$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS207556.roa File: AS207556.roa (raw, json) Hash identifier: K3xj5Re3cboRJbDfIRi9pHdkDMdvYq2mXKMQumvJFqg= Subject key identifier: BA:B4:A0:29:53:E2:BC:8F:5D:CD:FC:71:06:27:A9:2D:E7:0D:7B:EF Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 4078138C6933E6D24A4D6812C8A9310EBE7CF40D Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS207556.roa Signing time: Fri 04 Jul 2025 07:51:24 +0000 ROA not before: Fri 04 Jul 2025 07:46:24 +0000 ROA not after: Fri 03 Jul 2026 07:51:24 +0000 asID: 207556 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 2a07:54c4:1753::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:78:13:8c:69:33:e6:d2:4a:4d:68:12:c8:a9:31:0e:be:7c:f4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:24 2025 GMT Not After : Jul 3 07:51:24 2026 GMT Subject: CN=BAB4A02953E2BC8F5DCDFC710627A92DE70D7BEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:ee:21:6e:04:7c:a6:3b:4f:6e:1f:10:2c: 45:dc:09:3f:25:3f:99:a0:be:db:f9:57:9d:56:28: 3e:fb:cb:64:d2:40:27:c5:6a:53:b4:6f:42:10:5e: ab:5e:2c:ad:d5:d2:01:05:93:14:2a:08:bd:29:cc: 19:74:d8:a1:fb:ec:ba:0e:09:34:90:fd:6e:7e:97: 65:6f:f7:3f:f2:6c:84:ff:c0:f8:54:df:d2:98:83: 1b:49:07:d1:36:ad:5d:ba:41:47:e0:cb:ee:66:e6: 48:01:19:ed:6d:10:ec:11:06:10:6f:fb:39:1a:e2: 42:6c:a9:a8:30:cc:dc:9b:7d:07:58:bd:f9:21:06: 89:2b:31:9d:60:4d:08:da:e1:5e:19:91:1b:64:8b: 07:f2:dd:54:f1:fe:62:3b:4f:c1:93:90:95:b9:4c: ce:99:84:0b:16:35:66:a5:08:df:7c:a2:c5:f7:5f: 8d:78:9a:d4:4e:90:ae:02:32:4a:76:fb:75:d2:93: 0b:08:2e:07:7e:c0:2f:e8:48:d2:e3:b7:51:11:82: 9a:a5:75:db:e7:39:46:b5:f6:59:73:f0:17:f5:d4: a2:da:55:f8:57:5e:60:68:97:19:e4:c9:fc:77:85: 5a:84:3a:a8:48:31:ed:e8:30:36:31:1e:f9:0c:09: e1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B4:A0:29:53:E2:BC:8F:5D:CD:FC:71:06:27:A9:2D:E7:0D:7B:EF X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS207556.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 2a07:54c4:1753::/48 Signature Algorithm: sha256WithRSAEncryption af:10:f5:e1:88:49:ea:ec:fa:3e:57:36:97:21:da:89:f7:be: 0a:a2:4b:c4:38:c5:7b:f5:81:04:a6:61:64:ac:10:dc:c9:00: 7f:12:6e:94:b9:63:c1:ff:06:51:c7:27:c4:10:e0:2c:92:59: 32:d1:33:54:86:0f:ca:69:41:2a:ca:ce:bb:86:94:d9:26:9b: de:46:a3:5f:e1:81:d2:5b:5b:ef:25:8d:7a:36:04:db:c5:3c: 47:13:ce:5b:50:db:56:f6:80:a3:44:c5:58:33:05:f1:5c:25: e2:05:b5:c1:4f:cb:0a:d9:28:5a:34:05:56:44:6d:ad:d8:ef: c5:21:5e:4a:72:65:6f:1c:9e:67:f3:47:b9:86:fd:3a:b3:ee: 1b:6f:2a:e0:76:b9:a6:b5:a0:21:ce:47:17:b4:71:33:12:15: 73:5f:2b:a1:82:7a:c7:7a:41:db:ca:fb:76:d2:2e:93:ef:37: c0:0e:1c:ee:f8:96:79:86:07:0e:79:fd:86:b3:bd:72:39:8d: f7:ee:ae:b2:b6:ba:6d:78:0a:61:30:e4:50:be:16:1a:d0:68: 03:ca:16:1f:ce:61:a3:54:be:a4:ca:7c:9c:db:fd:1f:4c:5f: c6:ed:92:5a:3d:74:9d:18:ae:b4:50:35:83:9b:c6:01:11:c4: 43:5d:67:b5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUQHgTjGkz5tJKTWgSyKkxDr589A0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjRaFw0yNjA3MDMwNzUxMjRaMDMxMTAvBgNV BAMTKEJBQjRBMDI5NTNFMkJDOEY1RENERkM3MTA2MjdBOTJERTcwRDdCRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBu4hbgR8pjtPbh8QLEXcCT8l P5mgvtv5V51WKD77y2TSQCfFalO0b0IQXqteLK3V0gEFkxQqCL0pzBl02KH77LoO CTSQ/W5+l2Vv9z/ybIT/wPhU39KYgxtJB9E2rV26QUfgy+5m5kgBGe1tEOwRBhBv +zka4kJsqagwzNybfQdYvfkhBokrMZ1gTQja4V4ZkRtkiwfy3VTx/mI7T8GTkJW5 TM6ZhAsWNWalCN98osX3X414mtROkK4CMkp2+3XSkwsILgd+wC/oSNLjt1ERgpql ddvnOUa19llz8Bf11KLaVfhXXmBolxnkyfx3hVqEOqhIMe3oMDYxHvkMCeHJAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUurSgKVPivI9dzfxxBiepLecNe+8wHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA3NTU2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgdU wrALAwcAKgdUxBdTMA0GCSqGSIb3DQEBCwUAA4IBAQCvEPXhiEnq7Po+VzaXIdqJ 974KokvEOMV79YEEpmFkrBDcyQB/Em6UuWPB/wZRxyfEEOAsklky0TNUhg/KaUEq ys67hpTZJpveRqNf4YHSW1vvJY16NgTbxTxHE85bUNtW9oCjRMVYMwXxXCXiBbXB T8sK2ShaNAVWRG2t2O/FIV5KcmVvHJ5n80e5hv06s+4bbyrgdrmmtaAhzkcXtHEz EhVzXyuhgnrHekHbyvt20i6T7zfADhzu+JZ5hgcOef2Gs71yOY337q6ytrpteAph MORQvhYa0GgDyhYfzmGjVL6kynyc2/0fTF/G7ZJaPXSdGK60UDWDm8YBEcRDXWe1 -----END CERTIFICATE-----Generated at Sat Jul 5 08:26:08 2025 by rpki-client