
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332353a3a2f34382d3438203d3e20323138363638.roa
File: 323630323a663932613a313332353a3a2f34382d3438203d3e20323138363638.roa (raw, json)
Hash identifier: 0CSLc9/U/LBjoM6KltGXFkarbgj/4b8PhwP37cHowmM=
Subject key identifier: 12:76:C9:44:5E:96:97:E7:98:5F:96:91:59:E7:2D:10:1B:65:1C:5A
Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial: 12265B0C83F3473B0678EC3B709D20E42AEDF9CA
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332353a3a2f34382d3438203d3e20323138363638.roa
Signing time: Fri 23 Oct 2026 00:11:59 +0000
ROA not before: Fri 23 Oct 2026 00:06:59 +0000
ROA not after: Fri 22 Oct 2027 00:11:59 +0000
asID: 218668
IP address blocks: 2602:f92a:1325::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 24 Oct 2026 04:27:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:26:5b:0c:83:f3:47:3b:06:78:ec:3b:70:9d:20:e4:2a:ed:f9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Validity
Not Before: Oct 23 00:06:59 2026 GMT
Not After : Oct 22 00:11:59 2027 GMT
Subject: CN=1276C9445E9697E7985F969159E72D101B651C5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f9:f8:03:c5:f7:77:9f:bb:74:08:8d:6d:c5:
6c:cb:ab:ab:d8:c8:97:60:f6:d7:3f:c1:eb:d8:3b:
e5:49:ce:ba:51:c6:10:ee:01:cb:af:ab:69:31:88:
09:28:0d:9a:79:e0:06:82:f5:e3:bd:00:2a:8b:1d:
dc:7c:29:3a:e3:7e:a6:0c:ad:e5:39:58:71:64:7b:
86:d9:df:ca:c1:3f:d9:3f:6e:0a:fa:14:86:2a:1a:
9f:f0:a7:31:f0:3d:47:b5:30:69:d8:7b:81:c6:71:
7e:04:89:20:f6:fb:a0:3f:66:ab:ad:af:66:e7:16:
3d:9a:39:79:d9:14:b5:cf:06:b4:76:dd:71:73:de:
c6:84:ff:7c:69:29:96:a6:3c:f6:74:cc:6d:62:19:
96:35:f9:60:eb:4f:0d:e5:cf:86:03:cf:27:89:ea:
12:7a:de:21:2c:98:c5:9f:a0:3d:09:9a:53:cb:f5:
4b:8b:7a:c3:3c:33:99:ec:e9:fd:37:bf:0e:13:33:
1d:97:fa:e6:c9:4c:af:6d:03:01:3e:eb:b0:15:52:
38:01:6b:3c:73:1e:a7:9d:a8:59:7b:f6:23:50:ca:
02:c8:be:d2:c6:22:64:2e:b1:a7:da:7c:d0:4b:70:
1d:6e:f1:58:70:a4:e9:53:3b:89:07:68:c7:2e:ea:
29:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:76:C9:44:5E:96:97:E7:98:5F:96:91:59:E7:2D:10:1B:65:1C:5A
X509v3 Authority Key Identifier:
keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332353a3a2f34382d3438203d3e20323138363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:1325::/48
Signature Algorithm: sha256WithRSAEncryption
88:a6:f0:5c:16:48:eb:c2:01:d0:57:98:4b:52:ca:15:70:2c:
e7:44:4a:14:65:11:0c:2f:e2:65:17:7a:80:7a:8b:3d:cd:b2:
91:92:ae:2e:2f:c8:95:1f:74:fb:28:6e:34:76:3b:ab:f7:fa:
b5:ea:b4:59:94:95:c0:a0:a5:85:d4:d0:b8:b6:a6:6f:99:6d:
11:83:42:e6:51:d3:e6:dc:e2:ea:32:72:90:db:93:f9:5c:d7:
dd:3d:33:f0:cb:b8:14:11:6d:77:6f:67:09:c1:75:53:a1:5c:
26:9a:db:06:ad:a9:cf:4d:0b:c0:1d:7c:79:89:4e:a5:e6:6f:
c2:29:5c:3b:b1:0a:56:c9:9b:0c:bc:25:ba:c7:90:c9:f3:af:
1f:67:ac:45:cf:35:45:4a:5c:08:96:aa:b6:9a:1e:af:9a:c8:
27:af:46:e2:76:8b:2b:03:cc:05:f3:c2:09:9d:5f:dc:2a:ee:
67:e4:4f:b9:17:77:22:ee:89:2f:0a:4f:3d:8c:f6:7c:38:25:
60:8b:fe:fb:36:c1:47:b3:c9:b7:d3:c2:5e:f7:66:4c:3d:3b:
97:51:da:c3:e1:fa:d7:94:26:fc:af:dd:93:03:8a:9a:02:c1:
c7:4c:85:e5:ae:91:8e:3a:dd:68:bc:85:35:6f:4c:a8:f3:dd:
ae:0e:54:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:10:30 2026 by rpki-client