$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209870.roa File: AS209870.roa (raw, json) Hash identifier: 8MoVVtZ0J11K9fg6ONh+FUM4imfEI/dsANKvHSFpdIA= Subject key identifier: 86:DD:47:1D:CD:30:27:0E:13:22:10:4E:FD:C9:B8:02:64:79:94:C7 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 291CC3475C4BBB2E473DAA6435191E3ABC9A03DA Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209870.roa Signing time: Fri 04 Jul 2025 07:51:24 +0000 ROA not before: Fri 04 Jul 2025 07:46:24 +0000 ROA not after: Fri 03 Jul 2026 07:51:24 +0000 asID: 209870 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1c:c3:47:5c:4b:bb:2e:47:3d:aa:64:35:19:1e:3a:bc:9a:03:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:24 2025 GMT Not After : Jul 3 07:51:24 2026 GMT Subject: CN=86DD471DCD30270E1322104EFDC9B802647994C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6d:79:4d:09:9b:e2:7c:df:74:9c:41:11:e7: ba:d5:f7:13:51:54:d4:3b:f8:b8:7b:ce:d4:ba:8a: 43:63:fc:0e:a1:1d:13:07:07:11:1a:ec:b0:66:fd: 52:df:74:0c:0d:62:57:f5:10:76:d2:b9:c3:16:fc: 90:86:8c:1b:cc:39:7b:0a:72:05:06:10:94:62:36: 93:4b:a0:2a:f1:de:51:74:5a:b3:e9:72:c6:b9:f5: d3:eb:83:ab:73:14:8c:56:cb:63:83:13:8d:8a:14: 49:57:ba:5f:1b:f9:54:dd:df:e8:5d:cf:9c:d7:13: 4c:dc:30:53:2c:5b:e2:3f:51:39:0d:3c:e1:53:b8: 6a:5f:31:08:57:52:90:ec:a7:d0:dc:3a:3a:81:0e: bb:ff:86:b9:a3:4c:04:eb:bf:f3:5d:8a:5d:35:19: ee:e5:69:e5:ce:59:dd:f3:04:91:6a:e5:12:7f:b6: 4d:28:cd:af:a2:e0:b5:de:fe:ce:bc:7a:3d:af:91: 4b:87:a2:88:e9:1c:ce:04:0e:e2:d2:53:3d:4e:7c: ad:db:19:07:e6:0b:bb:68:90:be:8f:fd:db:43:41: 13:55:d0:f3:01:11:e2:ab:65:f5:43:31:8a:42:f1: cb:eb:34:05:70:0a:84:73:48:aa:ce:97:af:c3:db: 31:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DD:47:1D:CD:30:27:0E:13:22:10:4E:FD:C9:B8:02:64:79:94:C7 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209870.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 4b:4c:f3:8f:5b:d7:d9:55:19:60:99:30:9e:fa:fb:5b:ee:1f: 06:ac:d9:4f:a7:60:82:31:e9:0a:94:80:1f:52:81:b5:22:47: 5b:ef:b1:1c:1e:b4:6a:9c:79:42:ac:2a:a8:40:92:6d:84:26: 71:99:7f:8d:01:d2:ab:6b:27:c9:b2:4b:1e:6a:e6:83:3a:17: f5:24:ab:8e:df:1b:46:ab:8c:8a:49:ff:86:3d:3d:06:8f:df: 6b:6b:5a:88:22:77:0f:75:f4:b0:ce:ab:7b:d4:f3:5c:1a:b8: 31:da:42:52:8f:da:98:13:99:d4:2a:3f:78:ec:ee:42:0f:c9: 15:81:72:af:1a:da:28:21:8f:c9:78:b4:bc:3b:af:ea:c1:f7: a1:30:17:f1:39:73:5d:e6:76:8c:d4:16:b0:32:58:1b:23:76: d3:dc:99:ba:8b:5c:c4:66:4b:7c:a4:ae:db:16:06:c2:32:5a: da:57:20:d8:54:71:e2:08:74:51:1d:bb:39:a6:9a:4a:e2:73: 30:d9:88:4c:d3:1d:05:19:9a:41:03:6f:27:0b:77:64:b9:3e: c0:3d:50:ba:c8:ac:12:76:7f:75:70:88:32:22:56:3c:62:e1: 7c:50:d5:8d:85:20:47:75:ab:b3:25:f9:56:8d:a8:bd:af:74: f1:06:c3:c8 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUKRzDR1xLuy5HPapkNRkeOryaA9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjRaFw0yNjA3MDMwNzUxMjRaMDMxMTAvBgNV BAMTKDg2REQ0NzFEQ0QzMDI3MEUxMzIyMTA0RUZEQzlCODAyNjQ3OTk0QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9bXlNCZvifN90nEER57rV9xNR VNQ7+Lh7ztS6ikNj/A6hHRMHBxEa7LBm/VLfdAwNYlf1EHbSucMW/JCGjBvMOXsK cgUGEJRiNpNLoCrx3lF0WrPpcsa59dPrg6tzFIxWy2ODE42KFElXul8b+VTd3+hd z5zXE0zcMFMsW+I/UTkNPOFTuGpfMQhXUpDsp9DcOjqBDrv/hrmjTATrv/Ndil01 Ge7laeXOWd3zBJFq5RJ/tk0oza+i4LXe/s68ej2vkUuHoojpHM4EDuLSUz1OfK3b GQfmC7tokL6P/dtDQRNV0PMBEeKrZfVDMYpC8cvrNAVwCoRzSKrOl6/D2zFJAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUht1HHc0wJw4TIhBO/cm4AmR5lMcwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA5ODcwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQBLTPOPW9fZVRlgmTCe+vtb7h8GrNlPp2CC MekKlIAfUoG1Ikdb77EcHrRqnHlCrCqoQJJthCZxmX+NAdKrayfJskseauaDOhf1 JKuO3xtGq4yKSf+GPT0Gj99ra1qIIncPdfSwzqt71PNcGrgx2kJSj9qYE5nUKj94 7O5CD8kVgXKvGtooIY/JeLS8O6/qwfehMBfxOXNd5naM1BawMlgbI3bT3Jm6i1zE Zkt8pK7bFgbCMlraVyDYVHHiCHRRHbs5pppK4nMw2YhM0x0FGZpBA28nC3dkuT7A PVC6yKwSdn91cIgyIlY8YuF8UNWNhSBHdauzJflWjai9r3TxBsPI -----END CERTIFICATE-----Generated at Sat Jul 5 08:21:25 2025 by rpki-client