
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/326131343a373538313a353033303a3a2f34342d3438203d3e20323138383332.roa
File: 326131343a373538313a353033303a3a2f34342d3438203d3e20323138383332.roa (raw, json)
Hash identifier: aWBAs03xU1HpzGC/SG8VtaUD3JAfP9wV5kcakR38yVQ=
Subject key identifier: D3:25:E0:66:9A:05:19:91:13:B9:A3:57:42:68:AF:4E:F7:20:38:1E
Certificate issuer: /CN=5C7539DD21725D2C2DF2782A4101A5369C3C013F
Certificate serial: 77E3705FC64B41CAE09E6D53EE2032BC49D12C30
Authority key identifier: 5C:75:39:DD:21:72:5D:2C:2D:F2:78:2A:41:01:A5:36:9C:3C:01:3F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/326131343a373538313a353033303a3a2f34342d3438203d3e20323138383332.roa
Signing time: Thu 15 Oct 2026 18:21:12 +0000
ROA not before: Thu 15 Oct 2026 18:16:12 +0000
ROA not after: Thu 14 Oct 2027 18:21:12 +0000
asID: 218832
IP address blocks: 2a14:7581:5030::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.crl
rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e3:70:5f:c6:4b:41:ca:e0:9e:6d:53:ee:20:32:bc:49:d1:2c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C7539DD21725D2C2DF2782A4101A5369C3C013F
Validity
Not Before: Oct 15 18:16:12 2026 GMT
Not After : Oct 14 18:21:12 2027 GMT
Subject: CN=D325E0669A05199113B9A3574268AF4EF720381E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:78:ed:c1:8d:21:0b:50:e0:1f:38:8c:f3:
92:43:80:26:da:95:02:cc:b8:5d:c1:dd:cf:34:fd:
91:2e:28:1b:61:3a:da:31:97:bd:75:88:12:6e:36:
de:c2:bf:eb:2c:e0:f9:4a:97:8b:d5:f8:eb:7c:51:
32:ba:8c:d6:c3:7c:c2:17:31:c4:90:53:e4:15:03:
9b:53:79:99:41:8c:63:e4:b7:2d:9f:f6:8f:29:a9:
d6:e4:30:2a:39:33:e0:35:00:18:94:50:13:ee:aa:
18:19:b3:10:c4:15:40:d9:11:87:7d:d7:77:9f:08:
cc:f3:07:8a:75:48:68:1e:9d:a9:74:d2:f5:35:04:
3e:b8:6e:4c:95:31:7d:3e:b5:73:bb:da:d6:49:d2:
78:28:f3:fb:e6:bd:72:c5:50:76:89:fa:fa:e7:95:
0c:6b:03:d2:e0:c2:d3:36:3e:b8:83:d2:bd:b4:6a:
37:7a:8e:9c:0e:11:fa:b5:3c:00:13:cc:6a:fb:5d:
d2:55:00:37:d8:76:ae:b4:a3:a3:19:af:36:ac:20:
73:7f:de:4a:46:89:d9:50:9e:97:6b:f5:54:30:30:
27:3c:65:e6:f1:af:6e:2c:88:21:30:6a:3a:31:eb:
50:85:42:84:d6:99:96:9e:7c:2a:27:fc:60:49:db:
12:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:25:E0:66:9A:05:19:91:13:B9:A3:57:42:68:AF:4E:F7:20:38:1E
X509v3 Authority Key Identifier:
keyid:5C:75:39:DD:21:72:5D:2C:2D:F2:78:2A:41:01:A5:36:9C:3C:01:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/326131343a373538313a353033303a3a2f34342d3438203d3e20323138383332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:5030::/44
Signature Algorithm: sha256WithRSAEncryption
11:a2:22:64:fc:5f:9b:a4:c7:dc:00:07:7f:45:e5:8f:04:65:
95:3d:10:26:8e:5a:cd:2b:16:f2:67:81:ff:55:51:25:3e:be:
87:fe:c5:df:e6:f7:66:cd:0f:a2:7f:d1:19:ca:ba:96:dd:d5:
f5:ac:68:0c:9b:2f:7e:d4:c3:04:fd:51:e8:17:01:ce:d4:72:
63:08:13:a6:f6:cd:58:a0:6e:0d:fe:dd:81:3f:33:f5:f7:bb:
8b:c8:13:d6:3c:80:74:16:9b:f0:3b:39:f0:04:ae:7a:14:28:
6c:af:56:4a:c1:83:2b:9e:d0:b6:ea:7d:5e:13:51:10:7d:86:
b1:ad:ba:80:2f:a4:68:67:20:ed:e9:21:6b:b9:d7:43:6d:33:
85:d5:02:23:ec:4b:13:5d:5e:c2:91:03:55:d8:84:6e:7e:c9:
3c:00:69:ed:5f:c6:8f:24:69:11:a1:09:f0:7e:4a:fc:e6:e1:
e3:d4:a4:a4:34:f8:16:62:9e:ad:6a:1a:6d:85:89:cf:23:24:
f8:e3:1e:3e:8b:23:60:5a:48:24:3c:db:8e:46:82:cd:1d:5d:
57:5a:e5:db:3e:a8:d6:92:48:55:8c:a3:05:ea:01:ba:03:19:
9a:b8:c6:fc:32:56:0e:00:39:b4:2b:4f:24:88:45:3a:0c:7e:
69:71:22:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:40:28 2026 by rpki-client