
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/326130623a346530373a323030343a3a2f34362d3438203d3e20323139333331.roa
File: 326130623a346530373a323030343a3a2f34362d3438203d3e20323139333331.roa (raw, json)
Hash identifier: WwLkOeRgD2xAhxOEdsCC2ANBObDpMM4BGQxexbsQL6o=
Subject key identifier: A0:94:2D:98:DB:2A:33:3D:2C:C5:7A:BE:FA:FA:42:02:9A:2C:CB:C2
Certificate issuer: /CN=EAEE4A02E545C02C2C5A2556E1E446F1C94E5222
Certificate serial: 3D421950805DCC3FDBE22180F57040A8DD640040
Authority key identifier: EA:EE:4A:02:E5:45:C0:2C:2C:5A:25:56:E1:E4:46:F1:C9:4E:52:22
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/326130623a346530373a323030343a3a2f34362d3438203d3e20323139333331.roa
Signing time: Sat 15 Aug 2026 13:10:08 +0000
ROA not before: Sat 15 Aug 2026 13:05:08 +0000
ROA not after: Sat 14 Aug 2027 13:10:08 +0000
asID: 219331
IP address blocks: 2a0b:4e07:2004::/46 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.crl
rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.mft
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.cer
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:42:19:50:80:5d:cc:3f:db:e2:21:80:f5:70:40:a8:dd:64:00:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAEE4A02E545C02C2C5A2556E1E446F1C94E5222
Validity
Not Before: Aug 15 13:05:08 2026 GMT
Not After : Aug 14 13:10:08 2027 GMT
Subject: CN=A0942D98DB2A333D2CC57ABEFAFA42029A2CCBC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:de:94:17:04:4c:18:a1:89:8a:a9:45:14:d3:
1f:17:88:81:30:5a:45:e8:7d:e6:d8:96:cb:ab:59:
e5:b0:e9:ce:3a:f9:86:95:f9:ec:9e:42:6a:3e:bc:
9f:11:86:f1:43:a6:5f:f9:a8:18:63:ce:c9:22:93:
d5:47:ff:0f:a3:c9:35:96:0e:a7:23:82:26:4b:7e:
95:ca:a6:76:42:89:07:11:f8:1c:dc:ee:9b:7b:66:
78:ef:94:29:07:60:1e:03:41:36:1a:59:ab:38:51:
35:72:69:a3:72:e3:aa:7d:cb:90:55:38:0a:d4:71:
14:09:c1:df:80:21:37:09:43:36:c1:f9:7c:9d:99:
34:19:a5:dd:fd:3e:93:fe:01:20:ab:cf:15:91:85:
d8:81:e6:aa:e9:74:bf:e1:87:37:84:bb:74:66:7f:
fc:e5:20:b5:2b:7c:8b:82:5c:ec:3d:db:bd:d7:a0:
d5:b6:eb:d5:fb:cf:e9:c2:72:69:e9:54:2b:91:25:
e9:d1:95:16:cd:cb:f1:17:f4:2e:2f:39:dc:dc:41:
77:6d:00:43:4b:c6:2a:12:a4:b3:a9:51:4d:00:bd:
d1:26:4a:5a:c1:77:ef:b9:b6:0a:c8:12:ee:38:f8:
9c:05:77:6e:c2:a7:5c:0d:c1:0f:97:39:4a:67:0e:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:94:2D:98:DB:2A:33:3D:2C:C5:7A:BE:FA:FA:42:02:9A:2C:CB:C2
X509v3 Authority Key Identifier:
keyid:EA:EE:4A:02:E5:45:C0:2C:2C:5A:25:56:E1:E4:46:F1:C9:4E:52:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/326130623a346530373a323030343a3a2f34362d3438203d3e20323139333331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:2004::/46
Signature Algorithm: sha256WithRSAEncryption
7a:6c:6b:2a:18:a3:f4:9a:cb:c4:22:3e:a2:41:32:40:f7:94:
06:bd:7d:69:6d:c7:ef:d1:4e:17:ba:1d:9a:86:23:41:d0:ca:
76:8f:4b:86:07:84:52:0b:83:f5:25:68:c9:d0:fc:cb:b2:01:
5e:48:a3:45:35:96:14:2e:27:99:b3:77:16:32:43:76:80:2e:
eb:dd:17:9c:16:e7:6c:b0:4f:8b:0c:49:0d:c9:12:b7:fe:f3:
41:07:a8:3e:7e:a6:b6:42:f6:65:01:18:4d:63:47:a6:d8:5d:
ed:02:e8:9d:73:c1:12:4b:05:e4:8f:02:02:78:c4:ed:63:43:
be:41:98:2d:0b:b0:7c:d4:e3:19:91:79:b2:2e:73:9c:4d:5a:
2b:74:3a:28:cd:52:55:a7:93:46:3b:23:7b:52:04:47:43:f0:
b4:fa:d3:7a:0e:7c:de:87:42:ae:bc:ed:b9:d4:dc:7e:09:eb:
44:b2:57:8d:35:6e:ce:10:02:88:92:9a:46:73:d1:6b:e5:ea:
2d:a9:ac:83:87:00:ed:07:19:1d:a6:cf:b4:64:ae:ff:6d:30:
0c:89:6b:67:1d:8b:60:3e:a6:8e:f4:42:67:39:49:1a:e6:ac:
31:f9:60:e3:e3:ca:47:71:0b:71:51:4f:64:5c:b8:49:a5:b1:
6e:de:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:51:19 2026 by rpki-client