$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200993.roa File: AS200993.roa (raw, json) Hash identifier: ZptDKBYz8DkVPOQ+MgmS3ucBR8z1kJ9gpjOzwrZ8yYw= Subject key identifier: FF:DD:F0:9D:CA:47:5F:35:6A:5C:6F:4B:AA:1D:E3:75:F1:E1:CB:60 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 381B4E270FC42F9C042DA58A46DBF43AEFA75B5F Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200993.roa Signing time: Fri 04 Jul 2025 07:51:26 +0000 ROA not before: Fri 04 Jul 2025 07:46:26 +0000 ROA not after: Fri 03 Jul 2026 07:51:26 +0000 asID: 200993 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1b:4e:27:0f:c4:2f:9c:04:2d:a5:8a:46:db:f4:3a:ef:a7:5b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:26 2025 GMT Not After : Jul 3 07:51:26 2026 GMT Subject: CN=FFDDF09DCA475F356A5C6F4BAA1DE375F1E1CB60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c4:ae:2c:00:ae:2f:01:b7:13:21:97:b6:33: 1e:1b:8b:11:0d:05:49:e3:e0:25:b2:a1:54:6a:9f: d7:b0:62:03:7a:df:f4:e1:4c:07:6a:55:6d:6c:f9: f2:00:bf:d9:f6:87:95:39:5a:e8:af:1b:c1:e5:bb: 9b:28:28:90:bf:93:d3:ee:b1:ee:ab:c9:91:8c:57: e0:da:c7:bf:c4:44:7b:a4:7f:84:79:7b:53:a7:e3: 5c:26:e9:3b:0d:80:0f:b0:2b:45:f3:ed:b3:9e:dc: 75:48:b6:55:6f:5a:dd:86:3c:60:ca:08:60:37:79: 1d:c8:f4:4c:a0:67:75:0c:c0:a7:02:37:30:d8:f2: 16:58:3f:b4:0e:ee:4a:f4:9b:be:c7:3f:7e:b3:f2: 4f:95:f6:fc:4d:ce:73:e7:57:74:b2:23:61:5b:4a: 29:6a:74:7a:fa:0f:8b:db:8c:65:1b:20:5e:b5:33: a6:25:c9:a5:cb:2d:c5:88:b3:d3:27:c2:8e:6e:f2: d9:cc:8b:2d:bd:d8:6d:7d:fe:5b:f8:68:4c:2b:7f: 21:dd:93:74:2b:c9:01:8c:1b:ec:b0:32:ff:e3:08: 5f:30:e5:67:9b:ed:77:de:af:4c:50:59:dd:7f:9d: d1:8e:83:fe:cd:e7:e9:da:0d:8a:5d:84:a1:cc:8c: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DD:F0:9D:CA:47:5F:35:6A:5C:6F:4B:AA:1D:E3:75:F1:E1:CB:60 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200993.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 8d:65:7a:90:0e:b7:5d:fb:8e:d3:3f:ca:16:d3:47:69:13:90: e9:61:60:59:76:28:a1:d7:d8:8d:d3:4c:41:3a:5e:62:4b:c2: 22:66:69:3a:a4:06:6c:4d:18:ea:78:37:84:c2:b8:59:87:fe: f2:02:c1:01:0d:b4:69:d6:01:46:e2:6b:a1:4a:34:b2:d1:97: ed:9d:ac:37:e0:6b:ac:eb:94:46:66:93:14:c2:2c:f2:c7:a1: 90:33:67:bd:fc:06:02:95:dc:fb:f4:8e:88:88:98:83:d2:f8: 0f:9e:43:ce:5b:c0:b8:99:35:a0:6b:10:f0:40:67:f5:f6:e0: 03:93:ee:5b:10:df:e6:20:cd:0b:67:b5:d5:47:0e:2a:f8:b5: 25:d1:09:34:5e:42:61:c2:3d:e3:83:34:11:12:9e:bf:b3:00: 9a:73:3e:3e:65:dc:93:e5:3d:d9:b1:4b:7b:63:83:57:ae:17: 82:a6:5c:a2:4e:b1:76:17:21:e8:e4:eb:a7:7d:ee:27:50:ea: de:d1:ab:e5:45:5a:fc:e0:0b:47:e3:bf:0b:9e:2b:08:f5:16: 25:14:10:a0:80:15:a1:cf:3c:36:60:72:fb:7c:c7:61:09:03: f8:37:68:33:86:29:de:e8:c1:dd:a3:d8:42:9a:0a:6e:05:ce: f8:ac:f5:9f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOBtOJw/EL5wELaWKRtv0Ou+nW18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjZaFw0yNjA3MDMwNzUxMjZaMDMxMTAvBgNV BAMTKEZGRERGMDlEQ0E0NzVGMzU2QTVDNkY0QkFBMURFMzc1RjFFMUNCNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAxK4sAK4vAbcTIZe2Mx4bixEN BUnj4CWyoVRqn9ewYgN63/ThTAdqVW1s+fIAv9n2h5U5WuivG8Hlu5soKJC/k9Pu se6ryZGMV+Dax7/ERHukf4R5e1On41wm6TsNgA+wK0Xz7bOe3HVItlVvWt2GPGDK CGA3eR3I9EygZ3UMwKcCNzDY8hZYP7QO7kr0m77HP36z8k+V9vxNznPnV3SyI2Fb SilqdHr6D4vbjGUbIF61M6YlyaXLLcWIs9Mnwo5u8tnMiy292G19/lv4aEwrfyHd k3QryQGMG+ywMv/jCF8w5Web7Xfer0xQWd1/ndGOg/7N5+naDYpdhKHMjFWXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU/93wncpHXzVqXG9Lqh3jdfHhy2AwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAwOTkzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQCNZXqQDrdd+47TP8oW00dpE5DpYWBZdiih 19iN00xBOl5iS8IiZmk6pAZsTRjqeDeEwrhZh/7yAsEBDbRp1gFG4muhSjSy0Zft naw34Gus65RGZpMUwizyx6GQM2e9/AYCldz79I6IiJiD0vgPnkPOW8C4mTWgaxDw QGf19uADk+5bEN/mIM0LZ7XVRw4q+LUl0Qk0XkJhwj3jgzQREp6/swCacz4+ZdyT 5T3ZsUt7Y4NXrheCplyiTrF2FyHo5Ounfe4nUOre0avlRVr84AtH478LnisI9RYl FBCggBWhzzw2YHL7fMdhCQP4N2gzhine6MHdo9hCmgpuBc74rPWf -----END CERTIFICATE-----Generated at Sat Jul 5 08:32:36 2025 by rpki-client