
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a653130303a3a2f34342d3438203d3e20313430393135.roa
File: 323630323a663932613a653130303a3a2f34342d3438203d3e20313430393135.roa (raw, json)
Hash identifier: tvfhoNZh35UCccICcBj2lvC0wCctfUKk6Vp9+38bW1o=
Subject key identifier: BA:32:5B:3A:91:EE:93:F5:E2:1A:CD:4C:31:09:F3:DC:AD:07:69:7C
Certificate issuer: /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial: 1210E3B5269558149C1BCC5B4153328E0E3D984D
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a653130303a3a2f34342d3438203d3e20313430393135.roa
Signing time: Tue 02 Jun 2026 12:17:51 +0000
ROA not before: Tue 02 Jun 2026 12:12:51 +0000
ROA not after: Tue 01 Jun 2027 12:17:51 +0000
asID: 140915
IP address blocks: 2602:f92a:e100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 05 Jun 2026 00:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:10:e3:b5:26:95:58:14:9c:1b:cc:5b:41:53:32:8e:0e:3d:98:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Validity
Not Before: Jun 2 12:12:51 2026 GMT
Not After : Jun 1 12:17:51 2027 GMT
Subject: CN=BA325B3A91EE93F5E21ACD4C3109F3DCAD07697C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:62:c4:7f:06:97:af:fb:8e:0f:32:8a:c8:29:
dc:cb:07:e2:cf:06:9b:16:6d:13:6e:01:f9:eb:31:
e5:6a:b5:82:2c:63:1d:0d:1f:0a:fb:bc:8d:33:91:
ff:99:4f:48:22:32:08:21:da:80:c3:90:ed:0a:24:
96:3e:92:3a:2a:08:ce:fc:72:80:5c:4e:8f:a2:c1:
95:ee:f3:35:e0:cb:e9:d1:69:ef:a1:de:96:21:0a:
de:cb:64:39:84:3f:de:4e:97:c7:05:c1:b4:9f:93:
eb:7f:a6:c8:1e:46:c1:8a:c0:22:e8:fc:77:40:0e:
cb:5f:37:ff:58:1f:5a:79:7d:cc:8d:d2:56:88:37:
60:04:58:2d:9e:3c:95:07:39:e0:8d:a4:4f:e6:41:
44:11:ab:58:9f:87:be:6f:87:8c:62:66:22:7a:ea:
3a:09:f5:a6:1e:21:b2:71:3c:1c:bc:92:73:f5:11:
d7:bd:9a:69:4b:52:2c:9d:b5:f1:af:5c:56:a1:33:
7f:f1:56:a6:02:c3:65:58:0c:ed:6e:bf:0c:40:2c:
56:38:ce:8f:18:03:c8:e6:e6:cd:9d:69:8d:51:00:
e2:88:d1:da:86:a8:80:34:f7:2c:8e:de:99:9c:78:
50:af:75:74:8c:27:1d:7d:7d:d6:b1:ba:62:84:86:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:32:5B:3A:91:EE:93:F5:E2:1A:CD:4C:31:09:F3:DC:AD:07:69:7C
X509v3 Authority Key Identifier:
keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a653130303a3a2f34342d3438203d3e20313430393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:e100::/44
Signature Algorithm: sha256WithRSAEncryption
8a:bb:dd:1f:e2:97:80:a9:5c:69:79:e9:5d:b5:29:19:12:a2:
3a:87:a4:ae:63:2d:80:ac:08:9e:78:a0:62:2d:6a:bd:31:24:
53:95:4c:6d:52:50:22:dd:32:94:61:e7:48:35:8b:df:77:35:
54:a2:bc:4b:87:24:d2:22:9c:4a:07:75:45:74:7f:17:45:df:
6e:86:72:1c:59:e3:ca:8d:ee:26:fb:5b:00:ba:15:62:dd:91:
0b:27:ec:ea:5f:f2:25:57:6b:88:ab:67:2d:d7:22:dd:47:7b:
fc:59:f2:64:24:3a:69:8a:ce:f3:7f:8d:9a:83:21:30:73:54:
4d:aa:3e:02:79:41:12:5b:9c:5d:9f:42:34:e1:78:5e:49:42:
e3:75:c8:fe:d4:29:8c:fe:ab:30:de:85:fb:9e:d4:cc:df:38:
f0:08:d5:5c:a4:5e:8b:38:7b:46:9e:50:c5:7a:9a:55:0d:64:
67:ba:a0:94:3f:3d:dd:bc:f4:37:ec:78:de:84:d0:b5:be:43:
86:0b:dd:07:f3:cc:69:df:d1:24:87:a2:22:7f:cb:2c:72:7e:
dd:de:ee:81:6d:bc:49:11:04:59:25:b8:c3:13:05:88:60:e3:
fa:a4:0d:b9:e0:4b:b4:f9:47:0b:cb:3e:5c:fc:06:b8:56:64:
51:6d:19:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:39 2026 by rpki-client