
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613435303a3a2f34342d3438203d3e20323037363138.roa
File: 323630323a663932613a613435303a3a2f34342d3438203d3e20323037363138.roa (raw, json)
Hash identifier: wMJaCx/oJIr9tqUJ+x/RNO6ixDffZOKO0l1RGPAlg0Q=
Subject key identifier: 63:1E:6D:6B:ED:33:8C:05:B2:84:F4:AB:D1:AC:81:56:A5:8D:7F:9A
Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial: 67C678CFF1D0A13D4EC6C9774897DFA1F9E16CAD
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613435303a3a2f34342d3438203d3e20323037363138.roa
Signing time: Tue 02 Jun 2026 12:17:46 +0000
ROA not before: Tue 02 Jun 2026 12:12:46 +0000
ROA not after: Tue 01 Jun 2027 12:17:46 +0000
asID: 207618
IP address blocks: 2602:f92a:a450::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 05 Jun 2026 01:14:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c6:78:cf:f1:d0:a1:3d:4e:c6:c9:77:48:97:df:a1:f9:e1:6c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Validity
Not Before: Jun 2 12:12:46 2026 GMT
Not After : Jun 1 12:17:46 2027 GMT
Subject: CN=631E6D6BED338C05B284F4ABD1AC8156A58D7F9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:10:d1:e9:58:7b:94:ed:8c:44:cb:e4:a0:65:
a0:1b:eb:ca:d4:af:69:12:55:05:be:fe:47:a6:6c:
a0:5a:51:18:bc:6c:4e:de:77:72:63:8c:3d:94:56:
f5:f3:8a:cc:94:13:bf:e1:cf:e4:d3:58:5a:b8:1a:
65:2a:f1:1f:8e:90:76:e5:10:61:c0:df:cd:2e:08:
4e:c9:15:29:7f:8a:22:3c:85:c1:a7:29:fa:46:0b:
f4:2f:b6:d2:3c:0c:56:02:23:56:2f:a3:aa:78:02:
57:3d:ce:8a:8f:4f:98:d4:09:58:03:5b:ec:40:ad:
fa:73:cb:63:48:86:f3:72:90:e0:12:22:95:b9:70:
28:0f:32:6e:e2:ea:e8:dd:22:97:e3:1c:a5:aa:cb:
37:9f:cb:1d:38:87:0b:19:63:2d:5b:38:ba:e2:7c:
13:f7:c1:b2:1c:52:9f:6e:a9:ff:4d:e8:76:22:5d:
c0:63:34:8e:9a:a4:d7:eb:08:94:e1:dd:72:64:95:
f0:88:74:0a:c6:89:a0:fb:dc:e1:01:9a:aa:19:e3:
e0:7a:dd:5a:24:94:4d:64:99:a4:43:7e:90:1c:f9:
dd:97:46:e4:75:37:12:e0:a0:bc:7f:b5:0c:ba:5a:
25:b1:77:6b:f1:e7:1b:e9:14:03:21:3b:3b:c1:bd:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1E:6D:6B:ED:33:8C:05:B2:84:F4:AB:D1:AC:81:56:A5:8D:7F:9A
X509v3 Authority Key Identifier:
keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613435303a3a2f34342d3438203d3e20323037363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:a450::/44
Signature Algorithm: sha256WithRSAEncryption
64:55:91:19:51:25:b8:42:f5:a7:6e:b2:90:74:a3:8c:56:1e:
79:9f:8f:1e:c8:fa:73:ac:25:e7:e3:e2:d1:a8:6d:47:14:4a:
c2:fe:94:77:da:85:4e:40:6a:5b:ea:e6:29:bd:9d:b5:12:ca:
78:e0:a3:74:3b:44:da:84:2c:fb:9b:f5:07:56:ba:87:57:cf:
ab:24:80:f3:08:05:d2:ed:4a:35:8a:26:d0:ba:34:39:77:39:
5c:d2:0e:69:4a:73:68:75:c5:f2:9f:3b:f0:18:1e:5b:c6:df:
9b:13:8a:21:f0:8d:e4:de:37:08:4e:43:b2:12:92:3b:25:1b:
67:1b:4f:99:47:8a:3d:a5:1a:d3:53:b5:b4:7c:99:99:e3:3c:
53:bf:fe:41:ba:4e:a0:e8:c5:18:98:0d:2f:70:aa:db:c6:05:
90:d5:34:2c:e2:c0:1d:0c:ac:ef:e2:44:0a:98:b8:e6:53:ab:
aa:b4:d4:5e:0b:4f:dc:1e:ee:55:4c:49:6b:cd:99:4f:1a:3c:
69:bd:0e:8f:70:08:21:79:92:e0:18:99:e7:62:ec:14:a0:f8:
e4:12:42:a4:de:0d:e5:be:74:7c:a4:0b:46:5a:d5:66:62:52:
b4:a7:6d:6f:ba:24:97:5c:99:9b:97:88:2f:43:37:86:8b:c2:
30:14:de:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:26 2026 by rpki-client