
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3530303a3a2f34302d3430203d3e20323134393239.roa
File: 326130363a396634313a3530303a3a2f34302d3430203d3e20323134393239.roa (raw, json)
Hash identifier: 6i1ZgtOnHj56v46uTmCShLGX5uKMuUUqeo8JAh1N6qA=
Subject key identifier: F9:62:06:53:1A:AA:81:E0:F1:8E:BE:6F:BE:96:3D:D9:D3:7C:A3:3B
Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial: 2F9F56B554105682AC6BD5F120662E7A9D1EB457
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3530303a3a2f34302d3430203d3e20323134393239.roa
Signing time: Thu 23 Jul 2026 06:34:32 +0000
ROA not before: Thu 23 Jul 2026 06:29:31 +0000
ROA not after: Thu 22 Jul 2027 06:34:31 +0000
asID: 214929
IP address blocks: 2a06:9f41:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 06:51:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:9f:56:b5:54:10:56:82:ac:6b:d5:f1:20:66:2e:7a:9d:1e:b4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
Validity
Not Before: Jul 23 06:29:31 2026 GMT
Not After : Jul 22 06:34:31 2027 GMT
Subject: CN=F96206531AAA81E0F18EBE6FBE963DD9D37CA33B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:16:11:ee:ef:da:e3:f2:07:92:bc:87:64:0f:
7c:1b:12:2b:46:58:f2:f3:ca:e0:97:dd:5f:06:9f:
8a:e2:e1:db:82:e1:5d:a4:32:a6:8c:18:f1:13:5b:
ef:3b:f5:05:09:53:27:3b:02:e8:2a:4f:53:23:38:
3c:06:fb:74:f5:93:a8:fa:d9:41:8a:64:0b:0d:bc:
74:24:6e:3c:f5:22:65:fb:5c:e5:94:cf:68:ed:1f:
7e:b6:79:9d:1b:4b:88:cc:26:1b:2a:6c:88:28:d8:
b2:19:eb:07:af:17:90:0b:0f:e7:c3:98:8b:c2:4c:
82:ad:ed:fa:30:f5:cd:6c:be:6c:0e:54:56:ea:cc:
b8:46:0a:e3:03:60:90:bd:c5:34:65:4d:39:37:ac:
7e:e1:8d:ea:7c:3a:e6:ef:da:0f:51:c6:35:7e:09:
d5:bf:27:d2:59:90:8b:36:a7:40:95:de:2f:11:41:
cb:4d:4a:30:22:f8:74:62:fa:8a:e9:6a:fd:2e:d9:
27:ce:62:6f:e6:1d:04:39:5f:c4:8f:b5:f9:fc:48:
d9:a2:5a:ca:e5:93:15:45:9a:b7:d8:14:98:96:58:
17:39:34:6d:69:cb:28:48:1a:14:5a:af:3e:25:32:
23:54:74:5e:41:9f:cf:69:40:11:02:aa:c4:d6:f6:
df:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:62:06:53:1A:AA:81:E0:F1:8E:BE:6F:BE:96:3D:D9:D3:7C:A3:3B
X509v3 Authority Key Identifier:
keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3530303a3a2f34302d3430203d3e20323134393239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f41:500::/40
Signature Algorithm: sha256WithRSAEncryption
93:ca:0a:13:b7:16:3d:db:34:29:43:82:b6:20:cf:83:eb:e6:
95:cb:70:e6:00:54:14:f7:ee:44:ba:c6:e6:62:19:dc:f3:d7:
48:6c:4d:5f:b9:6a:4b:ca:59:cf:fb:13:ab:c3:8e:f9:07:55:
c0:29:d7:e1:ae:3b:c5:8f:1a:ff:29:5e:2d:f1:96:cf:96:42:
0d:11:1a:3f:39:c6:3e:cd:4c:1a:70:ec:44:5d:cb:cf:07:54:
9f:fa:0e:32:cc:d1:b7:32:87:66:1f:33:81:dc:81:4b:f1:b6:
32:3f:2b:c2:f9:1a:2d:51:06:bb:dd:94:48:1e:45:b7:5d:5c:
a3:93:98:b5:48:a9:c3:f2:4e:35:20:f5:0f:2d:d2:21:ae:d9:
4e:4d:0b:cb:de:0a:3b:02:74:fa:7f:da:51:f8:0b:d3:30:b5:
8e:c1:e2:a1:82:34:14:52:dc:c7:b2:18:0c:fc:e8:ee:95:89:
74:05:38:ff:21:3a:ff:30:75:37:22:37:4d:bd:d1:8a:b5:5f:
1f:04:7b:9e:ab:06:99:26:ca:15:f2:21:e5:8f:12:f7:31:1f:
f4:e8:8d:04:8c:ec:c3:28:d7:f3:84:79:ba:7b:28:6e:13:b0:
3e:0e:b5:0f:4e:8a:61:94:99:99:2c:55:87:c9:10:0b:1c:95:
13:43:a2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:07 2026 by rpki-client