$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204901.roa File: AS204901.roa (raw, json) Hash identifier: vJCuDSFVJdFkBbdQ/8PEcp1A5mYhRmYgeyVZktjCwos= Subject key identifier: EA:6F:FC:43:C9:60:6F:44:16:7D:EF:D3:CB:53:06:BC:D3:03:E1:09 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 1C1823172B3DD55FFA0B6E0AFD175BDC0BE306E2 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204901.roa Signing time: Fri 04 Jul 2025 07:51:25 +0000 ROA not before: Fri 04 Jul 2025 07:46:25 +0000 ROA not after: Fri 03 Jul 2026 07:51:25 +0000 asID: 204901 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:18:23:17:2b:3d:d5:5f:fa:0b:6e:0a:fd:17:5b:dc:0b:e3:06:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:25 2025 GMT Not After : Jul 3 07:51:25 2026 GMT Subject: CN=EA6FFC43C9606F44167DEFD3CB5306BCD303E109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5b:df:eb:ff:7a:25:1e:7b:97:c6:8e:34:84: 4e:b1:85:d4:f9:1c:34:a2:4d:40:40:dd:f8:fd:bc: 5b:b6:64:58:f2:93:67:76:1f:62:aa:c2:a2:56:04: 9c:b7:ff:94:5b:33:71:7e:57:df:dc:72:f4:09:18: 8f:d4:73:5e:57:48:a9:14:e9:7a:13:27:97:c1:2e: 9e:3a:16:36:7e:1c:e0:25:49:19:22:8e:67:87:1e: 23:06:36:a0:00:e9:5f:75:cf:ae:43:f8:94:b1:d6: 9b:fc:3c:ae:fe:29:42:c4:cd:86:8d:12:7a:a0:10: ae:57:cb:bf:4a:8b:b7:64:42:43:c4:ff:d1:d8:e5: 00:81:40:91:a6:91:41:16:59:9b:5c:a4:0f:dc:a5: 7a:e8:04:f1:0a:17:0f:c3:14:36:59:33:d0:04:41: a1:04:f7:bf:79:26:a7:68:c8:76:d9:0d:48:b2:65: 13:f4:eb:de:8f:ed:66:ca:63:40:3f:26:6f:56:c2: 31:c9:4c:ff:f4:93:85:4e:7e:a4:f9:ed:ab:e5:cb: 22:7f:0e:81:df:08:9d:5f:d5:a7:4f:c7:61:49:d5: 28:9e:47:e3:77:ea:35:0f:83:ca:27:17:2c:0a:30: eb:36:e7:5f:72:69:91:37:15:99:5b:e8:62:42:d7: da:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6F:FC:43:C9:60:6F:44:16:7D:EF:D3:CB:53:06:BC:D3:03:E1:09 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204901.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 2f:18:07:4b:bd:a3:b2:7b:99:a6:8e:1a:17:e9:f6:38:66:d2: d6:75:08:03:2f:39:5b:45:c3:c4:9b:61:29:ad:cb:ba:75:d4: 95:74:5f:f2:64:bf:be:b1:c1:b8:e0:5e:e4:a6:e4:be:c1:9b: a4:e9:1e:36:33:3e:3c:9d:8e:cd:89:5d:11:63:3e:5b:02:16: ca:d6:71:2e:c8:24:02:60:2c:ca:53:47:ec:2a:81:b1:01:a3: f5:54:48:78:31:a9:48:ed:b3:7a:e8:fc:20:04:15:d3:29:a9: 5d:ea:55:ac:95:75:20:d7:c6:d2:22:6f:69:25:55:64:96:e2: a8:9c:64:50:fe:42:6d:1d:bf:80:8c:e1:ed:d2:2f:f0:94:17: af:4d:8a:13:2d:91:20:3e:f1:22:87:89:6e:dc:05:59:cc:97: 2c:96:e1:6a:d4:bd:5d:e2:3b:20:0a:3e:c8:1b:4a:14:0d:30: 24:3b:fb:4a:3d:f3:cd:29:6c:63:4a:12:06:82:18:20:19:61: f6:2e:e4:6a:e4:b9:35:43:91:38:66:ae:a3:02:46:a3:b8:d9: eb:ac:6a:50:59:e1:ef:37:14:ec:f9:e7:b7:17:9c:43:2d:93: c5:c8:a0:a3:ce:b1:e9:c9:07:24:15:7f:db:54:3f:e3:2d:e5: 28:bf:51:b1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUHBgjFys91V/6C24K/Rdb3AvjBuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjVaFw0yNjA3MDMwNzUxMjVaMDMxMTAvBgNV BAMTKEVBNkZGQzQzQzk2MDZGNDQxNjdERUZEM0NCNTMwNkJDRDMwM0UxMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSW9/r/3olHnuXxo40hE6xhdT5 HDSiTUBA3fj9vFu2ZFjyk2d2H2KqwqJWBJy3/5RbM3F+V9/ccvQJGI/Uc15XSKkU 6XoTJ5fBLp46FjZ+HOAlSRkijmeHHiMGNqAA6V91z65D+JSx1pv8PK7+KULEzYaN EnqgEK5Xy79Ki7dkQkPE/9HY5QCBQJGmkUEWWZtcpA/cpXroBPEKFw/DFDZZM9AE QaEE9795JqdoyHbZDUiyZRP0696P7WbKY0A/Jm9WwjHJTP/0k4VOfqT57avlyyJ/ DoHfCJ1f1adPx2FJ1SieR+N36jUPg8onFywKMOs2519yaZE3FZlb6GJC19orAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU6m/8Q8lgb0QWfe/Ty1MGvNMD4QkwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA0OTAxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQAvGAdLvaOye5mmjhoX6fY4ZtLWdQgDLzlb RcPEm2Eprcu6ddSVdF/yZL++scG44F7kpuS+wZuk6R42Mz48nY7NiV0RYz5bAhbK 1nEuyCQCYCzKU0fsKoGxAaP1VEh4MalI7bN66PwgBBXTKald6lWslXUg18bSIm9p JVVkluKonGRQ/kJtHb+AjOHt0i/wlBevTYoTLZEgPvEih4lu3AVZzJcsluFq1L1d 4jsgCj7IG0oUDTAkO/tKPfPNKWxjShIGghggGWH2LuRq5Lk1Q5E4Zq6jAkajuNnr rGpQWeHvNxTs+ee3F5xDLZPFyKCjzrHpyQckFX/bVD/jLeUov1Gx -----END CERTIFICATE-----Generated at Sat Jul 5 08:13:38 2025 by rpki-client