$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS206271.roa File: AS206271.roa (raw, json) Hash identifier: X4dUPRC3M8YFY0o+y+GW9NkvQG/Wv97koemHGGyBKjs= Subject key identifier: D6:EA:F0:BD:19:83:D4:87:D3:D6:EB:A6:27:AE:E9:EC:1C:84:B3:92 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 31CE3818E2768C6D7B3DF821799D0387EC4D9FC2 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS206271.roa Signing time: Fri 04 Jul 2025 07:51:27 +0000 ROA not before: Fri 04 Jul 2025 07:46:27 +0000 ROA not after: Fri 03 Jul 2026 07:51:27 +0000 asID: 206271 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ce:38:18:e2:76:8c:6d:7b:3d:f8:21:79:9d:03:87:ec:4d:9f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:27 2025 GMT Not After : Jul 3 07:51:27 2026 GMT Subject: CN=D6EAF0BD1983D487D3D6EBA627AEE9EC1C84B392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d0:b1:bf:26:40:43:84:c0:73:99:1f:d0:f9: 18:c0:89:fe:e6:da:3b:2f:30:74:25:8c:e0:99:fc: d9:9d:c3:ab:50:d7:18:57:e5:4e:e4:de:dc:93:c5: f3:6c:3d:bc:a4:42:d5:e9:5c:24:7e:b5:6a:1c:6f: 26:57:95:57:08:1d:ce:cf:3a:7d:40:b2:73:db:ff: e6:a2:7c:6b:21:04:75:a9:2f:d8:5e:ff:8d:81:48: a0:33:e7:2f:bc:1e:78:f0:c9:b1:7d:74:34:1c:ff: b2:cb:89:7a:a1:13:e7:3d:36:6a:13:03:e2:5a:c9: 69:b4:71:55:69:64:b7:67:86:d1:af:d8:eb:2f:4d: 36:c0:c6:67:30:f1:5d:35:df:f1:2b:f8:dd:10:bf: 22:7c:3c:9f:d1:49:dd:5d:6f:6d:f4:d5:fd:3c:a4: 3d:e5:77:de:eb:ac:55:84:4f:be:bd:6f:0f:f6:36: 1e:b9:d7:59:b2:47:04:84:2b:31:28:3a:3f:b1:d0: e2:3f:65:7b:08:d9:a9:9a:41:99:05:ee:11:6e:de: d6:d7:08:b1:c8:79:3b:7b:ec:42:f4:8a:15:3c:1b: 6a:a5:af:12:1c:b1:d2:18:bb:5d:eb:bd:7b:68:45: b7:6d:de:e0:21:9d:3e:7c:32:1b:af:48:72:93:64: 8d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EA:F0:BD:19:83:D4:87:D3:D6:EB:A6:27:AE:E9:EC:1C:84:B3:92 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS206271.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 13:45:2c:13:fd:3f:48:f5:7e:65:39:15:01:15:1f:fb:22:98: 3b:23:c7:79:30:2d:09:d8:5d:30:e1:d5:84:c7:c5:73:d4:f6: ff:ab:09:02:52:92:d8:bd:35:8e:ae:7c:29:cd:95:76:3d:3d: bc:75:7d:00:ae:24:bb:84:61:05:28:b7:fa:0e:8c:09:e5:f5: 86:4c:78:fa:e9:ef:aa:ba:88:eb:7a:43:e6:53:d2:40:53:ef: 3c:df:59:09:01:fe:ef:04:eb:f6:4a:c6:ad:38:03:b2:7f:4b: 9e:cf:09:05:3d:f5:63:96:89:a2:a3:58:c4:f8:40:a7:b7:8d: bc:27:56:b8:5c:2b:f7:e6:f0:ca:5f:56:e3:da:81:e2:8d:1d: 4e:da:7f:ef:d5:ab:a8:e2:dd:e3:d8:8d:43:19:04:92:b0:b8: 8a:7f:fd:7e:b4:33:aa:e0:de:19:28:b6:5a:2a:3c:8a:69:d5: 4c:b3:cb:bb:cc:4e:9b:73:ed:e9:cd:7d:fe:95:2e:d2:6e:93: a9:ea:94:88:86:33:8d:88:9b:bf:6d:18:6d:e3:eb:fc:55:3b: fc:85:4b:1a:f7:43:1c:5f:dd:d3:00:37:e9:65:b4:19:72:34: c9:3a:03:45:8d:77:d7:77:8c:01:d9:35:79:79:d1:7d:c6:92: c2:9c:ed:e6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUMc44GOJ2jG17PfgheZ0Dh+xNn8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjdaFw0yNjA3MDMwNzUxMjdaMDMxMTAvBgNV BAMTKEQ2RUFGMEJEMTk4M0Q0ODdEM0Q2RUJBNjI3QUVFOUVDMUM4NEIzOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC90LG/JkBDhMBzmR/Q+RjAif7m 2jsvMHQljOCZ/Nmdw6tQ1xhX5U7k3tyTxfNsPbykQtXpXCR+tWocbyZXlVcIHc7P On1AsnPb/+aifGshBHWpL9he/42BSKAz5y+8HnjwybF9dDQc/7LLiXqhE+c9NmoT A+JayWm0cVVpZLdnhtGv2OsvTTbAxmcw8V013/Er+N0QvyJ8PJ/RSd1db2301f08 pD3ld97rrFWET769bw/2Nh6511myRwSEKzEoOj+x0OI/ZXsI2amaQZkF7hFu3tbX CLHIeTt77EL0ihU8G2qlrxIcsdIYu13rvXtoRbdt3uAhnT58MhuvSHKTZI0VAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU1urwvRmD1IfT1uumJ67p7ByEs5IwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA2MjcxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQATRSwT/T9I9X5lORUBFR/7Ipg7I8d5MC0J 2F0w4dWEx8Vz1Pb/qwkCUpLYvTWOrnwpzZV2PT28dX0AriS7hGEFKLf6DowJ5fWG THj66e+quojrekPmU9JAU+8831kJAf7vBOv2SsatOAOyf0uezwkFPfVjlomio1jE +ECnt428J1a4XCv35vDKX1bj2oHijR1O2n/v1auo4t3j2I1DGQSSsLiKf/1+tDOq 4N4ZKLZaKjyKadVMs8u7zE6bc+3pzX3+lS7SbpOp6pSIhjONiJu/bRht4+v8VTv8 hUsa90McX93TADfpZbQZcjTJOgNFjXfXd4wB2TV5edF9xpLCnO3m -----END CERTIFICATE-----Generated at Sat Jul 5 08:13:38 2025 by rpki-client