$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199680.roa File: AS199680.roa (raw, json) Hash identifier: 8DIG58OLlxNGseF+/w2WsG4Errf7fDy5Z1Hdsxt2ivg= Subject key identifier: 53:35:16:97:20:E9:41:EB:22:20:F9:37:6F:C0:DC:73:A6:68:32:CB Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 47C7E2264F2ECD3E23143E6062F7DFA54B712D48 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199680.roa Signing time: Fri 04 Jul 2025 07:51:25 +0000 ROA not before: Fri 04 Jul 2025 07:46:25 +0000 ROA not after: Fri 03 Jul 2026 07:51:25 +0000 asID: 199680 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c7:e2:26:4f:2e:cd:3e:23:14:3e:60:62:f7:df:a5:4b:71:2d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:25 2025 GMT Not After : Jul 3 07:51:25 2026 GMT Subject: CN=5335169720E941EB2220F9376FC0DC73A66832CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:c8:ea:b3:b9:80:71:3e:bf:0f:28:9c:9d: a2:c4:b1:08:d6:76:38:44:5f:8e:c8:ae:db:08:06: bb:20:d3:56:d6:4a:41:0f:91:1d:7a:f4:85:af:3f: 56:27:e5:6d:c4:ec:d2:7d:29:bd:da:a8:50:60:9e: fc:f4:9f:5d:4b:4a:35:3c:32:8a:c2:53:c6:d1:b7: c8:e8:1e:93:ca:02:60:4f:2e:d3:4f:43:f5:29:0b: 52:26:d0:6d:2e:c9:37:18:74:0e:26:9f:01:d6:ef: 03:46:7a:bc:df:45:3c:e1:9d:50:0d:be:bb:b8:69: 07:2b:28:c5:69:41:8f:00:ba:6e:ad:12:bf:62:94: ed:37:0a:cc:f6:8b:d8:65:3a:ef:4e:cc:0c:29:4e: d6:e5:04:58:9d:80:84:df:b7:5b:c1:c2:8c:e9:2e: 77:3b:37:11:84:ed:7a:14:46:93:62:ef:b2:41:ba: 0b:25:5a:56:b7:74:0f:1c:8f:de:54:f2:de:8f:56: 1c:3c:39:82:9f:a3:30:33:2e:dc:c3:1e:9d:9a:6a: 3b:9a:4e:27:c8:56:d1:e3:eb:e4:fd:1f:b0:15:82: fd:9e:f1:bf:2b:5c:e1:b3:de:49:d9:27:7c:78:b3: 87:48:90:18:75:ee:50:ef:5d:0e:91:c5:e7:b2:25: 19:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:35:16:97:20:E9:41:EB:22:20:F9:37:6F:C0:DC:73:A6:68:32:CB X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199680.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 2b:93:6c:b7:1e:d6:83:7c:32:08:87:6d:1c:d6:98:ce:7e:db: b7:f1:a9:f5:69:c6:69:ee:bf:ba:96:66:eb:4c:8d:bf:f6:97: a5:4d:f1:34:2b:b0:0d:7d:3e:17:70:8a:00:eb:80:0c:f9:41: ca:7a:72:08:a1:b8:c2:d9:2e:1b:4e:82:07:24:0b:61:99:9b: a0:f7:29:6a:22:58:b5:1a:c3:ee:6c:91:33:c4:5c:7b:b9:0e: a6:b5:64:6f:34:f6:e5:8d:e2:26:c0:70:13:5d:06:d2:66:f9: 03:eb:4f:99:34:2a:c4:6b:12:41:04:14:c9:03:90:17:b4:e4: 3f:66:9a:a6:17:97:21:4b:d9:03:c4:39:9e:b3:83:73:7a:c2: 77:8e:69:b5:23:ef:23:fd:1b:0f:9a:50:95:df:b5:fb:49:cc: 79:78:91:73:4d:46:b0:50:76:fe:8e:74:c4:00:cc:69:b0:46: b6:6e:24:39:3e:5a:d1:1b:1f:ff:74:eb:fd:62:f2:74:e1:be: 37:c8:0e:12:4f:ff:8e:57:9c:03:cd:80:20:5d:c7:dc:38:18: ca:bd:ac:63:b9:b7:8b:cd:5a:dd:2c:33:db:fa:97:1d:94:44: 19:8c:3e:1a:83:ba:fa:2f:02:62:8d:92:78:a7:45:79:86:fe: 82:ab:9c:66 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUR8fiJk8uzT4jFD5gYvffpUtxLUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjVaFw0yNjA3MDMwNzUxMjVaMDMxMTAvBgNV BAMTKDUzMzUxNjk3MjBFOTQxRUIyMjIwRjkzNzZGQzBEQzczQTY2ODMyQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6cjqs7mAcT6/DyicnaLEsQjW djhEX47IrtsIBrsg01bWSkEPkR169IWvP1Yn5W3E7NJ9Kb3aqFBgnvz0n11LSjU8 MorCU8bRt8joHpPKAmBPLtNPQ/UpC1Im0G0uyTcYdA4mnwHW7wNGerzfRTzhnVAN vru4aQcrKMVpQY8Aum6tEr9ilO03Csz2i9hlOu9OzAwpTtblBFidgITft1vBwozp Lnc7NxGE7XoURpNi77JBugslWla3dA8cj95U8t6PVhw8OYKfozAzLtzDHp2aajua TifIVtHj6+T9H7AVgv2e8b8rXOGz3knZJ3x4s4dIkBh17lDvXQ6RxeeyJRndAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUUzUWlyDpQesiIPk3b8Dcc6ZoMsswHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMTk5NjgwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQArk2y3HtaDfDIIh20c1pjOftu38an1acZp 7r+6lmbrTI2/9pelTfE0K7ANfT4XcIoA64AM+UHKenIIobjC2S4bToIHJAthmZug 9ylqIli1GsPubJEzxFx7uQ6mtWRvNPbljeImwHATXQbSZvkD60+ZNCrEaxJBBBTJ A5AXtOQ/ZpqmF5chS9kDxDmes4NzesJ3jmm1I+8j/RsPmlCV37X7Scx5eJFzTUaw UHb+jnTEAMxpsEa2biQ5PlrRGx//dOv9YvJ04b43yA4ST/+OV5wDzYAgXcfcOBjK vaxjubeLzVrdLDPb+pcdlEQZjD4ag7r6LwJijZJ4p0V5hv6Cq5xm -----END CERTIFICATE-----Generated at Sat Jul 5 08:16:00 2025 by rpki-client