
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538303a633030303a3a2f34302d3430203d3e20323130343634.roa
File: 326131343a373538303a633030303a3a2f34302d3430203d3e20323130343634.roa (raw, json)
Hash identifier: BZx4A+1lDPAS1ebt61e3ltRE332soDf255t2tHvVUu8=
Subject key identifier: 48:D1:1B:1F:5E:3C:3C:EB:C3:6D:C1:63:30:67:D8:E5:69:22:3B:98
Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9
Certificate serial: 62F4055741C4045783C81F39FAD88A717BCF7439
Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538303a633030303a3a2f34302d3430203d3e20323130343634.roa
Signing time: Sat 07 Feb 2026 09:51:23 +0000
ROA not before: Sat 07 Feb 2026 09:46:23 +0000
ROA not after: Sat 06 Feb 2027 09:51:23 +0000
asID: 210464
IP address blocks: 2a14:7580:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:f4:05:57:41:c4:04:57:83:c8:1f:39:fa:d8:8a:71:7b:cf:74:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9
Validity
Not Before: Feb 7 09:46:23 2026 GMT
Not After : Feb 6 09:51:23 2027 GMT
Subject: CN=48D11B1F5E3C3CEBC36DC1633067D8E569223B98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:98:56:7d:36:e8:e7:85:68:49:9e:36:b4:
fe:63:0f:1d:c5:62:f0:ae:33:22:da:d7:fa:f7:f5:
52:24:f5:10:ef:84:3f:3e:79:5d:1d:0b:a2:d1:58:
13:83:8a:37:56:f7:bb:13:bd:d1:17:71:b8:2c:7e:
a8:83:4d:fd:76:05:6d:fb:7f:e9:cc:36:ba:b6:b3:
f5:70:30:57:cf:88:98:c5:4c:fd:3d:f2:35:9b:1c:
26:6a:3f:a9:90:f8:1d:73:8c:06:df:0f:d9:7e:93:
47:a6:79:c0:af:4e:46:ab:54:19:e7:f1:c6:2e:9a:
2d:13:95:51:15:e7:30:75:fc:58:6c:ba:9e:8b:d9:
4c:23:6a:fc:02:5c:e1:79:c5:f5:60:f5:d0:fa:dc:
6b:16:15:d4:0c:61:81:92:86:d1:01:63:cf:64:3e:
b2:5c:4b:30:eb:ee:4f:d8:f7:84:85:83:0d:9f:ed:
1a:2b:c2:20:93:16:6f:1e:ad:68:8b:d8:e9:09:70:
18:c3:16:26:a3:3b:00:23:60:5c:d4:86:dd:e8:80:
31:5f:a4:6f:bc:89:a2:1e:7b:c7:2d:c9:6b:fc:98:
1a:a3:18:48:0e:fb:80:e0:28:50:52:c9:7c:3e:e6:
d8:ba:af:54:1e:a6:75:14:c1:8a:ee:a8:4d:1f:ba:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D1:1B:1F:5E:3C:3C:EB:C3:6D:C1:63:30:67:D8:E5:69:22:3B:98
X509v3 Authority Key Identifier:
keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538303a633030303a3a2f34302d3430203d3e20323130343634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:c000::/40
Signature Algorithm: sha256WithRSAEncryption
3c:29:df:28:42:37:71:d7:5b:f0:84:86:3e:75:a1:d9:26:ef:
1b:79:8b:2b:67:8b:61:b8:99:ae:40:40:b3:44:95:ea:3a:8e:
32:f3:fd:41:f8:87:51:f0:8a:7a:61:1e:3f:5c:08:7c:fa:2f:
56:60:94:f0:f8:c1:48:ad:81:8b:15:99:c6:a0:5a:43:af:5e:
75:47:e5:03:1a:50:2e:7b:2b:a2:c8:02:50:23:1e:1c:18:a4:
a2:46:c5:96:c5:73:9f:85:fd:cf:f1:87:c2:ce:bf:a8:6f:20:
2d:77:97:f3:77:e2:25:02:a5:3d:d2:3a:ec:98:a3:7a:96:ea:
67:2c:4a:b6:b1:fc:29:ef:c8:5d:d4:50:db:32:db:3d:4a:11:
7a:b2:83:5b:85:1a:bc:a1:2d:7b:7c:ff:44:6c:5e:15:93:a6:
d1:4c:4d:8e:b0:1a:1a:42:ac:c1:27:09:fe:c9:56:03:5c:73:
7e:7c:75:6b:a1:10:16:99:8b:8c:bd:72:b0:f1:1e:43:42:89:
85:25:23:82:e0:84:68:25:db:b6:7e:1e:9a:fc:e3:5a:c5:63:
af:4f:36:c4:22:e5:51:e5:c6:6a:b2:58:5f:54:70:3d:aa:5e:
26:c9:c9:ba:9b:a4:a3:90:cd:50:bf:9b:0d:e5:2c:8c:1c:d2:
94:a1:8d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:41:13 2026 by rpki-client