
$ rpki-client -vvvf rsync.proxy-arp.network/repo/bgp43-free-v6/0/AS197324.roa
File: AS197324.roa (raw, json)
Hash identifier: +oO6oFd1o1C4WHjKmWREuUJgy0cGRKquRSZr8a0IW0o=
Subject key identifier: C3:E3:14:0A:D4:BC:BF:71:4C:90:FB:4E:A4:A5:F5:8A:43:D5:17:4A
Certificate issuer: /CN=7DF46129BDFBC044E933E4223A148A299404E5FE
Certificate serial: 94446440531ACF800408CA6EC867072D637036
Authority key identifier: 7D:F4:61:29:BD:FB:C0:44:E9:33:E4:22:3A:14:8A:29:94:04:E5:FE
Authority info access: rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/7DF46129BDFBC044E933E4223A148A299404E5FE.cer
Subject info access: rsync://rsync.proxy-arp.network/repo/bgp43-free-v6/0/AS197324.roa
Signing time: Thu 12 Nov 2026 22:12:49 +0000
ROA not before: Thu 12 Nov 2026 22:07:49 +0000
ROA not after: Thu 11 Nov 2027 22:12:49 +0000
asID: 197324
IP address blocks: 2a0b:4e07:5180::/41 maxlen: 41
2a0b:4e07:5182::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.proxy-arp.network/repo/bgp43-free-v6/0/7DF46129BDFBC044E933E4223A148A299404E5FE.crl
rsync://rsync.proxy-arp.network/repo/bgp43-free-v6/0/7DF46129BDFBC044E933E4223A148A299404E5FE.mft
rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/7DF46129BDFBC044E933E4223A148A299404E5FE.cer
rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/57C4BC98201FEEFD6892394642DD684EE5729821.crl
rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/57C4BC98201FEEFD6892394642DD684EE5729821.mft
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/57C4BC98201FEEFD6892394642DD684EE5729821.cer
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 09:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
94:44:64:40:53:1a:cf:80:04:08:ca:6e:c8:67:07:2d:63:70:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DF46129BDFBC044E933E4223A148A299404E5FE
Validity
Not Before: Nov 12 22:07:49 2026 GMT
Not After : Nov 11 22:12:49 2027 GMT
Subject: CN=C3E3140AD4BCBF714C90FB4EA4A5F58A43D5174A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:2d:99:7f:0f:dc:5b:a5:7a:61:3d:0d:a6:
5b:43:1c:a1:30:08:5d:76:76:bc:7b:d6:36:8a:5f:
29:8c:be:d0:cf:6f:1e:a0:56:44:0b:ca:0f:8f:a3:
97:20:01:db:c1:88:13:a5:cc:8f:8e:9a:b1:30:b4:
dd:f6:04:44:ee:35:77:7d:39:cb:4c:db:bc:2d:ec:
5f:15:32:72:8b:42:cd:fd:bf:e4:75:9a:c7:2f:66:
14:72:3e:b8:94:5c:19:51:10:c9:29:d8:e0:28:66:
da:e8:1b:be:62:10:c9:ec:37:38:2b:0c:d6:a4:45:
70:27:7a:42:ef:70:fd:0d:c5:bc:25:c9:00:51:fa:
d3:f2:61:2f:34:b2:b7:00:54:ae:da:01:7b:e8:e2:
96:51:ac:36:1b:15:ae:de:f7:db:eb:c8:a3:d6:b5:
b0:33:8c:b4:3e:f1:22:02:23:93:8f:ed:d4:ba:b4:
5b:49:41:8d:f8:6e:0b:fa:56:f4:5d:50:89:10:1a:
c4:66:e3:31:a6:0e:cf:11:8d:74:cb:63:ba:bb:65:
73:aa:52:0d:d1:45:78:3d:76:08:73:5c:59:ad:62:
55:1d:fe:ce:4e:2c:4a:3f:af:40:6b:0e:56:8a:aa:
76:e1:b2:95:c3:c7:81:29:c5:f9:e5:08:65:4c:48:
1c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E3:14:0A:D4:BC:BF:71:4C:90:FB:4E:A4:A5:F5:8A:43:D5:17:4A
X509v3 Authority Key Identifier:
keyid:7D:F4:61:29:BD:FB:C0:44:E9:33:E4:22:3A:14:8A:29:94:04:E5:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.proxy-arp.network/repo/bgp43-free-v6/0/7DF46129BDFBC044E933E4223A148A299404E5FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/7DF46129BDFBC044E933E4223A148A299404E5FE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.proxy-arp.network/repo/bgp43-free-v6/0/AS197324.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:5180::/41
Signature Algorithm: sha256WithRSAEncryption
62:71:51:26:a8:23:97:0e:68:f4:f0:bc:39:6e:6b:20:c4:33:
e0:27:b8:48:17:68:37:c1:a5:30:21:db:da:bd:42:df:75:3f:
dc:db:59:ca:c8:ec:e2:10:c0:c3:25:df:34:5d:35:fe:7f:f5:
73:44:3b:2b:c8:b4:7c:f0:b4:90:e6:08:32:55:e7:c1:c9:e3:
57:81:85:c3:98:ed:46:43:86:5a:6a:35:94:4c:73:69:ce:b7:
d0:f8:78:0a:31:d9:a2:8a:96:11:3e:ef:7d:24:10:30:2e:ef:
af:e0:25:b4:f3:dd:ef:76:e4:dc:a3:fb:fa:ad:5e:5c:03:96:
d8:9f:5c:aa:04:cc:ed:94:a1:88:90:d2:eb:71:fb:4e:cc:0e:
6b:3f:92:3f:60:75:6d:e5:10:a3:b8:62:32:b0:28:11:6d:a7:
75:e3:ce:bb:52:1c:99:b6:79:cc:be:14:03:7c:a3:02:c3:ec:
5d:5a:ce:75:7f:39:57:a2:c6:6b:a2:28:0c:fa:95:b0:4d:7d:
cc:2e:5f:39:54:66:a5:eb:3c:f1:44:79:97:df:10:f3:e5:c9:
42:7a:73:19:96:b8:d3:9c:78:8a:3f:24:81:91:51:61:55:3b:
e0:ac:8d:e5:11:60:7c:83:7b:d8:07:8f:3b:c5:01:63:d2:28:
14:ce:7e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:38:54 2026 by rpki-client