$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215680.roa File: AS215680.roa (raw, json) Hash identifier: 76A6UasSP/EBa9usd2kDKt+SD/D7gaLo5WjgrgXWL9Y= Subject key identifier: 63:5E:2E:A5:72:0A:C6:AC:47:91:D4:5D:79:90:1D:C5:D4:0E:E7:11 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 77A51CDF6DE3F43493D82CB17A595520BEAFB88C Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215680.roa Signing time: Fri 04 Jul 2025 07:51:28 +0000 ROA not before: Fri 04 Jul 2025 07:46:28 +0000 ROA not after: Fri 03 Jul 2026 07:51:28 +0000 asID: 215680 IP address blocks: 2a07:54c1:c600::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a5:1c:df:6d:e3:f4:34:93:d8:2c:b1:7a:59:55:20:be:af:b8:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:28 2025 GMT Not After : Jul 3 07:51:28 2026 GMT Subject: CN=635E2EA5720AC6AC4791D45D79901DC5D40EE711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:54:8f:e6:1e:11:2c:4d:4d:68:91:a6:91:76: 1d:79:1c:07:d2:c1:c9:39:97:d9:95:7a:ac:1d:2d: 5b:1b:e3:0d:db:f5:93:ad:c4:59:0c:03:03:cd:22: 04:69:b9:fc:aa:5a:40:be:be:cd:c9:aa:07:ed:11: 70:7b:39:45:de:53:f5:c1:b2:e3:f4:1c:51:6c:e2: b8:58:31:9b:a8:87:c4:4c:9b:a9:7c:14:69:9e:b2: 9b:eb:fb:fb:61:4a:3a:f1:b4:6d:56:ff:4d:d0:c9: 8e:3b:c0:f9:33:64:8b:79:4f:6a:30:f9:c8:72:3f: 80:63:c6:28:0c:68:0c:8f:40:1f:3e:12:a8:7f:12: b9:9a:a2:86:ff:ef:c0:ee:b6:6a:07:8a:de:91:c6: cb:a4:9e:8e:c7:dd:83:d7:4b:26:cc:55:0b:c9:f8: 14:f4:d6:db:b9:15:11:3a:80:d5:fd:af:cc:ff:e0: 1b:24:c0:5a:ce:25:05:a4:82:b7:bc:dd:d7:3b:c9: 0c:3d:e0:9b:d0:0e:df:9f:77:d5:18:55:11:75:c6: 6c:f4:3a:a7:7c:3b:82:14:36:b4:f3:70:4e:33:c9: ea:d5:14:43:69:f2:7a:01:0f:70:4d:47:6a:cd:4c: bc:cc:bc:cb:0f:b4:81:ca:c4:42:c9:7c:17:81:e8: 5f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5E:2E:A5:72:0A:C6:AC:47:91:D4:5D:79:90:1D:C5:D4:0E:E7:11 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215680.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:c600::/40 Signature Algorithm: sha256WithRSAEncryption b3:cd:2d:90:31:bc:cf:48:18:f5:c2:53:ca:13:2a:ef:7c:93: 39:89:2a:7f:37:98:62:67:6c:a7:f5:3c:65:b0:48:90:b7:a3: d2:1f:e6:03:4b:84:42:33:76:4d:b0:31:2c:b4:2d:65:08:d6: 84:64:68:1f:b0:37:98:84:67:72:02:30:37:6f:14:15:ec:d5: 06:9a:e1:86:7f:92:11:84:db:95:be:3c:50:0b:f0:fe:bb:13: 85:65:20:d1:a5:ab:93:5a:8f:eb:67:6a:8f:e6:eb:06:68:4c: 6e:43:fe:20:01:60:c6:c9:2a:ac:35:f1:c6:f8:b3:7e:5c:a4: 66:73:f6:5e:de:07:32:15:56:d6:ca:38:b1:aa:98:78:c7:5c: 96:59:35:cd:aa:a6:be:15:b4:94:90:a0:a8:18:01:7a:9a:98: 13:ca:bd:68:0b:7b:06:2a:52:5b:9f:c7:19:1a:67:6e:eb:5c: 22:c8:35:8d:61:93:0f:38:76:06:2f:70:f2:0f:ed:6a:6d:b6: d0:37:44:fb:0b:8e:05:60:77:f8:c1:53:6b:90:82:0d:b9:37: da:e4:01:53:92:fc:46:f5:1a:93:49:e9:aa:9e:62:a1:17:02: 7d:75:d5:00:7b:1f:2e:45:e2:83:c0:48:4a:ee:7d:54:1d:c6: 6a:25:13:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd6Uc323j9DST2CyxellVIL6vuIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjhaFw0yNjA3MDMwNzUxMjhaMDMxMTAvBgNV BAMTKDYzNUUyRUE1NzIwQUM2QUM0NzkxRDQ1RDc5OTAxREM1RDQwRUU3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAVI/mHhEsTU1okaaRdh15HAfS wck5l9mVeqwdLVsb4w3b9ZOtxFkMAwPNIgRpufyqWkC+vs3JqgftEXB7OUXeU/XB suP0HFFs4rhYMZuoh8RMm6l8FGmespvr+/thSjrxtG1W/03QyY47wPkzZIt5T2ow +chyP4BjxigMaAyPQB8+Eqh/Ermaoob/78DutmoHit6Rxsukno7H3YPXSybMVQvJ +BT01tu5FRE6gNX9r8z/4BskwFrOJQWkgre83dc7yQw94JvQDt+fd9UYVRF1xmz0 Oqd8O4IUNrTzcE4zyerVFENp8noBD3BNR2rNTLzMvMsPtIHKxELJfBeB6F8hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY14upXIKxqxHkdRdeZAdxdQO5xEwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE1NjgwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wcYwDQYJKoZIhvcNAQELBQADggEBALPNLZAxvM9IGPXCU8oTKu98kzmJKn83mGJn bKf1PGWwSJC3o9If5gNLhEIzdk2wMSy0LWUI1oRkaB+wN5iEZ3ICMDdvFBXs1Qaa 4YZ/khGE25W+PFAL8P67E4VlINGlq5Naj+tnao/m6wZoTG5D/iABYMbJKqw18cb4 s35cpGZz9l7eBzIVVtbKOLGqmHjHXJZZNc2qpr4VtJSQoKgYAXqamBPKvWgLewYq UlufxxkaZ27rXCLINY1hkw84dgYvcPIP7WptttA3RPsLjgVgd/jBU2uQgg25N9rk AVOS/Eb1GpNJ6aqeYqEXAn111QB7Hy5F4oPASErufVQdxmolEzE= -----END CERTIFICATE-----Generated at Sat Jul 5 08:23:06 2025 by rpki-client