$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS214930.roa File: AS214930.roa (raw, json) Hash identifier: KWtASk4nkMFJV0wI5tb7aTl17vemdwCeey8tTLgrOLU= Subject key identifier: 01:3D:65:8E:67:44:CF:93:B5:FE:A7:55:51:37:20:6C:98:37:14:F6 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 2917207D10B5094D002E3DFA69D0CEBEAF79BE85 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS214930.roa Signing time: Fri 04 Jul 2025 07:51:25 +0000 ROA not before: Fri 04 Jul 2025 07:46:25 +0000 ROA not after: Fri 03 Jul 2026 07:51:25 +0000 asID: 214930 IP address blocks: 2a07:54c1:c400::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:17:20:7d:10:b5:09:4d:00:2e:3d:fa:69:d0:ce:be:af:79:be:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:25 2025 GMT Not After : Jul 3 07:51:25 2026 GMT Subject: CN=013D658E6744CF93B5FEA7555137206C983714F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ae:96:ad:00:6b:2b:d8:9b:32:78:3c:23:8a: 88:84:f0:c4:aa:4f:38:e4:2a:c9:89:71:23:dd:68: 06:c7:a2:24:30:cd:4e:fd:dd:ee:7b:cc:e6:d2:3c: 31:9b:bf:de:3d:0f:30:7b:90:0a:0c:10:61:96:ba: ba:8e:13:19:39:5d:1c:65:33:08:d3:0d:af:14:64: 8f:10:99:46:cd:4f:fb:3e:42:36:1d:de:00:5c:bc: 4e:bd:3b:c4:10:5a:9b:39:4f:b5:d3:10:9a:4f:0f: 06:43:46:b1:32:65:70:2d:5a:30:14:fd:88:69:17: da:d4:f7:1f:c5:0d:db:d7:15:a1:9d:96:60:44:08: 9d:72:6b:44:c0:98:1b:08:98:dd:a0:d7:71:cb:8e: 48:cb:b8:ad:a8:ed:0f:ae:73:37:a7:aa:31:e1:c7: 7b:aa:a8:0e:1d:e8:c0:99:34:54:ab:b4:3e:5a:fc: 0e:6a:a3:28:aa:5d:25:8b:26:d8:57:32:1f:38:83: 1b:d0:97:b8:ef:8b:75:ec:2a:d6:0f:b8:cd:d3:73: 7f:7c:29:27:f4:1c:c2:1f:cd:93:b1:60:54:c8:31: 3f:53:47:3f:94:ea:d0:e5:3e:47:53:f1:f6:78:49: 70:61:e2:11:0d:02:1d:09:37:4a:dc:88:6f:ec:a9: a5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3D:65:8E:67:44:CF:93:B5:FE:A7:55:51:37:20:6C:98:37:14:F6 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS214930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:c400::/40 Signature Algorithm: sha256WithRSAEncryption 4a:78:49:db:13:b5:07:9c:67:34:da:94:39:c6:b5:ad:bb:1e: 49:48:de:27:f4:8b:a3:9c:64:90:e0:9d:68:7c:89:ef:69:0b: 35:67:f2:ac:f2:32:e3:a9:17:b3:c9:d0:ca:f5:1c:8a:0d:56: 8c:fc:d4:17:6a:e1:67:b8:60:37:7c:8d:6f:98:8f:f9:b7:d5: 77:ed:1b:a7:cb:a1:97:b7:c5:6e:11:79:c2:f8:ce:a2:86:96: 05:b9:21:1b:a8:fe:ca:0e:4b:4f:f6:ef:4b:00:37:db:2e:81: f6:6a:87:95:f4:06:2c:ac:59:f3:02:e6:31:08:09:7f:fe:41: a9:07:76:41:7d:e7:1b:8c:7a:2f:7b:b5:ff:9f:97:60:b2:3f: a7:04:df:7c:cc:d8:37:9e:f2:6f:30:d9:bb:4e:37:fa:c0:e7: c7:fd:15:01:9a:e2:c3:f6:37:ad:fc:be:38:37:cf:07:7d:1d: a6:96:a8:b7:40:88:2c:04:f9:53:ec:0a:d2:2e:f7:41:76:2a: f1:c7:3f:1c:ed:d8:6a:47:fb:c1:4b:e5:96:fe:dc:c0:7c:61: 91:2d:89:bd:ef:a3:ab:7d:94:25:08:9d:d9:91:59:40:78:3c: 27:dc:48:16:72:12:7f:40:4a:1d:9a:c6:8b:4a:3b:00:89:31: 07:37:49:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKRcgfRC1CU0ALj36adDOvq95voUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjVaFw0yNjA3MDMwNzUxMjVaMDMxMTAvBgNV BAMTKDAxM0Q2NThFNjc0NENGOTNCNUZFQTc1NTUxMzcyMDZDOTgzNzE0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDarpatAGsr2JsyeDwjioiE8MSq TzjkKsmJcSPdaAbHoiQwzU793e57zObSPDGbv949DzB7kAoMEGGWurqOExk5XRxl MwjTDa8UZI8QmUbNT/s+QjYd3gBcvE69O8QQWps5T7XTEJpPDwZDRrEyZXAtWjAU /YhpF9rU9x/FDdvXFaGdlmBECJ1ya0TAmBsImN2g13HLjkjLuK2o7Q+uczenqjHh x3uqqA4d6MCZNFSrtD5a/A5qoyiqXSWLJthXMh84gxvQl7jvi3XsKtYPuM3Tc398 KSf0HMIfzZOxYFTIMT9TRz+U6tDlPkdT8fZ4SXBh4hENAh0JN0rciG/sqaWXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAT1ljmdEz5O1/qdVUTcgbJg3FPYwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE0OTMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wcQwDQYJKoZIhvcNAQELBQADggEBAEp4SdsTtQecZzTalDnGta27HklI3if0i6Oc ZJDgnWh8ie9pCzVn8qzyMuOpF7PJ0Mr1HIoNVoz81Bdq4We4YDd8jW+Yj/m31Xft G6fLoZe3xW4RecL4zqKGlgW5IRuo/soOS0/270sAN9sugfZqh5X0BiysWfMC5jEI CX/+QakHdkF95xuMei97tf+fl2CyP6cE33zM2Dee8m8w2btON/rA58f9FQGa4sP2 N638vjg3zwd9HaaWqLdAiCwE+VPsCtIu90F2KvHHPxzt2GpH+8FL5Zb+3MB8YZEt ib3vo6t9lCUIndmRWUB4PCfcSBZyEn9ASh2axotKOwCJMQc3Scg= -----END CERTIFICATE-----Generated at Sat Jul 5 08:10:42 2025 by rpki-client