
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613434303a3a2f34342d3438203d3e20343032333333.roa
File: 323630323a663932613a613434303a3a2f34342d3438203d3e20343032333333.roa (raw, json)
Hash identifier: TIB2ucUbZJygvEH8NmFSSy3H21hi/aLrWk98ctyPrWM=
Subject key identifier: 5B:8A:27:AD:79:32:5E:BB:1A:2A:59:30:50:5B:F5:8D:24:7A:AF:80
Certificate issuer: /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial: 0A0234AC1727A3C775CBFA9D0025860A0425165B
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613434303a3a2f34342d3438203d3e20343032333333.roa
Signing time: Wed 22 Apr 2026 19:54:57 +0000
ROA not before: Wed 22 Apr 2026 19:49:57 +0000
ROA not after: Wed 21 Apr 2027 19:54:57 +0000
asID: 402333
IP address blocks: 2602:f92a:a440::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 04:53:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:02:34:ac:17:27:a3:c7:75:cb:fa:9d:00:25:86:0a:04:25:16:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Validity
Not Before: Apr 22 19:49:57 2026 GMT
Not After : Apr 21 19:54:57 2027 GMT
Subject: CN=5B8A27AD79325EBB1A2A5930505BF58D247AAF80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:d1:0d:a0:f1:8d:e6:c8:f1:ad:e8:86:8f:
cf:dd:3e:c1:15:c9:fc:84:1f:cd:99:12:99:f6:63:
10:4f:d7:f1:48:3a:d3:01:b5:63:20:64:fd:e6:94:
49:1b:0e:85:5b:88:74:9e:d8:4a:6d:33:4f:2d:1f:
8d:6c:25:b9:38:b1:d2:03:f4:56:a3:51:04:54:22:
94:69:60:11:eb:c0:fa:ac:60:2f:92:48:e0:c7:a0:
ef:73:78:ae:b8:e9:98:9d:96:0c:ae:73:50:83:1b:
c0:08:86:ff:c7:64:32:49:87:1a:b0:6e:bb:0e:df:
da:f9:eb:9a:79:fc:d1:44:89:14:9c:b1:9d:48:ec:
22:c9:83:bc:eb:8a:4b:05:9b:51:15:dd:4f:89:2b:
18:ad:7e:a5:0a:e9:63:0a:07:61:41:4b:9b:41:c4:
01:b9:75:52:ae:4d:b4:49:02:f2:8f:7c:49:51:1b:
ca:40:32:7e:f6:2b:cb:26:7e:72:2e:bf:72:91:61:
88:6e:55:c0:f6:5c:61:a2:4b:76:fe:43:42:07:70:
1d:25:28:53:f2:1e:0a:3f:13:c7:d1:6a:20:af:d1:
9f:b7:d0:8d:31:44:00:d9:6a:de:8b:e8:7d:12:ec:
d1:e1:30:77:db:c6:a4:58:6c:88:45:d2:56:1e:94:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8A:27:AD:79:32:5E:BB:1A:2A:59:30:50:5B:F5:8D:24:7A:AF:80
X509v3 Authority Key Identifier:
keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613434303a3a2f34342d3438203d3e20343032333333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:a440::/44
Signature Algorithm: sha256WithRSAEncryption
07:e2:60:5e:7d:5b:01:a7:a0:4d:d3:e6:63:1c:23:ad:cb:ec:
ce:91:68:a8:85:58:2f:ca:0f:44:c3:f0:78:18:19:52:2c:7c:
3f:69:a8:78:80:9c:59:11:a0:56:c5:6d:ed:41:b6:6d:0e:a5:
83:cc:5a:32:cf:f0:5f:b7:78:cb:4f:d8:fb:cc:67:84:a2:b4:
1d:78:ad:5e:23:5a:e9:6b:56:e2:5d:64:72:fc:1e:01:00:71:
81:c0:06:c5:a9:e2:f8:09:93:91:f1:5f:4c:08:9a:e2:2b:8e:
92:d8:2b:ba:24:b1:54:ae:37:65:ac:97:de:4a:ea:6a:1c:2f:
21:64:89:b8:ba:35:d2:b6:5c:0b:7d:c3:ca:fa:4c:33:37:d4:
84:1e:8d:a9:90:09:69:0a:28:42:c8:e9:76:24:07:d2:89:eb:
31:c7:1b:2f:51:5a:62:5c:63:dc:38:22:d5:47:32:8f:92:96:
86:84:de:8d:08:66:24:24:8c:49:be:9a:81:50:fb:89:02:ae:
71:c9:b9:87:0c:0b:60:60:f9:67:1c:74:06:65:3c:3c:b2:ba:
23:7c:25:60:07:ec:43:75:96:38:94:a4:cf:9b:9e:18:c2:93:
f6:57:c5:c1:13:b1:89:cf:2e:f3:5e:0d:7d:1d:8e:26:df:3c:
40:6f:4a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:21 2026 by rpki-client