
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436303a3a2f34382d3438203d3e20313430363832.roa
File: 323630323a663932613a613436303a3a2f34382d3438203d3e20313430363832.roa (raw, json)
Hash identifier: Co7gtWebQzN+Uxmyz98AFg3I4g0p540cVklK38VZR8U=
Subject key identifier: EA:7D:0C:6F:A2:AE:14:46:DF:A4:34:F0:2C:E4:9E:0E:52:EC:0E:22
Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial: 772DBBCF085566553924EB5C24EA0C93EAE03EAA
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436303a3a2f34382d3438203d3e20313430363832.roa
Signing time: Tue 02 Jun 2026 12:17:55 +0000
ROA not before: Tue 02 Jun 2026 12:12:55 +0000
ROA not after: Tue 01 Jun 2027 12:17:55 +0000
asID: 140682
IP address blocks: 2602:f92a:a460::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 05 Jun 2026 00:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:2d:bb:cf:08:55:66:55:39:24:eb:5c:24:ea:0c:93:ea:e0:3e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Validity
Not Before: Jun 2 12:12:55 2026 GMT
Not After : Jun 1 12:17:55 2027 GMT
Subject: CN=EA7D0C6FA2AE1446DFA434F02CE49E0E52EC0E22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:93:ee:8f:99:c2:3b:c3:14:d2:dc:b3:8b:
f5:6a:e7:91:f3:74:ac:1f:d0:66:37:51:ab:e9:7a:
cd:f7:b8:d4:f9:b2:28:19:4f:01:ed:d8:bc:92:e5:
20:82:cd:24:8c:5c:e8:a3:c4:b0:31:c0:82:ad:c9:
9c:7e:70:6d:43:28:75:2a:cb:85:f3:90:4d:ec:eb:
d0:c4:27:81:95:69:f3:b9:a5:ab:98:51:4e:f8:53:
75:8a:45:a4:cd:19:61:6d:7e:37:91:d2:0c:b0:4d:
7d:d8:98:46:d4:f2:b7:ea:b3:82:d0:b0:bb:04:ac:
81:8d:48:ea:d1:1b:1b:c6:a5:bd:f6:43:47:d1:f3:
fa:27:83:31:8e:5b:d1:7a:25:c3:21:1c:ee:25:72:
7b:c4:cf:75:6e:2e:3b:98:74:22:9c:12:ed:7d:68:
cb:03:15:86:d1:d7:8f:cc:37:c9:5b:d6:45:91:70:
b7:cc:a4:59:6c:61:79:fc:9f:2e:fa:0d:2f:f7:bb:
a7:90:20:2c:61:d1:3e:9d:68:4f:5e:ff:62:0d:e7:
7c:97:fe:81:4f:e0:d3:7f:bd:9d:76:9f:07:b8:88:
aa:3a:04:94:cc:8c:9a:99:4c:89:80:99:2d:27:81:
3b:8d:a6:f5:42:26:18:00:bd:ee:0e:d9:0a:3d:43:
a6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7D:0C:6F:A2:AE:14:46:DF:A4:34:F0:2C:E4:9E:0E:52:EC:0E:22
X509v3 Authority Key Identifier:
keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436303a3a2f34382d3438203d3e20313430363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:a460::/48
Signature Algorithm: sha256WithRSAEncryption
43:d3:17:c2:4f:ce:c9:17:7c:64:e7:3c:69:c2:62:88:4d:34:
22:43:b4:0b:22:9a:c3:70:14:59:30:f2:39:9d:14:05:87:f2:
d3:cc:7c:a2:8a:8f:f9:6d:45:55:44:8e:06:e2:ac:3b:1c:42:
b2:1e:2a:c0:4c:4e:39:b8:91:2e:06:2e:31:53:a2:b1:4b:f6:
af:21:15:f5:f9:28:70:be:41:d4:d1:33:6a:20:5c:76:64:8a:
1c:a1:9a:9c:72:51:a8:37:ff:97:fc:04:8e:b0:c2:25:0c:64:
51:4a:e6:c5:f3:60:84:3e:ba:c8:ae:8a:48:57:05:39:d0:ce:
87:ec:00:7a:06:f8:2c:f8:43:b6:d3:3a:f7:09:1f:ea:9f:3f:
ad:17:0d:d3:33:4e:35:d5:aa:57:71:1a:93:62:48:5d:96:44:
49:d0:d5:73:12:63:9f:b9:5a:43:7b:f7:fd:ff:0c:9a:f2:85:
39:76:b1:19:1a:41:7b:a6:f4:92:a8:bf:c1:ba:77:33:e3:dd:
a2:28:d5:00:64:d5:2d:34:84:9f:6b:bd:f9:7c:33:b8:59:3f:
3d:d5:ce:da:0d:61:af:dd:13:06:cb:13:8c:2f:d7:02:59:31:
4f:bc:87:9a:2b:66:4d:21:bd:e4:56:e5:e4:8b:12:fc:cc:44:
85:48:38:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:39 2026 by rpki-client