$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204901.roa File: AS204901.roa (raw, json) Hash identifier: ri5OYI2+ZVk6GQ7Wz2itUKGv1yew2Lk6AAwkH403JGM= Subject key identifier: 16:96:72:04:99:E0:5B:C2:01:37:EE:B2:AF:84:F8:22:33:04:2F:9B Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 6F9B0FBAA5713C4A602BBA4EDDC184E09B42BDE6 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204901.roa Signing time: Fri 05 Jun 2026 08:45:54 +0000 ROA not before: Fri 05 Jun 2026 08:40:54 +0000 ROA not after: Fri 04 Jun 2027 08:45:54 +0000 asID: 204901 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 20:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:9b:0f:ba:a5:71:3c:4a:60:2b:ba:4e:dd:c1:84:e0:9b:42:bd:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:54 2026 GMT Not After : Jun 4 08:45:54 2027 GMT Subject: CN=1696720499E05BC20137EEB2AF84F82233042F9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f8:ab:70:cb:e8:16:93:89:be:2e:9b:3d:f2: 3f:44:53:18:83:04:e4:f3:86:7c:bc:aa:6f:95:56: d6:59:0b:ff:a1:4b:50:43:c9:69:6c:37:27:df:dd: 39:81:c8:6f:4b:91:ac:88:66:01:d1:f1:16:33:ca: 5f:9f:b1:6c:09:0a:f4:e1:77:b0:5c:52:ef:46:94: c0:fc:19:24:d6:b8:18:9f:7b:4f:f8:48:46:7a:34: 83:98:ed:d6:ec:49:a0:8c:ba:77:80:94:fb:e8:44: b9:10:bc:70:34:db:e8:9d:fe:21:9a:8b:e1:71:01: a6:7f:3e:98:2c:57:26:0d:90:76:85:9b:9e:81:e1: bf:c5:a6:35:10:94:10:bd:1e:50:f3:92:68:8f:97: 96:e0:07:0f:0c:c1:df:db:20:67:e9:a2:89:4c:cb: 4c:b1:12:62:8d:c1:13:ff:c0:9e:99:32:c5:ae:66: 79:12:23:74:70:98:d2:19:e7:64:53:a4:7d:ad:d9: b0:c6:27:a0:36:02:11:cd:ae:e2:fb:ad:66:96:d7: d0:c8:39:e6:80:eb:89:0b:1c:e0:2d:31:b5:9a:a9: fe:e6:8c:92:14:9f:72:f9:ab:97:71:b5:75:ab:a0: bc:dc:5e:7d:4b:e4:80:e5:06:81:08:d3:72:d0:6e: af:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:96:72:04:99:E0:5B:C2:01:37:EE:B2:AF:84:F8:22:33:04:2F:9B X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204901.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption a0:32:8d:36:9c:6d:a4:9e:d2:7f:78:e8:4b:bf:54:5b:f7:90: b5:70:69:1d:be:13:66:a1:d1:46:7f:54:75:40:76:d7:55:73: 6a:2c:19:12:ae:ed:e6:6b:22:9d:b4:c4:14:c0:02:d7:de:d7: ce:e3:6d:11:99:ed:e3:c0:cf:bd:de:20:7f:88:07:90:22:9c: d9:59:5b:8a:7e:0b:14:91:28:4b:70:bf:34:2f:87:13:bf:99: 6a:8c:14:16:e8:a5:b6:01:9c:e6:8c:66:66:6c:66:ef:ce:f3: 3f:df:5f:ef:77:3e:de:25:18:7c:a4:cc:65:eb:da:f3:fb:5a: f9:33:32:86:ad:b2:1d:16:22:a0:c8:ad:1c:bc:4d:a1:27:49: a6:b5:5a:54:e8:ae:a7:79:ea:0e:aa:2a:9a:23:3c:67:c7:6b: 95:14:86:14:6c:1b:d3:12:a8:4b:9e:00:02:25:1e:c9:6d:f0: 44:51:e8:b4:ce:7b:78:c8:f0:ef:c2:7f:29:8d:d2:2a:f8:6f: b7:59:23:bf:da:43:db:14:00:3d:17:dd:35:39:e4:4f:59:8f: 6e:53:04:a9:b8:94:cc:b6:b5:db:49:45:43:d6:27:16:47:97: 47:82:9f:89:50:d5:3a:a5:08:02:64:bd:1e:13:f0:8a:f2:37: ab:eb:21:ae -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUb5sPuqVxPEpgK7pO3cGE4JtCveYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTRaFw0yNzA2MDQwODQ1NTRaMDMxMTAvBgNV BAMTKDE2OTY3MjA0OTlFMDVCQzIwMTM3RUVCMkFGODRGODIyMzMwNDJGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7+Ktwy+gWk4m+Lps98j9EUxiD BOTzhny8qm+VVtZZC/+hS1BDyWlsNyff3TmByG9LkayIZgHR8RYzyl+fsWwJCvTh d7BcUu9GlMD8GSTWuBife0/4SEZ6NIOY7dbsSaCMuneAlPvoRLkQvHA02+id/iGa i+FxAaZ/PpgsVyYNkHaFm56B4b/FpjUQlBC9HlDzkmiPl5bgBw8Mwd/bIGfpoolM y0yxEmKNwRP/wJ6ZMsWuZnkSI3RwmNIZ52RTpH2t2bDGJ6A2AhHNruL7rWaW19DI OeaA64kLHOAtMbWaqf7mjJIUn3L5q5dxtXWroLzcXn1L5IDlBoEI03LQbq9nAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUFpZyBJngW8IBN+6yr4T4IjMEL5swHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA0OTAxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQCgMo02nG2kntJ/eOhLv1Rb95C1cGkdvhNm odFGf1R1QHbXVXNqLBkSru3mayKdtMQUwALX3tfO420Rme3jwM+93iB/iAeQIpzZ WVuKfgsUkShLcL80L4cTv5lqjBQW6KW2AZzmjGZmbGbvzvM/31/vdz7eJRh8pMxl 69rz+1r5MzKGrbIdFiKgyK0cvE2hJ0mmtVpU6K6neeoOqiqaIzxnx2uVFIYUbBvT EqhLngACJR7JbfBEUei0znt4yPDvwn8pjdIq+G+3WSO/2kPbFAA9F901OeRPWY9u UwSpuJTMtrXbSUVD1icWR5dHgp+JUNU6pQgCZL0eE/CK8jer6yGu -----END CERTIFICATE-----Generated at Fri Jun 12 04:42:02 2026 by rpki-client