$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS31898.roa File: AS31898.roa (raw, json) Hash identifier: p0t1EMQm7CH1miAaKjeBuXJ/LjIfHUap/zYvNKo+G2E= Subject key identifier: 8F:3E:68:EF:FD:69:81:D8:56:CE:76:9A:6E:9A:0A:8C:AB:DE:CB:6A Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 515B59E0BFFF292ED0746503C185A47F95306895 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS31898.roa Signing time: Mon 30 Jun 2025 14:59:43 +0000 ROA not before: Mon 30 Jun 2025 14:54:43 +0000 ROA not after: Mon 29 Jun 2026 14:59:43 +0000 asID: 31898 IP address blocks: 2a05:dfc3:f6ce::/48 maxlen: 48 2a0a:6044:6d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 17:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:5b:59:e0:bf:ff:29:2e:d0:74:65:03:c1:85:a4:7f:95:30:68:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Jun 30 14:54:43 2025 GMT Not After : Jun 29 14:59:43 2026 GMT Subject: CN=8F3E68EFFD6981D856CE769A6E9A0A8CABDECB6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:88:6e:92:a3:df:88:45:18:99:09:7c:07:bb: d0:24:e7:1c:32:52:91:f0:62:30:4b:b2:82:a4:ad: a6:33:a7:d4:37:89:ae:7d:dd:bb:b5:af:2e:2a:9a: f7:f6:4d:3c:dc:2f:2b:fa:33:8e:27:80:72:8d:10: 6c:5f:ea:a1:26:42:89:87:3d:57:69:39:ac:67:f7: 30:f8:db:b9:92:47:30:88:fa:b3:35:95:a9:b0:95: db:d7:dd:66:eb:04:41:7c:ae:ae:01:ee:86:1e:38: f9:2e:f9:2d:3f:dd:b3:ea:97:97:44:55:42:87:d4: 1f:f9:da:c7:63:26:ee:6e:b4:2c:c5:c5:ca:c6:12: 93:04:ef:69:a3:6a:7a:b9:e7:de:cd:4b:83:b7:0f: 0d:0d:d2:98:83:46:14:81:4b:dc:08:40:07:09:46: dc:0a:a6:7b:c6:d0:4e:d9:0c:2b:24:05:39:e8:30: 0c:59:8b:59:bf:dc:a4:a9:03:ec:14:2e:c0:92:33: 4d:06:d6:9a:b2:4c:11:1b:0a:23:3f:c4:89:6b:41: 19:4c:66:4b:b0:af:ee:52:c4:4e:d0:81:03:0a:74: 3e:7e:45:c8:e4:4a:e0:54:e5:e9:b2:e7:d6:1e:69: 10:96:bf:b9:37:e4:69:45:41:36:41:ed:c3:42:bb: dc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3E:68:EF:FD:69:81:D8:56:CE:76:9A:6E:9A:0A:8C:AB:DE:CB:6A X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS31898.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:f6ce::/48 2a0a:6044:6d00::/48 Signature Algorithm: sha256WithRSAEncryption 3b:df:7b:a5:f4:04:fe:cb:e9:1e:21:95:89:bb:c8:1a:ae:bc: 3c:3a:c0:1b:2a:eb:7b:ec:a5:d3:39:f2:a2:8c:15:84:19:d7: a0:eb:9a:f0:c0:1f:3c:10:20:58:e0:eb:b6:a1:f4:c8:e2:cf: 6b:8a:9a:13:09:02:9d:2a:11:a9:8d:b9:71:62:4d:b2:d6:33: c4:7d:d1:be:7b:9c:f9:60:90:14:7e:8f:56:23:6e:78:9e:22: 40:b4:07:31:5e:50:50:22:e6:53:f1:b4:02:5e:6b:4c:80:e0: d1:0e:e9:e7:35:08:1d:d2:cd:e3:0c:a9:38:5c:0e:b5:5e:12: 85:2d:22:62:ea:75:a5:c3:31:61:70:ba:7e:1e:ee:5b:da:78: a9:d2:f4:a3:f1:85:91:95:00:96:0f:9a:4c:b8:91:bd:fb:75: 7c:51:19:3d:5d:65:91:20:aa:da:e8:4f:7a:34:bf:bb:d5:55: d9:12:15:67:9d:af:1a:2d:db:fe:df:6d:83:c9:84:08:0d:13: 9a:c0:52:06:7a:f2:a2:fc:e5:17:1d:7c:c2:07:ff:1a:09:a8: 7c:37:fd:63:9a:64:19:89:4f:89:ca:03:90:c0:c8:a6:72:2e: 5c:66:ea:e9:70:78:b3:10:f0:a9:0e:ec:91:a8:3b:fc:6e:b2: 7f:31:9c:80 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUUVtZ4L//KS7QdGUDwYWkf5UwaJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA2MzAxNDU0NDNaFw0yNjA2MjkxNDU5NDNaMDMxMTAvBgNV BAMTKDhGM0U2OEVGRkQ2OTgxRDg1NkNFNzY5QTZFOUEwQThDQUJERUNCNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFiG6So9+IRRiZCXwHu9Ak5xwy UpHwYjBLsoKkraYzp9Q3ia593bu1ry4qmvf2TTzcLyv6M44ngHKNEGxf6qEmQomH PVdpOaxn9zD427mSRzCI+rM1lamwldvX3WbrBEF8rq4B7oYeOPku+S0/3bPql5dE VUKH1B/52sdjJu5utCzFxcrGEpME72mjanq5597NS4O3Dw0N0piDRhSBS9wIQAcJ RtwKpnvG0E7ZDCskBTnoMAxZi1m/3KSpA+wULsCSM00G1pqyTBEbCiM/xIlrQRlM Zkuwr+5SxE7QgQMKdD5+RcjkSuBU5emy59YeaRCWv7k35GlFQTZB7cNCu9yLAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUjz5o7/1pgdhWznaabpoKjKvey2owHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUt NDlmOS05YjZjLTljOWYzODk4OTk1ZC8zL0FTMzE4OTgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAqBd/D 9s4DBwAqCmBEbQAwDQYJKoZIhvcNAQELBQADggEBADvfe6X0BP7L6R4hlYm7yBqu vDw6wBsq63vspdM58qKMFYQZ16DrmvDAHzwQIFjg67ah9Mjiz2uKmhMJAp0qEamN uXFiTbLWM8R90b57nPlgkBR+j1YjbnieIkC0BzFeUFAi5lPxtAJea0yA4NEO6ec1 CB3SzeMMqThcDrVeEoUtImLqdaXDMWFwun4e7lvaeKnS9KPxhZGVAJYPmky4kb37 dXxRGT1dZZEgqtroT3o0v7vVVdkSFWedrxot2/7fbYPJhAgNE5rAUgZ68qL85Rcd fMIH/xoJqHw3/WOaZBmJT4nKA5DAyKZyLlxm6ulweLMQ8KkO7JGoO/xusn8xnIA= -----END CERTIFICATE-----Generated at Tue Jul 1 06:42:18 2025 by rpki-client