
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa
File: 323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa (raw, json)
Hash identifier: guUiC73vuLzaoAJ2h+wTIZOnjGEjHAB4N8uRqyV9/e4=
Subject key identifier: 67:03:C2:76:8E:A6:16:82:D6:05:EE:89:BC:83:9D:4A:F3:12:C1:DC
Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial: 6CFFA2881706FDCE29EB266777D5E4D205D3C3C7
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa
Signing time: Tue 02 Jun 2026 12:17:45 +0000
ROA not before: Tue 02 Jun 2026 12:12:45 +0000
ROA not after: Tue 01 Jun 2027 12:17:45 +0000
asID: 203236
IP address blocks: 2602:f92a:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 05 Jun 2026 00:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ff:a2:88:17:06:fd:ce:29:eb:26:67:77:d5:e4:d2:05:d3:c3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Validity
Not Before: Jun 2 12:12:45 2026 GMT
Not After : Jun 1 12:17:45 2027 GMT
Subject: CN=6703C2768EA61682D605EE89BC839D4AF312C1DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:f1:04:e3:83:f0:c0:20:58:e6:13:35:77:
44:46:74:eb:32:a4:d2:eb:b2:80:f1:9c:e7:a8:bb:
15:2c:05:26:8d:63:96:8b:f7:80:aa:21:73:92:ae:
ec:06:7f:5e:8f:c6:ad:bb:b1:91:14:44:f4:ff:3f:
ad:7b:46:f0:ac:ed:c2:bc:3a:7e:76:4d:39:4f:8f:
27:38:2b:0c:72:37:90:0d:23:0d:70:df:46:b9:38:
d3:bf:bf:4c:62:11:96:74:e3:0a:a7:b5:1c:3b:8d:
66:05:d6:10:f3:58:4a:cc:4c:e3:4d:ed:39:8f:bc:
0c:6f:b2:01:4c:f6:bb:61:81:35:5d:04:76:59:48:
08:c2:2c:81:99:dd:ac:fc:81:ef:9b:db:95:dc:0e:
b4:e7:ac:d6:64:d8:c4:c6:d4:6d:cc:ec:19:f4:cf:
e3:e1:18:d0:96:c1:e8:6e:4a:14:17:f8:0e:c7:42:
f2:d7:93:59:27:27:ba:5e:e8:cf:68:40:04:84:97:
4d:f8:bb:47:f8:6e:94:dc:6c:4e:d4:0f:e4:74:43:
a4:82:56:33:d3:14:b7:74:7d:29:4a:fe:93:53:47:
6f:8b:5b:52:9b:d0:5e:00:20:cb:1f:7e:d8:77:aa:
5c:98:9a:1c:35:30:c2:e5:7c:4c:00:63:4b:08:79:
a5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:03:C2:76:8E:A6:16:82:D6:05:EE:89:BC:83:9D:4A:F3:12:C1:DC
X509v3 Authority Key Identifier:
keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:e000::/40
Signature Algorithm: sha256WithRSAEncryption
67:2e:03:01:cf:37:78:ae:d6:65:79:24:24:67:d1:d3:00:1e:
39:ff:3e:e7:bf:8d:a9:dd:77:9a:c4:c7:5f:30:bd:68:b6:6c:
a8:44:66:43:a2:38:bd:31:46:f8:b4:c6:d5:3c:f5:09:9f:f0:
bd:c0:48:f4:ba:df:f2:1e:fd:df:37:37:d7:2d:3e:ce:28:eb:
65:97:10:a9:9e:bc:35:fc:c3:ea:46:07:32:3e:9b:43:09:d7:
fe:38:61:e9:d5:af:f0:b6:2c:c6:1f:04:55:0a:e3:ab:2e:a9:
97:30:d2:46:35:1b:78:a9:b6:2c:a5:50:75:16:05:a1:bb:f2:
9f:ee:44:88:77:49:21:47:35:f0:4f:23:70:4a:bd:88:a8:12:
5c:89:00:be:51:dd:1f:1b:61:cd:64:86:4a:bc:b8:db:02:10:
1f:aa:19:d1:f5:a0:d9:b1:57:75:64:cf:98:1d:11:5f:85:85:
bd:5d:d5:e2:0a:ca:8e:56:ad:4d:ea:57:92:42:9c:29:70:a0:
c9:8d:f3:76:f6:e9:fe:a5:a2:51:78:ab:69:86:f9:e0:d0:4d:
05:18:0d:2c:8a:1f:64:04:9b:4b:0f:06:75:20:1b:9f:45:9d:
cf:da:12:90:7c:34:4d:28:64:dd:6e:68:1d:ac:f0:d2:36:ce:
01:5d:6d:9a
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUbP+iiBcG/c4p6yZnd9Xk0gXTw8cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4
ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYwNjAyMTIxMjQ1WhcNMjcwNjAxMTIxNzQ1
WjAzMTEwLwYDVQQDEyg2NzAzQzI3NjhFQTYxNjgyRDYwNUVFODlCQzgzOUQ0QUYz
MTJDMURDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZvxBOOD8MAg
WOYTNXdERnTrMqTS67KA8ZznqLsVLAUmjWOWi/eAqiFzkq7sBn9ej8atu7GRFET0
/z+te0bwrO3CvDp+dk05T48nOCsMcjeQDSMNcN9GuTjTv79MYhGWdOMKp7UcO41m
BdYQ81hKzEzjTe05j7wMb7IBTPa7YYE1XQR2WUgIwiyBmd2s/IHvm9uV3A6056zW
ZNjExtRtzOwZ9M/j4RjQlsHobkoUF/gOx0Ly15NZJye6XujPaEAEhJdN+LtH+G6U
3GxO1A/kdEOkglYz0xS3dH0pSv6TU0dvi1tSm9BeACDLH37Yd6pcmJocNTDC5XxM
AGNLCHmlDQIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFGcDwnaOphaC1gXuibyDnUrz
EsHcMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5
LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4
NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt
NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k
OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi
NWQ4YTU5YTI2NDUwYzguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH
MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy
M2E2NjM5MzI2MTNhNjUzMDMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMw
MzMzMjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAmAvkq4DANBgkqhkiG9w0BAQsFAAOCAQEAZy4D
Ac83eK7WZXkkJGfR0wAeOf8+57+Nqd13msTHXzC9aLZsqERmQ6I4vTFG+LTG1Tz1
CZ/wvcBI9Lrf8h793zc31y0+zijrZZcQqZ68NfzD6kYHMj6bQwnX/jhh6dWv8LYs
xh8EVQrjqy6plzDSRjUbeKm2LKVQdRYFobvyn+5EiHdJIUc18E8jcEq9iKgSXIkA
vlHdHxthzWSGSry42wIQH6oZ0fWg2bFXdWTPmB0RX4WFvV3V4grKjlatTepXkkKc
KXCgyY3zdvbp/qWiUXiraYb54NBNBRgNLIofZASbSw8GdSAbn0Wdz9oSkHw0TShk
3W5oHazw0jbOAV1tmg==
-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:38 2026 by rpki-client