
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a663130303a3a2f34342d3438203d3e20323134333434.roa
File: 326130363a613030343a663130303a3a2f34342d3438203d3e20323134333434.roa (raw, json)
Hash identifier: ukEukH98qa55+nHTcDyFZyqm8562MtPrS7Qu8JdsjfE=
Subject key identifier: 06:FE:E8:C8:4D:F0:B1:26:54:D5:00:76:22:42:04:FE:75:14:32:B2
Certificate issuer: /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129
Certificate serial: 175012E4169AEE42D4CE3D8E62A8A701A765853F
Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a663130303a3a2f34342d3438203d3e20323134333434.roa
Signing time: Fri 21 Aug 2026 05:59:11 +0000
ROA not before: Fri 21 Aug 2026 05:54:11 +0000
ROA not after: Fri 20 Aug 2027 05:59:11 +0000
asID: 214344
IP address blocks: 2a06:a004:f100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl
rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:50:12:e4:16:9a:ee:42:d4:ce:3d:8e:62:a8:a7:01:a7:65:85:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129
Validity
Not Before: Aug 21 05:54:11 2026 GMT
Not After : Aug 20 05:59:11 2027 GMT
Subject: CN=06FEE8C84DF0B12654D50076224204FE751432B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:0e:e8:cb:85:58:9a:00:21:9b:4d:b9:27:
68:32:e1:c5:e7:a7:c6:48:eb:50:93:05:17:99:f5:
95:8c:6b:2a:8e:17:5f:3e:da:46:eb:43:22:86:c2:
8e:16:49:b6:e2:5e:ab:06:7b:13:92:d4:57:e7:8d:
20:5d:c7:07:fa:10:6d:81:33:91:17:5d:75:f1:a9:
c0:7b:02:6b:d6:c6:4d:40:cc:12:8b:81:11:55:7c:
63:c2:6b:36:d7:67:75:53:04:03:f6:a0:77:b8:30:
4e:e8:fa:ce:2c:80:b4:49:08:70:24:d5:44:24:c4:
a8:f0:b1:7a:81:85:80:75:af:ec:dd:ab:43:45:62:
cc:33:5c:c5:aa:6a:00:5b:c2:ac:2b:e4:9e:dd:6c:
37:39:38:c4:03:2c:58:ac:f3:df:ca:82:e0:66:3f:
d8:ce:12:11:f1:3e:2e:77:da:0c:3d:17:0b:7a:6f:
40:bd:b9:2f:d0:73:6a:34:91:9b:0e:00:2b:cd:ea:
85:09:ae:56:47:57:ac:37:80:7f:f0:a6:57:6b:85:
9a:67:00:cf:16:8b:82:a4:23:d0:2e:2c:e6:86:cc:
6c:0a:23:4a:39:74:0c:69:0e:82:6f:34:cc:ce:c7:
04:3f:01:06:50:4a:0f:11:04:67:b2:ed:67:42:53:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FE:E8:C8:4D:F0:B1:26:54:D5:00:76:22:42:04:FE:75:14:32:B2
X509v3 Authority Key Identifier:
keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a663130303a3a2f34342d3438203d3e20323134333434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a004:f100::/44
Signature Algorithm: sha256WithRSAEncryption
33:2c:10:c2:c8:bb:df:95:05:a0:04:19:0a:f2:59:cf:4a:e7:
98:60:d3:92:17:bc:23:56:16:e1:54:ab:07:67:63:11:2e:1b:
ea:84:f7:7a:4c:cf:38:c6:3a:5f:19:15:97:b1:1d:5d:f7:3c:
9a:71:4f:ad:ea:02:6f:9c:e5:e5:cf:5f:7b:21:a7:8a:ef:3e:
80:de:c5:0d:05:d5:0f:00:33:35:e7:15:e8:ac:52:08:88:5b:
d4:d8:c7:01:7e:9e:f3:75:d0:ab:cc:09:40:c1:68:e4:f5:74:
e2:39:51:e1:fe:24:04:1d:17:be:24:61:75:56:83:d5:c9:d9:
11:4d:cf:a0:71:55:bd:12:47:f1:df:23:b3:37:65:1b:f3:1f:
89:f9:41:7e:38:f4:47:93:12:5e:cb:4e:4c:e3:f9:2c:d1:39:
08:32:b0:16:ad:5f:d1:99:10:eb:73:f3:42:bb:3b:60:34:5c:
38:4b:92:03:00:5c:83:8a:3f:15:6e:37:0c:97:a1:9c:6b:7d:
5b:b8:b9:d8:a0:e0:ef:5a:7b:9d:44:da:b1:f2:ae:5b:d6:dd:
83:23:58:ff:b6:ae:22:ed:71:cd:33:93:b0:c0:c0:10:c4:63:
90:f5:60:42:54:9e:65:22:38:6c:97:90:85:55:56:a0:b6:ea:
79:99:8e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:53:19 2026 by rpki-client