$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS211380.roa File: AS211380.roa (raw, json) Hash identifier: heMqQXqdYcZ8NJ4ro1bKcRdgY1awzsPaxTSXHnKndSw= Subject key identifier: ED:10:1B:A4:E5:7A:3A:38:74:7C:3E:42:51:41:E9:C6:19:58:DF:65 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 2555E03F8DF866C423CFD127B2C16AC8730DC907 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS211380.roa Signing time: Fri 04 Jul 2025 07:51:29 +0000 ROA not before: Fri 04 Jul 2025 07:46:29 +0000 ROA not after: Fri 03 Jul 2026 07:51:29 +0000 asID: 211380 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:55:e0:3f:8d:f8:66:c4:23:cf:d1:27:b2:c1:6a:c8:73:0d:c9:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:29 2025 GMT Not After : Jul 3 07:51:29 2026 GMT Subject: CN=ED101BA4E57A3A38747C3E425141E9C61958DF65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:6a:d1:33:01:7a:85:39:a2:7d:6b:98:bb: a5:83:e6:bb:19:8a:b3:07:73:f2:aa:5c:53:90:0e: 66:29:a6:b6:bc:e5:b3:6b:06:fc:be:42:7b:71:2c: 6d:48:8f:a6:25:54:34:74:dc:ef:01:c0:8d:bb:76: 32:13:f4:bb:2d:6f:4e:df:45:08:b6:fe:d1:ae:e1: b3:61:6d:d0:58:be:11:5b:9b:ce:a2:9c:e9:43:65: a5:c1:ed:2e:c8:92:18:ad:ff:e5:9d:00:88:e1:c9: 53:55:21:9c:c2:e8:dd:f0:82:50:d2:ef:01:b3:83: 5c:bb:a4:b9:5e:b7:17:c6:69:ca:00:1f:f4:bf:1c: bd:26:54:a5:1b:40:ab:7e:8d:0d:79:08:01:97:54: cf:bb:96:3c:5e:22:64:6d:c8:a0:6f:14:75:92:f2: 89:66:06:55:c9:bf:06:b7:a3:64:8c:04:44:f4:13: 21:30:4f:72:1f:4d:0b:dd:ba:d5:41:d7:e1:06:3f: 8d:29:d2:dc:d5:17:63:c7:c4:1f:65:8d:95:e6:f0: 17:7c:84:87:9c:f7:39:60:bb:b7:af:c5:bf:dd:07: 4f:00:f6:51:fd:5b:2f:db:ef:2e:a6:4a:f5:e2:0d: 3b:d4:bc:b2:0c:d2:e7:15:0a:8c:b6:f5:b4:ea:4e: 0e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:10:1B:A4:E5:7A:3A:38:74:7C:3E:42:51:41:E9:C6:19:58:DF:65 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS211380.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 92:66:bb:38:db:06:c8:1f:31:55:25:8b:9f:6c:04:4a:fc:e3: 5a:eb:07:e9:01:4c:cd:8f:a9:96:35:e2:9d:37:54:04:3b:23: 83:42:c1:c2:78:b5:02:9e:88:a8:e5:dc:c0:8c:bf:c6:f4:b9: 1d:6b:ed:b8:f1:dd:bd:ce:b4:22:bd:6e:44:c0:2a:83:4c:94: 6e:5b:f3:81:06:4f:62:60:10:f0:7f:30:57:05:33:ef:88:ac: 87:28:b8:02:9f:b6:33:5e:f4:55:0b:0a:d7:93:33:c3:38:6c: ab:23:4b:8a:5a:c3:85:38:1b:7c:86:3f:43:f7:12:51:29:ab: ef:e9:0b:ed:88:7f:6b:1c:11:ca:87:22:55:97:68:f5:fb:b0: b1:dc:6d:64:ed:42:30:86:46:4d:50:65:e6:46:a6:a9:2b:3f: 90:13:c4:a0:96:a4:a7:8a:52:7b:d7:65:63:1b:4e:c2:c2:94: b9:65:34:58:b9:4e:37:10:ad:dd:39:22:1b:8b:cb:07:09:54: c7:b8:a7:7f:3b:b8:b4:45:26:a1:35:69:6b:0a:0d:24:b1:45: 54:e4:2a:9f:d4:d8:91:90:24:37:c2:ca:38:1f:5b:eb:29:15: 0e:f8:7f:fe:cf:cb:35:8d:d9:64:86:a8:23:f7:b8:08:8f:36: 73:08:e3:94 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJVXgP434ZsQjz9EnssFqyHMNyQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjlaFw0yNjA3MDMwNzUxMjlaMDMxMTAvBgNV BAMTKEVEMTAxQkE0RTU3QTNBMzg3NDdDM0U0MjUxNDFFOUM2MTk1OERGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlmrRMwF6hTmifWuYu6WD5rsZ irMHc/KqXFOQDmYppra85bNrBvy+QntxLG1Ij6YlVDR03O8BwI27djIT9Lstb07f RQi2/tGu4bNhbdBYvhFbm86inOlDZaXB7S7Ikhit/+WdAIjhyVNVIZzC6N3wglDS 7wGzg1y7pLletxfGacoAH/S/HL0mVKUbQKt+jQ15CAGXVM+7ljxeImRtyKBvFHWS 8olmBlXJvwa3o2SMBET0EyEwT3IfTQvdutVB1+EGP40p0tzVF2PHxB9ljZXm8Bd8 hIec9zlgu7evxb/dB08A9lH9Wy/b7y6mSvXiDTvUvLIM0ucVCoy29bTqTg7lAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU7RAbpOV6Ojh0fD5CUUHpxhlY32UwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjExMzgwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQCSZrs42wbIHzFVJYufbARK/ONa6wfpAUzN j6mWNeKdN1QEOyODQsHCeLUCnoio5dzAjL/G9Lkda+248d29zrQivW5EwCqDTJRu W/OBBk9iYBDwfzBXBTPviKyHKLgCn7YzXvRVCwrXkzPDOGyrI0uKWsOFOBt8hj9D 9xJRKavv6QvtiH9rHBHKhyJVl2j1+7Cx3G1k7UIwhkZNUGXmRqapKz+QE8SglqSn ilJ712VjG07CwpS5ZTRYuU43EK3dOSIbi8sHCVTHuKd/O7i0RSahNWlrCg0ksUVU 5Cqf1NiRkCQ3wso4H1vrKRUO+H/+z8s1jdlkhqgj97gIjzZzCOOU -----END CERTIFICATE-----Generated at Sat Jul 5 08:11:20 2025 by rpki-client