$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS203868.roa File: AS203868.roa (raw, json) Hash identifier: 8uUN+pW+GrLu5/zlIADhug+/C2kkyN146WgT6lejX8A= Subject key identifier: 71:DB:0D:2B:74:51:66:C4:E5:4C:47:3F:6D:08:52:43:3D:19:34:51 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 4ADE69D874506E8E6EEE0AD451CAA94271E5DDD2 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS203868.roa Signing time: Fri 04 Jul 2025 07:51:24 +0000 ROA not before: Fri 04 Jul 2025 07:46:24 +0000 ROA not after: Fri 03 Jul 2026 07:51:24 +0000 asID: 203868 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:de:69:d8:74:50:6e:8e:6e:ee:0a:d4:51:ca:a9:42:71:e5:dd:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:24 2025 GMT Not After : Jul 3 07:51:24 2026 GMT Subject: CN=71DB0D2B745166C4E54C473F6D0852433D193451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5f:34:b3:e2:10:d4:98:f1:09:e5:47:6a:ca: 19:8a:37:81:3f:86:b8:61:02:38:03:0e:9f:f1:42: ed:82:af:47:b7:88:88:a6:ac:76:13:e5:6a:a5:2d: 07:b4:de:03:55:eb:86:40:7f:69:cc:3a:eb:38:dd: 4d:51:cb:5a:4a:a1:5c:aa:43:15:5a:f2:3e:8b:c4: 89:91:5c:6a:e3:da:21:5b:67:7b:de:59:6a:26:ed: 6b:14:f7:71:d2:83:0f:8d:4e:2e:37:6b:b6:e2:d1: c5:73:f7:62:35:55:3c:3c:ce:e3:07:78:dc:74:f9: d1:9e:f9:11:3a:56:99:3c:c5:cd:e3:60:40:98:98: 14:30:72:39:2a:cd:18:6f:3e:57:5e:65:ac:9a:d2: af:98:48:b6:4a:2f:a2:59:9a:05:a8:ff:d8:5c:ec: 2f:86:6d:28:99:57:d1:79:18:f4:4e:96:71:aa:fa: 0a:fa:e3:4b:b1:1c:75:f5:1e:b2:87:ce:16:89:42: eb:1e:fd:fc:23:e6:41:b5:64:4f:17:0a:bb:e7:8c: a7:d3:df:61:c2:fe:bb:67:7e:bb:f9:f3:98:da:b4: 8b:27:2d:f5:43:2d:8f:6a:88:68:3b:c8:83:d7:10: 37:61:98:9f:fc:27:03:65:fb:d3:e8:73:b5:8d:8b: 7e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DB:0D:2B:74:51:66:C4:E5:4C:47:3F:6D:08:52:43:3D:19:34:51 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS203868.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption a2:a7:c8:ac:ef:9f:4d:e3:67:05:fc:91:99:9c:ee:ec:5d:c8: 00:55:6e:3e:e2:f2:2d:42:42:02:2e:12:69:b7:a2:eb:84:c5: e1:ea:9a:21:68:b0:6f:2e:79:4f:a9:0b:1e:c4:09:3a:c4:51: 06:0f:87:09:63:f4:d3:36:f5:ba:ef:15:d3:b2:0d:6e:45:a3: 8f:61:5c:81:69:f5:c7:d7:a9:d5:3b:14:a6:a8:5f:7f:a7:89: 24:0e:98:45:75:17:63:9c:9a:4b:f4:75:8d:ae:54:0f:e6:63: 4a:c9:84:47:2c:0b:c2:7f:38:ce:44:ad:5d:4a:10:bf:fb:b1: 04:94:fc:bb:fa:1f:d1:a9:22:21:c2:76:2d:95:f7:5f:15:29: 9d:74:aa:b1:57:68:a4:ae:a0:78:5c:c5:11:82:8c:44:3c:9a: 3e:44:91:5c:d6:3d:0b:8c:df:57:b2:6d:ea:05:71:f9:c7:a7: 24:0b:67:8b:45:f8:6a:68:bb:3b:e5:19:10:1f:98:c3:f2:07: 7b:41:ad:da:18:23:18:02:29:9d:3e:cf:47:8f:a6:8c:e1:63: e1:ed:8c:5c:74:71:e7:06:98:ba:ad:d4:0f:cd:45:e3:fb:4c: a2:0f:3a:7e:aa:6d:f7:04:e9:4e:b7:e9:06:13:d7:08:44:d4: ef:5f:99:27 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUSt5p2HRQbo5u7grUUcqpQnHl3dIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjRaFw0yNjA3MDMwNzUxMjRaMDMxMTAvBgNV BAMTKDcxREIwRDJCNzQ1MTY2QzRFNTRDNDczRjZEMDg1MjQzM0QxOTM0NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcXzSz4hDUmPEJ5UdqyhmKN4E/ hrhhAjgDDp/xQu2Cr0e3iIimrHYT5WqlLQe03gNV64ZAf2nMOus43U1Ry1pKoVyq QxVa8j6LxImRXGrj2iFbZ3veWWom7WsU93HSgw+NTi43a7bi0cVz92I1VTw8zuMH eNx0+dGe+RE6Vpk8xc3jYECYmBQwcjkqzRhvPldeZaya0q+YSLZKL6JZmgWo/9hc 7C+GbSiZV9F5GPROlnGq+gr640uxHHX1HrKHzhaJQuse/fwj5kG1ZE8XCrvnjKfT 32HC/rtnfrv585jatIsnLfVDLY9qiGg7yIPXEDdhmJ/8JwNl+9Poc7WNi36dAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUcdsNK3RRZsTlTEc/bQhSQz0ZNFEwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAzODY4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQCip8is759N42cF/JGZnO7sXcgAVW4+4vIt QkICLhJpt6LrhMXh6pohaLBvLnlPqQsexAk6xFEGD4cJY/TTNvW67xXTsg1uRaOP YVyBafXH16nVOxSmqF9/p4kkDphFdRdjnJpL9HWNrlQP5mNKyYRHLAvCfzjORK1d ShC/+7EElPy7+h/RqSIhwnYtlfdfFSmddKqxV2ikrqB4XMURgoxEPJo+RJFc1j0L jN9Xsm3qBXH5x6ckC2eLRfhqaLs75RkQH5jD8gd7Qa3aGCMYAimdPs9Hj6aM4WPh 7YxcdHHnBpi6rdQPzUXj+0yiDzp+qm33BOlOt+kGE9cIRNTvX5kn -----END CERTIFICATE-----Generated at Sat Jul 5 08:23:06 2025 by rpki-client