$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200676.roa File: AS200676.roa (raw, json) Hash identifier: VtKInNWOGE0p86X1HI/FCsdomCMKYT+zqi8GU2t2OxE= Subject key identifier: 6D:F9:91:9B:CD:82:58:3D:B6:46:77:2E:8D:75:1E:A1:64:EB:32:AD Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 380CA09C83F0FA1C05B526C8345D43140EA982FC Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200676.roa Signing time: Fri 04 Jul 2025 07:51:25 +0000 ROA not before: Fri 04 Jul 2025 07:46:25 +0000 ROA not after: Fri 03 Jul 2026 07:51:25 +0000 asID: 200676 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:0c:a0:9c:83:f0:fa:1c:05:b5:26:c8:34:5d:43:14:0e:a9:82:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:25 2025 GMT Not After : Jul 3 07:51:25 2026 GMT Subject: CN=6DF9919BCD82583DB646772E8D751EA164EB32AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:73:59:b0:a4:1b:36:b4:5c:61:bb:5f:3c:8a: 13:49:ed:18:bf:02:ce:3e:26:7e:da:d5:08:f0:b0: ce:5b:ee:11:77:c6:d4:04:54:48:cd:6f:85:49:e2: 40:ce:c9:45:80:93:c4:d9:c2:6d:91:41:cb:dd:4f: c1:72:3c:74:d2:28:c9:f4:32:5d:85:f8:3b:70:cf: a4:58:f4:49:9b:d3:ec:57:03:02:d6:14:e6:97:28: e8:78:c3:22:9a:cd:17:56:6c:e0:26:96:97:5f:99: b2:f8:74:68:c0:c9:e8:01:e3:7d:25:18:fe:68:59: 3b:53:6d:64:e7:8d:8b:2c:d6:d5:c7:70:ed:08:a0: 34:63:e7:2b:82:6d:ca:58:0d:d2:6d:49:5c:e7:a2: 3d:e9:d8:10:79:47:1d:fe:71:44:8f:72:e2:0a:19: 16:3e:5f:1d:24:b3:bc:35:68:34:15:33:0a:be:aa: 63:ac:83:5a:c7:11:21:cc:e9:a6:63:a4:07:84:0c: bd:d0:0e:f6:55:59:73:e1:65:01:92:66:0b:93:7e: d3:5f:98:64:c3:e4:b6:28:59:e6:d7:7b:1e:a9:f2: 6b:e7:3a:3c:a7:d4:9a:06:af:1f:a0:ea:b3:e3:10: e8:1f:fa:68:c6:b0:a0:59:e9:02:a3:2c:fb:e5:0f: 20:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F9:91:9B:CD:82:58:3D:B6:46:77:2E:8D:75:1E:A1:64:EB:32:AD X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 44:cd:7b:06:bd:9a:83:55:2f:1d:bc:47:7d:0d:92:67:a5:2b: 99:87:08:ef:0b:a8:1f:eb:17:5f:c2:45:ca:a5:05:88:78:8a: d6:20:4f:72:39:df:a5:aa:bc:7b:d9:ac:de:f5:4c:24:80:23: 48:21:04:f7:5e:76:88:1d:cc:79:2f:5a:9b:fb:4d:d1:8d:41: 15:11:87:d3:1d:3a:97:20:64:a2:f9:fe:0e:4c:bb:ef:06:af: ce:61:b9:08:a8:d8:57:12:fe:1e:f7:9b:d1:85:b8:f0:74:64: 39:94:e5:9c:1e:3c:08:07:90:e1:11:dc:14:39:ab:69:87:66: d8:5e:b3:5e:3a:af:6a:5e:2d:40:89:ac:a6:e5:c3:5c:08:9b: 16:2d:32:ee:0b:30:88:b8:91:ca:81:26:f9:c4:f9:69:4b:8f: 53:03:04:48:1f:8d:97:a2:6f:7d:b0:c4:08:8d:09:a5:ca:3b: 0b:49:3c:a8:54:ed:07:e2:6e:62:3a:2d:80:fb:09:8c:05:76: 39:ec:5a:6d:60:c7:f9:86:99:d6:5d:7f:9f:2d:b6:7e:69:11: fa:05:8f:f7:57:24:3a:17:f0:f4:b5:b5:e5:d4:b0:e9:27:27: 2a:4d:d8:ec:d7:57:2a:70:4f:d6:8c:e5:5b:a8:9f:f4:b3:31: 64:1b:37:54 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOAygnIPw+hwFtSbINF1DFA6pgvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjVaFw0yNjA3MDMwNzUxMjVaMDMxMTAvBgNV BAMTKDZERjk5MTlCQ0Q4MjU4M0RCNjQ2NzcyRThENzUxRUExNjRFQjMyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCc1mwpBs2tFxhu188ihNJ7Ri/ As4+Jn7a1QjwsM5b7hF3xtQEVEjNb4VJ4kDOyUWAk8TZwm2RQcvdT8FyPHTSKMn0 Ml2F+Dtwz6RY9Emb0+xXAwLWFOaXKOh4wyKazRdWbOAmlpdfmbL4dGjAyegB430l GP5oWTtTbWTnjYss1tXHcO0IoDRj5yuCbcpYDdJtSVznoj3p2BB5Rx3+cUSPcuIK GRY+Xx0ks7w1aDQVMwq+qmOsg1rHESHM6aZjpAeEDL3QDvZVWXPhZQGSZguTftNf mGTD5LYoWebXex6p8mvnOjyn1JoGrx+g6rPjEOgf+mjGsKBZ6QKjLPvlDyCJAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUbfmRm82CWD22RncujXUeoWTrMq0wHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAwNjc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQBEzXsGvZqDVS8dvEd9DZJnpSuZhwjvC6gf 6xdfwkXKpQWIeIrWIE9yOd+lqrx72aze9UwkgCNIIQT3XnaIHcx5L1qb+03RjUEV EYfTHTqXIGSi+f4OTLvvBq/OYbkIqNhXEv4e95vRhbjwdGQ5lOWcHjwIB5DhEdwU Oatph2bYXrNeOq9qXi1Aiaym5cNcCJsWLTLuCzCIuJHKgSb5xPlpS49TAwRIH42X om99sMQIjQmlyjsLSTyoVO0H4m5iOi2A+wmMBXY57FptYMf5hpnWXX+fLbZ+aRH6 BY/3VyQ6F/D0tbXl1LDpJycqTdjs11cqcE/WjOVbqJ/0szFkGzdU -----END CERTIFICATE-----Generated at Sat Jul 5 08:19:42 2025 by rpki-client