
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663736343a3a2f34382d3438203d3e20323134393535.roa
File: 326131343a373538333a663736343a3a2f34382d3438203d3e20323134393535.roa (raw, json)
Hash identifier: kHUe3uVUSGFeDWBdd+rc/mUnB410GE7EKZwGLoehT8A=
Subject key identifier: 54:65:D0:1A:59:88:69:AE:1F:7C:1E:81:80:38:38:62:87:44:07:0A
Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771
Certificate serial: 540D4753480B549C5F8D07BB14235A7F660006FA
Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663736343a3a2f34382d3438203d3e20323134393535.roa
Signing time: Mon 17 Aug 2026 01:55:55 +0000
ROA not before: Mon 17 Aug 2026 01:50:55 +0000
ROA not after: Mon 16 Aug 2027 01:55:55 +0000
asID: 214955
IP address blocks: 2a14:7583:f764::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl
rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:0d:47:53:48:0b:54:9c:5f:8d:07:bb:14:23:5a:7f:66:00:06:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702B79B445330AC21D237308277A4472598CE771
Validity
Not Before: Aug 17 01:50:55 2026 GMT
Not After : Aug 16 01:55:55 2027 GMT
Subject: CN=5465D01A598869AE1F7C1E81803838628744070A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:97:f0:3d:04:a3:7d:9a:de:97:4d:a2:0c:
52:70:e2:bc:ff:bf:22:92:1b:0f:b4:fd:00:96:f4:
7d:53:46:9c:f4:5c:38:12:cd:92:c8:74:9b:bd:a1:
58:00:d9:e0:fc:c5:85:55:8c:b7:e0:32:b8:a9:90:
84:c8:ef:58:fc:6c:00:1a:3a:51:c9:39:9e:70:df:
93:69:c6:f9:ea:f0:39:14:79:aa:c7:b9:0e:b9:b7:
43:32:79:fa:0b:9a:15:28:96:06:57:75:37:93:48:
8b:e1:0c:d1:49:c4:27:6f:32:9a:04:02:d4:6d:98:
75:61:e1:55:0f:f5:43:b0:42:46:db:60:93:24:e0:
5c:d6:14:da:43:fc:23:fc:9b:c8:e2:55:34:2b:b2:
ca:a6:15:5c:b1:57:16:7d:11:5d:f9:52:50:c1:8f:
15:47:34:e7:ab:04:05:ec:94:bf:3f:e5:1c:63:79:
d2:4c:ae:da:3c:d0:cc:19:f8:92:b7:97:88:42:84:
9b:dc:8b:c0:46:8c:11:94:1d:2a:99:ad:84:4b:ea:
04:f8:2b:5e:b4:cc:97:f2:93:36:80:26:1d:91:5a:
45:90:7b:13:fe:05:ac:cd:fa:d1:f0:2c:12:35:f8:
70:d2:03:c2:25:72:8d:23:85:d7:14:0e:6b:88:81:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:65:D0:1A:59:88:69:AE:1F:7C:1E:81:80:38:38:62:87:44:07:0A
X509v3 Authority Key Identifier:
keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663736343a3a2f34382d3438203d3e20323134393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:f764::/48
Signature Algorithm: sha256WithRSAEncryption
ac:03:d8:17:d2:63:64:c5:7f:4d:00:83:9c:4e:74:41:bd:49:
94:7c:b8:59:7a:5a:0f:1a:af:12:8f:70:a2:a0:0c:de:39:b0:
35:40:c7:77:75:9e:97:4d:91:2f:d9:3c:60:8b:98:9a:d2:d4:
be:99:e0:26:30:01:a4:51:2f:11:ed:fe:40:2d:8f:d7:35:e3:
77:12:c2:9d:44:9b:4d:c6:54:fc:15:df:ef:a1:44:f3:a3:e6:
41:51:9d:f1:35:b6:71:a6:0b:ab:c6:fe:18:ee:04:68:6f:d5:
55:8a:10:6a:ed:06:bb:62:d6:bb:fb:d8:26:2c:f0:79:56:5c:
d2:28:98:c7:97:04:c5:ef:b7:90:79:8e:1f:3a:18:22:7e:dc:
dd:55:26:b7:8f:c0:75:70:5b:53:ac:fc:8d:a0:02:c6:26:e5:
64:bd:d3:ed:68:94:26:0d:df:ce:5e:10:be:36:9f:78:66:63:
c6:ce:cf:79:9b:53:e7:73:2e:e1:d6:9d:43:9c:d3:e4:92:9b:
82:19:a1:4c:49:62:0a:52:ef:14:8d:b8:f1:9d:34:4a:a8:8e:
9b:17:4e:9d:c8:00:63:f8:10:68:3d:2b:7c:59:16:40:26:d4:
3e:ad:1f:87:b3:f7:81:34:97:18:a1:f1:4a:53:c5:5c:7a:00:
2f:64:49:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:54:32 2026 by rpki-client