
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa
File: 323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa (raw, json)
Hash identifier: b0Y9KTtLcurzLdN0rHLtotfhQYSBbk9yeBAxIWe6UDM=
Subject key identifier: FB:BB:73:C9:D0:45:BB:FC:C4:C2:FD:FF:62:59:B9:A2:08:9E:F5:28
Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial: 104C43891C9E94188787A8710BDBF960A328BFF6
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa
Signing time: Wed 18 Mar 2026 02:15:32 +0000
ROA not before: Wed 18 Mar 2026 02:10:32 +0000
ROA not after: Wed 17 Mar 2027 02:15:32 +0000
asID: 199959
IP address blocks: 2602:f992:50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 14:11:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:4c:43:89:1c:9e:94:18:87:87:a8:71:0b:db:f9:60:a3:28:bf:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Validity
Not Before: Mar 18 02:10:32 2026 GMT
Not After : Mar 17 02:15:32 2027 GMT
Subject: CN=FBBB73C9D045BBFCC4C2FDFF6259B9A2089EF528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:fa:33:52:a2:7c:b1:30:1c:79:1f:b7:a9:
c4:00:9c:b7:12:0e:1f:39:62:47:c6:0a:2c:9b:07:
b5:67:ea:99:6b:6c:a1:b2:c3:3c:5b:f2:99:bd:13:
bb:4e:e9:a0:d9:20:3f:18:1c:e1:58:b9:4d:e3:fc:
75:ec:18:ec:f2:67:4d:79:54:53:ee:a7:78:76:a2:
d2:3d:cd:72:cc:e5:4c:cd:74:11:b7:0e:39:fe:b1:
79:51:a2:f3:f4:94:b8:6e:1f:2a:78:f0:8a:22:44:
2b:86:f2:19:09:c8:55:34:c9:ed:fe:aa:20:2d:18:
60:e9:0d:11:c1:23:3c:ba:5b:78:be:85:62:50:eb:
cd:a2:ed:a8:05:14:38:6d:7b:f7:9f:b4:59:b4:21:
48:29:2b:59:09:49:85:f4:2d:d4:6d:c1:cd:d2:9a:
5c:32:04:e9:83:9d:cc:7b:f0:fa:fa:75:0d:3f:b2:
8c:bc:e0:94:ea:8a:9e:ec:15:08:9c:12:0b:eb:a5:
a5:a2:d4:2d:cd:e0:5e:fe:d2:26:15:cf:9d:ad:c0:
0a:b3:9a:ea:d3:1a:72:b8:9b:d6:04:42:06:fd:f1:
93:8f:01:7c:37:4d:71:17:82:56:af:7a:3b:5c:71:
50:31:11:5b:00:9e:9f:48:9b:8f:17:b8:57:4d:02:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BB:73:C9:D0:45:BB:FC:C4:C2:FD:FF:62:59:B9:A2:08:9E:F5:28
X509v3 Authority Key Identifier:
keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f992:50::/44
Signature Algorithm: sha256WithRSAEncryption
7b:fa:96:54:24:e6:df:01:97:03:56:00:b4:66:14:4f:96:8e:
18:3f:d9:aa:2e:f0:6a:18:09:0b:7d:19:6d:0d:be:4a:d1:55:
13:a3:2c:f0:50:97:a5:40:c8:ab:73:f5:11:28:2f:4b:62:1f:
d2:a0:14:ac:90:98:64:54:7c:0b:09:64:e1:33:60:01:a9:e9:
7d:b5:d9:44:0d:84:47:b6:3b:ee:88:16:2a:92:71:03:f3:58:
f2:8f:91:3a:79:8a:36:e0:fd:c4:3d:1f:4d:8a:00:53:6f:e8:
18:cf:89:e0:7f:66:9b:bf:9e:7e:c8:b7:c0:83:67:12:03:13:
8a:cf:e1:40:d5:6f:f8:4c:ed:bb:4f:79:c3:08:86:e8:9a:08:
6e:7c:cc:cf:05:65:0d:21:45:da:23:9a:47:6e:ae:04:c0:93:
c0:2b:0f:8d:0c:2a:29:9e:69:e4:8a:e1:76:c1:e8:1f:09:3f:
0e:1c:84:a3:15:16:19:35:a9:55:b7:a9:21:ab:9c:8e:30:22:
be:92:ec:96:43:52:82:60:41:9d:88:6e:1c:bc:d2:fc:b6:71:
ec:ba:6d:1d:85:c9:af:16:33:6a:4c:00:cc:3b:a3:95:b5:f7:
bd:ee:8f:8d:4f:e6:9e:c2:8d:16:5b:d8:e0:77:5c:08:de:01:
15:cd:e6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:58:48 2026 by rpki-client