$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204375.roa File: AS204375.roa (raw, json) Hash identifier: m6W+3uA1QSCC4aOzIL/SAB9oVceRC/0RzP5BSglbom8= Subject key identifier: 54:0C:C6:F0:5B:BA:41:10:D6:0C:93:26:76:42:F6:AE:65:C8:14:53 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 3D8DE1CF57A61883B96C703A24A920B513896CE0 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204375.roa Signing time: Fri 04 Jul 2025 07:51:24 +0000 ROA not before: Fri 04 Jul 2025 07:46:24 +0000 ROA not after: Fri 03 Jul 2026 07:51:24 +0000 asID: 204375 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:8d:e1:cf:57:a6:18:83:b9:6c:70:3a:24:a9:20:b5:13:89:6c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:24 2025 GMT Not After : Jul 3 07:51:24 2026 GMT Subject: CN=540CC6F05BBA4110D60C93267642F6AE65C81453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8b:1a:bd:4e:b6:89:45:dd:81:16:a8:6a:f4: ca:a1:3f:05:c0:c1:ba:20:d7:2d:83:7e:51:c3:08: 4a:cb:39:ae:8f:81:de:80:3b:04:4a:ff:af:57:a8: df:28:00:25:05:4a:d8:63:6a:78:32:97:c8:bb:7a: a7:05:d8:af:0e:e5:54:9e:50:fd:53:04:ad:cf:20: 68:10:ec:ed:dd:bc:47:5b:bb:c7:35:d3:2d:78:f9: cd:57:62:ad:d3:2d:7a:73:35:9f:da:67:56:4a:0b: e8:fe:39:4e:e2:26:83:68:23:74:d9:5a:95:d8:f6: c8:42:c4:fa:13:98:5f:81:45:31:8a:62:f8:1f:b8: 67:73:af:65:6b:c2:ca:c0:0f:2c:ac:da:55:dd:b5: bf:6b:5d:b5:72:10:e3:b4:0a:0b:11:d8:6c:cb:07: 9c:3b:a1:15:8a:19:e4:eb:73:d4:26:44:75:02:63: a1:d1:8e:b3:f7:28:5b:14:1b:17:67:20:32:fa:4c: 71:61:a3:4c:76:1b:05:c1:da:21:9c:ad:c1:e0:ab: 20:f1:34:92:b7:f6:40:01:d1:9e:d9:d7:a1:cb:d8: 7b:c8:3f:05:87:aa:8a:cc:65:4b:df:d2:79:f5:a0: 68:b4:28:49:fd:57:7d:0b:a8:98:1b:3e:ef:58:4e: 85:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0C:C6:F0:5B:BA:41:10:D6:0C:93:26:76:42:F6:AE:65:C8:14:53 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204375.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption bf:cd:5d:05:ae:2c:03:69:4f:11:fe:1b:39:76:a4:40:4f:f0: bc:07:00:ee:bf:8f:2a:92:ea:11:28:7a:46:b0:cb:7f:1a:8f: bd:1a:88:21:f1:a4:eb:7a:4e:d1:e1:70:84:cb:7e:c8:eb:f9: 2f:df:0c:89:b7:3e:87:e8:8b:e0:63:01:0d:c7:4b:38:af:a3: ee:fe:d7:2d:83:f5:80:06:50:19:02:23:23:a4:41:02:98:45: 7b:5a:d9:f9:9a:b6:9c:6c:3a:76:8d:61:9f:bd:69:2c:cc:f3: 5e:64:1d:6c:bf:84:e3:13:65:e5:43:07:57:40:b6:a7:7f:13: 7d:27:2a:2d:a7:ee:e0:0f:6f:56:04:bb:b1:d0:65:f1:bb:92: 01:89:28:4e:e9:4c:84:2a:4b:32:bf:b5:bb:c5:d5:1b:40:ef: cf:ec:75:d5:dc:59:31:50:10:e4:d6:2b:f7:80:6f:b1:21:ac: 1f:84:24:14:8b:e2:a7:69:dd:7e:bd:73:33:fc:75:8e:51:de: 3f:3c:16:5a:15:a3:27:d2:91:5e:7b:1e:ea:aa:cc:b4:7f:74: 46:e1:da:90:00:6e:5a:fc:ae:f8:e7:1f:5b:12:bd:6b:b7:14: 47:0c:c0:b9:7f:86:50:60:98:8f:a0:03:a9:75:b4:72:e9:0c: 7f:8c:73:01 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUPY3hz1emGIO5bHA6JKkgtROJbOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjRaFw0yNjA3MDMwNzUxMjRaMDMxMTAvBgNV BAMTKDU0MENDNkYwNUJCQTQxMTBENjBDOTMyNjc2NDJGNkFFNjVDODE0NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnixq9TraJRd2BFqhq9MqhPwXA wbog1y2DflHDCErLOa6Pgd6AOwRK/69XqN8oACUFSthjangyl8i7eqcF2K8O5VSe UP1TBK3PIGgQ7O3dvEdbu8c10y14+c1XYq3TLXpzNZ/aZ1ZKC+j+OU7iJoNoI3TZ WpXY9shCxPoTmF+BRTGKYvgfuGdzr2VrwsrADyys2lXdtb9rXbVyEOO0CgsR2GzL B5w7oRWKGeTrc9QmRHUCY6HRjrP3KFsUGxdnIDL6THFho0x2GwXB2iGcrcHgqyDx NJK39kAB0Z7Z16HL2HvIPwWHqorMZUvf0nn1oGi0KEn9V30LqJgbPu9YToULAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUVAzG8Fu6QRDWDJMmdkL2rmXIFFMwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA0Mzc1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQC/zV0FriwDaU8R/hs5dqRAT/C8BwDuv48q kuoRKHpGsMt/Go+9Gogh8aTrek7R4XCEy37I6/kv3wyJtz6H6IvgYwENx0s4r6Pu /tctg/WABlAZAiMjpEECmEV7Wtn5mracbDp2jWGfvWkszPNeZB1sv4TjE2XlQwdX QLanfxN9Jyotp+7gD29WBLux0GXxu5IBiShO6UyEKksyv7W7xdUbQO/P7HXV3Fkx UBDk1iv3gG+xIawfhCQUi+Knad1+vXMz/HWOUd4/PBZaFaMn0pFeex7qqsy0f3RG 4dqQAG5a/K745x9bEr1rtxRHDMC5f4ZQYJiPoAOpdbRy6Qx/jHMB -----END CERTIFICATE-----Generated at Sat Jul 5 08:22:17 2025 by rpki-client