
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a363a3a312f3132382d313238203d3e20323039373130.roa
File: 326131343a373538303a666635333a363a3a312f3132382d313238203d3e20323039373130.roa (raw, json)
Hash identifier: zwje0di7asKeNatkyUL1WpCCx1sQ8AOWCA6nbIi4iDY=
Subject key identifier: 26:C7:2A:01:DF:61:3F:B0:C8:03:F3:BA:E7:21:E8:22:C4:A5:3D:70
Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial: 5CB4F1E655CF9C8CFE68C630E76CAB543F0A2FEA
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a363a3a312f3132382d313238203d3e20323039373130.roa
Signing time: Fri 20 Feb 2026 01:16:38 +0000
ROA not before: Fri 20 Feb 2026 01:11:38 +0000
ROA not after: Fri 19 Feb 2027 01:16:38 +0000
asID: 209710
IP address blocks: 2a14:7580:ff53:6::1/128 maxlen: 128
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Feb 2026 20:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b4:f1:e6:55:cf:9c:8c:fe:68:c6:30:e7:6c:ab:54:3f:0a:2f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Validity
Not Before: Feb 20 01:11:38 2026 GMT
Not After : Feb 19 01:16:38 2027 GMT
Subject: CN=26C72A01DF613FB0C803F3BAE721E822C4A53D70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4b:97:c1:4e:b3:0d:cf:0e:00:5a:43:60:bf:
10:6e:bf:6c:05:a7:1d:ce:90:e9:2b:31:ec:5b:f5:
bd:6c:00:b7:e6:2b:0b:c9:30:d3:d1:3c:e7:9c:0f:
41:ab:57:b6:b3:01:ac:8d:98:02:26:24:5a:50:18:
79:ae:ae:ef:3f:b7:19:0c:85:fc:32:ca:01:81:1c:
fb:83:b3:c5:09:2d:c0:8d:d0:95:1b:c8:47:07:4d:
b6:c0:67:9d:77:a6:78:a4:69:47:02:99:bb:6a:aa:
c8:bf:ec:e0:7f:7d:e3:b4:a2:39:d9:9a:b9:9e:85:
91:53:68:6e:a1:d0:5a:14:67:b1:0d:5a:80:1a:4d:
b1:e9:e7:3b:d9:63:a9:3c:c9:ad:58:fb:18:f4:b3:
3c:8b:7f:96:d8:b1:64:b1:34:43:1d:9d:42:bd:e7:
52:93:52:f7:16:20:bc:64:73:0e:14:a9:34:5c:3f:
0a:82:a1:07:41:27:ca:d5:6b:cb:b7:57:d4:35:cc:
f1:fd:e6:36:df:cf:29:3d:55:97:1f:e4:a6:e6:18:
a2:58:f6:33:37:e8:90:87:ab:6e:fe:d4:dc:f2:d8:
07:9d:b4:74:24:83:55:46:21:0e:5f:42:4a:6e:ae:
76:f7:0d:42:c1:be:06:ab:16:ab:e0:67:d5:67:bf:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C7:2A:01:DF:61:3F:B0:C8:03:F3:BA:E7:21:E8:22:C4:A5:3D:70
X509v3 Authority Key Identifier:
keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a363a3a312f3132382d313238203d3e20323039373130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff53:6:0:0:0:1/128
Signature Algorithm: sha256WithRSAEncryption
94:96:db:a2:84:41:d9:45:76:e1:9c:fc:9b:f5:da:ac:7a:08:
f2:2f:d2:6b:ff:77:cc:19:2a:f7:df:ce:1d:47:b2:f2:d5:60:
b9:15:58:69:df:23:f9:ab:03:e8:5c:86:ae:6d:61:02:3e:80:
75:f6:81:12:6a:fa:ef:3d:3c:96:55:9b:c7:65:6d:78:ac:7d:
db:09:8b:ea:3c:d1:db:ab:87:67:5d:99:61:78:54:00:99:b5:
f5:fa:7c:83:b1:83:d5:4d:6f:97:96:d6:d4:02:91:c7:b1:eb:
dc:c8:b9:52:8d:4a:e6:68:80:5c:c2:ac:fa:2f:f6:4b:5c:2e:
5f:5a:59:62:c2:41:c8:9d:eb:fb:c0:49:56:e1:18:37:1b:49:
3e:31:91:5e:7e:bc:25:b7:89:79:dd:1e:ae:98:29:e7:aa:de:
6f:bd:f2:58:f5:ca:e3:be:7f:65:ce:3e:10:0d:c6:1f:bc:df:
e4:a5:9a:a0:62:e3:ef:5b:db:f9:a5:51:17:5f:2f:24:b6:73:
43:e2:bc:4a:a5:44:68:0d:44:f8:5b:fb:5d:ba:ad:4d:93:38:
41:61:ed:32:27:50:3d:96:a2:3c:c5:ac:99:63:e2:87:bc:f2:
0d:bd:55:da:d9:cf:8e:e0:3c:6b:c2:ee:16:40:9e:9a:7d:9d:
2b:91:71:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:28:29 2026 by rpki-client