
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/326131333a633863313a3a2f33322d3332203d3e20323135383238.roa
File: 326131333a633863313a3a2f33322d3332203d3e20323135383238.roa (raw, json)
Hash identifier: IlMOSvLFq4VX7HZnUVxC1UdUITR3M7tj8HQPD7Fh/uM=
Subject key identifier: DC:5B:4E:C4:7C:7A:4E:9E:36:82:01:97:14:E3:19:FE:0B:15:57:59
Certificate issuer: /CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE
Certificate serial: 749C60FB7ED28A07940BD20AAA292563D954F057
Authority key identifier: 5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/326131333a633863313a3a2f33322d3332203d3e20323135383238.roa
Signing time: Mon 20 Jul 2026 12:03:16 +0000
ROA not before: Mon 20 Jul 2026 11:58:16 +0000
ROA not after: Mon 19 Jul 2027 12:03:16 +0000
asID: 215828
IP address blocks: 2a13:c8c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:9c:60:fb:7e:d2:8a:07:94:0b:d2:0a:aa:29:25:63:d9:54:f0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE
Validity
Not Before: Jul 20 11:58:16 2026 GMT
Not After : Jul 19 12:03:16 2027 GMT
Subject: CN=DC5B4EC47C7A4E9E3682019714E319FE0B155759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:b5:58:28:ac:8b:a4:cc:9f:68:e0:a0:dc:
50:8f:f9:ed:22:3f:4f:27:4a:c1:21:71:b9:ac:b1:
2c:22:f2:18:4e:36:98:b5:48:b7:58:fd:5f:7e:1e:
2c:c0:7c:43:fe:ae:0f:28:5c:9e:79:64:85:01:5a:
4d:20:b5:53:9e:46:a4:b3:1f:4a:40:83:21:16:44:
b5:c5:64:e4:00:79:b7:31:61:08:c5:fb:b6:3d:84:
35:5f:28:54:55:fd:a4:f5:8f:68:e0:ba:c6:10:8e:
c0:c6:5f:c7:ae:a7:c4:e0:57:3e:29:6f:0a:ab:08:
a2:e6:5f:e6:8d:4f:3d:b9:e3:3a:3a:91:c2:cf:2d:
3f:85:04:bd:70:5f:47:4b:62:c1:ec:b3:99:c3:17:
35:92:26:2a:cb:74:78:5e:eb:63:8d:2b:16:b8:27:
e9:b1:a5:7b:aa:60:3d:b4:8f:9f:56:00:00:11:29:
9b:87:f3:7b:fd:85:17:00:c1:0d:9c:ea:55:f9:b7:
04:9b:8c:52:99:ee:e5:84:c2:a5:13:59:ed:cb:42:
6a:1d:72:e7:8a:09:90:4b:fd:41:f7:9b:60:41:b7:
1f:9a:0e:f0:05:e0:88:f0:7b:ab:40:ee:6e:8c:c0:
30:34:9a:32:07:24:18:f2:15:6f:d6:19:d6:66:f7:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5B:4E:C4:7C:7A:4E:9E:36:82:01:97:14:E3:19:FE:0B:15:57:59
X509v3 Authority Key Identifier:
keyid:5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/326131333a633863313a3a2f33322d3332203d3e20323135383238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c8c1::/32
Signature Algorithm: sha256WithRSAEncryption
1e:00:3d:f0:8d:93:06:db:df:c4:9c:cc:53:75:30:ec:53:3f:
58:50:16:d1:fd:ec:08:39:0d:82:78:da:46:64:2f:29:39:5d:
85:00:28:fa:25:fc:95:0e:a2:e6:b9:66:07:d0:2a:47:22:6e:
3c:4e:cb:bd:eb:ec:d1:a9:c1:23:e7:13:73:70:d2:39:e3:b5:
b1:09:2d:9f:11:84:3e:45:e5:97:a4:2d:ee:e5:ef:69:da:b5:
be:5e:e9:78:c3:3c:62:16:35:8a:88:59:3b:7d:69:d3:ea:48:
45:1d:72:90:9a:28:48:23:7c:e3:6a:5a:ac:1e:df:30:4e:c0:
60:1c:57:fa:97:f7:1a:b2:a2:a4:ef:a6:7c:d5:fa:b0:2b:8b:
b1:ad:ab:ab:95:38:94:dc:e0:a3:27:4b:55:b4:6c:4b:5c:f3:
d1:ae:09:4a:7c:93:2a:cb:b2:0e:2b:3a:a5:40:37:be:30:44:
5f:e5:2d:51:15:77:57:c6:95:90:f4:93:09:b9:62:d6:da:27:
15:03:fe:20:5b:0e:5d:33:01:2a:fb:f7:26:c1:2c:b5:6e:a5:
9d:46:f9:a0:bb:62:cf:aa:fc:46:c0:a8:39:9f:d0:96:0a:d4:
13:4a:d7:fb:ec:60:e9:65:c5:b4:b8:41:ea:cd:87:12:8e:44:
40:da:55:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:10 2026 by rpki-client