
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613434303a3a2f34342d3438203d3e20343032333333.roa
File: 323630323a663932613a613434303a3a2f34342d3438203d3e20343032333333.roa (raw, json)
Hash identifier: qWpF4db0PFED2OI9VAHFsbNv9PNsl/eT2q+zQ1uhkBQ=
Subject key identifier: 3D:3B:26:39:77:1C:DB:82:A5:9B:16:C9:60:3C:FE:BD:63:AF:EB:2B
Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial: 6443E2D2A2E6242EE5ED915B54FECFA03A47772D
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613434303a3a2f34342d3438203d3e20343032333333.roa
Signing time: Tue 02 Jun 2026 12:17:54 +0000
ROA not before: Tue 02 Jun 2026 12:12:54 +0000
ROA not after: Tue 01 Jun 2027 12:17:54 +0000
asID: 402333
IP address blocks: 2602:f92a:a440::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 05 Jun 2026 00:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:43:e2:d2:a2:e6:24:2e:e5:ed:91:5b:54:fe:cf:a0:3a:47:77:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Validity
Not Before: Jun 2 12:12:54 2026 GMT
Not After : Jun 1 12:17:54 2027 GMT
Subject: CN=3D3B2639771CDB82A59B16C9603CFEBD63AFEB2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:35:ef:d0:d7:11:db:79:eb:b5:b1:13:46:
ed:2b:69:d8:f5:5e:25:f0:9a:8a:53:5c:a9:08:9a:
a0:58:ae:0e:3a:cc:5a:d8:5a:cc:9e:5d:12:9f:05:
ea:a6:c4:05:a0:46:14:cd:81:0f:f9:8d:45:41:9e:
8a:47:50:22:ba:64:c9:a8:63:96:29:1d:c3:0e:ae:
2b:20:64:70:d3:48:9b:39:91:c4:dd:ac:f9:e9:e8:
f8:86:f2:c5:aa:58:bd:4c:62:cf:41:9e:21:1e:69:
66:a3:f3:9b:fb:16:75:85:ea:35:75:a9:bd:ce:93:
96:b4:b4:bd:64:55:83:45:4c:73:b5:fe:e1:cd:63:
11:e6:cd:f5:d5:84:03:9f:5f:4b:9a:9d:91:98:c2:
b2:4b:54:20:9a:d5:f6:4c:80:af:ba:d9:3d:f2:2b:
88:35:a8:6b:84:cb:6e:35:71:fa:78:e2:bc:15:24:
17:e2:95:0b:d8:24:67:9a:11:16:95:2e:ae:85:28:
8c:6e:47:15:7b:f3:ae:c1:92:fb:e4:ad:65:23:6d:
26:31:53:7e:af:fb:22:ad:8d:4c:17:d5:31:e0:3c:
cb:06:8c:7e:1a:34:5f:c1:79:93:95:a8:35:1f:96:
0d:72:9c:dc:15:f2:40:30:6c:b3:5d:56:53:e9:3c:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3B:26:39:77:1C:DB:82:A5:9B:16:C9:60:3C:FE:BD:63:AF:EB:2B
X509v3 Authority Key Identifier:
keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613434303a3a2f34342d3438203d3e20343032333333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:a440::/44
Signature Algorithm: sha256WithRSAEncryption
bc:d8:fb:c4:fd:11:ac:b7:c6:bf:b5:32:a3:88:34:90:4a:65:
a2:88:c0:24:05:e1:77:11:c7:8f:1c:bc:8a:15:89:15:cb:fd:
1c:3c:c2:8e:46:e3:fe:ce:37:fd:e6:8d:7b:98:e5:dd:26:5d:
91:a0:ad:b9:d2:a7:b8:bb:07:ec:a5:6f:81:83:e8:69:2f:e2:
79:9f:b5:7c:cf:f1:21:db:94:64:24:e1:a8:02:13:e0:76:2d:
2b:07:eb:df:38:de:eb:cf:8a:ab:d5:6f:33:9c:51:26:73:ad:
17:28:6e:e0:19:aa:d6:01:ce:55:18:29:79:2f:94:c3:2c:f2:
9f:f6:30:0c:74:bd:c4:20:bf:a2:eb:43:1b:c1:83:19:7e:a9:
76:6e:a0:a7:44:72:91:9c:a1:c7:7c:8c:dd:82:3a:49:aa:18:
13:63:7c:b4:99:4a:0a:85:a6:a2:9d:b7:6a:a7:7c:61:72:b6:
00:7b:f2:8b:19:05:56:1b:8f:5c:a4:8e:03:30:b4:83:c3:01:
17:be:bf:a4:85:43:42:18:51:e7:8c:61:7a:dd:7e:25:0d:8d:
94:7b:4e:cf:c8:78:6a:a5:d3:20:e3:4f:24:8b:71:06:b0:cc:
fb:23:78:94:97:d2:e2:8f:71:4e:46:16:97:cb:81:30:bd:72:
3c:ac:19:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:48 2026 by rpki-client