
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130643a643930363a3a2f33322d3332203d3e20323135303835.roa
File: 326130643a643930363a3a2f33322d3332203d3e20323135303835.roa (raw, json)
Hash identifier: ZDwbrssOJTEZj/NExBW2DbtjZEYTPTD5m5o8DRunpr8=
Subject key identifier: E0:B1:59:81:92:87:BD:82:8E:9C:02:4C:C3:75:AE:66:ED:E3:BA:BE
Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial: 456BB30C82794AE7899A5E2148B69104666D0318
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130643a643930363a3a2f33322d3332203d3e20323135303835.roa
Signing time: Mon 13 Jul 2026 14:51:27 +0000
ROA not before: Mon 13 Jul 2026 14:46:27 +0000
ROA not after: Mon 12 Jul 2027 14:51:27 +0000
asID: 215085
IP address blocks: 2a0d:d906::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 06:51:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:6b:b3:0c:82:79:4a:e7:89:9a:5e:21:48:b6:91:04:66:6d:03:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
Validity
Not Before: Jul 13 14:46:27 2026 GMT
Not After : Jul 12 14:51:27 2027 GMT
Subject: CN=E0B159819287BD828E9C024CC375AE66EDE3BABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:c7:e3:e1:e4:1a:60:93:7f:98:97:82:27:
c6:95:0d:be:86:26:0f:b3:2e:4b:a2:cd:a7:ab:af:
09:b4:45:08:52:8f:0f:af:63:08:8d:be:fa:d2:56:
8a:7a:59:cf:62:13:89:62:d6:80:c7:a5:22:bf:fa:
ae:aa:d8:68:a0:74:79:1b:49:60:7c:05:8b:34:c8:
c5:9b:22:17:42:5b:33:0d:97:de:38:1e:14:f5:50:
fd:93:7b:c2:7b:d0:e0:74:cd:66:d6:35:5e:1d:d1:
54:54:13:84:c0:86:13:6f:bf:f0:d8:7b:37:98:ef:
32:a4:82:1d:63:a2:dc:0f:10:76:c2:a4:19:13:89:
0e:e7:ee:18:85:5d:65:0d:48:ab:a7:85:d8:b3:f7:
69:39:8e:70:80:52:c9:6f:1e:d7:cf:20:73:9e:42:
3f:e0:99:ea:84:1a:18:ff:b4:ad:23:cb:6e:7e:cb:
f7:4d:cb:91:1f:e9:85:82:ca:08:2c:0c:06:a7:f0:
f7:fd:c8:50:1d:69:3b:07:e9:d4:31:fd:57:a0:7f:
ff:5f:8a:76:4b:62:63:c8:33:be:18:c8:f9:6c:19:
bb:66:ee:80:6e:ee:a1:fc:59:29:24:c8:21:97:02:
dc:f1:0e:a1:44:0d:69:77:c9:82:62:d3:39:e7:08:
6b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B1:59:81:92:87:BD:82:8E:9C:02:4C:C3:75:AE:66:ED:E3:BA:BE
X509v3 Authority Key Identifier:
keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130643a643930363a3a2f33322d3332203d3e20323135303835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d906::/32
Signature Algorithm: sha256WithRSAEncryption
55:23:4d:4e:7a:d1:4c:6b:2d:0b:88:4d:a3:c5:ef:e1:45:b5:
08:14:10:90:50:f5:46:e9:76:0a:b2:41:e4:b4:a1:36:ce:6d:
74:14:f6:63:c9:19:97:c3:8c:36:2c:67:9d:a9:a9:23:21:2c:
83:cf:15:12:46:43:07:5c:f4:93:bc:6a:35:dc:12:24:d2:09:
0c:01:29:51:9b:d5:69:9b:a8:11:9b:7f:88:55:99:f6:3a:dd:
0d:7a:9d:df:2a:f1:66:a8:0c:ce:b6:ea:cf:82:55:1a:82:13:
c6:cc:d1:50:09:11:3c:56:ec:75:02:41:8f:ce:4a:af:98:cd:
ad:cd:81:ba:b0:87:fc:65:3a:e8:fe:eb:bd:11:85:88:ae:81:
97:0f:5b:a1:82:2f:fd:82:03:1f:63:ea:b1:95:71:64:00:f3:
e8:c4:8e:f6:14:31:35:11:89:a6:30:fe:a7:1d:7a:8e:9a:43:
13:92:c3:81:64:47:3f:77:61:fc:3f:3a:ab:f1:d8:5e:bf:e7:
41:32:e9:54:3d:de:b9:5a:04:be:6b:38:ac:d3:1d:11:21:2c:
72:af:56:4c:47:0c:f1:41:d9:e7:d4:b9:82:25:62:23:e7:02:
05:5d:b8:0e:d2:d9:50:a6:60:d2:9a:ef:db:68:cb:6d:1a:c8:
bf:7d:af:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:12 2026 by rpki-client