$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209806.roa File: AS209806.roa (raw, json) Hash identifier: +yd/i4T78QqH1DMxuibXeeNZINzk7I4sSdaamYckQEs= Subject key identifier: 82:C1:9F:C2:98:09:2C:41:23:6B:6F:B8:E4:78:08:E5:D7:3F:5E:41 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 6305D462D579F0C4D0C5DA3368BFFAC2E86C4C69 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209806.roa Signing time: Fri 05 Jun 2026 08:45:52 +0000 ROA not before: Fri 05 Jun 2026 08:40:52 +0000 ROA not after: Fri 04 Jun 2027 08:45:52 +0000 asID: 209806 IP address blocks: 2a07:54c4:d100::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:05:d4:62:d5:79:f0:c4:d0:c5:da:33:68:bf:fa:c2:e8:6c:4c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:52 2026 GMT Not After : Jun 4 08:45:52 2027 GMT Subject: CN=82C19FC298092C41236B6FB8E47808E5D73F5E41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:a6:ab:e3:2a:32:b5:49:26:36:43:d2:be: f3:6e:2b:ab:30:ec:69:4f:c2:55:3f:96:6c:cc:21: 12:1a:29:50:2d:39:1e:bc:41:4f:90:b1:26:b9:b5: 95:ba:e1:b8:e9:fb:d3:35:0a:62:1f:10:37:2b:c6: e1:9e:59:32:27:bd:43:82:11:e2:6b:4d:1f:10:61: 56:11:29:db:6f:93:e1:ef:75:8b:1b:ea:a7:99:87: 39:57:c1:0b:84:d3:52:23:aa:64:b8:b0:e8:5c:5e: 4a:2e:80:5c:a5:2b:81:d8:54:03:83:c5:f4:2c:74: 9a:a7:cb:91:47:8a:11:8c:d9:d5:6c:d3:c9:26:e5: 16:17:d8:f9:f8:e6:7e:d3:b2:20:ab:3d:47:05:8e: 7f:f7:42:90:d3:5e:15:88:53:18:ea:fe:34:8c:d9: 8a:72:71:d6:17:83:5a:55:09:ce:a7:f1:cd:c6:48: 22:ca:1c:29:73:db:4a:37:df:01:55:e0:6b:09:51: 08:26:07:7a:d9:90:10:fd:d8:c0:d9:eb:b7:34:b2: df:86:66:d9:b4:cd:1d:8b:3c:b8:82:f9:11:10:f2: e3:35:4c:37:0d:84:e2:b8:96:a7:ae:72:6f:11:d7: a2:08:00:49:dd:fb:d3:b6:28:3f:70:98:f7:68:f1: 40:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C1:9F:C2:98:09:2C:41:23:6B:6F:B8:E4:78:08:E5:D7:3F:5E:41 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209806.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:d100::/40 Signature Algorithm: sha256WithRSAEncryption 00:c5:bc:dd:0a:e9:90:a3:89:a6:cb:c3:d7:93:c6:f3:23:22: 55:bb:cd:bc:f6:ef:c3:ca:48:da:dd:0f:27:1a:69:95:59:35: 28:2f:5e:50:16:08:19:9c:e2:6d:67:f4:85:d1:62:38:16:e7: b8:a3:2e:3e:02:b6:d1:8c:49:d7:d2:df:dc:f3:a5:56:6c:00: 65:1a:79:1b:a4:91:3d:f7:62:d8:ce:55:ac:bd:69:a8:50:fd: f2:42:2f:0c:d7:42:bf:25:72:1f:9e:78:38:8c:f7:29:d3:48: 77:b9:0e:01:e4:27:44:0b:67:cf:ca:2d:d7:37:e0:d8:ee:77: 3a:7c:a1:8d:1e:4e:83:5a:ce:a4:7b:4d:e4:b6:db:be:99:2c: 46:47:77:db:bc:43:14:74:86:41:47:0d:6f:11:c8:e7:af:29: 11:6a:61:38:ab:a5:4c:8c:8c:76:a8:c9:60:f5:0e:01:67:25: 1f:f1:c9:d5:68:de:d6:e6:bc:9e:2b:22:4c:b8:83:e8:7c:78: e3:bb:d0:ff:c9:77:36:6b:ee:1a:32:03:2a:b5:79:48:b2:11: d9:cd:1d:11:92:dd:66:4d:c0:b8:71:e1:99:cc:b5:4e:2b:bd: e3:11:c2:f6:9d:16:72:a6:b9:76:b2:5d:8e:e0:8d:57:ba:ae: b1:d1:96:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYwXUYtV58MTQxdozaL/6wuhsTGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTJaFw0yNzA2MDQwODQ1NTJaMDMxMTAvBgNV BAMTKDgyQzE5RkMyOTgwOTJDNDEyMzZCNkZCOEU0NzgwOEU1RDczRjVFNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr4qar4yoytUkmNkPSvvNuK6sw 7GlPwlU/lmzMIRIaKVAtOR68QU+QsSa5tZW64bjp+9M1CmIfEDcrxuGeWTInvUOC EeJrTR8QYVYRKdtvk+HvdYsb6qeZhzlXwQuE01IjqmS4sOhcXkougFylK4HYVAOD xfQsdJqny5FHihGM2dVs08km5RYX2Pn45n7TsiCrPUcFjn/3QpDTXhWIUxjq/jSM 2YpycdYXg1pVCc6n8c3GSCLKHClz20o33wFV4GsJUQgmB3rZkBD92MDZ67c0st+G Ztm0zR2LPLiC+REQ8uM1TDcNhOK4lqeucm8R16IIAEnd+9O2KD9wmPdo8UCTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgsGfwpgJLEEja2+45HgI5dc/XkEwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA5ODA2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU xNEwDQYJKoZIhvcNAQELBQADggEBAADFvN0K6ZCjiabLw9eTxvMjIlW7zbz278PK SNrdDycaaZVZNSgvXlAWCBmc4m1n9IXRYjgW57ijLj4CttGMSdfS39zzpVZsAGUa eRukkT33YtjOVay9aahQ/fJCLwzXQr8lch+eeDiM9ynTSHe5DgHkJ0QLZ8/KLdc3 4Njudzp8oY0eToNazqR7TeS2276ZLEZHd9u8QxR0hkFHDW8RyOevKRFqYTirpUyM jHaoyWD1DgFnJR/xydVo3tbmvJ4rIky4g+h8eOO70P/JdzZr7hoyAyq1eUiyEdnN HRGS3WZNwLhx4ZnMtU4rveMRwvadFnKmuXayXY7gjVe6rrHRlpk= -----END CERTIFICATE-----Generated at Fri Jun 12 02:42:30 2026 by rpki-client