$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS205848.roa File: AS205848.roa (raw, json) Hash identifier: qAekOCX+5DL8R9VJnWhAS3SUyYGUd+L18qZxKT0h32g= Subject key identifier: 72:F6:E4:CE:2F:BD:BE:BC:AA:6B:89:AD:FD:FC:DA:AC:C4:62:0A:1D Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 42DDFE8DA9D22C209BC7A873228BCE21605C7894 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS205848.roa Signing time: Fri 04 Jul 2025 07:51:24 +0000 ROA not before: Fri 04 Jul 2025 07:46:24 +0000 ROA not after: Fri 03 Jul 2026 07:51:24 +0000 asID: 205848 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:dd:fe:8d:a9:d2:2c:20:9b:c7:a8:73:22:8b:ce:21:60:5c:78:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:24 2025 GMT Not After : Jul 3 07:51:24 2026 GMT Subject: CN=72F6E4CE2FBDBEBCAA6B89ADFDFCDAACC4620A1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1a:c3:2f:ec:d8:b3:f8:f8:83:95:42:41:68: 19:8d:a5:65:e4:57:a3:95:9e:50:f0:34:e9:0c:52: 3a:d4:a0:b8:da:17:5e:b8:0a:36:9d:2e:c8:e9:8b: ff:f4:fa:68:18:4e:8a:b7:fb:24:3f:28:56:90:30: 48:1b:4f:da:a9:21:f6:8c:f7:b9:1b:a3:85:6b:a1: 2e:2f:9c:45:ef:cc:5f:ed:6a:f7:96:af:ac:db:cb: 49:b6:4e:24:c6:3d:5c:18:68:3e:83:b9:7f:06:8f: 1c:fd:e0:a4:c9:cf:ba:77:9e:cf:61:3b:5d:f3:a3: 55:fb:7b:35:db:c2:50:34:84:00:66:55:b2:b6:ca: d1:5b:35:b2:56:c4:55:3c:77:5d:79:c4:f8:ca:79: 84:3b:78:22:92:96:50:90:86:fe:cc:01:42:4e:1d: 73:ef:3f:58:a5:7e:c2:59:d4:aa:f6:21:65:9f:0b: 7b:43:fc:b8:f1:b2:c4:83:ef:b2:09:df:14:c0:e3: 62:35:e4:06:72:5d:16:b9:a3:9a:92:9f:3c:92:04: c4:a0:d4:c3:ae:c7:2a:c6:24:8b:3e:48:54:55:fd: d5:22:11:57:2d:9e:67:3c:10:d0:7e:3f:ea:e5:7a: 35:91:1d:93:af:86:8e:88:56:7c:e1:47:e4:aa:44: cd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F6:E4:CE:2F:BD:BE:BC:AA:6B:89:AD:FD:FC:DA:AC:C4:62:0A:1D X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS205848.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 2b:f5:2c:69:f3:1f:a0:e1:93:40:3c:6d:bf:8e:61:22:78:c0: a5:90:ec:56:85:c3:43:60:61:65:99:79:50:1b:3b:6b:29:f3: a1:1b:e2:6a:d1:d0:eb:3d:1a:a7:16:3a:c4:55:f0:16:76:81: 49:1b:3c:51:bf:d6:74:b9:3f:b7:9a:c0:80:9a:c9:c2:d3:c3: d6:87:4e:5d:11:6d:51:58:29:a2:b7:a6:88:58:54:c1:2b:e5: 21:9a:b2:fc:03:1a:cc:90:fb:73:66:b6:cd:02:39:50:1d:62: d2:5d:60:3a:0e:e1:34:df:d8:67:82:af:63:63:7b:9f:bf:ee: 02:52:ae:a3:90:db:90:08:b2:09:13:28:08:c6:d1:59:40:44: eb:bb:13:8d:f1:2c:d5:58:e4:8f:8d:2d:80:65:ba:50:80:12: 6d:b1:12:ea:77:6d:8d:dd:d9:8a:89:d2:fb:b1:52:ea:59:5f: 43:ec:9d:77:3e:48:c5:cc:f9:14:90:f6:78:a0:34:1f:25:a2: 85:63:31:db:7c:63:28:68:49:2b:a4:1e:11:e0:dc:53:23:34: 1f:0e:43:45:3b:b3:7f:15:62:03:36:26:e7:f6:83:ea:c9:23: f6:92:ec:68:e8:9d:b7:68:39:5d:c1:a7:c7:1a:1c:ef:1f:b1: 7b:05:b5:51 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQt3+janSLCCbx6hzIovOIWBceJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjRaFw0yNjA3MDMwNzUxMjRaMDMxMTAvBgNV BAMTKDcyRjZFNENFMkZCREJFQkNBQTZCODlBREZERkNEQUFDQzQ2MjBBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyGsMv7Niz+PiDlUJBaBmNpWXk V6OVnlDwNOkMUjrUoLjaF164CjadLsjpi//0+mgYToq3+yQ/KFaQMEgbT9qpIfaM 97kbo4VroS4vnEXvzF/taveWr6zby0m2TiTGPVwYaD6DuX8Gjxz94KTJz7p3ns9h O13zo1X7ezXbwlA0hABmVbK2ytFbNbJWxFU8d115xPjKeYQ7eCKSllCQhv7MAUJO HXPvP1ilfsJZ1Kr2IWWfC3tD/LjxssSD77IJ3xTA42I15AZyXRa5o5qSnzySBMSg 1MOuxyrGJIs+SFRV/dUiEVctnmc8ENB+P+rlejWRHZOvho6IVnzhR+SqRM09AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUcvbkzi+9vryqa4mt/fzarMRiCh0wHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA1ODQ4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQAr9Sxp8x+g4ZNAPG2/jmEieMClkOxWhcND YGFlmXlQGztrKfOhG+Jq0dDrPRqnFjrEVfAWdoFJGzxRv9Z0uT+3msCAmsnC08PW h05dEW1RWCmit6aIWFTBK+UhmrL8AxrMkPtzZrbNAjlQHWLSXWA6DuE039hngq9j Y3ufv+4CUq6jkNuQCLIJEygIxtFZQETruxON8SzVWOSPjS2AZbpQgBJtsRLqd22N 3dmKidL7sVLqWV9D7J13PkjFzPkUkPZ4oDQfJaKFYzHbfGMoaEkrpB4R4NxTIzQf DkNFO7N/FWIDNibn9oPqySP2kuxo6J23aDldwafHGhzvH7F7BbVR -----END CERTIFICATE-----Generated at Sat Jul 5 08:23:06 2025 by rpki-client