
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa
File: 323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa (raw, json)
Hash identifier: hRmLydWmcfazDzBdzKkHMSyYRS6IDeOppP0EGdhb/JQ=
Subject key identifier: 23:E8:C2:D0:9B:40:7F:B8:82:E9:A6:AF:85:86:2F:1F:A9:50:33:32
Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial: 580EB611FE708FF1B769F566489F809D2D9052DE
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa
Signing time: Tue 02 Jun 2026 12:17:45 +0000
ROA not before: Tue 02 Jun 2026 12:12:45 +0000
ROA not after: Tue 01 Jun 2027 12:17:45 +0000
asID: 214955
IP address blocks: 2602:f92a:a46d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 05 Jun 2026 00:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:0e:b6:11:fe:70:8f:f1:b7:69:f5:66:48:9f:80:9d:2d:90:52:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Validity
Not Before: Jun 2 12:12:45 2026 GMT
Not After : Jun 1 12:17:45 2027 GMT
Subject: CN=23E8C2D09B407FB882E9A6AF85862F1FA9503332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5b:95:ce:17:ed:1b:7f:ab:a1:58:ee:ad:78:
0c:ff:9b:97:08:d2:2f:77:d4:9f:74:e0:ae:ea:9a:
64:b6:44:f6:33:cd:d5:96:57:ca:bc:72:b1:f3:fa:
0b:8b:84:e0:79:6e:f6:fd:d7:f3:ac:fd:7b:24:fd:
dd:a3:8e:2b:92:8f:75:58:cc:dd:26:2d:05:40:86:
0b:dc:eb:e9:c1:c9:14:58:70:52:70:0d:a9:a4:1b:
2c:b8:ba:b6:ba:e1:6e:65:3b:15:f1:05:16:56:1b:
97:ed:5b:8c:9b:8a:77:13:ff:4b:3f:b5:52:36:86:
fb:6f:a9:c8:e1:cb:01:97:f6:dc:10:ed:99:69:e5:
90:61:d0:7f:65:08:b1:5a:21:c8:a3:23:30:9a:05:
00:ef:2c:51:ae:39:39:3c:37:f6:ec:e9:69:a0:18:
4c:a4:8f:b5:97:2f:10:50:a7:29:c8:45:c4:df:ae:
20:62:07:de:6a:ff:1a:5d:91:83:69:6a:91:81:3b:
ac:e5:47:b3:5b:62:32:2b:1d:7b:53:f8:2b:23:d5:
b4:29:88:ba:57:9a:a1:0f:94:cd:ec:14:1b:ab:d6:
2e:78:96:2c:f2:c9:55:dd:69:c1:90:e4:b6:7e:59:
4e:07:0f:e7:ec:3d:4c:72:c3:f0:94:31:0f:8c:f8:
31:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E8:C2:D0:9B:40:7F:B8:82:E9:A6:AF:85:86:2F:1F:A9:50:33:32
X509v3 Authority Key Identifier:
keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:a46d::/48
Signature Algorithm: sha256WithRSAEncryption
04:49:39:b0:47:10:67:55:85:40:f7:3e:11:6d:93:a7:a9:06:
5e:f2:05:6b:a2:f2:68:8f:e1:82:92:f0:79:e8:88:ef:73:a7:
cb:32:be:e0:54:4c:ff:94:53:e1:78:0f:59:0e:d0:c3:36:13:
3e:31:eb:1a:c4:f9:ef:dc:6f:f6:38:ab:65:6e:97:c0:d5:ba:
a0:cf:6f:9f:5b:b2:39:dd:d3:75:63:b1:4f:ea:8c:53:b4:44:
f2:40:a9:be:4c:d1:83:b6:41:fa:d0:9d:6e:84:d2:4c:a2:5d:
5e:f0:b0:d1:60:f2:7c:16:a9:33:ff:fa:a4:cb:73:7d:98:9a:
2d:7c:b4:8a:30:57:2b:2b:23:3d:90:8b:37:1f:a1:8f:d7:36:
fe:67:de:49:eb:d0:07:a1:4d:88:d9:94:93:b7:79:0b:1c:04:
6d:e5:8c:25:4e:e9:ff:a6:9c:58:00:05:d3:a1:69:4f:64:32:
8b:2f:aa:40:58:7b:3d:37:40:42:2b:9f:62:bb:3e:95:ae:9c:
d6:b3:fc:ac:91:e3:33:56:2d:4f:40:13:28:fe:8b:9d:88:32:
78:74:d4:fa:f3:46:c8:ca:de:12:29:7e:73:b0:44:ed:bc:e6:
1e:31:c4:61:23:66:2c:50:03:cd:f6:b1:4b:7a:90:3d:df:52:
b0:34:04:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:25 2026 by rpki-client