$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS208181.roa File: AS208181.roa (raw, json) Hash identifier: Q3tWPvdkQWVL2vNeq2UtSyJTS4KW+QB0mXZ9PwOWwfg= Subject key identifier: 90:BB:48:5D:26:5B:E6:1A:A3:EA:7A:4F:E8:54:DA:CD:8A:3F:2C:F9 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 41E96F458EFDF61C7B2D0ABE1088F318A0C6F8 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS208181.roa Signing time: Mon 03 Aug 2026 15:00:57 +0000 ROA not before: Mon 03 Aug 2026 14:55:57 +0000 ROA not after: Mon 02 Aug 2027 15:00:57 +0000 asID: 208181 IP address blocks: 2a07:54c7::/36 maxlen: 36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Aug 2026 08:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e9:6f:45:8e:fd:f6:1c:7b:2d:0a:be:10:88:f3:18:a0:c6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Aug 3 14:55:57 2026 GMT Not After : Aug 2 15:00:57 2027 GMT Subject: CN=90BB485D265BE61AA3EA7A4FE854DACD8A3F2CF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:86:81:8e:cb:68:6a:a2:bc:6e:3b:7d:ef:26: 65:3c:c3:b5:37:84:5d:ca:06:9f:fc:90:6e:5c:a6: d4:b5:42:50:f3:a5:84:20:4f:11:6e:c1:b3:fe:92: ca:16:d0:f6:1e:ee:6b:33:b5:31:fa:8f:df:bf:b1: 08:88:03:19:37:9e:57:04:09:a6:e6:e4:42:ed:0d: b3:b7:9e:33:e0:d0:06:cd:9e:43:d3:39:b6:9d:db: 38:60:64:70:97:cb:22:73:01:92:4a:7f:67:d8:ab: 1a:40:ed:7c:3b:74:ad:05:6c:5e:74:ba:a4:23:e9: 06:3a:b8:55:c4:bd:26:2c:6d:d7:53:b8:ba:d0:30: f1:f6:8b:b3:bc:5e:e7:89:f6:25:db:5e:fd:7e:98: 75:de:62:5d:ad:97:c7:59:f4:d4:b7:34:04:ed:2b: 61:ed:8b:49:6e:13:0b:3d:ef:de:a0:09:ff:70:da: 34:18:6d:6b:0b:36:35:c4:c9:84:89:c2:96:16:f8: c5:ab:34:2b:01:cd:b0:88:9d:ed:8c:e8:12:bc:9c: e6:1d:06:4e:aa:f9:34:f8:94:38:4b:ef:c4:e7:d3: 4c:f8:61:e8:a1:11:f9:c9:87:62:ac:e3:40:fb:ed: d5:40:bc:a0:d6:c7:0f:47:a2:25:8b:fe:7a:80:c4: 44:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BB:48:5D:26:5B:E6:1A:A3:EA:7A:4F:E8:54:DA:CD:8A:3F:2C:F9 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS208181.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c7::/36 Signature Algorithm: sha256WithRSAEncryption 50:37:16:f2:b8:7f:ab:0a:f1:22:44:87:ac:06:df:78:28:2f: e9:63:3a:35:e6:53:7d:a3:db:75:a1:16:00:c9:0e:ed:13:4f: c4:0f:7f:42:dd:53:0d:af:e2:24:11:9f:e1:65:a3:32:bd:08: a5:d9:2f:03:17:68:6d:4f:d9:e8:d1:2e:45:d5:d2:9b:4e:ce: 32:d9:24:f5:34:83:e3:4c:5c:4d:8e:72:fa:18:00:41:68:c3: f6:b6:ad:fa:5c:1b:2b:91:4c:c9:e2:e5:e1:e6:45:0a:5e:cc: f8:55:91:44:72:0d:0d:f8:f7:5b:d7:6c:f5:7a:4d:74:c5:b2: ea:e3:60:73:9f:f4:69:5e:a2:4c:d6:25:3b:f7:6a:90:12:f2: e4:8c:c4:ea:24:81:32:a5:1a:ef:77:05:22:9a:54:7a:38:4a: b4:c0:3e:7c:fb:47:4a:51:ee:0c:09:c1:cb:5b:57:3d:e2:9e: 2a:bb:fb:2d:a3:db:5b:6b:42:e1:73:ef:1e:c7:d2:52:2c:62: 17:cb:ff:3f:59:6c:d8:1b:3e:14:20:49:ac:6b:94:90:35:dc: aa:f1:ab:2d:a7:13:b9:ad:3b:9f:87:d0:d1:f7:16:1f:5e:1f: 16:8d:00:16:9d:69:8c:84:ee:39:e2:ab:02:ed:96:0d:5c:b8: 1c:c8:1e:5c -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITQelvRY799hx7LQq+EIjzGKDG+DANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg2RkY3NkFDNDIxODk0RkQ1Q0NENjMzMkZBMkE5Q0YzMzAz MTJDRUE4MB4XDTI2MDgwMzE0NTU1N1oXDTI3MDgwMjE1MDA1N1owMzExMC8GA1UE AxMoOTBCQjQ4NUQyNjVCRTYxQUEzRUE3QTRGRTg1NERBQ0Q4QTNGMkNGOTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANaGgY7LaGqivG47fe8mZTzDtTeE XcoGn/yQblym1LVCUPOlhCBPEW7Bs/6SyhbQ9h7uazO1MfqP37+xCIgDGTeeVwQJ pubkQu0Ns7eeM+DQBs2eQ9M5tp3bOGBkcJfLInMBkkp/Z9irGkDtfDt0rQVsXnS6 pCPpBjq4VcS9Jixt11O4utAw8faLs7xe54n2Jdte/X6Ydd5iXa2Xx1n01Lc0BO0r Ye2LSW4TCz3v3qAJ/3DaNBhtaws2NcTJhInClhb4xas0KwHNsIid7YzoEryc5h0G Tqr5NPiUOEvvxOfTTPhh6KER+cmHYqzjQPvt1UC8oNbHD0eiJYv+eoDERLECAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSQu0hdJlvmGqPqek/oVNrNij8s+TAfBgNVHSME GDAWgBRv92rEIYlP1czWMy+iqc8zAxLOqDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRkYjUtYmJkMy01Y2NhNjMzY2Fl M2YvNC82RkY3NkFDNDIxODk0RkQ1Q0NENjMzMkZBMkE5Q0YzMzAzMTJDRUE4LmNy bDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVj OTFiZTNmOWQvNy82RkY3NkFDNDIxODk0RkQ1Q0NENjMzMkZBMkE5Q0YzMzAzMTJD RUE4LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00 ZGI1LWJiZDMtNWNjYTYzM2NhZTNmLzQvQVMyMDgxODEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqB1TH ADANBgkqhkiG9w0BAQsFAAOCAQEAUDcW8rh/qwrxIkSHrAbfeCgv6WM6NeZTfaPb daEWAMkO7RNPxA9/Qt1TDa/iJBGf4WWjMr0IpdkvAxdobU/Z6NEuRdXSm07OMtkk 9TSD40xcTY5y+hgAQWjD9rat+lwbK5FMyeLl4eZFCl7M+FWRRHINDfj3W9ds9XpN dMWy6uNgc5/0aV6iTNYlO/dqkBLy5IzE6iSBMqUa73cFIppUejhKtMA+fPtHSlHu DAnBy1tXPeKeKrv7LaPbW2tC4XPvHsfSUixiF8v/P1ls2Bs+FCBJrGuUkDXcqvGr LacTua07n4fQ0fcWH14fFo0AFp1pjITuOeKrAu2WDVy4HMgeXA== -----END CERTIFICATE-----Generated at Thu Aug 27 15:12:48 2026 by rpki-client