
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/326130623a346530373a323930323a3a2f34382d3438203d3e20323139343538.roa
File: 326130623a346530373a323930323a3a2f34382d3438203d3e20323139343538.roa (raw, json)
Hash identifier: 9BAJ6MLsVJjXed08lJPBguxDXI0HTOPBT+HLg6cwLK4=
Subject key identifier: 12:B7:C3:5C:B9:99:B7:95:B9:DA:6E:99:87:AF:AE:8D:0B:45:97:D8
Certificate issuer: /CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE
Certificate serial: 095C566C5AAAB30ADA33E13CAF63C4CC81ECC023
Authority key identifier: EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/326130623a346530373a323930323a3a2f34382d3438203d3e20323139343538.roa
Signing time: Sat 05 Sep 2026 19:10:20 +0000
ROA not before: Sat 05 Sep 2026 19:05:20 +0000
ROA not after: Sat 04 Sep 2027 19:10:20 +0000
asID: 219458
IP address blocks: 2a0b:4e07:2902::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:5c:56:6c:5a:aa:b3:0a:da:33:e1:3c:af:63:c4:cc:81:ec:c0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE
Validity
Not Before: Sep 5 19:05:20 2026 GMT
Not After : Sep 4 19:10:20 2027 GMT
Subject: CN=12B7C35CB999B795B9DA6E9987AFAE8D0B4597D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:af:77:42:cc:5c:ea:2c:93:09:6e:72:e5:
3d:05:76:e0:86:eb:d0:71:89:aa:9e:49:ae:41:e3:
64:1d:6f:31:06:2c:87:d5:98:98:4e:f0:a4:2c:b4:
d6:17:ae:5f:00:47:26:68:f6:0b:87:f0:75:ff:50:
f9:ff:2b:71:30:1b:6b:78:49:7f:a5:ba:3d:09:77:
73:1d:17:26:76:ac:23:37:4e:4f:6a:07:ba:6c:a0:
51:46:c7:e0:7a:9f:75:78:f8:1a:41:2f:a9:10:cb:
88:55:9d:d8:07:42:d2:f4:91:46:78:84:68:32:9e:
0a:09:cb:5b:1b:01:6b:0a:3b:fc:5d:cf:37:a0:3d:
fa:e1:dc:ee:2f:f8:79:77:59:5e:e2:e6:02:56:62:
50:32:be:5f:5f:4d:25:a1:85:15:23:84:1b:d0:8d:
66:96:e1:c7:9c:42:58:a7:f9:7b:92:af:09:5c:08:
3f:8a:46:6a:b0:ce:bd:1a:34:d2:80:c8:b2:e1:73:
5e:d2:6e:28:06:f2:e0:74:49:5f:0e:bb:d2:c8:ca:
98:7c:a5:0c:96:bc:c7:f8:7b:a7:e2:aa:e6:73:f3:
b1:8a:3f:88:76:ba:ab:4b:dc:c0:4f:66:f7:57:06:
7b:c5:88:1f:0e:b6:3c:71:55:8e:69:d6:31:57:92:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B7:C3:5C:B9:99:B7:95:B9:DA:6E:99:87:AF:AE:8D:0B:45:97:D8
X509v3 Authority Key Identifier:
keyid:EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/326130623a346530373a323930323a3a2f34382d3438203d3e20323139343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:2902::/48
Signature Algorithm: sha256WithRSAEncryption
6a:12:4f:8b:3a:d4:15:72:53:f0:4b:72:24:56:13:22:54:b5:
10:67:28:62:b6:e7:63:75:fa:08:92:cd:c9:77:2c:ae:97:c7:
82:2d:18:b4:90:d7:91:1d:65:e7:8e:1d:85:20:dd:f9:92:88:
40:c5:bc:08:2c:36:b2:c0:85:bc:f2:3b:34:47:72:13:1b:c7:
ce:2b:1a:36:99:a2:f2:ea:6e:dc:88:18:d3:7d:5e:a8:42:9c:
e4:b8:db:fc:de:55:d0:c2:01:74:f7:a3:b8:56:d2:df:5e:4f:
5e:e5:85:ca:98:2b:70:86:bb:2b:23:95:e3:28:0c:3d:a6:7a:
c8:27:75:14:a1:c1:d5:8b:55:f2:2b:28:59:08:ef:f5:76:cd:
ae:f9:d3:7a:0a:b9:41:f0:f1:69:a9:05:01:88:94:84:41:81:
e2:df:7f:bc:04:97:67:c1:86:2c:f8:26:24:79:73:35:06:d4:
6f:49:d8:27:f5:d5:d9:ae:b9:85:ef:a8:8b:37:53:d9:69:f4:
9d:24:52:d5:b3:e4:17:01:04:2b:8a:7b:45:e7:72:6d:d3:5e:
9d:b5:19:18:c9:64:81:88:b0:70:2d:e7:22:3e:56:a2:39:08:
43:14:e3:fc:ec:b3:c0:73:6b:13:ae:47:52:54:63:a0:d5:2d:
d9:78:68:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:49 2026 by rpki-client