$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209861.roa File: AS209861.roa (raw, json) Hash identifier: Z+AmJtgbcbWvbJr1YOZDYBYU9lYzwviJacFdcN8faHo= Subject key identifier: 20:60:3E:3F:A5:CD:BD:D2:E2:BE:09:9D:35:80:86:2B:66:C5:30:AC Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 690D698D1EC465EAC2C78FC84B5EFDCB38E399F5 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209861.roa Signing time: Fri 04 Jul 2025 07:51:24 +0000 ROA not before: Fri 04 Jul 2025 07:46:24 +0000 ROA not after: Fri 03 Jul 2026 07:51:24 +0000 asID: 209861 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0d:69:8d:1e:c4:65:ea:c2:c7:8f:c8:4b:5e:fd:cb:38:e3:99:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:24 2025 GMT Not After : Jul 3 07:51:24 2026 GMT Subject: CN=20603E3FA5CDBDD2E2BE099D3580862B66C530AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c4:6b:ac:f9:16:39:20:a6:cb:8c:ee:1e:72: d0:21:43:90:23:56:46:9d:57:62:da:a3:6a:34:8d: f4:1f:1e:38:39:c0:ba:1a:06:41:19:b6:5c:28:ee: 5e:3d:19:c6:d8:3d:f5:d0:ee:b7:fe:4a:68:e1:4f: 2e:65:b7:3a:7b:5b:a4:7b:e6:b5:a6:50:27:1a:83: 9e:2a:3e:f8:c6:f0:2e:3a:e1:35:9e:29:73:7e:9e: 25:a3:6d:97:9c:f1:bf:07:48:70:10:29:d9:df:c0: dc:75:53:a7:2b:e1:3c:5a:50:e2:cf:d0:cd:25:94: 86:b7:9b:b6:5d:4a:06:be:bd:51:8d:61:aa:73:fc: af:e6:de:be:2a:da:ec:e7:67:5d:cb:04:38:02:34: ee:93:b0:c3:83:85:6c:ba:52:8b:9d:03:ae:9b:82: de:ad:81:94:c9:89:07:cd:91:5d:f8:6f:ef:ba:26: 90:38:b4:84:7a:83:62:a8:d7:02:79:0d:8c:38:dc: 9d:f8:9c:77:2b:fd:73:1b:3d:3c:9b:af:75:50:7f: 3c:39:fa:94:17:92:0e:38:44:1d:70:e2:c1:b8:6e: ad:79:69:80:80:a8:bc:72:f5:2f:1f:29:78:f5:9d: bb:de:7b:77:c1:97:a4:9e:24:5a:17:3a:35:1e:49: 15:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:60:3E:3F:A5:CD:BD:D2:E2:BE:09:9D:35:80:86:2B:66:C5:30:AC X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209861.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 23:63:94:93:83:50:af:90:47:32:3c:a1:5f:34:03:e5:12:6d: ad:85:31:f4:c6:cd:1d:07:41:91:26:dc:2d:d9:86:49:d3:13: 2d:85:8d:63:bf:61:f2:15:50:10:6c:49:11:d7:e0:e7:95:c2: a2:e2:e5:eb:54:1a:be:52:2c:de:51:80:7d:aa:7f:4c:b6:37: 9d:b6:4e:2d:ee:30:bf:60:d5:75:cf:99:1a:8e:3f:d1:42:61: 37:e6:3d:e6:74:7d:45:51:79:3a:17:81:a9:22:dd:20:8c:f3: 93:a7:95:ad:9d:86:47:dc:a6:47:f0:1e:e3:58:cc:06:7b:71: c3:24:7f:82:a0:d9:f7:84:78:6c:cc:ac:d3:08:74:09:3e:c3: 6e:1e:8c:b8:53:73:0b:1d:35:47:a5:80:e5:d2:97:8a:e1:f4: a3:a2:3b:b7:6a:83:b9:38:ba:09:ef:09:7d:da:d2:f4:b7:be: 41:ba:52:a9:72:42:fc:96:22:c4:98:bb:dc:39:ca:81:99:40: 1a:31:91:ce:97:ca:6c:cf:a2:bc:8c:ac:47:ae:41:31:9d:e2: 28:27:6a:4e:b4:57:e7:c3:83:f5:d1:2c:74:f6:8f:86:a3:76: c1:aa:d0:7d:f9:d0:69:4a:2e:6a:30:16:96:2a:1f:e8:04:2f: af:1e:55:92 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUaQ1pjR7EZerCx4/IS179yzjjmfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjRaFw0yNjA3MDMwNzUxMjRaMDMxMTAvBgNV BAMTKDIwNjAzRTNGQTVDREJERDJFMkJFMDk5RDM1ODA4NjJCNjZDNTMwQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnxGus+RY5IKbLjO4ectAhQ5Aj VkadV2Lao2o0jfQfHjg5wLoaBkEZtlwo7l49GcbYPfXQ7rf+SmjhTy5ltzp7W6R7 5rWmUCcag54qPvjG8C464TWeKXN+niWjbZec8b8HSHAQKdnfwNx1U6cr4TxaUOLP 0M0llIa3m7ZdSga+vVGNYapz/K/m3r4q2uznZ13LBDgCNO6TsMODhWy6UoudA66b gt6tgZTJiQfNkV34b++6JpA4tIR6g2Ko1wJ5DYw43J34nHcr/XMbPTybr3VQfzw5 +pQXkg44RB1w4sG4bq15aYCAqLxy9S8fKXj1nbvee3fBl6SeJFoXOjUeSRWTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUIGA+P6XNvdLivgmdNYCGK2bFMKwwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA5ODYxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQAjY5STg1CvkEcyPKFfNAPlEm2thTH0xs0d B0GRJtwt2YZJ0xMthY1jv2HyFVAQbEkR1+DnlcKi4uXrVBq+UizeUYB9qn9Mtjed tk4t7jC/YNV1z5kajj/RQmE35j3mdH1FUXk6F4GpIt0gjPOTp5WtnYZH3KZH8B7j WMwGe3HDJH+CoNn3hHhszKzTCHQJPsNuHoy4U3MLHTVHpYDl0peK4fSjoju3aoO5 OLoJ7wl92tL0t75BulKpckL8liLEmLvcOcqBmUAaMZHOl8psz6K8jKxHrkExneIo J2pOtFfnw4P10Sx09o+Go3bBqtB9+dBpSi5qMBaWKh/oBC+vHlWS -----END CERTIFICATE-----Generated at Sat Jul 5 08:24:21 2025 by rpki-client