
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3230362e3235312e35322e302f32322d3234203d3e203332333436.roa
File: 3230362e3235312e35322e302f32322d3234203d3e203332333436.roa (raw, json)
Hash identifier: 1F29IgaiAixhwkNm/vHPz03JmCAq9VGv6EzEd8UF/5I=
Subject key identifier: 8C:1D:EC:F7:EA:95:23:38:4D:C4:C7:6B:54:5D:16:AB:F0:B4:6D:32
Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial: 78A33EF889EBA7D76F67796399A21EAE4FB622FC
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3230362e3235312e35322e302f32322d3234203d3e203332333436.roa
Signing time: Tue 02 Jun 2026 12:17:52 +0000
ROA not before: Tue 02 Jun 2026 12:12:52 +0000
ROA not after: Tue 01 Jun 2027 12:17:52 +0000
asID: 32346
IP address blocks: 206.251.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 05 Jun 2026 00:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a3:3e:f8:89:eb:a7:d7:6f:67:79:63:99:a2:1e:ae:4f:b6:22:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Validity
Not Before: Jun 2 12:12:52 2026 GMT
Not After : Jun 1 12:17:52 2027 GMT
Subject: CN=8C1DECF7EA9523384DC4C76B545D16ABF0B46D32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:61:3f:07:c2:04:8e:67:31:83:40:66:77:
9c:19:a3:3e:5b:38:28:81:10:2b:98:c4:24:b0:b3:
14:d2:84:56:94:9e:a8:5f:a7:51:49:41:ab:2b:96:
fa:68:0e:18:02:00:db:13:97:ac:21:c0:e4:14:68:
6a:cf:fd:4d:62:7d:8b:37:5c:8a:ae:0e:d2:79:96:
62:42:04:55:71:3f:86:c6:3f:fe:dc:54:9d:3a:10:
43:49:8e:dc:a1:a8:e1:00:ca:5d:f3:52:df:98:a5:
a8:6c:3c:ab:8b:2c:f3:c2:61:e5:7e:78:c9:35:07:
8e:70:63:81:e0:a3:87:8e:c5:57:aa:91:04:c6:e9:
61:3c:2e:53:92:dd:cd:fe:65:fe:e7:33:a8:dd:be:
e5:6c:87:4a:1d:19:8b:bd:52:3f:05:6f:37:c2:92:
f1:4e:35:1c:d7:78:31:92:de:0e:f0:9d:64:23:6f:
66:11:ca:94:cb:fd:c0:93:d6:c3:78:46:27:d0:bc:
89:d1:ed:ad:9f:7e:70:b2:11:76:86:e3:b0:8e:8d:
ef:b5:c0:fa:e7:01:4a:37:29:a2:72:82:08:48:ae:
9f:25:a6:2c:d3:f4:6d:06:1b:53:9b:9a:be:ad:31:
94:5a:2b:8d:46:b1:8c:5a:84:1b:32:02:14:7c:8f:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1D:EC:F7:EA:95:23:38:4D:C4:C7:6B:54:5D:16:AB:F0:B4:6D:32
X509v3 Authority Key Identifier:
keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3230362e3235312e35322e302f32322d3234203d3e203332333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.251.52.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:af:d6:04:73:e0:ae:8b:2b:e0:f8:35:b4:7c:aa:6a:d4:d5:
62:9e:db:95:09:84:5e:94:3f:f2:30:f7:e2:1f:1a:f8:4d:93:
9c:f8:bc:86:7d:0d:ae:45:a0:32:11:a1:51:20:84:ca:2b:62:
0c:2e:20:c7:cf:c7:f5:56:e9:1d:91:8f:86:60:7a:7b:44:13:
73:cb:17:4d:66:c1:82:5f:99:fd:92:e3:a6:d0:85:b8:46:68:
ac:ae:3b:42:cb:a5:84:24:43:f6:93:41:b6:aa:69:97:5b:ca:
ed:a6:55:08:64:55:31:0c:f0:59:fd:5f:ab:46:d9:08:68:fb:
1b:df:d1:d6:ae:bc:48:e7:fc:89:77:7b:80:11:aa:3a:ac:9c:
b1:ab:fd:3a:c5:03:c2:7a:78:29:4d:2f:99:5e:e6:f5:32:a8:
b5:14:4c:d3:f6:96:f5:0b:85:25:1f:23:58:bd:20:ef:60:4e:
c9:0b:2a:48:ab:f2:ff:a7:f3:3c:0e:6c:71:af:37:ba:d8:1a:
1e:eb:4e:ed:22:2c:f8:28:aa:fe:d7:ae:06:f2:13:c0:50:56:
0f:64:be:bd:95:75:87:6e:d5:40:11:5c:1b:68:0a:71:eb:2a:
13:78:b7:66:ee:1a:94:76:fd:7f:5a:f4:ad:d6:33:40:ce:fb:
58:23:0c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:45 2026 by rpki-client