 Aug 2026 17:32:25 +0000
ROA not before: Mon 03 Aug 2026 17:27:25 +0000
ROA not after: Mon 02 Aug 2027 17:32:25 +0000
asID: 214929
IP address blocks: 2a06:9f41:900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 14:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:08:8f:77:a1:8f:6f:ba:21:62:86:ff:81:2e:29:e6:be:7b:19:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
Validity
Not Before: Aug 3 17:27:25 2026 GMT
Not After : Aug 2 17:32:25 2027 GMT
Subject: CN=9C9FBE53CC95CF7501BDF6F15D175365756B19D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:90:88:51:52:08:97:92:f2:1b:43:5a:27:
ce:36:d4:84:e1:62:26:e6:38:bb:49:d4:7d:64:4c:
10:ca:b7:9f:db:d4:4f:45:38:02:76:6e:8f:9e:14:
52:d6:11:26:97:9a:d7:c0:1d:8b:f8:d7:4a:5a:cf:
28:59:fa:94:38:43:e9:c2:f4:96:cd:99:33:e8:b1:
55:a2:12:1b:65:56:9f:43:d1:6b:72:ba:59:24:5e:
8e:67:f1:28:bb:dc:84:07:b4:12:be:f1:85:1b:75:
80:63:2c:07:6c:1c:18:6b:f9:ca:11:66:7e:04:bb:
60:93:81:fc:e4:a9:a0:9a:0d:4e:a9:a8:67:cb:d2:
48:96:c4:ad:ac:a9:69:86:a0:32:0b:ae:5d:eb:05:
86:90:db:36:4a:3e:b7:a8:5e:04:00:01:13:6d:de:
4b:ed:c2:c2:a9:71:93:47:c3:b7:de:2d:b4:77:ed:
b0:94:1e:f7:85:84:5f:d0:9a:29:5e:69:9d:39:74:
e3:c4:a2:c1:00:11:14:5f:e6:6b:ee:74:4b:f9:59:
cb:90:0b:c8:4c:fa:b6:64:c7:91:77:15:92:cf:db:
77:b4:fa:e1:20:38:bc:9c:4e:d0:76:9b:07:0b:c2:
07:b0:5c:41:7d:41:c0:57:58:2c:ff:8a:9f:fb:eb:
bc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9F:BE:53:CC:95:CF:75:01:BD:F6:F1:5D:17:53:65:75:6B:19:D0
X509v3 Authority Key Identifier:
keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3930303a3a2f34302d3438203d3e20323134393239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f41:900::/40
Signature Algorithm: sha256WithRSAEncryption
78:2b:45:64:68:83:5e:9d:3d:77:ef:04:f7:89:f9:20:3a:dd:
c9:f0:9c:3e:22:fa:1c:c0:bc:7e:c8:e1:0b:dd:d0:54:46:62:
f4:c7:39:62:1c:e6:58:cd:cf:5b:52:27:22:a5:39:61:ff:19:
27:a9:bd:10:ac:f4:ee:8f:ec:bc:bc:aa:73:97:48:ac:f8:a5:
47:aa:67:6e:42:a6:cc:09:42:68:a4:51:0c:a1:84:4c:8b:3d:
a6:81:c3:57:8b:77:ac:11:4e:73:9a:61:1e:6f:37:a8:4a:92:
7e:fe:a5:ae:a0:08:33:89:94:cc:10:89:06:4b:44:0f:2e:28:
8e:dc:4c:39:ce:1f:45:18:38:d4:9b:91:73:86:a1:09:ac:31:
d9:f3:6d:d3:98:cb:59:09:ef:47:b0:d3:b6:97:99:9d:a2:3b:
d1:16:ac:09:34:24:91:29:24:27:4b:54:78:8f:3c:c8:93:37:
9f:07:cc:b1:dc:84:dd:35:1b:db:92:c8:8f:05:6e:7e:fa:e7:
18:6c:60:97:e7:28:5b:e4:fa:ae:05:d6:da:ca:6d:6c:8d:2d:
ba:30:00:80:45:0e:07:5d:1d:ba:4b:bc:c2:b1:1e:d6:1f:71:
70:3f:ff:9b:0e:3b:2d:47:e6:6a:26:b5:f0:38:53:c9:4a:5e:
9e:fe:48:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 20:05:00 2026 by rpki-client