
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634363a3a2f34382d3438203d3e20323135303835.roa
File: 326130363a396634363a3a2f34382d3438203d3e20323135303835.roa (raw, json)
Hash identifier: 9cZOHiQCI3tJRKNhSvfRO+6YVPoE/zEcshIH8F7qWcU=
Subject key identifier: C9:41:8C:11:99:7B:3B:19:C0:40:A3:01:53:7D:53:B0:BC:A6:88:84
Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial: 4EDA141B8D3CBEC9D6C37C79809BE15EB829F355
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634363a3a2f34382d3438203d3e20323135303835.roa
Signing time: Sun 02 Aug 2026 14:18:55 +0000
ROA not before: Sun 02 Aug 2026 14:13:55 +0000
ROA not after: Sun 01 Aug 2027 14:18:55 +0000
asID: 215085
IP address blocks: 2a06:9f46::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 14:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:da:14:1b:8d:3c:be:c9:d6:c3:7c:79:80:9b:e1:5e:b8:29:f3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
Validity
Not Before: Aug 2 14:13:55 2026 GMT
Not After : Aug 1 14:18:55 2027 GMT
Subject: CN=C9418C11997B3B19C040A301537D53B0BCA68884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:21:dd:f9:e3:29:76:d6:c3:32:92:6e:5a:
9a:e6:b8:b4:11:35:ef:ad:eb:ee:0f:f2:79:f1:9b:
b5:70:51:ec:d6:29:54:8a:df:15:7e:ce:eb:dd:d0:
08:35:b6:2a:74:97:93:13:b9:1b:d0:fc:75:90:b4:
40:2e:7d:2c:95:5e:36:78:b5:60:a3:d2:97:94:20:
65:8f:9f:c5:77:74:93:3e:d6:e9:3e:24:13:14:12:
d5:e6:49:74:a1:81:26:9f:0e:42:44:a7:14:07:a8:
03:ca:4b:92:3d:c9:90:6b:f1:9e:67:df:e1:0a:29:
50:d1:fd:2e:7c:a4:04:45:d2:64:63:69:90:ee:ca:
25:97:0b:bd:93:46:99:1c:64:f9:5f:10:cb:27:52:
f7:6c:b0:79:e6:a3:df:fd:97:c5:86:3e:c1:ab:0f:
bd:6c:17:d7:28:e1:1a:ab:ab:cd:44:a1:a0:0f:e4:
21:53:48:a5:8c:fc:fc:8a:db:f8:25:0d:ee:4c:c0:
3c:c2:f4:02:b4:f5:61:ff:a5:51:6a:29:77:cd:ab:
35:a1:3c:86:18:42:a7:93:92:23:f7:0a:8e:f9:09:
ae:89:61:5d:3e:9c:49:fa:9c:7f:e7:d4:5c:a6:48:
68:ad:85:0d:09:0d:7e:c8:cc:20:f2:5a:a5:4a:cc:
f5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:41:8C:11:99:7B:3B:19:C0:40:A3:01:53:7D:53:B0:BC:A6:88:84
X509v3 Authority Key Identifier:
keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634363a3a2f34382d3438203d3e20323135303835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f46::/48
Signature Algorithm: sha256WithRSAEncryption
4d:30:74:46:34:50:6b:12:34:91:49:8a:f6:19:65:69:bf:b8:
63:0a:39:4c:94:eb:36:e3:6c:2c:c5:22:e0:51:f4:17:41:e6:
50:2b:c2:ff:d4:9b:40:d9:92:67:0e:39:be:63:d2:b7:96:5b:
ad:2c:62:39:96:06:1c:6c:2a:84:c6:f3:f0:c4:62:99:b8:c4:
25:71:97:96:57:70:0b:9c:7e:2c:c2:83:ee:17:f3:b8:04:83:
67:42:fd:fb:62:7c:ee:35:82:94:d7:49:79:80:a5:eb:ca:27:
03:61:93:fc:3d:f1:1a:bf:e6:bb:34:57:1c:ac:e5:20:d0:24:
ac:4c:23:41:f5:90:5a:0c:a7:b3:aa:bd:67:e9:d3:bc:5d:aa:
f0:1e:35:29:9f:4d:92:0a:e1:7f:2b:82:f5:ef:36:14:8e:8c:
7a:53:da:79:a7:e5:f9:0d:e0:b9:74:dd:17:72:91:a4:5d:07:
b3:0d:3b:ba:a0:4c:8e:f5:a4:ef:b1:f4:d1:9f:e7:26:b3:c3:
e1:fc:cc:63:d1:9c:a6:d2:cf:e8:c2:23:06:2e:b0:55:8e:2f:
97:69:c8:aa:be:7a:47:54:d3:15:5e:f8:1d:cb:22:6d:d2:bb:
ec:25:67:84:89:b6:8c:7a:d7:fb:49:89:5b:2e:71:3c:22:f5:
9c:ac:41:3d
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIUTtoUG408vsnWw3x5gJvhXrgp81UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2
NzExNDJGNTAeFw0yNjA4MDIxNDEzNTVaFw0yNzA4MDExNDE4NTVaMDMxMTAvBgNV
BAMTKEM5NDE4QzExOTk3QjNCMTlDMDQwQTMwMTUzN0Q1M0IwQkNBNjg4ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTQCHd+eMpdtbDMpJuWprmuLQR
Ne+t6+4P8nnxm7VwUezWKVSK3xV+zuvd0Ag1tip0l5MTuRvQ/HWQtEAufSyVXjZ4
tWCj0peUIGWPn8V3dJM+1uk+JBMUEtXmSXShgSafDkJEpxQHqAPKS5I9yZBr8Z5n
3+EKKVDR/S58pARF0mRjaZDuyiWXC72TRpkcZPlfEMsnUvdssHnmo9/9l8WGPsGr
D71sF9co4Rqrq81EoaAP5CFTSKWM/PyK2/glDe5MwDzC9AK09WH/pVFqKXfNqzWh
PIYYQqeTkiP3Co75Ca6JYV0+nEn6nH/n1FymSGithQ0JDX7IzCDyWqVKzPVHAgMB
AAGjggJwMIICbDAdBgNVHQ4EFgQUyUGMEZl7OxnAQKMBU31TsLymiIQwHwYDVR0j
BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2
YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx
NDJGNS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQt
N2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2YWJmLzIvMzI2MTMwMzYzYTM5NjYzNDM2
M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM1MzAzODM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA
KgafRgAAMA0GCSqGSIb3DQEBCwUAA4IBAQBNMHRGNFBrEjSRSYr2GWVpv7hjCjlM
lOs242wsxSLgUfQXQeZQK8L/1JtA2ZJnDjm+Y9K3llutLGI5lgYcbCqExvPwxGKZ
uMQlcZeWV3ALnH4swoPuF/O4BINnQv37YnzuNYKU10l5gKXryicDYZP8PfEav+a7
NFccrOUg0CSsTCNB9ZBaDKezqr1n6dO8XarwHjUpn02SCuF/K4L17zYUjox6U9p5
p+X5DeC5dN0XcpGkXQezDTu6oEyO9aTvsfTRn+cms8Ph/Mxj0Zym0s/owiMGLrBV
ji+XaciqvnpHVNMVXvgdyyJt0rvsJWeEibaMetf7SYlbLnE8IvWcrEE9
-----END CERTIFICATE-----
Generated at Tue Aug 4 20:04:41 2026 by rpki-client