
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS214930.roa
File: AS214930.roa (raw, json)
Hash identifier: ceuNLrj8OXKFWlVZ153GfL1hX4ReKxl+AiVFNu2Oiw4=
Subject key identifier: 8D:2B:09:3B:4B:35:5E:40:38:56:B4:71:2F:86:A2:8B:B1:E4:AB:A8
Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial: 621D70FA91D27B22B432E0959FECA123060BE813
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS214930.roa
Signing time: Fri 05 Jun 2026 08:45:52 +0000
ROA not before: Fri 05 Jun 2026 08:40:52 +0000
ROA not after: Fri 04 Jun 2027 08:45:52 +0000
asID: 214930
IP address blocks: 2a07:54c1:c400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:1d:70:fa:91:d2:7b:22:b4:32:e0:95:9f:ec:a1:23:06:0b:e8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Validity
Not Before: Jun 5 08:40:52 2026 GMT
Not After : Jun 4 08:45:52 2027 GMT
Subject: CN=8D2B093B4B355E403856B4712F86A28BB1E4ABA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:2a:80:df:e8:ef:14:31:82:c5:38:bb:18:
6d:fd:1f:f2:d2:23:2b:6c:43:ac:7e:88:82:51:1d:
79:b6:7b:88:96:c2:11:e4:3d:7b:8d:ff:db:a8:9e:
84:2e:e6:02:44:4a:38:9c:e0:4c:c3:d6:fb:9b:3f:
0e:ca:b4:54:8a:d3:0e:f1:0b:68:b3:0e:3e:ae:04:
93:52:16:0c:96:71:b5:cb:60:ae:5a:ac:d0:a3:63:
46:7a:f4:df:f9:c2:55:c7:67:c8:17:84:9b:ee:a3:
73:90:e1:86:4b:af:55:cc:1d:29:86:d9:a1:4e:d1:
a9:6f:e6:43:bb:06:d2:de:bd:d4:ae:2f:d3:e6:3d:
84:56:e6:b0:c1:7e:90:d1:29:40:19:f5:77:40:3f:
37:ba:90:a8:73:83:f3:0d:19:60:53:89:7a:00:1e:
87:50:94:18:6f:da:c5:4e:72:4a:2e:98:7f:aa:8f:
57:d8:cc:6c:6f:ab:a1:6a:29:d3:2a:8c:4e:a0:dc:
5b:81:f9:4c:4d:3a:ef:09:a2:37:0f:b8:9c:5f:76:
ba:db:a7:9f:c9:f6:5e:ec:2e:cd:01:c2:67:71:72:
0d:65:8c:4e:72:36:27:f4:12:ed:59:6d:93:6f:10:
30:5e:59:95:54:a5:99:20:3f:d8:dd:f0:71:04:fa:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2B:09:3B:4B:35:5E:40:38:56:B4:71:2F:86:A2:8B:B1:E4:AB:A8
X509v3 Authority Key Identifier:
keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS214930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1:c400::/40
Signature Algorithm: sha256WithRSAEncryption
8b:e0:f9:f5:e0:2d:f6:24:57:a3:f0:98:0f:19:16:52:54:96:
0c:a2:1b:2f:43:70:ee:61:2a:65:fb:d4:d7:72:d1:e6:1b:8d:
da:f3:2d:bb:05:11:73:4b:d1:ac:a8:7d:84:92:be:94:8c:37:
f0:d5:bf:76:ad:67:d6:23:dc:68:22:02:f5:56:4e:91:2c:9a:
a6:37:63:80:11:00:d6:23:1c:ae:ce:44:67:ce:76:00:9b:5c:
1a:d4:d0:53:ce:81:78:7e:6e:6a:68:ea:1b:78:dd:7b:ce:1b:
75:b1:18:2a:de:22:07:cf:22:71:09:5f:0a:43:27:61:29:82:
af:0c:12:b3:a7:e7:b9:d9:c9:cd:a2:35:a6:bb:86:56:a5:0d:
fe:7a:79:12:9f:16:cc:82:67:17:4d:fa:98:2b:93:1b:63:41:
8c:68:48:9e:f6:5a:2c:e7:e6:59:2b:91:8d:b9:b6:37:ed:bd:
24:07:e3:4b:64:05:b5:de:bf:b7:0c:04:da:e5:cd:dc:a6:3c:
32:cc:9b:fe:7f:a2:cf:14:3c:ec:92:1d:49:23:e3:5b:ed:78:
f2:eb:37:67:bb:06:e8:2d:96:03:41:8e:6e:fe:04:60:74:28:
6a:e3:c4:94:a4:e6:99:27:3a:d4:01:e5:7a:67:38:9a:5a:84:
4c:ed:dc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:48:59 2026 by rpki-client