$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS212276.roa File: AS212276.roa (raw, json) Hash identifier: c5Az88tQwq3CmQMuO2ZwkxenMUXvk02OHTm6tGBVfKo= Subject key identifier: 7B:E1:4F:31:20:FE:FD:88:BF:4C:30:FD:66:5A:3B:3B:26:68:24:9D Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 6EC9689541D3777888C247969FCBC09740D7A523 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS212276.roa Signing time: Fri 04 Jul 2025 07:51:24 +0000 ROA not before: Fri 04 Jul 2025 07:46:24 +0000 ROA not after: Fri 03 Jul 2026 07:51:24 +0000 asID: 212276 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c9:68:95:41:d3:77:78:88:c2:47:96:9f:cb:c0:97:40:d7:a5:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:24 2025 GMT Not After : Jul 3 07:51:24 2026 GMT Subject: CN=7BE14F3120FEFD88BF4C30FD665A3B3B2668249D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:66:85:00:d4:10:d1:65:0c:19:eb:2c:1c:d6: 46:c9:88:11:93:94:b4:a1:0f:2f:65:d3:21:19:d2: e6:ae:fb:b7:df:79:56:9c:ec:40:f8:8b:cc:22:4c: cb:a1:29:41:79:56:1d:cd:77:5f:a6:5a:ff:92:e5: fd:41:9e:2c:00:0a:52:13:eb:62:d2:0d:44:82:df: c1:61:40:61:3a:1c:49:e3:96:21:c4:6c:7e:93:88: 42:d6:f4:92:51:7b:0a:d6:40:5c:1a:57:32:bd:ee: 70:bf:c8:27:67:b0:78:4d:66:f8:a2:d0:da:b2:f9: 9e:4b:78:b1:a3:3b:d6:c0:17:b6:6f:2e:63:6c:af: a5:65:0c:68:7e:af:14:58:dd:ee:70:ae:a1:15:11: 51:0f:b4:5e:40:f7:67:90:b7:42:a4:b0:32:a8:d3: b8:13:14:bb:6a:c6:1d:4c:f6:c8:95:2b:43:01:af: 26:a4:4e:50:8d:6e:4a:1d:9d:36:14:1d:34:91:68: 83:b6:d7:ed:77:fc:4a:21:3f:60:88:78:02:d8:99: 53:b2:09:ce:86:14:92:38:13:1f:a4:9f:bc:d3:66: 03:25:34:60:b5:98:8b:b1:af:a9:32:21:31:97:44: a7:02:26:c8:38:4c:28:9e:23:6e:5a:f7:7a:77:b0: 3f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E1:4F:31:20:FE:FD:88:BF:4C:30:FD:66:5A:3B:3B:26:68:24:9D X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS212276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 43:39:51:c0:65:6a:e2:82:51:60:32:fe:b8:39:84:1c:05:a0: a1:85:5c:e6:2e:69:4a:0f:22:7d:ed:8e:85:1e:cc:3e:4b:ff: 49:01:5f:a6:37:d2:3c:a0:70:61:83:e2:53:a6:95:02:f9:6c: 94:fe:4c:4e:42:bc:e1:cf:ab:a7:14:66:14:f1:6f:61:fd:52: af:05:c0:7d:11:f5:49:fe:13:0a:fc:63:fb:d6:1d:d3:af:3a: 31:a0:b0:06:ae:9e:f7:46:57:67:c1:9d:b9:e9:45:93:7e:c2: b3:1b:67:67:f3:f6:bb:53:69:3d:71:fe:6e:3b:87:51:84:63: 10:35:3d:96:19:e4:ac:6f:ce:f4:3e:a6:15:d1:04:48:0e:6b: ae:d5:8d:1e:fb:c4:dc:44:8f:1f:01:1f:de:da:42:a6:c4:2c: 29:a6:ec:ad:3c:1c:1a:ed:74:48:ee:7a:4a:d2:ad:67:2d:6b: 57:dd:c8:9e:f7:48:29:6a:e7:46:22:ba:dd:bc:bf:fd:c0:38: db:c7:7d:60:bf:8d:bb:8c:0a:ec:17:e7:59:79:bd:9d:8f:6a: 26:17:c9:57:20:47:00:f2:06:50:3f:b7:02:25:64:cf:da:11: 9f:ab:0a:42:63:f5:32:cf:f1:ea:7f:af:1d:b3:58:48:ce:20: 88:bf:2a:a0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUbslolUHTd3iIwkeWn8vAl0DXpSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjRaFw0yNjA3MDMwNzUxMjRaMDMxMTAvBgNV BAMTKDdCRTE0RjMxMjBGRUZEODhCRjRDMzBGRDY2NUEzQjNCMjY2ODI0OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZoUA1BDRZQwZ6ywc1kbJiBGT lLShDy9l0yEZ0uau+7ffeVac7ED4i8wiTMuhKUF5Vh3Nd1+mWv+S5f1BniwAClIT 62LSDUSC38FhQGE6HEnjliHEbH6TiELW9JJRewrWQFwaVzK97nC/yCdnsHhNZvii 0Nqy+Z5LeLGjO9bAF7ZvLmNsr6VlDGh+rxRY3e5wrqEVEVEPtF5A92eQt0KksDKo 07gTFLtqxh1M9siVK0MBryakTlCNbkodnTYUHTSRaIO21+13/EohP2CIeALYmVOy Cc6GFJI4Ex+kn7zTZgMlNGC1mIuxr6kyITGXRKcCJsg4TCieI25a93p3sD8FAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUe+FPMSD+/Yi/TDD9Zlo7OyZoJJ0wHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjEyMjc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQBDOVHAZWriglFgMv64OYQcBaChhVzmLmlK DyJ97Y6FHsw+S/9JAV+mN9I8oHBhg+JTppUC+WyU/kxOQrzhz6unFGYU8W9h/VKv BcB9EfVJ/hMK/GP71h3TrzoxoLAGrp73RldnwZ256UWTfsKzG2dn8/a7U2k9cf5u O4dRhGMQNT2WGeSsb870PqYV0QRIDmuu1Y0e+8TcRI8fAR/e2kKmxCwppuytPBwa 7XRI7npK0q1nLWtX3cie90gpaudGIrrdvL/9wDjbx31gv427jArsF+dZeb2dj2om F8lXIEcA8gZQP7cCJWTP2hGfqwpCY/Uyz/Hqf68ds1hIziCIvyqg -----END CERTIFICATE-----Generated at Sat Jul 5 08:11:20 2025 by rpki-client