$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204585.roa File: AS204585.roa (raw, json) Hash identifier: X1j97B6MWhqk0MJUeT1+VMDdJoouPZ+mTKg6bYmMna4= Subject key identifier: F3:AE:C2:ED:A2:B7:8C:52:93:4D:20:56:FE:B6:96:1B:2B:97:97:77 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 2F21794A1C2B442DCB8074B427CEC865891E44DD Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204585.roa Signing time: Fri 04 Jul 2025 07:51:25 +0000 ROA not before: Fri 04 Jul 2025 07:46:25 +0000 ROA not after: Fri 03 Jul 2026 07:51:25 +0000 asID: 204585 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 2a07:54c7:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:21:79:4a:1c:2b:44:2d:cb:80:74:b4:27:ce:c8:65:89:1e:44:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:25 2025 GMT Not After : Jul 3 07:51:25 2026 GMT Subject: CN=F3AEC2EDA2B78C52934D2056FEB6961B2B979777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:12:5c:a6:e1:f4:55:f6:d9:8d:7a:55:52:86: d5:07:49:5f:df:a3:6e:77:11:5c:f1:e1:f0:0c:31: 1c:76:a9:8b:28:9c:69:ab:ca:76:b8:42:06:82:c6: 1d:ab:07:fd:98:76:f7:b8:70:28:62:5e:83:62:7a: cd:6b:f9:cb:8c:19:e1:2e:40:63:ef:17:2b:50:2d: 51:e5:30:9e:e7:ba:fb:be:d9:64:52:4f:73:16:dd: 91:06:43:fa:80:0b:6d:af:73:9e:5a:b1:ac:74:69: 5f:ea:36:d5:1b:96:8f:fb:f1:f4:58:35:3d:72:ac: 87:51:9f:d2:e3:c5:fb:a4:b9:46:c8:a4:54:97:cc: 9a:4b:f0:22:3b:7a:4a:e0:37:4b:a1:1c:d8:68:9a: 6c:23:72:fc:74:bf:47:a3:46:d9:d1:6e:40:8b:ee: 7d:68:04:93:8a:12:ee:9e:b5:e1:23:c7:a6:5a:d2: 41:04:b5:0b:b0:b1:99:f0:fa:22:2d:5e:56:db:69: 4d:ff:49:0b:fc:96:b7:8a:f4:0e:f6:cd:d5:c6:0f: 49:65:b1:39:9e:93:04:4d:c4:3b:ce:1e:b0:ca:cd: 75:c9:2a:19:e3:ba:a7:cd:bc:c6:ae:3c:a5:4b:ca: 6d:79:18:d8:de:79:4b:4b:b3:11:e3:80:35:b1:be: b7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AE:C2:ED:A2:B7:8C:52:93:4D:20:56:FE:B6:96:1B:2B:97:97:77 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204585.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 2a07:54c7:8000::/36 Signature Algorithm: sha256WithRSAEncryption 6a:be:ed:f6:d6:2b:c4:f5:fe:c3:09:1c:03:f7:04:54:6f:56: af:b2:f6:2b:f2:29:05:8d:b7:f7:14:98:42:21:6a:25:de:24: 0b:93:15:90:f2:ae:dd:26:a1:98:3e:0e:8c:08:9e:45:66:6b: 51:65:4c:69:ae:ec:e6:57:b8:cd:e3:66:2b:02:33:c3:ad:5a: fd:56:89:02:2e:18:a5:8d:c2:7e:f9:6b:57:2a:aa:98:ed:04: da:1e:69:75:00:55:28:ba:ce:a4:63:dc:c4:de:15:ab:6a:72: 0d:e2:9d:91:5e:b4:54:9e:68:90:cb:99:5a:0c:be:e4:1c:84: 8a:a1:24:3a:8d:dc:6c:78:70:85:ff:ef:1a:c4:a1:97:6d:83: 24:84:62:a4:34:22:ba:2c:ba:dc:58:02:29:06:63:ca:5c:08: 54:00:f7:53:25:3a:70:50:93:65:28:70:49:ad:80:07:4a:da: 59:8d:bc:11:20:6c:d8:6d:04:3b:55:4f:6d:9d:bc:ae:f7:ae: 42:c2:c3:c1:88:78:99:67:d3:c2:ae:3b:a8:19:39:42:3f:10: 74:33:65:c3:0b:a0:b3:f8:a2:47:9c:05:56:b8:f8:83:bd:65: 8b:b9:80:9e:23:56:98:4d:7b:0e:3d:03:7b:38:70:13:41:35: 41:b6:a4:31 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIULyF5ShwrRC3LgHS0J87IZYkeRN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjVaFw0yNjA3MDMwNzUxMjVaMDMxMTAvBgNV BAMTKEYzQUVDMkVEQTJCNzhDNTI5MzREMjA1NkZFQjY5NjFCMkI5Nzk3NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqElym4fRV9tmNelVShtUHSV/f o253EVzx4fAMMRx2qYsonGmryna4QgaCxh2rB/2Ydve4cChiXoNies1r+cuMGeEu QGPvFytQLVHlMJ7nuvu+2WRST3MW3ZEGQ/qAC22vc55asax0aV/qNtUblo/78fRY NT1yrIdRn9LjxfukuUbIpFSXzJpL8CI7ekrgN0uhHNhommwjcvx0v0ejRtnRbkCL 7n1oBJOKEu6eteEjx6Za0kEEtQuwsZnw+iItXlbbaU3/SQv8lreK9A72zdXGD0ll sTmekwRNxDvOHrDKzXXJKhnjuqfNvMauPKVLym15GNjeeUtLsxHjgDWxvreXAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU867C7aK3jFKTTSBW/raWGyuXl3cwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA0NTg1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKgdU wrALAwYEKgdUx4AwDQYJKoZIhvcNAQELBQADggEBAGq+7fbWK8T1/sMJHAP3BFRv Vq+y9ivyKQWNt/cUmEIhaiXeJAuTFZDyrt0moZg+DowInkVma1FlTGmu7OZXuM3j ZisCM8OtWv1WiQIuGKWNwn75a1cqqpjtBNoeaXUAVSi6zqRj3MTeFatqcg3inZFe tFSeaJDLmVoMvuQchIqhJDqN3Gx4cIX/7xrEoZdtgySEYqQ0IrosutxYAikGY8pc CFQA91MlOnBQk2UocEmtgAdK2lmNvBEgbNhtBDtVT22dvK73rkLCw8GIeJln08Ku O6gZOUI/EHQzZcMLoLP4okecBVa4+IO9ZYu5gJ4jVphNew49A3s4cBNBNUG2pDE= -----END CERTIFICATE-----Generated at Sat Jul 5 08:13:00 2025 by rpki-client