$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS139882.roa File: AS139882.roa (raw, json) Hash identifier: eext5K64DXxOvDcFVZfc1nSkaTfq1LSM4T1ZvF7w0GA= Subject key identifier: 7F:11:83:82:83:33:74:D4:17:15:DC:34:C9:D8:1C:66:34:C9:B0:BD Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 4D6CF871ABC117EB7EDB8F2946DCAD0BE555C917 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS139882.roa Signing time: Fri 04 Jul 2025 07:51:25 +0000 ROA not before: Fri 04 Jul 2025 07:46:25 +0000 ROA not after: Fri 03 Jul 2026 07:51:25 +0000 asID: 139882 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:6c:f8:71:ab:c1:17:eb:7e:db:8f:29:46:dc:ad:0b:e5:55:c9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:25 2025 GMT Not After : Jul 3 07:51:25 2026 GMT Subject: CN=7F118382833374D41715DC34C9D81C6634C9B0BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d7:19:d1:54:ba:c6:37:34:3b:c5:d6:5b:d5: ba:92:51:a8:71:bc:56:d4:45:1c:31:93:06:dd:5b: 4d:59:92:3f:20:e3:dc:70:7c:47:c7:f1:44:4f:5c: 20:52:e5:3b:bd:d9:b4:dd:c5:2d:06:ef:4c:e1:fb: 2d:4c:03:91:fb:5a:2a:10:27:d0:9f:08:37:e4:c7: 1b:d4:37:ce:22:ae:d1:da:cb:25:f3:42:25:c4:9d: 97:0a:8d:ea:05:7a:71:cb:74:1d:ec:32:75:34:25: fd:67:57:69:a7:bb:21:09:72:1b:62:3c:b0:a8:18: 36:65:56:44:38:72:ba:e7:90:5d:30:91:96:62:98: 1e:0d:d7:49:49:f2:b4:e3:fb:27:8f:d0:a5:9a:90: 3b:59:d1:49:17:65:13:4a:19:fe:c0:b0:b4:53:b6: 4e:59:ff:e8:4f:ec:43:16:20:47:dd:d2:30:77:fd: e6:d1:8f:5c:58:99:ba:96:14:ad:98:66:1a:6f:8b: 3a:eb:de:34:f5:c9:12:09:e6:52:84:ec:cd:77:bd: 74:d4:46:b8:0a:56:49:cd:e3:5f:9d:04:48:1d:51: 63:45:39:b4:4e:ca:7f:2d:79:e0:8b:19:b1:2b:ca: 53:a8:51:48:b1:87:48:13:d2:2f:73:15:80:32:a3: 78:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:11:83:82:83:33:74:D4:17:15:DC:34:C9:D8:1C:66:34:C9:B0:BD X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS139882.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 2a:a2:61:a4:28:2c:87:ef:da:bc:88:85:1f:56:d3:22:63:56: 8f:64:83:43:d7:71:89:17:e3:ea:88:b2:06:97:2e:0c:5d:7f: cd:bc:66:ff:7e:f2:7b:11:55:67:41:3f:ee:33:19:71:6f:91: 6f:ae:7c:5e:98:be:97:56:20:80:81:64:f5:50:e9:59:df:6a: 0a:1f:70:95:c0:88:8c:50:73:dd:ff:e3:5a:04:f1:35:f4:16: 6f:49:32:9e:e9:9b:66:c1:0e:24:2c:bf:b0:3f:fb:b9:79:28: 37:d8:7d:56:b8:10:d6:35:a5:4d:85:a6:a8:2b:28:a0:76:cd: 9a:d6:40:5d:64:b6:57:ee:e2:9d:90:e8:50:be:19:fe:5a:e2: a5:4b:a8:1a:e4:25:82:f7:c6:b4:1a:7c:54:b5:7a:91:32:15: 3f:7a:d3:01:e2:f3:5d:4b:e3:79:f4:fb:5f:41:04:51:8c:54: 89:b5:fb:0d:f5:dc:fb:82:16:84:a9:20:59:46:a5:4e:a4:82: 7c:c4:46:d0:5e:7b:e0:ec:58:00:00:99:7c:d5:a9:f1:8d:4a: fd:49:69:17:d9:60:3b:f2:9f:6f:32:78:03:ca:c5:31:d6:10: 94:6b:c2:05:37:8d:01:24:5c:df:96:2c:f3:41:fb:50:a6:fb: 6d:30:65:69 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTWz4cavBF+t+248pRtytC+VVyRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjVaFw0yNjA3MDMwNzUxMjVaMDMxMTAvBgNV BAMTKDdGMTE4MzgyODMzMzc0RDQxNzE1REMzNEM5RDgxQzY2MzRDOUIwQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl1xnRVLrGNzQ7xdZb1bqSUahx vFbURRwxkwbdW01Zkj8g49xwfEfH8URPXCBS5Tu92bTdxS0G70zh+y1MA5H7WioQ J9CfCDfkxxvUN84irtHayyXzQiXEnZcKjeoFenHLdB3sMnU0Jf1nV2mnuyEJchti PLCoGDZlVkQ4crrnkF0wkZZimB4N10lJ8rTj+yeP0KWakDtZ0UkXZRNKGf7AsLRT tk5Z/+hP7EMWIEfd0jB3/ebRj1xYmbqWFK2YZhpvizrr3jT1yRIJ5lKE7M13vXTU RrgKVknN41+dBEgdUWNFObROyn8teeCLGbErylOoUUixh0gT0i9zFYAyo3izAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUfxGDgoMzdNQXFdw0ydgcZjTJsL0wHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMTM5ODgyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQAqomGkKCyH79q8iIUfVtMiY1aPZIND13GJ F+PqiLIGly4MXX/NvGb/fvJ7EVVnQT/uMxlxb5FvrnxemL6XViCAgWT1UOlZ32oK H3CVwIiMUHPd/+NaBPE19BZvSTKe6ZtmwQ4kLL+wP/u5eSg32H1WuBDWNaVNhaao Kyigds2a1kBdZLZX7uKdkOhQvhn+WuKlS6ga5CWC98a0GnxUtXqRMhU/etMB4vNd S+N59PtfQQRRjFSJtfsN9dz7ghaEqSBZRqVOpIJ8xEbQXnvg7FgAAJl81anxjUr9 SWkX2WA78p9vMngDysUx1hCUa8IFN40BJFzflizzQftQpvttMGVp -----END CERTIFICATE-----Generated at Sat Jul 5 08:22:17 2025 by rpki-client