
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a3a2f33322d3438203d3e203533383038.roa
File: 323630323a663932613a3a2f33322d3438203d3e203533383038.roa (raw, json)
Hash identifier: LT2vC71LYIISKyB/SlPmBZJXmvfj1bw4ztuRpmE1F8E=
Subject key identifier: 0B:83:EA:49:E4:6E:9E:71:0D:33:5C:A2:2D:EF:A0:4E:CA:0A:92:38
Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial: 62CF15BEAEA79EB8D6B05F036CD2B0204CFBF522
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a3a2f33322d3438203d3e203533383038.roa
Signing time: Tue 02 Jun 2026 12:17:50 +0000
ROA not before: Tue 02 Jun 2026 12:12:50 +0000
ROA not after: Tue 01 Jun 2027 12:17:50 +0000
asID: 53808
IP address blocks: 2602:f92a::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Jun 2026 20:38:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:cf:15:be:ae:a7:9e:b8:d6:b0:5f:03:6c:d2:b0:20:4c:fb:f5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Validity
Not Before: Jun 2 12:12:50 2026 GMT
Not After : Jun 1 12:17:50 2027 GMT
Subject: CN=0B83EA49E46E9E710D335CA22DEFA04ECA0A9238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:9e:a3:76:ba:ce:be:41:30:e4:7f:68:58:
ab:51:02:cf:3f:61:ff:e0:8e:94:6f:69:2b:a1:c1:
d8:f2:83:1d:77:16:83:39:88:a8:42:2d:53:f6:25:
c2:8b:d1:c0:19:6a:ff:ce:50:9d:65:58:dd:8e:40:
2b:a7:ab:62:c8:f5:92:c8:5a:1c:27:c7:4f:ba:98:
ca:93:e3:cf:cb:0f:7d:ea:9e:a6:13:7a:01:3f:cc:
5e:3a:b3:bc:c5:64:c0:21:ac:34:a4:d2:32:71:b1:
a9:16:94:68:99:69:50:a2:4f:35:93:ce:24:7e:7f:
d3:51:d4:c3:74:bc:7b:7f:cf:f5:02:d7:47:32:1a:
05:8d:a0:e8:42:31:23:65:e3:99:0d:77:2a:ea:6b:
b9:fb:cc:f3:0b:26:19:99:f2:b8:54:9a:96:2e:96:
7f:b9:89:4a:72:8f:f7:20:64:d4:a3:d7:49:b7:7c:
9a:82:1a:bf:21:69:8a:2f:52:00:92:db:5c:06:44:
56:d1:65:dd:ee:4c:2d:77:ee:8d:1f:ae:45:0b:2c:
01:d0:bf:a6:38:bf:c8:11:6b:d8:59:20:80:99:56:
6d:ff:6b:41:3f:35:d1:97:f9:f2:08:1e:60:11:ab:
ee:69:7f:85:da:f1:fa:c7:7e:1a:57:ed:29:27:61:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:83:EA:49:E4:6E:9E:71:0D:33:5C:A2:2D:EF:A0:4E:CA:0A:92:38
X509v3 Authority Key Identifier:
keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a3a2f33322d3438203d3e203533383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a::/32
Signature Algorithm: sha256WithRSAEncryption
a1:26:6a:b4:de:e6:6b:c5:53:85:d8:5f:ba:75:07:90:e7:ed:
4b:f7:84:ff:6b:ae:80:71:1b:36:c6:e7:f9:51:77:3c:8b:ab:
07:3d:b1:9f:a0:f0:d2:30:ce:64:c6:42:48:90:c2:9b:33:35:
19:4a:a2:1e:60:6e:f1:64:df:9b:ec:6e:00:bd:d7:fa:4d:2e:
35:68:c1:b8:0f:31:f4:82:2f:8f:6b:5e:28:12:54:02:60:92:
e7:7a:d5:b5:2c:c3:94:ac:19:32:e1:de:0c:80:fc:83:0b:7f:
2f:4a:30:43:fd:7b:0d:9d:14:9b:78:b9:f7:81:74:20:6c:4e:
e1:02:71:7f:99:d2:f9:42:1d:d9:7e:bf:3e:17:0c:64:58:d1:
d0:be:a5:d0:3c:09:01:c6:89:5a:d0:5d:c9:f1:43:d6:48:ea:
c9:9f:20:38:3e:f4:f6:97:56:b4:99:01:8a:a5:cf:8b:ef:47:
98:84:96:cf:a6:82:de:a8:03:d6:e6:f4:93:4a:28:fb:8e:fe:
53:5c:c1:73:7d:3d:bd:d2:12:15:b0:a9:bd:97:ac:0f:38:d1:
1c:03:7c:eb:88:d2:04:9e:28:60:4c:61:a6:6b:01:6e:08:29:
62:31:ac:5b:60:7e:cf:04:30:64:1a:08:26:e9:d8:9b:e4:19:
15:8d:83:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 23:25:23 2026 by rpki-client