$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS206444.roa File: AS206444.roa (raw, json) Hash identifier: 2zsWstoql4brWbHJzVjQVfiHuXda3VkDfZPzfzO6e6A= Subject key identifier: 01:D4:42:B3:B5:F2:60:61:BC:7E:83:70:20:CD:86:3D:D0:07:3A:30 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 2582F76B7097A48A4F4AD94723542FFD32EDEEC0 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS206444.roa Signing time: Fri 04 Jul 2025 07:51:23 +0000 ROA not before: Fri 04 Jul 2025 07:46:23 +0000 ROA not after: Fri 03 Jul 2026 07:51:23 +0000 asID: 206444 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 2a07:54c4:9800::/37 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:82:f7:6b:70:97:a4:8a:4f:4a:d9:47:23:54:2f:fd:32:ed:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:23 2025 GMT Not After : Jul 3 07:51:23 2026 GMT Subject: CN=01D442B3B5F26061BC7E837020CD863DD0073A30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4b:fc:d2:73:ce:cc:8a:a0:a0:70:83:67:39: e8:d5:d4:58:95:20:6f:75:69:8f:5f:08:55:fc:9f: 66:26:cd:d5:14:52:d0:ea:f8:8b:8d:34:96:24:e2: da:0e:7d:bf:5f:ce:d0:d6:16:88:f0:d2:00:4f:1e: 5b:77:df:78:d5:98:a7:35:1f:a6:a3:b5:15:58:00: ed:42:ed:88:9e:ed:c8:65:2e:72:77:b5:48:0a:21: 1f:06:8b:b6:73:f1:8c:ad:c6:43:b1:48:80:3d:9b: 77:df:46:58:c5:5e:5d:e5:e5:11:dc:0b:20:25:ac: af:b7:a4:d4:e9:7c:88:f5:e9:a5:62:86:9b:09:95: fb:a3:e0:33:87:18:c2:07:5a:28:64:af:9d:f4:ee: 8b:ea:2e:83:68:7a:81:f3:0e:9c:5e:98:61:0c:99: 01:60:29:6e:fa:7b:4b:45:87:09:10:b0:f0:ec:2c: 3e:30:cf:03:62:7c:92:bd:82:a9:67:2b:3a:a5:94: e3:d0:5a:77:55:31:18:4c:ac:38:90:8a:76:f6:1c: c0:a3:11:32:31:63:01:91:42:cd:a7:67:12:00:06: 14:47:da:fa:a2:4a:de:07:79:84:18:93:97:a6:73: e0:c6:90:b3:d3:59:7c:f6:61:fc:ef:00:ad:ee:e6: 9f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D4:42:B3:B5:F2:60:61:BC:7E:83:70:20:CD:86:3D:D0:07:3A:30 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS206444.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 2a07:54c4:9800::/37 Signature Algorithm: sha256WithRSAEncryption 0d:0e:d9:be:76:11:c9:75:98:ff:27:4a:d2:3f:e9:57:88:db: de:dc:84:e7:1f:82:d8:f6:13:bc:73:02:8a:f9:23:e9:83:19: ad:bb:c8:68:92:a6:51:b8:de:84:ee:a2:ef:64:04:e2:02:0e: c0:bc:e7:31:56:6c:d4:56:e3:70:92:f7:97:5d:47:19:b8:8b: d8:a0:ad:ea:dc:e7:ce:c8:25:79:2b:84:d6:1e:5b:b3:55:08: f0:a7:cc:82:b6:1b:55:0f:b7:6a:5b:73:d1:2e:8b:35:ba:1e: 06:e4:11:c8:13:15:7a:04:ab:1a:ce:28:4c:f4:3b:99:9c:39: bd:df:83:3b:dd:3f:b6:8e:a8:40:fb:1e:3c:5a:17:ef:0e:10: 3a:1e:fc:54:87:4a:c9:be:4a:d8:73:77:8d:b4:a9:65:a5:01: ed:71:ae:26:b1:13:56:46:50:42:77:36:02:aa:f3:ef:41:07: 7e:f0:06:03:37:aa:95:18:24:45:99:7c:79:7c:5b:eb:24:c0: d4:a0:45:f3:43:55:07:43:3f:bd:11:69:46:00:87:f2:bf:e9: 3b:63:5a:8d:8d:fa:5c:3f:69:c0:61:d6:e1:d7:cf:21:f3:db: 24:1c:84:70:b4:22:ff:7d:12:37:2d:ae:be:50:33:11:6b:3c: 79:02:5d:26 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUJYL3a3CXpIpPStlHI1Qv/TLt7sAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjNaFw0yNjA3MDMwNzUxMjNaMDMxMTAvBgNV BAMTKDAxRDQ0MkIzQjVGMjYwNjFCQzdFODM3MDIwQ0Q4NjNERDAwNzNBMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtS/zSc87MiqCgcINnOejV1FiV IG91aY9fCFX8n2YmzdUUUtDq+IuNNJYk4toOfb9fztDWFojw0gBPHlt333jVmKc1 H6ajtRVYAO1C7Yie7chlLnJ3tUgKIR8Gi7Zz8YytxkOxSIA9m3ffRljFXl3l5RHc CyAlrK+3pNTpfIj16aVihpsJlfuj4DOHGMIHWihkr5307ovqLoNoeoHzDpxemGEM mQFgKW76e0tFhwkQsPDsLD4wzwNifJK9gqlnKzqllOPQWndVMRhMrDiQinb2HMCj ETIxYwGRQs2nZxIABhRH2vqiSt4HeYQYk5emc+DGkLPTWXz2YfzvAK3u5p+dAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUAdRCs7XyYGG8foNwIM2GPdAHOjAwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA2NDQ0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKgdU wrALAwYDKgdUxJgwDQYJKoZIhvcNAQELBQADggEBAA0O2b52Ecl1mP8nStI/6VeI 297chOcfgtj2E7xzAor5I+mDGa27yGiSplG43oTuou9kBOICDsC85zFWbNRW43CS 95ddRxm4i9igrerc587IJXkrhNYeW7NVCPCnzIK2G1UPt2pbc9EuizW6HgbkEcgT FXoEqxrOKEz0O5mcOb3fgzvdP7aOqED7HjxaF+8OEDoe/FSHSsm+Sthzd420qWWl Ae1xriaxE1ZGUEJ3NgKq8+9BB37wBgM3qpUYJEWZfHl8W+skwNSgRfNDVQdDP70R aUYAh/K/6TtjWo2N+lw/acBh1uHXzyHz2yQchHC0Iv99Ejctrr5QMxFrPHkCXSY= -----END CERTIFICATE-----Generated at Sat Jul 5 08:20:30 2025 by rpki-client