$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS201242.roa File: AS201242.roa (raw, json) Hash identifier: 9r5nMRWCk/FARVuSBszS2c55NhZfeUM1tu97Y1kC+2k= Subject key identifier: 0D:9F:C6:80:32:1F:18:5C:FA:52:F6:9B:8D:64:E3:9E:2D:E0:9D:73 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 1B02C386F3B162475CEB0E7D64D01824C8E212AF Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS201242.roa Signing time: Fri 04 Jul 2025 07:51:29 +0000 ROA not before: Fri 04 Jul 2025 07:46:29 +0000 ROA not after: Fri 03 Jul 2026 07:51:29 +0000 asID: 201242 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:02:c3:86:f3:b1:62:47:5c:eb:0e:7d:64:d0:18:24:c8:e2:12:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:29 2025 GMT Not After : Jul 3 07:51:29 2026 GMT Subject: CN=0D9FC680321F185CFA52F69B8D64E39E2DE09D73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:ab:1c:67:84:0a:cd:03:dc:b7:a1:f4:f0: 4f:c7:34:66:86:74:1b:e8:bb:0f:cd:dc:59:02:b7: 68:8e:e5:9a:8c:98:cf:23:6f:51:c4:d8:ca:b6:9c: 28:11:d9:f5:1f:9f:79:4f:a6:f8:e1:f7:70:db:8a: d7:a0:82:d4:43:f5:bc:de:c4:b8:bf:4b:bc:f5:4d: f1:a3:1f:c1:be:8c:db:0e:13:bd:15:b3:77:92:db: 3f:14:68:79:95:38:a5:4b:9c:c0:ab:38:c9:d0:6d: 8c:4e:27:34:0f:0a:d2:a0:47:4a:42:d0:02:48:9e: f5:31:23:44:fd:a4:24:3e:fa:5b:a3:2f:81:da:4f: fe:a2:55:22:00:9b:63:b6:34:3f:03:0d:bd:6a:fb: 1d:6e:b7:16:d3:8d:37:41:4c:17:2b:83:e2:8e:f8: c9:9e:75:b3:86:87:7f:12:09:33:e1:da:9b:da:9e: e8:3e:8c:ec:e2:03:76:df:56:27:6a:c2:74:5f:61: 1b:90:03:44:60:44:9a:df:49:61:fd:3c:d8:53:92: 28:a2:ad:27:04:b2:ea:48:07:15:ef:f4:bb:52:d6: 50:db:f6:f4:9c:94:07:a3:29:84:63:56:2e:f0:db: 2a:76:1f:73:c5:08:64:ea:85:23:7e:57:d6:cb:16: 4e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9F:C6:80:32:1F:18:5C:FA:52:F6:9B:8D:64:E3:9E:2D:E0:9D:73 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS201242.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 99:4d:b2:54:0f:9b:cd:7f:39:81:e5:e9:cd:dc:57:67:45:14: 90:08:4d:44:32:39:af:a6:04:ad:b2:42:c6:7b:bc:b1:99:bd: 2e:d2:5c:60:fa:50:a4:ef:59:9d:40:d6:da:e5:4b:5d:91:a3: 2c:38:b1:52:d8:6b:b0:42:45:13:1c:97:7e:04:a3:9f:77:f0: 18:8f:35:34:4c:19:2f:6f:f4:55:02:ed:b4:76:d7:45:1d:c0: 74:ca:ac:18:30:c2:9f:20:97:c3:72:f9:b0:93:c4:8a:db:2e: 23:c6:d9:32:f7:e3:59:71:aa:bf:51:06:eb:83:46:2d:f4:d1: 1a:ec:a8:ae:e2:a2:42:9f:be:f3:1e:1a:dc:19:68:c0:d0:05: 08:c9:7c:a0:f7:dc:46:b0:02:09:97:8a:a1:04:a0:ae:b2:2b: 05:e8:79:e6:29:0a:fd:d0:19:31:ec:df:f7:ff:df:11:e9:bf: 1f:79:c2:81:e5:8e:e5:e9:61:27:14:ac:a8:85:60:26:49:e1: 4c:9a:a4:8a:e6:0c:8f:56:35:14:4a:2c:88:74:28:70:91:78: ab:74:5a:c7:d3:27:ff:eb:c8:9e:97:33:95:ad:d6:7d:a7:24: a4:8b:30:b0:52:e3:8b:f1:9c:4d:ce:80:e4:16:f0:01:a8:16: ba:86:53:7d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGwLDhvOxYkdc6w59ZNAYJMjiEq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjlaFw0yNjA3MDMwNzUxMjlaMDMxMTAvBgNV BAMTKDBEOUZDNjgwMzIxRjE4NUNGQTUyRjY5QjhENjRFMzlFMkRFMDlENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKpqscZ4QKzQPct6H08E/HNGaG dBvouw/N3FkCt2iO5ZqMmM8jb1HE2Mq2nCgR2fUfn3lPpvjh93DbiteggtRD9bze xLi/S7z1TfGjH8G+jNsOE70Vs3eS2z8UaHmVOKVLnMCrOMnQbYxOJzQPCtKgR0pC 0AJInvUxI0T9pCQ++lujL4HaT/6iVSIAm2O2ND8DDb1q+x1utxbTjTdBTBcrg+KO +MmedbOGh38SCTPh2pvanug+jOziA3bfVidqwnRfYRuQA0RgRJrfSWH9PNhTkiii rScEsupIBxXv9LtS1lDb9vSclAejKYRjVi7w2yp2H3PFCGTqhSN+V9bLFk7tAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUDZ/GgDIfGFz6UvabjWTjni3gnXMwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAxMjQyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQCZTbJUD5vNfzmB5enN3FdnRRSQCE1EMjmv pgStskLGe7yxmb0u0lxg+lCk71mdQNba5UtdkaMsOLFS2GuwQkUTHJd+BKOfd/AY jzU0TBkvb/RVAu20dtdFHcB0yqwYMMKfIJfDcvmwk8SK2y4jxtky9+NZcaq/UQbr g0Yt9NEa7Kiu4qJCn77zHhrcGWjA0AUIyXyg99xGsAIJl4qhBKCusisF6HnmKQr9 0Bkx7N/3/98R6b8fecKB5Y7l6WEnFKyohWAmSeFMmqSK5gyPVjUUSiyIdChwkXir dFrH0yf/68ielzOVrdZ9pySkizCwUuOL8ZxNzoDkFvABqBa6hlN9 -----END CERTIFICATE-----Generated at Sat Jul 5 08:28:53 2025 by rpki-client