$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209718.roa File: AS209718.roa (raw, json) Hash identifier: Py51JsIrK6MsZL+mRgbk1Rekm+SxLgGcejZUHSJp57Y= Subject key identifier: 44:24:3E:6F:1E:B1:BC:80:DD:02:A4:3B:58:29:DE:86:35:77:5D:91 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 14B9A9CBB0F74523AF6AE01089460F9ECA0A4FAE Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209718.roa Signing time: Fri 04 Jul 2025 07:51:29 +0000 ROA not before: Fri 04 Jul 2025 07:46:29 +0000 ROA not after: Fri 03 Jul 2026 07:51:29 +0000 asID: 209718 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b9:a9:cb:b0:f7:45:23:af:6a:e0:10:89:46:0f:9e:ca:0a:4f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:29 2025 GMT Not After : Jul 3 07:51:29 2026 GMT Subject: CN=44243E6F1EB1BC80DD02A43B5829DE8635775D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:99:fb:26:ad:fc:ee:09:86:0b:e0:8e:33:eb: d9:59:2f:3d:64:67:b9:35:31:6b:4c:f2:f1:8e:5e: 97:3c:74:58:4b:03:05:5b:c8:f8:cf:c6:13:d4:bc: 9b:80:a2:57:14:0c:7e:4e:a9:33:04:ae:f3:d5:6a: d3:f1:02:95:28:16:18:e4:ed:02:cc:49:a8:7b:7b: c6:52:dd:56:18:43:0d:3a:ed:75:29:67:ec:3a:57: e1:04:09:b2:cf:2f:0d:ed:08:87:38:2f:73:1b:54: 8e:42:dc:83:95:97:9e:97:38:8b:18:2a:09:2b:da: c7:23:e1:9c:29:06:8d:57:7f:b5:c3:1e:c0:ef:84: 04:55:58:87:69:ac:10:09:a2:89:e3:af:75:16:5b: 19:0c:aa:d3:6d:b7:22:76:99:b6:9e:8c:09:56:fb: 7e:9b:32:b9:dd:44:47:5f:f7:e0:3e:32:09:50:4f: 7e:7e:0c:e6:bd:55:89:77:8e:8e:92:d7:66:67:c9: 33:f2:db:fb:50:58:e1:d3:9b:bb:3f:a4:cc:62:6d: 76:89:1f:b4:fc:59:5f:e6:4c:a9:ed:ba:51:18:62: ce:77:2d:ba:df:62:1a:30:cf:80:45:0a:3f:1d:2f: 29:a6:fe:64:1d:ce:3e:83:47:ac:35:fb:33:5a:6c: a7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:24:3E:6F:1E:B1:BC:80:DD:02:A4:3B:58:29:DE:86:35:77:5D:91 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209718.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption a6:0a:54:c3:74:48:87:27:a6:af:ab:7b:dc:c4:df:ff:b7:d0: 7e:cd:c0:ae:ad:7f:a6:13:54:e4:23:f4:17:f4:54:15:36:31: 7e:f6:9a:d9:10:fe:ef:5d:61:5d:4c:be:f0:8f:d8:cb:d3:97: 32:ba:e1:78:10:f0:94:2e:cb:1c:ee:3f:93:9a:4e:08:0e:27: 1b:bf:6e:06:a9:c5:69:34:55:87:dd:6b:2a:f5:d6:d3:d2:61: 6f:b2:11:0a:cb:ea:64:14:96:d4:ec:5e:6a:c5:13:f1:25:bf: f4:cc:8b:27:ad:45:dc:01:7a:64:56:30:3d:db:0a:b5:54:4c: ee:5a:18:3c:35:b4:0c:8b:48:10:13:a1:45:a1:67:00:7b:78: 3d:9d:8c:66:3e:2b:a5:0d:55:8b:fb:53:4a:22:a1:69:e4:f5: 6e:98:27:37:82:1c:31:f6:a5:19:13:10:cc:11:8f:d8:03:24: 2b:39:4d:a5:ba:8e:d2:b0:c6:16:7f:7a:98:6b:94:a9:b8:22: 79:52:9d:90:27:c5:bb:ee:bd:2b:7b:0e:99:01:9d:c1:7b:01: 9a:a3:1f:74:d7:13:7f:1f:0a:fb:5c:30:28:7f:db:1c:a5:c5: 53:98:6d:33:f7:f6:49:12:f1:e7:30:e4:91:97:5d:40:70:9f: aa:33:80:ac -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUFLmpy7D3RSOvauAQiUYPnsoKT64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjlaFw0yNjA3MDMwNzUxMjlaMDMxMTAvBgNV BAMTKDQ0MjQzRTZGMUVCMUJDODBERDAyQTQzQjU4MjlERTg2MzU3NzVEOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmfsmrfzuCYYL4I4z69lZLz1k Z7k1MWtM8vGOXpc8dFhLAwVbyPjPxhPUvJuAolcUDH5OqTMErvPVatPxApUoFhjk 7QLMSah7e8ZS3VYYQw067XUpZ+w6V+EECbLPLw3tCIc4L3MbVI5C3IOVl56XOIsY Kgkr2scj4ZwpBo1Xf7XDHsDvhARVWIdprBAJoonjr3UWWxkMqtNttyJ2mbaejAlW +36bMrndREdf9+A+MglQT35+DOa9VYl3jo6S12ZnyTPy2/tQWOHTm7s/pMxibXaJ H7T8WV/mTKntulEYYs53LbrfYhowz4BFCj8dLymm/mQdzj6DR6w1+zNabKefAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQURCQ+bx6xvIDdAqQ7WCnehjV3XZEwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA5NzE4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQCmClTDdEiHJ6avq3vcxN//t9B+zcCurX+m E1TkI/QX9FQVNjF+9prZEP7vXWFdTL7wj9jL05cyuuF4EPCULssc7j+Tmk4IDicb v24GqcVpNFWH3Wsq9dbT0mFvshEKy+pkFJbU7F5qxRPxJb/0zIsnrUXcAXpkVjA9 2wq1VEzuWhg8NbQMi0gQE6FFoWcAe3g9nYxmPiulDVWL+1NKIqFp5PVumCc3ghwx 9qUZExDMEY/YAyQrOU2luo7SsMYWf3qYa5SpuCJ5Up2QJ8W77r0rew6ZAZ3BewGa ox901xN/Hwr7XDAof9scpcVTmG0z9/ZJEvHnMOSRl11AcJ+qM4Cs -----END CERTIFICATE-----Generated at Sat Jul 5 08:22:18 2025 by rpki-client