$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215473.roa File: AS215473.roa (raw, json) Hash identifier: Pl8bAadsxnJ7aJMnUQDNHxLxZKBwUI3KLhn4VCTxqEU= Subject key identifier: C5:7D:45:DA:79:A2:76:98:08:98:E8:15:BA:07:91:2D:76:79:3E:94 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 596939D6351A5041682F81D0A04DB0092412858D Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215473.roa Signing time: Fri 05 Jun 2026 08:45:53 +0000 ROA not before: Fri 05 Jun 2026 08:40:53 +0000 ROA not after: Fri 04 Jun 2027 08:45:53 +0000 asID: 215473 IP address blocks: 2a07:54c1:4900::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 17:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:69:39:d6:35:1a:50:41:68:2f:81:d0:a0:4d:b0:09:24:12:85:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:53 2026 GMT Not After : Jun 4 08:45:53 2027 GMT Subject: CN=C57D45DA79A276980898E815BA07912D76793E94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:0c:f9:b7:da:e7:43:e8:79:76:bf:98:84: f7:0d:a1:90:4e:8f:f3:bf:36:e7:81:d1:99:92:18: c5:12:40:2e:97:37:05:29:93:8f:1c:1b:69:51:5a: a2:21:73:e3:f1:62:ab:ce:21:e2:5c:9d:01:fe:fe: 72:9b:8f:fb:9a:b1:1c:ba:f4:ab:03:11:85:e3:1f: 95:2c:5e:7b:f3:4a:e6:0c:a0:5e:2f:4f:f2:32:73: 8f:a3:63:a4:ce:c9:65:20:bd:fb:db:66:bd:cd:d4: 44:7f:ce:2a:61:d5:1c:08:79:e4:8c:bd:7f:0c:dc: a0:ae:15:db:b7:93:aa:98:f1:23:98:d4:b2:3c:81: de:42:41:07:b3:2e:11:59:3a:27:6d:b7:12:aa:07: 4f:fc:2a:8c:37:f9:bb:56:f0:0d:71:b3:24:6e:d3: 1a:a6:96:8e:30:51:9c:53:7c:19:c9:49:09:7f:af: 4e:0c:3c:c9:6b:f5:ca:03:bd:ea:fb:17:e3:06:b4: c8:60:bb:6f:e3:b2:45:50:10:7e:84:41:95:2b:8c: 38:cc:b2:1f:26:53:33:66:5f:16:e9:0c:44:10:9e: d3:23:c0:3d:5e:90:9b:14:b6:25:05:d4:2a:f0:b0: 76:b9:55:c4:d5:f8:97:a5:22:41:5f:b9:f4:77:bf: ab:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7D:45:DA:79:A2:76:98:08:98:E8:15:BA:07:91:2D:76:79:3E:94 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:4900::/40 Signature Algorithm: sha256WithRSAEncryption 86:e3:9a:6c:ca:9b:64:9f:d0:6a:9d:98:8f:96:d8:3c:1e:33: 4a:31:50:4a:d0:b9:1b:81:5c:a6:d3:ee:29:a1:11:09:c0:5d: 5d:62:c7:8e:03:5d:c7:9c:75:77:77:2c:0c:79:4a:e1:e4:d7: 7b:c4:f4:0f:1e:33:7a:33:d2:77:50:24:73:ff:5a:96:f4:f6: 92:05:f1:26:86:f8:52:2a:a9:3a:22:f5:3b:03:2a:31:8b:52: a5:31:0e:2f:ce:21:73:74:f0:1e:c1:fe:5d:14:c7:b4:e8:cd: 0e:01:9c:63:6e:d2:6d:1e:f6:13:8b:d4:05:ef:2c:ad:52:f2: 90:ea:b3:26:fa:ae:12:01:3e:25:1b:0f:5e:f5:98:11:f9:9f: 29:a7:26:6a:3b:1e:0f:36:ea:33:9b:70:f8:ae:f1:2a:32:09: 7b:d2:d2:ef:f6:01:f6:b8:1e:4b:9a:b4:80:52:bd:4a:ba:1e: 08:5f:34:fe:ea:9f:7a:10:22:45:04:0a:14:72:2b:02:09:27: e0:4a:91:83:1c:60:09:a3:ab:4e:92:b2:30:df:1c:fa:92:c0: c6:01:0a:76:a9:5b:69:b1:a4:59:26:20:93:2c:48:92:4a:07: c2:fc:8b:b6:d8:53:ad:87:ff:3a:8c:20:26:44:1e:83:ea:4b: 17:37:aa:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWWk51jUaUEFoL4HQoE2wCSQShY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTNaFw0yNzA2MDQwODQ1NTNaMDMxMTAvBgNV BAMTKEM1N0Q0NURBNzlBMjc2OTgwODk4RTgxNUJBMDc5MTJENzY3OTNFOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72gz5t9rnQ+h5dr+YhPcNoZBO j/O/NueB0ZmSGMUSQC6XNwUpk48cG2lRWqIhc+PxYqvOIeJcnQH+/nKbj/uasRy6 9KsDEYXjH5UsXnvzSuYMoF4vT/Iyc4+jY6TOyWUgvfvbZr3N1ER/ziph1RwIeeSM vX8M3KCuFdu3k6qY8SOY1LI8gd5CQQezLhFZOidttxKqB0/8Kow3+btW8A1xsyRu 0xqmlo4wUZxTfBnJSQl/r04MPMlr9coDver7F+MGtMhgu2/jskVQEH6EQZUrjDjM sh8mUzNmXxbpDEQQntMjwD1ekJsUtiUF1CrwsHa5VcTV+JelIkFfufR3v6t5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxX1F2nmidpgImOgVugeRLXZ5PpQwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE1NDczLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wUkwDQYJKoZIhvcNAQELBQADggEBAIbjmmzKm2Sf0GqdmI+W2DweM0oxUErQuRuB XKbT7imhEQnAXV1ix44DXcecdXd3LAx5SuHk13vE9A8eM3oz0ndQJHP/Wpb09pIF 8SaG+FIqqToi9TsDKjGLUqUxDi/OIXN08B7B/l0Ux7TozQ4BnGNu0m0e9hOL1AXv LK1S8pDqsyb6rhIBPiUbD171mBH5nymnJmo7Hg826jObcPiu8SoyCXvS0u/2Afa4 HkuatIBSvUq6HghfNP7qn3oQIkUEChRyKwIJJ+BKkYMcYAmjq06SsjDfHPqSwMYB CnapW2mxpFkmIJMsSJJKB8L8i7bYU62H/zqMICZEHoPqSxc3qg4= -----END CERTIFICATE-----Generated at Fri Jun 5 23:51:43 2026 by rpki-client