$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS211380.roa File: AS211380.roa (raw, json) Hash identifier: yd/xn5wThDnPq30+j+bVBQOO4m6D2AuZCcJ/xjYXatw= Subject key identifier: DE:D9:19:B5:E3:1C:48:28:E7:E8:77:C5:CC:D4:E2:10:BE:2B:B3:C9 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 0FD414B8F71A0C442D22A6BBB05D5E54C28E69A7 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS211380.roa Signing time: Fri 05 Jun 2026 08:45:51 +0000 ROA not before: Fri 05 Jun 2026 08:40:51 +0000 ROA not after: Fri 04 Jun 2027 08:45:51 +0000 asID: 211380 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d4:14:b8:f7:1a:0c:44:2d:22:a6:bb:b0:5d:5e:54:c2:8e:69:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:51 2026 GMT Not After : Jun 4 08:45:51 2027 GMT Subject: CN=DED919B5E31C4828E7E877C5CCD4E210BE2BB3C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:04:72:f5:4e:0a:b3:e7:74:3b:aa:b7:28: 5d:eb:7a:59:f6:ea:1e:43:b4:a4:92:23:72:30:9e: 11:1c:5a:a0:83:e2:d5:79:ce:a0:ac:64:a3:8b:04: 52:6a:b7:45:9b:cb:d8:3d:64:6b:f3:bf:6b:25:15: b4:30:5c:40:94:c6:e9:0a:74:67:e1:a1:35:ee:ce: a9:bd:e4:cd:88:f0:55:01:4d:d0:7a:d1:55:20:87: 28:eb:a0:27:4d:da:96:ad:09:c5:3f:4c:90:8c:68: 8a:c0:7d:01:00:25:87:41:67:39:c6:41:81:98:07: ce:21:c1:00:d1:b0:82:94:06:36:c2:b8:50:34:23: d0:0d:e2:c9:0c:19:9b:ad:45:4d:f4:91:ce:0c:fa: 0f:45:b7:2b:d3:80:42:84:93:a0:38:ed:be:80:cd: a9:d2:eb:8f:02:d1:dd:1f:f5:4f:b0:26:6f:92:5d: b7:47:ae:34:ea:17:1a:14:3c:e8:19:11:2f:fc:b2: 22:f8:af:25:f1:73:06:95:47:44:ae:81:82:62:3c: aa:d3:0c:7f:96:43:ef:ae:c5:30:eb:fd:61:69:a4: 9b:47:df:b5:35:b2:11:b2:ac:64:bf:dc:f4:47:c6: 70:0b:b6:5e:5a:15:36:88:16:11:f5:71:c9:47:88: d9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D9:19:B5:E3:1C:48:28:E7:E8:77:C5:CC:D4:E2:10:BE:2B:B3:C9 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS211380.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 0c:15:a4:09:a4:39:9b:78:65:01:e6:35:73:df:83:ea:de:bd: c5:2b:4b:ac:56:0d:78:e9:12:7a:01:d4:6a:a0:fb:2f:f8:1e: 5d:5a:42:9a:7c:e4:4b:f9:b7:fd:89:b8:b9:8c:e1:06:75:39: b8:c1:e5:c2:21:75:c4:d9:40:84:ee:2c:c8:71:bf:55:21:d1: 08:40:3f:e0:05:5f:02:95:37:04:0b:6d:1d:ab:f3:96:d6:a1: c1:99:e5:b6:ef:1a:34:e9:86:86:25:3e:b1:7c:e8:6a:e2:ca: e9:90:be:7d:4d:e8:1c:b7:ee:5b:73:92:26:b9:67:2a:fa:1b: f3:5e:c8:15:a2:b0:ee:6e:87:c4:64:f3:db:81:2b:1b:6a:fa: 37:0b:97:62:2a:6c:42:11:9f:94:10:6b:c7:07:cb:9b:a8:45: cc:6b:b4:df:1d:b3:16:f3:16:16:bd:04:65:43:e5:c6:7d:1c: 76:c4:51:db:b2:a4:f5:24:91:7c:2b:b9:9d:33:c3:10:c4:a0: 32:01:e5:68:93:14:de:8e:f2:fd:5e:ef:16:a8:f5:3c:a2:71: a0:59:ca:a1:26:9e:e2:b7:66:8c:32:8d:5b:99:c6:31:ff:f1: 6a:61:db:52:df:0b:7d:cb:77:6f:7c:7f:46:12:f1:b8:3a:06: 03:0b:7f:c9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUD9QUuPcaDEQtIqa7sF1eVMKOaacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV BAMTKERFRDkxOUI1RTMxQzQ4MjhFN0U4NzdDNUNDRDRFMjEwQkUyQkIzQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEwRy9U4Ks+d0O6q3KF3reln2 6h5DtKSSI3IwnhEcWqCD4tV5zqCsZKOLBFJqt0Wby9g9ZGvzv2slFbQwXECUxukK dGfhoTXuzqm95M2I8FUBTdB60VUghyjroCdN2patCcU/TJCMaIrAfQEAJYdBZznG QYGYB84hwQDRsIKUBjbCuFA0I9AN4skMGZutRU30kc4M+g9FtyvTgEKEk6A47b6A zanS648C0d0f9U+wJm+SXbdHrjTqFxoUPOgZES/8siL4ryXxcwaVR0SugYJiPKrT DH+WQ++uxTDr/WFppJtH37U1shGyrGS/3PRHxnALtl5aFTaIFhH1cclHiNnXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU3tkZteMcSCjn6HfFzNTiEL4rs8kwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjExMzgwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQAMFaQJpDmbeGUB5jVz34Pq3r3FK0usVg14 6RJ6AdRqoPsv+B5dWkKafORL+bf9ibi5jOEGdTm4weXCIXXE2UCE7izIcb9VIdEI QD/gBV8ClTcEC20dq/OW1qHBmeW27xo06YaGJT6xfOhq4srpkL59Tegct+5bc5Im uWcq+hvzXsgVorDubofEZPPbgSsbavo3C5diKmxCEZ+UEGvHB8ubqEXMa7TfHbMW 8xYWvQRlQ+XGfRx2xFHbsqT1JJF8K7mdM8MQxKAyAeVokxTejvL9Xu8WqPU8onGg WcqhJp7it2aMMo1bmcYx//FqYdtS3wt9y3dvfH9GEvG4OgYDC3/J -----END CERTIFICATE-----Generated at Thu Jun 11 21:38:25 2026 by rpki-client