
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/326131333a633863343a323030303a3a2f34302d3536203d3e20313937383036.roa
File: 326131333a633863343a323030303a3a2f34302d3536203d3e20313937383036.roa (raw, json)
Hash identifier: 0pda1MNSiDogiQJw0j/WqNX2XFKgk4h6e7j+Ff1GEI4=
Subject key identifier: 70:BC:17:33:44:0E:BD:6C:E0:EF:27:FE:B8:08:50:54:7E:74:54:1A
Certificate issuer: /CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58
Certificate serial: 492B5B417BAADE23196899555AB4BAF1B1611DE9
Authority key identifier: 30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/326131333a633863343a323030303a3a2f34302d3536203d3e20313937383036.roa
Signing time: Sun 28 Jun 2026 18:06:06 +0000
ROA not before: Sun 28 Jun 2026 18:01:06 +0000
ROA not after: Sun 27 Jun 2027 18:06:06 +0000
asID: 197806
IP address blocks: 2a13:c8c4:2000::/40 maxlen: 56
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl
rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft
rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer
rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl
rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 18:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:2b:5b:41:7b:aa:de:23:19:68:99:55:5a:b4:ba:f1:b1:61:1d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58
Validity
Not Before: Jun 28 18:01:06 2026 GMT
Not After : Jun 27 18:06:06 2027 GMT
Subject: CN=70BC1733440EBD6CE0EF27FEB80850547E74541A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:04:8d:73:ad:55:c9:9c:05:98:5d:eb:d8:
c8:85:18:fb:53:5c:35:2c:64:22:bc:27:18:71:3d:
cd:9b:1a:e9:5a:31:12:0d:79:a1:90:f6:01:08:39:
e6:62:04:a6:ee:45:8e:41:97:ee:c2:84:81:bb:05:
33:e6:41:9a:a0:31:68:22:3b:75:d5:47:e2:a2:c2:
1c:56:9a:e3:13:9e:3e:24:d1:33:20:59:91:46:04:
63:64:df:68:b2:35:ef:bc:d1:79:e1:bf:af:d9:54:
9d:cb:eb:db:53:fe:2f:c9:32:77:26:4b:de:ec:94:
06:5c:a9:27:a6:f4:97:67:b9:df:c9:0d:b7:64:ef:
1e:fa:4b:c8:44:63:8b:c2:a5:a7:05:b5:ee:ba:8f:
b1:6e:1a:f3:48:d8:3b:ac:bd:80:52:ee:07:23:2c:
af:b3:34:50:89:91:e7:98:48:36:3d:b9:f4:93:ad:
e2:01:71:00:32:fa:2f:1e:33:d9:f4:f1:4c:06:ab:
e3:2b:36:2c:06:d6:28:63:82:2e:a0:cb:95:71:13:
ef:68:fd:27:92:8f:77:a6:9e:7d:48:67:8b:ef:f9:
ae:aa:79:5e:16:68:36:89:e5:32:0e:4a:d7:8c:89:
90:30:3d:d3:92:5f:dc:89:1b:23:71:ec:4d:1f:c3:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BC:17:33:44:0E:BD:6C:E0:EF:27:FE:B8:08:50:54:7E:74:54:1A
X509v3 Authority Key Identifier:
keyid:30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/326131333a633863343a323030303a3a2f34302d3536203d3e20313937383036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c8c4:2000::/40
Signature Algorithm: sha256WithRSAEncryption
d6:fa:91:0f:b4:6f:77:e1:db:1a:3d:31:84:93:02:f0:a7:6d:
93:39:4c:dc:45:5e:e3:b8:30:b7:fe:99:6c:bd:8f:ef:b5:51:
4d:33:e9:bb:25:15:98:ec:f8:39:94:45:91:6f:b9:c0:dd:98:
2e:4d:ef:40:6e:c5:c6:25:e0:2f:39:ec:4f:51:64:81:17:7f:
a6:c2:7b:b9:36:2f:8b:e0:91:af:2a:45:68:17:cc:a4:ba:02:
41:cd:e3:6a:72:80:7d:94:7b:8a:06:12:53:7c:71:f9:06:dd:
a3:fd:6e:6e:26:a1:f5:3e:bb:b4:38:e6:32:55:31:a5:c0:6a:
d7:34:c9:b2:2d:96:8e:ae:87:90:a3:e4:f3:a9:d6:71:12:b1:
3b:f2:09:cc:49:29:cc:6e:3f:ac:20:37:f7:3f:de:28:16:f4:
d5:fd:22:16:4e:c8:ef:c1:04:9e:d2:86:78:d7:06:f3:03:03:
9b:27:68:24:6d:5a:10:9e:13:0c:40:f0:bb:7a:76:8b:66:3e:
2f:4f:24:31:f5:cd:0e:fa:3a:f2:d8:79:ce:be:cd:7b:24:bf:
5c:80:cd:48:bb:dc:18:c1:68:eb:da:62:da:49:70:49:fe:7b:
ae:5f:cb:cc:ba:dc:8a:17:d5:db:45:4c:ee:64:af:87:8c:61:
31:94:70:d8
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUSStbQXuq3iMZaJlVWrS68bFhHekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAwRjg3RTQ0RTI0QzJGRUVEOTc4MEUyQTBBQkYwMjJE
Q0I1NkM1ODAeFw0yNjA2MjgxODAxMDZaFw0yNzA2MjcxODA2MDZaMDMxMTAvBgNV
BAMTKDcwQkMxNzMzNDQwRUJENkNFMEVGMjdGRUI4MDg1MDU0N0U3NDU0MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX0QSNc61VyZwFmF3r2MiFGPtT
XDUsZCK8JxhxPc2bGulaMRINeaGQ9gEIOeZiBKbuRY5Bl+7ChIG7BTPmQZqgMWgi
O3XVR+KiwhxWmuMTnj4k0TMgWZFGBGNk32iyNe+80Xnhv6/ZVJ3L69tT/i/JMncm
S97slAZcqSem9Jdnud/JDbdk7x76S8hEY4vCpacFte66j7FuGvNI2DusvYBS7gcj
LK+zNFCJkeeYSDY9ufSTreIBcQAy+i8eM9n08UwGq+MrNiwG1ihjgi6gy5VxE+9o
/SeSj3emnn1IZ4vv+a6qeV4WaDaJ5TIOSteMiZAwPdOSX9yJGyNx7E0fw7n9AgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUcLwXM0QOvWzg7yf+uAhQVH50VBowHwYDVR0j
BBgwFoAUMA+H5E4kwv7tl4DioKvwIty1bFgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjc4MmQzOGItNDAxNi00OTZhLTgyOTgtZTNlOTdiZWU5
N2JkLzEvMzAwRjg3RTQ0RTI0QzJGRUVEOTc4MEUyQTBBQkYwMjJEQ0I1NkM1OC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh
ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMDBGODdFNDRFMjRDMkZFRUQ5NzgwRTJB
MEFCRjAyMkRDQjU2QzU4LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS82NzgyZDM4Yi00MDE2LTQ5NmEtODI5OC1lM2U5N2JlZTk3YmQvMS8zMjYxMzEz
MzNhNjMzODYzMzQzYTMyMzAzMDMwM2EzYTJmMzQzMDJkMzUzNjIwM2QzZTIwMzEz
OTM3MzgzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhPIxCAwDQYJKoZIhvcNAQELBQADggEBANb6
kQ+0b3fh2xo9MYSTAvCnbZM5TNxFXuO4MLf+mWy9j++1UU0z6bslFZjs+DmURZFv
ucDdmC5N70BuxcYl4C857E9RZIEXf6bCe7k2L4vgka8qRWgXzKS6AkHN42pygH2U
e4oGElN8cfkG3aP9bm4mofU+u7Q45jJVMaXAatc0ybItlo6uh5Cj5POp1nESsTvy
CcxJKcxuP6wgN/c/3igW9NX9IhZOyO/BBJ7ShnjXBvMDA5snaCRtWhCeEwxA8Lt6
dotmPi9PJDH1zQ76OvLYec6+zXskv1yAzUi73BjBaOvaYtpJcEn+e65fy8y63IoX
1dtFTO5kr4eMYTGUcNg=
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:29 2026 by rpki-client