
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/326131343a366634343a376630303a3a2f34382d3438203d3e20323139303135.roa
File: 326131343a366634343a376630303a3a2f34382d3438203d3e20323139303135.roa (raw, json)
Hash identifier: ukucwgJoXYc/O0Ui6Tyy+j7s2rLNjJ/2kwcrer+8l7k=
Subject key identifier: C3:31:DA:17:23:10:E6:26:E9:94:D0:CF:8A:E2:1D:27:D8:B3:E2:2B
Certificate issuer: /CN=27EB75FA7E95272BBCF1FA431B7706B00D02D1BA
Certificate serial: 6A5E867082B03526EBC6F4E1B9818BF9DE52A5AC
Authority key identifier: 27:EB:75:FA:7E:95:27:2B:BC:F1:FA:43:1B:77:06:B0:0D:02:D1:BA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/326131343a366634343a376630303a3a2f34382d3438203d3e20323139303135.roa
Signing time: Fri 14 Aug 2026 13:45:16 +0000
ROA not before: Fri 14 Aug 2026 13:40:16 +0000
ROA not after: Fri 13 Aug 2027 13:45:16 +0000
asID: 219015
IP address blocks: 2a14:6f44:7f00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.mft
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.cer
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 13:11:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:5e:86:70:82:b0:35:26:eb:c6:f4:e1:b9:81:8b:f9:de:52:a5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27EB75FA7E95272BBCF1FA431B7706B00D02D1BA
Validity
Not Before: Aug 14 13:40:16 2026 GMT
Not After : Aug 13 13:45:16 2027 GMT
Subject: CN=C331DA172310E626E994D0CF8AE21D27D8B3E22B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:4e:f9:e4:61:b7:1d:f8:fc:e4:49:2e:ee:
6f:f4:5a:cf:47:35:82:38:26:68:f2:5e:eb:c7:ce:
a4:24:06:11:1d:bf:11:27:cc:c3:f9:87:84:cf:43:
0e:de:71:9f:03:1e:1f:bd:ad:87:28:11:91:33:b4:
8e:32:b6:65:81:e8:0c:cb:16:fc:8b:82:d5:e2:21:
be:52:92:dd:0e:bd:df:e3:3a:64:d1:09:ae:da:de:
11:24:ff:4b:db:b9:5f:bf:48:f6:62:83:d2:d2:72:
f0:1a:1b:a0:c0:8b:14:26:1a:63:dc:3c:b4:26:78:
23:dd:47:3e:2b:ae:9c:53:64:56:64:66:bd:2e:53:
53:4e:df:c4:96:4c:7c:1d:57:09:ef:7a:16:df:cd:
6d:4c:44:ff:2b:43:14:10:2d:17:f7:79:52:a6:79:
62:cb:f5:65:3c:be:5a:23:b9:5b:05:74:d8:9f:7e:
9a:48:48:36:60:a5:92:18:71:d3:86:d5:1d:99:52:
b2:ab:c0:92:6e:8f:0f:1d:1b:f7:67:3a:2b:7e:6d:
8c:1c:21:b0:fb:d3:3e:8b:83:e7:10:a9:63:4c:5f:
42:55:4d:68:ca:f0:90:06:b1:ae:1c:b8:58:f6:b1:
95:8f:c7:9e:51:fb:dd:74:0e:78:27:02:bd:6a:e8:
fd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:31:DA:17:23:10:E6:26:E9:94:D0:CF:8A:E2:1D:27:D8:B3:E2:2B
X509v3 Authority Key Identifier:
keyid:27:EB:75:FA:7E:95:27:2B:BC:F1:FA:43:1B:77:06:B0:0D:02:D1:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/326131343a366634343a376630303a3a2f34382d3438203d3e20323139303135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:7f00::/48
Signature Algorithm: sha256WithRSAEncryption
25:23:62:ce:1a:dc:f0:fe:00:5d:54:96:35:8b:8c:55:15:0b:
75:e7:58:0d:a1:51:7b:47:a5:9c:a4:18:e1:94:ab:34:64:e2:
4b:b2:e8:a2:2d:72:95:41:95:21:ce:a3:d1:88:db:49:a1:d3:
4a:75:94:5f:77:29:e6:28:d4:bd:5a:9f:7e:8e:e5:3e:24:68:
d0:70:1d:4e:5c:fd:ae:41:80:f7:39:9c:25:c5:b6:59:b1:96:
47:85:fc:b5:e0:90:a1:7e:af:74:c6:17:10:84:27:d4:d2:3f:
81:8b:c6:5a:ca:9c:6a:38:f0:37:45:4c:fc:7f:a4:f6:ba:ca:
7e:77:5f:be:fd:9c:09:db:7d:ba:c7:54:fc:3d:67:c5:09:aa:
8e:90:ed:af:3a:ac:6d:cc:8a:dd:a7:42:c2:4d:d1:95:95:58:
22:cc:2e:8a:ce:44:c5:20:67:49:da:15:80:a5:08:55:57:23:
c1:aa:0c:b1:f2:9d:12:50:46:df:fb:56:57:a7:aa:d9:4d:5b:
98:59:b9:ba:cf:80:d2:56:24:d6:91:dd:e6:65:ae:66:99:78:
d6:cf:05:d9:dd:f2:1e:8a:0c:37:01:1a:1c:73:99:f7:9f:49:
f7:32:0a:94:38:fc:11:9e:8a:41:c3:79:4f:c0:92:74:86:2b:
bb:6e:d6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:51:29 2026 by rpki-client