
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS208548.roa
File: AS208548.roa (raw, json)
Hash identifier: R5wwyXNFfkkUiwvu6q5KyLTv91783oL9PAqaZj4cqUU=
Subject key identifier: 87:26:A7:C6:12:E9:71:6C:E0:77:C7:36:B1:9F:AB:50:63:F0:41:DB
Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial: 725F7D51D80FCB9BB87B64C5DE91CF8D7BC0A07B
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS208548.roa
Signing time: Sun 24 May 2026 11:42:43 +0000
ROA not before: Sun 24 May 2026 11:37:43 +0000
ROA not after: Sun 23 May 2027 11:42:43 +0000
asID: 208548
IP address blocks: 2a07:54c2::/32 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:5f:7d:51:d8:0f:cb:9b:b8:7b:64:c5:de:91:cf:8d:7b:c0:a0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Validity
Not Before: May 24 11:37:43 2026 GMT
Not After : May 23 11:42:43 2027 GMT
Subject: CN=8726A7C612E9716CE077C736B19FAB5063F041DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ad:e1:f8:24:40:f8:fe:73:30:4f:a5:a7:5a:
84:cd:3e:e1:f9:2e:e1:47:40:7b:17:25:95:8a:fd:
b9:9d:23:77:b2:d6:e6:1e:d0:71:bd:6b:fb:6d:b7:
1d:24:48:af:5a:4a:ae:55:9d:ef:8a:2f:b0:cd:73:
8b:34:26:a7:63:8f:18:49:3f:d2:0c:45:75:2d:62:
26:26:64:58:79:88:de:f7:50:59:32:eb:d3:9a:62:
e4:85:e3:ef:dc:b3:12:28:23:b8:d0:48:47:da:a6:
b7:74:21:fc:dd:a9:be:46:82:69:d2:0b:02:fb:8c:
9e:cc:ed:8c:78:e0:d2:c2:b2:fd:b7:32:aa:c1:a3:
d6:48:da:96:0e:37:06:39:88:5f:4c:33:3f:e0:df:
8e:fc:c1:b7:30:0b:a7:f0:db:8a:2f:85:50:4d:37:
a6:d3:33:95:e8:17:86:89:ed:10:00:0a:94:07:71:
59:13:87:5e:46:e7:72:35:e0:c1:8c:14:48:58:9b:
80:f7:e6:8e:f9:04:5a:af:f0:84:60:86:bc:cb:76:
1e:02:cd:98:f9:b1:d6:1e:f0:aa:cb:ea:52:65:55:
b0:44:92:0c:c1:5f:36:99:ce:0a:a5:07:92:1b:dd:
f0:88:a2:b2:88:bd:db:5a:f6:a3:b2:99:a5:02:74:
c5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:26:A7:C6:12:E9:71:6C:E0:77:C7:36:B1:9F:AB:50:63:F0:41:DB
X509v3 Authority Key Identifier:
keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS208548.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c2::/32
Signature Algorithm: sha256WithRSAEncryption
98:31:15:60:b6:74:17:ee:7e:a6:bf:a9:15:de:99:63:cd:ee:
5f:5d:ac:e4:31:05:24:25:d5:cd:65:26:75:0b:34:03:d3:ab:
82:ae:78:d5:59:e0:da:57:19:29:81:ea:28:e0:73:76:8c:a6:
be:1c:77:10:e4:40:18:01:87:06:3d:12:5f:57:c9:76:93:f6:
bb:7b:4a:71:2b:45:eb:6d:6b:04:7a:e7:18:83:15:b8:9c:5a:
f2:1c:ea:f4:8f:e8:e5:b2:98:15:e6:ed:f5:ab:b9:77:0a:50:
b8:29:da:4a:ee:f1:2d:ef:00:a0:95:e6:93:35:dd:84:c6:60:
7b:15:8a:7d:e0:1f:ad:b8:8c:42:11:75:63:0f:d7:b7:71:03:
31:76:b2:09:22:f5:98:26:da:f3:e6:4a:e5:3b:48:6e:54:9d:
97:3e:47:50:f3:99:ea:c2:52:af:bc:25:fe:96:87:13:0b:d4:
27:fe:fe:6e:d6:c6:56:e7:24:79:77:f1:d6:93:7b:f2:4d:e6:
8e:e9:b6:4c:aa:3a:fb:8c:83:cf:63:cf:e5:63:f8:f3:d0:6f:
ea:ee:83:42:8d:00:75:ab:1b:d3:c7:23:5f:a0:75:cd:45:13:
aa:d7:f7:ec:33:1f:d7:8d:d1:af:61:0c:9b:2f:8c:55:3e:33:
fc:d9:20:06
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUcl99UdgPy5u4e2TF3pHPjXvAoHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw
MzEyQ0VBODAeFw0yNjA1MjQxMTM3NDNaFw0yNzA1MjMxMTQyNDNaMDMxMTAvBgNV
BAMTKDg3MjZBN0M2MTJFOTcxNkNFMDc3QzczNkIxOUZBQjUwNjNGMDQxREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUreH4JED4/nMwT6WnWoTNPuH5
LuFHQHsXJZWK/bmdI3ey1uYe0HG9a/tttx0kSK9aSq5Vne+KL7DNc4s0JqdjjxhJ
P9IMRXUtYiYmZFh5iN73UFky69OaYuSF4+/csxIoI7jQSEfaprd0Ifzdqb5GgmnS
CwL7jJ7M7Yx44NLCsv23MqrBo9ZI2pYONwY5iF9MMz/g3478wbcwC6fw24ovhVBN
N6bTM5XoF4aJ7RAACpQHcVkTh15G53I14MGMFEhYm4D35o75BFqv8IRghrzLdh4C
zZj5sdYe8KrL6lJlVbBEkgzBXzaZzgqlB5Ib3fCIorKIvdta9qOymaUCdMWxAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUhyanxhLpcWzgd8c2sZ+rUGPwQdswHwYDVR0j
BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh
ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy
Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt
NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA4NTQ4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgdU
wjANBgkqhkiG9w0BAQsFAAOCAQEAmDEVYLZ0F+5+pr+pFd6ZY83uX12s5DEFJCXV
zWUmdQs0A9Orgq541Vng2lcZKYHqKOBzdoymvhx3EORAGAGHBj0SX1fJdpP2u3tK
cStF621rBHrnGIMVuJxa8hzq9I/o5bKYFebt9au5dwpQuCnaSu7xLe8AoJXmkzXd
hMZgexWKfeAfrbiMQhF1Yw/Xt3EDMXayCSL1mCba8+ZK5TtIblSdlz5HUPOZ6sJS
r7wl/paHEwvUJ/7+btbGVuckeXfx1pN78k3mjum2TKo6+4yDz2PP5WP489Bv6u6D
Qo0Adasb08cjX6B1zUUTqtf37DMf143Rr2EMmy+MVT4z/NkgBg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:50:03 2026 by rpki-client