$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200993.roa File: AS200993.roa (raw, json) Hash identifier: AqA9imHPV4inz6gFJzJG9jlf+uJrRJutYkka7cx40cQ= Subject key identifier: 85:D6:DC:20:A0:4A:9D:8D:F6:C9:56:55:4C:68:29:E7:5B:18:4D:32 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 38A43A31C2FB0FD2F1B31D5B26DC9E2DBE97E0CD Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200993.roa Signing time: Fri 05 Jun 2026 08:45:53 +0000 ROA not before: Fri 05 Jun 2026 08:40:53 +0000 ROA not after: Fri 04 Jun 2027 08:45:53 +0000 asID: 200993 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a4:3a:31:c2:fb:0f:d2:f1:b3:1d:5b:26:dc:9e:2d:be:97:e0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:53 2026 GMT Not After : Jun 4 08:45:53 2027 GMT Subject: CN=85D6DC20A04A9D8DF6C956554C6829E75B184D32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:65:17:4e:f1:99:eb:68:77:c4:12:c2:8b: 46:ed:8f:93:64:e4:32:0e:fd:78:2d:c5:6d:9c:df: 3d:b6:d6:12:6f:54:10:cf:24:ef:e7:23:11:d1:a7: 26:40:b5:8f:dd:89:d2:5c:06:33:79:d1:f8:38:17: 64:79:80:87:41:b3:d5:57:5a:13:48:f5:c7:6e:69: 76:d6:71:1b:14:e4:27:75:a2:7e:64:d6:91:71:fe: 36:e7:12:e0:75:79:8c:47:4c:9e:46:4f:3c:2d:cd: 95:60:65:16:7c:10:bc:5c:85:4a:ee:0e:d5:dd:f7: 35:96:ab:18:a0:5d:39:a6:80:51:d3:dc:82:75:77: 6d:dd:cb:71:bc:23:c1:e2:78:16:36:77:4e:42:d7: 52:6b:07:87:d8:15:c7:e2:21:74:0d:ea:81:08:3e: 90:9a:2f:7c:76:e8:08:23:55:10:dd:fc:7c:f0:06: 87:ed:ac:1e:b3:05:9e:e3:8a:fe:84:8f:dc:74:5b: 20:fc:cc:2f:17:2f:6a:7e:c7:3d:b1:b6:c2:46:b5: 79:7e:af:c2:e6:e0:44:fd:45:8c:80:6c:a8:16:ba: dc:2d:61:38:f4:88:ee:ea:5c:75:c9:80:ee:27:a1: 32:16:6d:f8:dd:4f:2b:84:2e:64:84:d3:81:a9:5f: 8d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D6:DC:20:A0:4A:9D:8D:F6:C9:56:55:4C:68:29:E7:5B:18:4D:32 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200993.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 3e:72:62:56:84:d7:46:8f:55:f8:57:ec:93:0d:af:90:92:84: d4:a2:b7:72:84:a5:cd:e9:ad:c7:3c:9f:95:fc:28:8d:74:b4: e8:57:2b:9f:50:1e:cd:59:52:34:8a:81:ae:ad:bb:5c:ac:a0: bf:1f:97:f8:e3:1b:5a:04:ad:88:69:7d:0e:d4:cb:de:67:a1: 71:c8:d4:f1:d1:eb:b1:e8:34:16:27:ac:af:43:37:62:6f:08: 99:fa:62:77:31:5c:6e:dc:14:4c:19:80:60:01:00:4c:94:13: 6d:87:5d:38:0e:cd:24:ab:98:bf:7b:08:88:0b:a4:51:a3:fb: 4f:89:87:ea:3c:e2:ba:a2:a1:1e:a5:e3:ea:4a:41:fe:82:87: 1f:bc:72:0a:7e:8f:e7:98:f5:f2:45:9e:7b:80:cb:61:02:a3: f4:0d:30:2c:f0:f4:21:6f:bf:7c:b0:d6:53:75:84:d3:d1:7c: cf:9e:8f:6c:e4:a5:c3:1b:f4:9b:9e:c7:f8:4f:80:a8:4c:d8: ce:48:dc:bc:4d:3e:7f:85:93:c5:d2:9f:86:71:61:f1:37:8a: 9e:15:bc:e3:4c:0b:76:1f:c5:cc:64:29:ef:6a:0f:44:ed:f8: 57:8e:e3:40:0b:ee:fb:58:8b:45:af:49:28:cb:e3:d8:20:9e: 55:08:4b:50 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOKQ6McL7D9Lxsx1bJtyeLb6X4M0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTNaFw0yNzA2MDQwODQ1NTNaMDMxMTAvBgNV BAMTKDg1RDZEQzIwQTA0QTlEOERGNkM5NTY1NTRDNjgyOUU3NUIxODREMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2mUXTvGZ62h3xBLCi0btj5Nk 5DIO/XgtxW2c3z221hJvVBDPJO/nIxHRpyZAtY/didJcBjN50fg4F2R5gIdBs9VX WhNI9cduaXbWcRsU5Cd1on5k1pFx/jbnEuB1eYxHTJ5GTzwtzZVgZRZ8ELxchUru DtXd9zWWqxigXTmmgFHT3IJ1d23dy3G8I8HieBY2d05C11JrB4fYFcfiIXQN6oEI PpCaL3x26AgjVRDd/HzwBoftrB6zBZ7jiv6Ej9x0WyD8zC8XL2p+xz2xtsJGtXl+ r8Lm4ET9RYyAbKgWutwtYTj0iO7qXHXJgO4noTIWbfjdTyuELmSE04GpX41PAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUhdbcIKBKnY32yVZVTGgp51sYTTIwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAwOTkzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQA+cmJWhNdGj1X4V+yTDa+QkoTUordyhKXN 6a3HPJ+V/CiNdLToVyufUB7NWVI0ioGurbtcrKC/H5f44xtaBK2IaX0O1MveZ6Fx yNTx0eux6DQWJ6yvQzdibwiZ+mJ3MVxu3BRMGYBgAQBMlBNth104Ds0kq5i/ewiI C6RRo/tPiYfqPOK6oqEepePqSkH+gocfvHIKfo/nmPXyRZ57gMthAqP0DTAs8PQh b798sNZTdYTT0XzPno9s5KXDG/Sbnsf4T4CoTNjOSNy8TT5/hZPF0p+GcWHxN4qe FbzjTAt2H8XMZCnvag9E7fhXjuNAC+77WItFr0koy+PYIJ5VCEtQ -----END CERTIFICATE-----Generated at Thu Jun 11 22:34:13 2026 by rpki-client