
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/32332e3135352e3133322e302f32342d3234203d3e20333936303634.roa
File: 32332e3135352e3133322e302f32342d3234203d3e20333936303634.roa (raw, json)
Hash identifier: g+Kcv8ON8Ge7/M4lOURdP0EFDLer+xwIhAAV1r9VLD8=
Subject key identifier: 32:06:24:9E:97:3B:E7:05:8F:3F:FC:EE:F9:8E:CE:35:8C:BF:8E:92
Certificate issuer: /CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c
Certificate serial: 43D566994C08EE310838E46F129F47C3C9A248F3
Authority key identifier: 7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/32332e3135352e3133322e302f32342d3234203d3e20333936303634.roa
Signing time: Sat 03 Oct 2026 10:41:30 +0000
ROA not before: Sat 03 Oct 2026 10:36:30 +0000
ROA not after: Sat 02 Oct 2027 10:41:30 +0000
asID: 396064
IP address blocks: 23.155.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 20 Oct 2026 07:27:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d5:66:99:4c:08:ee:31:08:38:e4:6f:12:9f:47:c3:c9:a2:48:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c
Validity
Not Before: Oct 3 10:36:30 2026 GMT
Not After : Oct 2 10:41:30 2027 GMT
Subject: CN=3206249E973BE7058F3FFCEEF98ECE358CBF8E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:40:3e:bc:d1:a8:f7:e3:be:22:f0:10:ca:6f:
63:a7:27:9d:3a:fc:6a:84:85:31:fc:ff:7e:4e:dd:
3f:87:36:da:0b:b1:67:49:66:74:97:1a:c5:2f:6a:
10:ea:f5:ee:30:16:8c:75:78:9c:1f:6c:bf:33:b4:
90:bc:a2:e9:17:5f:4c:79:63:21:98:f9:3c:0f:27:
ca:60:ad:fc:ca:69:62:d5:47:2f:11:b7:9e:e9:c4:
16:5a:e3:85:f6:ee:a6:6d:d2:9e:29:b6:56:33:36:
7a:a0:7c:d5:cf:5b:25:a1:4a:06:28:3b:a9:29:63:
ca:a7:06:88:d7:3d:67:2c:a5:a4:9b:7e:cb:89:c7:
e2:22:4f:a8:5b:e7:16:62:bf:95:89:d9:ad:55:32:
fa:c1:ff:ea:65:02:09:69:22:3a:7b:b5:e1:28:58:
27:cf:d4:2e:98:c4:cd:60:5b:e4:29:50:44:39:13:
df:2e:23:e5:dc:39:bb:d0:3d:65:07:79:65:8d:1a:
0f:e7:87:f5:c7:94:41:b1:a5:68:5a:31:8f:88:4f:
53:8b:d1:22:1d:be:ab:81:30:03:91:5f:a8:f0:f2:
b6:19:d4:4b:b7:ed:ba:fe:2f:88:1d:36:b3:a6:3f:
41:62:28:d7:69:e1:da:b8:1b:94:ad:5b:9e:c9:0f:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:06:24:9E:97:3B:E7:05:8F:3F:FC:EE:F9:8E:CE:35:8C:BF:8E:92
X509v3 Authority Key Identifier:
keyid:7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/32332e3135352e3133322e302f32342d3234203d3e20333936303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.155.132.0/24
Signature Algorithm: sha256WithRSAEncryption
71:9e:15:cf:64:7a:50:96:a9:b6:1b:e7:0c:a5:b2:ef:c9:39:
f3:3b:7e:28:8b:7d:a4:1e:27:5a:d3:f3:d1:ea:31:e7:af:76:
44:7d:25:8a:5d:e7:e8:d9:b4:5c:8c:f8:ec:27:19:5d:2e:e0:
a5:4c:01:2b:b5:42:27:c6:11:f8:61:eb:18:da:0b:75:6f:a5:
23:bc:25:fa:c9:4a:ef:a3:06:e7:8c:65:4e:43:4a:24:d6:ea:
9c:1f:3e:32:2c:ef:ef:76:15:55:15:da:84:61:d3:2d:e0:23:
72:f3:ab:f7:44:bc:8f:b9:9a:69:32:e4:69:af:10:fc:d3:07:
df:c3:1c:2a:ba:5b:fc:3d:9d:84:9a:8f:f6:ea:e4:7a:7e:94:
2f:2b:7d:da:2e:1a:4c:5e:77:a9:ff:60:cf:12:a5:5b:99:66:
e7:a1:8f:13:47:75:11:d6:40:19:49:f7:34:03:02:93:4a:a2:
4e:22:2f:43:cc:d9:a8:3f:d8:b3:3c:63:34:9e:06:9c:3f:8f:
6b:3d:16:6f:2c:a7:af:97:70:e5:ab:db:30:0b:45:1b:b6:82:
fd:50:21:b8:ec:86:0d:7d:e7:52:c3:8c:fa:9e:b1:c7:f3:5c:
59:1b:09:32:58:70:ec:3b:be:a9:df:6c:aa:ba:e2:5f:26:44:
df:db:af:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:19 2026 by rpki-client