$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS214999.roa File: AS214999.roa (raw, json) Hash identifier: 0fBffvvW3keNJckoknCcJzUra/j7pkXeJbPj7fJkm7E= Subject key identifier: DB:12:D4:29:4F:58:6A:21:76:C5:1E:27:9E:FC:23:19:C2:86:C2:DE Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 646E1B08DD68EB06892376BFB3266FAA755CB484 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS214999.roa Signing time: Fri 04 Jul 2025 07:51:25 +0000 ROA not before: Fri 04 Jul 2025 07:46:25 +0000 ROA not after: Fri 03 Jul 2026 07:51:25 +0000 asID: 214999 IP address blocks: 2a07:54c1:c300::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:6e:1b:08:dd:68:eb:06:89:23:76:bf:b3:26:6f:aa:75:5c:b4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:25 2025 GMT Not After : Jul 3 07:51:25 2026 GMT Subject: CN=DB12D4294F586A2176C51E279EFC2319C286C2DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:5f:73:67:8c:0e:83:b0:4e:65:7c:a8:ae: cd:c2:92:5e:46:88:7f:f1:27:49:15:2c:31:30:82: 1d:24:b4:7e:a5:46:9f:54:06:2b:3d:05:aa:37:87: 6b:41:71:39:43:09:05:5d:9a:52:58:5d:c7:9b:88: 79:e6:c9:13:c8:82:3b:4c:dc:8c:b1:35:a7:cb:e7: a6:ad:d9:65:fb:fd:95:e5:11:4f:af:25:b6:22:02: 0c:eb:b5:4d:52:00:72:6b:2f:a7:10:67:74:27:98: 43:48:ed:ec:9c:0a:99:9d:a5:78:ab:33:83:8b:7e: 68:d0:21:a3:9a:c3:c2:b6:be:97:40:3d:1a:8b:85: 48:f0:c5:f8:02:91:17:27:99:33:0b:43:39:7e:1b: df:8f:bc:cc:cc:1f:17:1b:8c:cf:c2:ba:9c:78:4e: ff:fb:c9:5d:ba:a1:7c:50:31:5a:f4:31:9e:e6:83: cf:6b:3e:64:ea:92:6f:ad:7f:cb:57:28:87:06:ab: 1b:0f:46:c5:12:54:e5:e9:72:a9:66:74:ec:f2:af: af:19:91:82:c8:08:d2:3a:d5:4c:56:8f:c7:dd:b0: ed:1c:85:8a:eb:a5:1b:28:2c:be:bc:55:9b:08:60: ec:cd:c2:71:b6:f8:ed:b6:2d:d4:68:db:d2:87:f8: 95:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:12:D4:29:4F:58:6A:21:76:C5:1E:27:9E:FC:23:19:C2:86:C2:DE X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS214999.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:c300::/40 Signature Algorithm: sha256WithRSAEncryption 46:3e:02:e3:f6:1f:26:ab:a8:1e:93:31:60:b2:85:90:5a:29: 23:17:2e:c0:e1:63:92:d0:bb:aa:7b:3d:64:62:49:d7:07:32: ae:79:46:bf:a4:d6:58:db:8b:2d:df:53:28:0b:82:80:86:db: aa:52:cf:cf:4d:c4:e7:c6:f6:11:a3:43:ad:28:2b:d4:0d:bc: 54:17:35:bb:d1:5d:9a:46:de:84:30:94:25:db:5a:a3:e6:7c: 1f:35:ae:19:a4:a9:3a:3b:b6:c4:18:62:7c:94:bf:d4:54:72: 9b:df:1c:2c:f1:99:6a:9f:18:3f:e9:35:0a:96:0e:51:42:36: 46:31:12:bb:2c:60:56:9f:d0:15:83:9d:42:10:9f:4a:9f:2d: f7:58:3b:79:5b:54:fd:eb:4e:20:19:a3:35:7a:39:6c:75:76: 45:07:7e:07:97:8e:c0:63:33:5e:3c:ca:c9:e6:5d:e1:a1:57: 94:79:22:dd:8a:19:2d:d5:35:c4:fd:ca:08:c9:de:8c:46:1d: 6b:68:80:98:39:b4:19:1d:a3:57:57:b1:28:85:73:45:48:9b: 3b:1d:9a:62:a0:86:db:03:6a:8f:87:06:ee:0e:e1:c2:c9:76: 5c:f1:b7:30:1f:a6:2d:e1:33:97:0c:cb:b5:1c:55:13:cd:ec: 3f:39:72:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZG4bCN1o6waJI3a/syZvqnVctIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjVaFw0yNjA3MDMwNzUxMjVaMDMxMTAvBgNV BAMTKERCMTJENDI5NEY1ODZBMjE3NkM1MUUyNzlFRkMyMzE5QzI4NkMyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC03V9zZ4wOg7BOZXyors3Ckl5G iH/xJ0kVLDEwgh0ktH6lRp9UBis9Bao3h2tBcTlDCQVdmlJYXcebiHnmyRPIgjtM 3IyxNafL56at2WX7/ZXlEU+vJbYiAgzrtU1SAHJrL6cQZ3QnmENI7eycCpmdpXir M4OLfmjQIaOaw8K2vpdAPRqLhUjwxfgCkRcnmTMLQzl+G9+PvMzMHxcbjM/Cupx4 Tv/7yV26oXxQMVr0MZ7mg89rPmTqkm+tf8tXKIcGqxsPRsUSVOXpcqlmdOzyr68Z kYLICNI61UxWj8fdsO0chYrrpRsoLL68VZsIYOzNwnG2+O22LdRo29KH+JWjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2xLUKU9YaiF2xR4nnvwjGcKGwt4wHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE0OTk5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wcMwDQYJKoZIhvcNAQELBQADggEBAEY+AuP2HyarqB6TMWCyhZBaKSMXLsDhY5LQ u6p7PWRiSdcHMq55Rr+k1ljbiy3fUygLgoCG26pSz89NxOfG9hGjQ60oK9QNvFQX NbvRXZpG3oQwlCXbWqPmfB81rhmkqTo7tsQYYnyUv9RUcpvfHCzxmWqfGD/pNQqW DlFCNkYxErssYFaf0BWDnUIQn0qfLfdYO3lbVP3rTiAZozV6OWx1dkUHfgeXjsBj M148ysnmXeGhV5R5It2KGS3VNcT9ygjJ3oxGHWtogJg5tBkdo1dXsSiFc0VImzsd mmKghtsDao+HBu4O4cLJdlzxtzAfpi3hM5cMy7UcVRPN7D85crw= -----END CERTIFICATE-----Generated at Sat Jul 5 08:10:42 2025 by rpki-client