$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199680.roa File: AS199680.roa (raw, json) Hash identifier: IccQgZGSXLZZIrtebFbAlp4IiGwequj7VE69KXT0jtY= Subject key identifier: EC:B6:BC:84:B8:FC:36:4C:8C:65:02:C2:5A:21:36:44:D3:AA:E4:12 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 175842D477FAD4BCD1FCDD7D2E332B3A004AD8EA Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199680.roa Signing time: Fri 05 Jun 2026 08:45:54 +0000 ROA not before: Fri 05 Jun 2026 08:40:54 +0000 ROA not after: Fri 04 Jun 2027 08:45:54 +0000 asID: 199680 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 17:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:58:42:d4:77:fa:d4:bc:d1:fc:dd:7d:2e:33:2b:3a:00:4a:d8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:54 2026 GMT Not After : Jun 4 08:45:54 2027 GMT Subject: CN=ECB6BC84B8FC364C8C6502C25A213644D3AAE412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b2:76:3a:d5:45:fe:dc:7d:c1:22:a1:fa:73: 6b:94:a1:e8:7d:29:d6:c7:8d:31:9e:62:0f:c6:6b: d4:a4:e2:99:c8:a9:ae:4a:cb:d5:c2:44:db:53:df: f9:98:cf:cc:46:5c:a1:fb:12:77:ff:65:a0:bb:36: 03:68:f4:b8:e1:6e:3d:77:c9:91:2a:83:a3:de:c7: 24:f8:b6:4a:d6:67:04:2e:96:b9:e5:bb:80:7b:fb: 86:dd:65:61:b2:f3:fc:a1:e0:a6:c1:7e:da:66:70: b7:05:70:19:2a:26:aa:e2:cd:c7:df:3c:25:e3:db: 1b:71:1b:de:b0:78:cf:6a:03:22:b6:d7:38:f6:ae: 68:e9:10:9a:da:fe:77:c4:12:df:80:71:ce:89:d9: fc:a2:1a:01:a8:4c:dd:1a:af:f8:48:ef:f4:29:9d: e9:22:b2:f9:15:2b:33:2f:9f:e9:8b:f6:cb:73:93: 72:f4:1d:85:3e:30:a2:b0:85:89:93:a6:14:b4:4c: 6c:5e:ba:ae:f6:06:d9:40:8c:ed:e4:09:db:33:22: 51:66:c3:ab:51:9a:7e:32:a5:ae:88:28:6c:c3:06: f6:62:5e:35:fa:2a:1b:11:63:5c:36:3c:4c:65:27: c5:d4:b8:15:b3:6c:4c:8f:bd:ed:a7:ac:2b:03:3e: 67:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B6:BC:84:B8:FC:36:4C:8C:65:02:C2:5A:21:36:44:D3:AA:E4:12 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199680.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 3c:5b:28:66:bc:26:b2:59:dc:63:9f:a4:bb:1c:74:23:be:3f: 52:14:b6:c5:3e:6a:76:64:a7:fa:16:40:44:4a:17:3d:d8:f1: 08:5e:b6:8a:ba:35:6a:e1:db:2b:92:99:13:13:81:e2:2d:69: f9:d3:e4:13:26:7b:0a:95:6e:dc:40:e1:03:2a:52:0a:ed:5e: d2:fa:4f:3b:c4:29:60:e2:b6:54:d8:1a:44:19:ba:b1:b2:fe: 7c:7c:e1:00:c0:ae:e5:7f:e4:ef:a5:9d:fb:68:7a:1d:65:14: 1d:1a:72:a5:01:89:e6:52:60:a7:d7:a1:b4:e5:3e:3c:b8:75: 8e:11:25:18:7f:e0:07:08:71:3f:aa:35:e8:95:2a:17:a4:50: 7d:c9:ba:97:5c:a9:0e:63:2e:bc:56:93:32:df:1c:42:1f:f4: d7:5f:8b:ce:de:14:5c:79:d6:64:e5:b2:52:7e:72:2a:19:65: a5:ab:b1:61:1d:f5:78:b6:57:2b:12:95:74:7c:2f:06:7f:a8: 6d:8a:f5:a7:f5:6c:29:bd:0f:90:f3:1a:76:09:08:f2:73:cc: 74:57:24:0a:06:0a:bb:4f:53:1e:fb:d6:76:e6:69:62:92:60: 55:bc:60:a6:3e:34:d8:b2:c8:7e:be:5b:b2:d0:2b:0c:62:5c: 67:7c:2d:77 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUF1hC1Hf61LzR/N19LjMrOgBK2OowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTRaFw0yNzA2MDQwODQ1NTRaMDMxMTAvBgNV BAMTKEVDQjZCQzg0QjhGQzM2NEM4QzY1MDJDMjVBMjEzNjQ0RDNBQUU0MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNsnY61UX+3H3BIqH6c2uUoeh9 KdbHjTGeYg/Ga9Sk4pnIqa5Ky9XCRNtT3/mYz8xGXKH7Enf/ZaC7NgNo9Ljhbj13 yZEqg6PexyT4tkrWZwQulrnlu4B7+4bdZWGy8/yh4KbBftpmcLcFcBkqJqrizcff PCXj2xtxG96weM9qAyK21zj2rmjpEJra/nfEEt+Acc6J2fyiGgGoTN0ar/hI7/Qp nekisvkVKzMvn+mL9stzk3L0HYU+MKKwhYmTphS0TGxeuq72BtlAjO3kCdszIlFm w6tRmn4ypa6IKGzDBvZiXjX6KhsRY1w2PExlJ8XUuBWzbEyPve2nrCsDPmdXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU7La8hLj8NkyMZQLCWiE2RNOq5BIwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMTk5NjgwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQA8WyhmvCayWdxjn6S7HHQjvj9SFLbFPmp2 ZKf6FkBEShc92PEIXraKujVq4dsrkpkTE4HiLWn50+QTJnsKlW7cQOEDKlIK7V7S +k87xClg4rZU2BpEGbqxsv58fOEAwK7lf+TvpZ37aHodZRQdGnKlAYnmUmCn16G0 5T48uHWOESUYf+AHCHE/qjXolSoXpFB9ybqXXKkOYy68VpMy3xxCH/TXX4vO3hRc edZk5bJSfnIqGWWlq7FhHfV4tlcrEpV0fC8Gf6htivWn9WwpvQ+Q8xp2CQjyc8x0 VyQKBgq7T1Me+9Z25mlikmBVvGCmPjTYssh+vluy0CsMYlxnfC13 -----END CERTIFICATE-----Generated at Sat Jun 6 06:42:32 2026 by rpki-client