$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS210475.roa File: AS210475.roa (raw, json) Hash identifier: VR6xVCdtzEbJzvXx7qOo0IgzGF0Qw1kx86cKphJL05I= Subject key identifier: A4:48:83:96:BC:DE:BC:7A:98:21:C2:8A:21:66:26:7A:C9:A9:EC:50 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 50E04AC50B4014A88C5D876600706DA9794C3276 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS210475.roa Signing time: Mon 03 Aug 2026 15:00:57 +0000 ROA not before: Mon 03 Aug 2026 14:55:57 +0000 ROA not after: Mon 02 Aug 2027 15:00:57 +0000 asID: 210475 IP address blocks: 2a07:54c1:3700::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 02:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e0:4a:c5:0b:40:14:a8:8c:5d:87:66:00:70:6d:a9:79:4c:32:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Aug 3 14:55:57 2026 GMT Not After : Aug 2 15:00:57 2027 GMT Subject: CN=A4488396BCDEBC7A9821C28A2166267AC9A9EC50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:97:83:d3:d5:5c:3e:ae:e5:5b:03:fd:23:28: 36:a2:2c:c4:01:6c:73:c3:7e:bd:8a:42:e2:aa:d0: 34:75:f6:c9:c9:32:c2:62:55:9f:c9:9a:c1:3c:00: a6:5e:4e:a2:ce:7d:61:62:17:14:f8:64:6f:4f:0b: 81:d4:17:83:73:2d:0e:c6:f3:2d:c6:1e:db:35:02: ef:74:36:ea:56:58:38:15:ad:e8:0d:02:1f:9b:55: 78:60:96:b1:16:0a:0a:d3:8a:4e:2f:f3:48:a4:18: dd:47:f4:a3:f2:7f:e9:5c:0b:75:29:7a:4f:f0:c2: 9b:ec:32:7c:53:87:ac:f6:53:03:1a:e8:dc:5e:ff: ed:f2:fe:a4:ba:64:32:1b:20:40:54:3d:da:8d:d9: 87:71:ca:3b:d7:42:51:89:9d:d2:e0:a5:a0:2f:57: d6:b5:4d:84:ad:1e:14:f3:b6:b6:be:a0:7a:a0:bc: b2:a5:56:43:a0:8c:bc:a9:73:f0:ed:fe:92:20:66: db:8d:2a:a9:2f:96:6f:06:c1:a8:ba:19:97:48:2d: 9e:49:ae:1a:74:0e:4e:e5:83:be:88:c6:b9:da:bf: e8:56:60:e1:43:0e:2d:b7:a2:b1:96:30:b7:fe:ab: 12:6c:1b:e0:fd:5e:e3:5a:af:1b:b8:74:00:f9:2e: 58:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:48:83:96:BC:DE:BC:7A:98:21:C2:8A:21:66:26:7A:C9:A9:EC:50 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS210475.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:3700::/40 Signature Algorithm: sha256WithRSAEncryption 54:87:20:52:dd:02:01:b0:5f:4f:a5:a1:40:ae:cd:16:93:7c: 3a:48:2f:4e:31:2f:2e:3a:8a:c9:70:b1:d3:57:f2:c1:c9:0c: a8:7d:63:bb:51:e4:53:fc:4d:de:bd:66:0e:73:8a:46:68:14: 92:6f:5f:d0:ae:7d:a5:83:ff:ef:5a:0c:c5:c5:0a:14:61:5f: 8b:27:1c:45:6c:2d:2a:3c:14:a1:fa:50:23:ed:b2:f1:c6:72: 13:84:56:2b:b8:8d:8f:70:c5:b1:26:1c:2c:44:00:84:3e:a0: 6d:74:1e:0a:51:a4:1f:c9:86:75:15:24:8f:a6:46:f5:44:2b: 69:58:b4:12:ba:ba:32:69:0d:f7:88:5b:bd:47:80:bb:7e:92: 66:43:be:ae:b5:99:73:99:27:09:1b:3b:4e:5c:a2:2a:62:c9: 12:34:a5:19:f3:d6:5b:91:b6:2f:65:ad:cf:f4:36:66:97:90: 80:9d:4d:5d:eb:38:88:a7:46:b2:69:8d:83:a2:b4:05:0e:84: d7:b1:49:53:c6:bb:39:ee:6b:71:57:63:7a:f8:06:c4:fc:11: 51:a6:5f:64:3c:16:65:dc:71:fb:19:03:da:90:f5:52:fa:6a: e1:8a:9a:78:a7:0f:d1:b9:00:70:01:91:bd:e6:e8:6a:bc:07: 1c:5f:97:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUOBKxQtAFKiMXYdmAHBtqXlMMnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA4MDMxNDU1NTdaFw0yNzA4MDIxNTAwNTdaMDMxMTAvBgNV BAMTKEE0NDg4Mzk2QkNERUJDN0E5ODIxQzI4QTIxNjYyNjdBQzlBOUVDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYl4PT1Vw+ruVbA/0jKDaiLMQB bHPDfr2KQuKq0DR19snJMsJiVZ/JmsE8AKZeTqLOfWFiFxT4ZG9PC4HUF4NzLQ7G 8y3GHts1Au90NupWWDgVregNAh+bVXhglrEWCgrTik4v80ikGN1H9KPyf+lcC3Up ek/wwpvsMnxTh6z2UwMa6Nxe/+3y/qS6ZDIbIEBUPdqN2YdxyjvXQlGJndLgpaAv V9a1TYStHhTztra+oHqgvLKlVkOgjLypc/Dt/pIgZtuNKqkvlm8Gwai6GZdILZ5J rhp0Dk7lg76Ixrnav+hWYOFDDi23orGWMLf+qxJsG+D9XuNarxu4dAD5LljlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpEiDlrzevHqYIcKKIWYmesmp7FAwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjEwNDc1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wTcwDQYJKoZIhvcNAQELBQADggEBAFSHIFLdAgGwX0+loUCuzRaTfDpIL04xLy46 islwsdNX8sHJDKh9Y7tR5FP8Td69Zg5zikZoFJJvX9CufaWD/+9aDMXFChRhX4sn HEVsLSo8FKH6UCPtsvHGchOEViu4jY9wxbEmHCxEAIQ+oG10HgpRpB/JhnUVJI+m RvVEK2lYtBK6ujJpDfeIW71HgLt+kmZDvq61mXOZJwkbO05coipiyRI0pRnz1luR ti9lrc/0NmaXkICdTV3rOIinRrJpjYOitAUOhNexSVPGuznua3FXY3r4BsT8EVGm X2Q8FmXccfsZA9qQ9VL6auGKmninD9G5AHABkb3m6Gq8Bxxfly0= -----END CERTIFICATE-----Generated at Thu Aug 13 18:12:09 2026 by rpki-client