$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209861.roa File: AS209861.roa (raw, json) Hash identifier: 27uyy9YHZhfgQ8ZJTxA+5HGPXxTxtSYZ6mLc2VlyFlw= Subject key identifier: 34:C5:74:E7:88:55:45:40:7C:0F:BF:B2:5F:29:8A:3A:44:09:2C:75 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 5D1A4181917BFB8C94DB8C100B3FDBF4F0D36570 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209861.roa Signing time: Fri 05 Jun 2026 08:45:53 +0000 ROA not before: Fri 05 Jun 2026 08:40:53 +0000 ROA not after: Fri 04 Jun 2027 08:45:53 +0000 asID: 209861 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:1a:41:81:91:7b:fb:8c:94:db:8c:10:0b:3f:db:f4:f0:d3:65:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:53 2026 GMT Not After : Jun 4 08:45:53 2027 GMT Subject: CN=34C574E7885545407C0FBFB25F298A3A44092C75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:fc:63:12:ac:22:d6:8e:b5:45:5c:87:5c: d6:fd:a8:27:89:29:23:85:b1:b3:4c:66:cc:5f:e8: 48:c9:f8:55:8d:d6:76:5f:04:a7:f5:e3:67:d0:6e: 7e:78:c6:e0:bc:f9:8d:72:f5:fc:3b:76:93:72:9d: b3:8c:e6:c0:45:f2:d4:41:fa:0c:57:d6:ff:68:33: 29:28:0d:66:3f:86:19:cc:67:2a:bf:f8:c9:b6:db: 2e:00:53:d9:23:4c:43:40:98:86:5e:a7:c7:13:18: e3:c8:a5:f8:66:15:03:71:85:5c:1e:be:33:c1:98: ec:95:12:b3:f3:c3:b8:0e:36:3d:69:ab:d4:5e:e4: 63:e6:9b:60:e8:c0:03:4e:b0:8f:9d:8a:0c:a3:eb: 99:05:15:4e:43:62:5f:3c:35:1c:c2:35:86:3a:61: 01:db:12:35:87:2e:cf:2c:8f:c0:cb:16:fd:1e:a5: 33:70:bd:8b:44:8f:a2:5b:d0:f9:71:d6:f9:42:9f: a3:96:e6:53:8a:b2:15:42:ea:0b:d4:03:b7:8d:c1: ff:6d:0f:81:94:09:3f:d3:0d:cb:17:c3:a2:a0:1c: 49:ed:64:ff:37:f2:f1:1a:92:49:0c:2b:7b:a6:31: 2f:10:b9:24:85:8d:2a:d3:ab:3a:3b:58:7c:5a:7c: 8d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C5:74:E7:88:55:45:40:7C:0F:BF:B2:5F:29:8A:3A:44:09:2C:75 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209861.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 3c:4a:ce:3a:65:91:e0:e6:46:be:08:fc:bf:e5:2e:53:0d:db: 86:d9:62:6c:b1:7f:da:92:8a:48:2a:c3:05:a1:75:fd:77:7b: 4d:9f:4f:87:96:5a:60:75:5b:68:20:3b:22:54:e5:e7:4e:eb: 8a:d5:a1:75:16:d6:b7:36:e2:30:de:c2:dd:ed:e6:b2:cc:e2: fe:45:33:59:61:d5:c8:4c:d1:25:48:f6:28:cd:bd:41:1e:f8: a4:af:50:84:73:4e:3a:1e:68:f0:69:df:f3:37:f9:63:37:84: 19:fd:1d:0c:97:b3:c9:07:c5:a4:e6:7d:9a:4b:94:6c:d7:f4: c3:ea:5f:31:7a:b8:a6:23:16:d4:1c:8e:a6:08:44:18:5c:98: 23:7b:04:69:40:4d:37:38:c7:0c:a7:f4:0c:db:db:0d:f3:2e: a8:4d:e1:6f:f8:71:3a:fc:36:b4:00:e5:be:35:9a:2b:cb:7e: 4d:e0:05:55:e4:8c:a2:c3:3f:5e:7a:54:89:bb:83:bf:2e:0f: 47:21:c3:36:f7:52:cc:e8:40:93:63:c9:6a:d0:47:02:83:72: d2:e4:02:83:2d:97:38:72:bd:ce:50:97:96:74:89:6a:1f:8d: 0c:28:85:e3:a3:4e:00:de:33:78:2d:57:57:8e:52:fc:66:2d: 1d:b0:4a:d9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXRpBgZF7+4yU24wQCz/b9PDTZXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTNaFw0yNzA2MDQwODQ1NTNaMDMxMTAvBgNV BAMTKDM0QzU3NEU3ODg1NTQ1NDA3QzBGQkZCMjVGMjk4QTNBNDQwOTJDNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1fxjEqwi1o61RVyHXNb9qCeJ KSOFsbNMZsxf6EjJ+FWN1nZfBKf142fQbn54xuC8+Y1y9fw7dpNynbOM5sBF8tRB +gxX1v9oMykoDWY/hhnMZyq/+Mm22y4AU9kjTENAmIZep8cTGOPIpfhmFQNxhVwe vjPBmOyVErPzw7gONj1pq9Re5GPmm2DowANOsI+digyj65kFFU5DYl88NRzCNYY6 YQHbEjWHLs8sj8DLFv0epTNwvYtEj6Jb0Plx1vlCn6OW5lOKshVC6gvUA7eNwf9t D4GUCT/TDcsXw6KgHEntZP838vEakkkMK3umMS8QuSSFjSrTqzo7WHxafI2bAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUNMV054hVRUB8D7+yXymKOkQJLHUwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA5ODYxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQA8Ss46ZZHg5ka+CPy/5S5TDduG2WJssX/a kopIKsMFoXX9d3tNn0+HllpgdVtoIDsiVOXnTuuK1aF1Fta3NuIw3sLd7eayzOL+ RTNZYdXITNElSPYozb1BHvikr1CEc046Hmjwad/zN/ljN4QZ/R0Ml7PJB8Wk5n2a S5Rs1/TD6l8xerimIxbUHI6mCEQYXJgjewRpQE03OMcMp/QM29sN8y6oTeFv+HE6 /Da0AOW+NZory35N4AVV5Iyiwz9eelSJu4O/Lg9HIcM291LM6ECTY8lq0EcCg3LS 5AKDLZc4cr3OUJeWdIlqH40MKIXjo04A3jN4LVdXjlL8Zi0dsErZ -----END CERTIFICATE-----Generated at Thu Jun 11 23:49:36 2026 by rpki-client