
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a623030623a3a2f34382d3438203d3e20323034343634.roa
File: 326130353a646663363a623030623a3a2f34382d3438203d3e20323034343634.roa (raw, json)
Hash identifier: 7qaijRAnDO130Uw/r+IdvM3XUs812mn6515r7VTR1c0=
Subject key identifier: 72:36:EC:7A:E0:74:A9:58:0F:71:BA:13:EE:C8:66:D1:45:0A:CF:E5
Certificate issuer: /CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292
Certificate serial: 0D6657AA79F02FABFB1F179D556F01AAB9B0630C
Authority key identifier: 53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a623030623a3a2f34382d3438203d3e20323034343634.roa
Signing time: Tue 06 Oct 2026 17:20:47 +0000
ROA not before: Tue 06 Oct 2026 17:15:47 +0000
ROA not after: Tue 05 Oct 2027 17:20:47 +0000
asID: 204464
IP address blocks: 2a05:dfc6:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl
rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 11:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:66:57:aa:79:f0:2f:ab:fb:1f:17:9d:55:6f:01:aa:b9:b0:63:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292
Validity
Not Before: Oct 6 17:15:47 2026 GMT
Not After : Oct 5 17:20:47 2027 GMT
Subject: CN=7236EC7AE074A9580F71BA13EEC866D1450ACFE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:13:63:a8:20:ab:dd:f8:a2:c7:77:25:7e:
ec:9c:5e:09:60:b3:56:b9:94:e4:fb:00:64:e7:07:
70:c0:4a:3d:7e:0b:e9:f5:a6:9e:8e:0c:fa:13:ca:
bc:f4:f7:b0:d1:55:e8:d1:32:17:36:31:4a:7e:77:
2b:ba:3e:73:5a:4b:80:ff:d0:e8:21:cb:78:c6:ad:
01:6e:8c:79:22:1c:4e:99:d0:2e:15:a5:24:8e:ef:
5c:2a:61:ea:8f:f3:0c:a3:36:b1:77:db:fd:8b:be:
90:8a:ed:96:fb:fb:1d:d2:50:bf:d6:a6:14:32:22:
73:ec:7f:57:af:07:45:0e:1d:fc:c6:b2:00:39:9d:
a1:61:52:95:c0:1a:fc:7a:ee:75:e8:44:6f:09:f6:
69:e4:39:45:56:1c:77:6c:93:d9:c4:95:da:c2:50:
0e:9f:3d:40:34:ae:a4:5d:2a:bf:0f:0b:82:f0:3b:
6b:c8:1f:43:83:98:b4:5a:d1:66:1f:74:49:ee:b9:
08:15:69:a2:4f:de:43:6d:ec:dc:97:5b:b6:80:ac:
4d:2a:85:c6:e3:0f:b3:97:70:e0:57:bf:f3:ea:12:
99:02:5b:39:9e:9a:ac:da:60:fc:c0:37:27:23:5f:
3f:88:f4:86:ad:b7:fb:d8:1d:09:20:a2:63:df:04:
65:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:36:EC:7A:E0:74:A9:58:0F:71:BA:13:EE:C8:66:D1:45:0A:CF:E5
X509v3 Authority Key Identifier:
keyid:53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a623030623a3a2f34382d3438203d3e20323034343634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc6:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
2e:8d:07:2a:40:9a:6e:71:a2:2c:34:d2:b3:a9:8f:77:89:cb:
db:4d:cc:73:95:29:83:c6:86:0e:36:2b:0a:e9:7b:40:58:cf:
91:a4:6e:7a:4a:97:98:47:7c:7c:c6:13:42:4b:70:76:73:f3:
98:83:79:37:4c:da:46:f3:c4:b5:d1:2a:64:c7:77:a5:09:6d:
f5:33:38:90:7f:4c:aa:05:7d:56:7c:7f:5a:e4:dc:43:b0:30:
48:9d:b4:01:f1:5a:84:b4:e2:d8:00:23:29:19:f8:51:82:bb:
32:c5:01:ab:2d:40:35:66:cc:1c:4b:a6:fc:02:c5:cc:b4:68:
7c:19:64:78:d8:16:c4:44:90:42:f1:37:31:d8:9a:98:cc:e9:
49:7f:0a:d9:69:96:2e:a8:c9:d2:7a:3e:15:b8:72:1c:c7:cc:
25:70:3d:c7:c2:c2:d7:5d:f9:dd:32:4b:39:6f:76:be:77:da:
ff:72:4a:8b:6a:2f:74:a6:93:ee:1c:c5:00:7d:f0:7c:26:b1:
c2:7b:d4:57:0c:ec:d0:36:31:0d:85:d1:c2:7b:63:69:02:de:
02:f3:b5:8b:e3:1e:23:80:ca:06:59:28:4d:b0:4d:e8:aa:4c:
60:2e:ac:c7:e5:00:af:35:ab:3b:36:9d:63:46:c9:0f:93:aa:
2c:ce:4d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:55:47 2026 by rpki-client