
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa
File: 326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier: gEq1PyQ0/WyvK1nTs6bKynEeXPOPYcgFZMOk1v3GFlk=
Subject key identifier: 5B:2F:C1:60:34:CE:0C:D8:C7:C4:F1:39:B1:E1:82:90:58:0C:AE:1F
Certificate issuer: /CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8
Certificate serial: 484ECDF5F1D5BE4EDB764CD0AC326619F05DF292
Authority key identifier: 54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa
Signing time: Sun 22 Feb 2026 00:57:54 +0000
ROA not before: Sun 22 Feb 2026 00:52:54 +0000
ROA not after: Sun 21 Feb 2027 00:57:54 +0000
asID: 31898
IP address blocks: 2a06:1285:ad55::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl
rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 18:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:4e:cd:f5:f1:d5:be:4e:db:76:4c:d0:ac:32:66:19:f0:5d:f2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8
Validity
Not Before: Feb 22 00:52:54 2026 GMT
Not After : Feb 21 00:57:54 2027 GMT
Subject: CN=5B2FC16034CE0CD8C7C4F139B1E18290580CAE1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:cb:c1:73:40:cd:0e:f2:e2:71:10:ff:3c:
7f:dd:c8:bc:4a:5e:75:6a:1f:2b:fa:9f:58:72:7f:
fb:51:45:66:c3:11:95:80:2e:8f:fb:bc:68:f9:4f:
bd:9f:75:d2:07:75:20:a3:9e:3a:4e:32:c6:49:32:
e1:60:9d:f6:08:9d:de:1d:58:75:49:eb:fd:d0:7b:
52:0b:a8:3f:9a:76:25:35:ce:df:c6:8e:33:90:ae:
50:49:70:e8:e1:44:d3:69:43:c4:a4:2f:a4:73:3d:
c4:6c:f7:e1:19:a0:7f:9a:1b:45:d9:ca:29:47:e7:
ba:49:c2:e9:6b:73:c8:02:d8:8c:93:f7:f1:80:68:
13:e7:14:6c:ac:02:be:13:f0:77:d8:01:f1:6f:74:
fe:6e:bc:99:ab:dc:ed:48:7a:b5:d8:58:64:ca:b5:
2c:d2:b1:69:d8:69:f2:03:c8:72:21:1e:46:a4:e4:
8f:b3:c6:3d:58:1a:b6:63:9c:cc:e9:a6:5b:44:7f:
0e:be:a2:45:f4:95:0d:1b:5f:c8:58:74:3b:67:b6:
97:c5:47:1a:24:ba:ff:1d:f0:cc:02:06:4e:86:fb:
fd:f6:4c:93:b9:00:6e:26:e4:ba:33:bf:ea:2a:9e:
d4:bb:e0:32:12:b5:31:a1:b6:b3:52:0b:35:01:39:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2F:C1:60:34:CE:0C:D8:C7:C4:F1:39:B1:E1:82:90:58:0C:AE:1F
X509v3 Authority Key Identifier:
keyid:54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1285:ad55::/48
Signature Algorithm: sha256WithRSAEncryption
6a:84:82:3e:26:59:6b:aa:e5:3f:53:e5:49:49:f0:3d:68:b4:
d4:b9:b5:99:16:e4:9f:09:65:f2:b0:d1:f1:6c:19:4e:c9:b0:
cb:44:cb:6a:ce:f4:85:c4:b1:a4:b0:a8:bc:61:e2:ac:76:9e:
ef:ef:22:12:c8:7b:0a:f3:fd:bd:d8:d5:39:81:5f:b0:08:eb:
6b:72:a0:9d:3c:4d:4c:28:2b:52:e7:e2:8b:99:45:40:bd:85:
d7:7e:f8:3e:bc:82:40:3e:21:07:8b:2b:79:73:c7:ee:16:1e:
4e:ae:b9:f5:e4:2a:33:19:72:08:98:26:aa:21:a0:9d:31:90:
f9:30:94:11:1d:92:a2:7f:1b:94:cc:ec:e1:57:df:e8:3f:a6:
42:7b:b2:88:1a:08:c8:a1:fa:74:84:0c:01:b0:c5:e2:df:a9:
78:00:4c:6f:6b:5a:75:32:4b:eb:6d:62:9e:90:19:cb:27:3a:
4c:f1:ad:15:17:33:93:f5:db:45:1a:35:9a:96:6f:f6:db:d4:
91:c4:50:04:81:f8:5a:f1:1b:db:cf:aa:65:bf:d0:51:17:e8:
c5:1c:85:b3:98:4c:65:6d:3d:3f:02:35:b3:be:95:33:fa:03:
01:a4:93:43:c5:c2:c8:65:bc:12:05:54:bd:94:1f:75:68:18:
bf:f0:04:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:41:18 2026 by rpki-client