$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215828.roa File: AS215828.roa (raw, json) Hash identifier: DppuDvRvOGtQc/ixoS1HvF96t3sAjgQQNK2zyZf73Mk= Subject key identifier: 92:C7:6C:A1:87:EB:2C:C0:EB:CD:A9:71:2B:C8:E6:B5:C3:80:5E:71 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 5B31BBCD98C6EA01A7831A5511E0BD5B02D30A74 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215828.roa Signing time: Fri 04 Jul 2025 07:51:26 +0000 ROA not before: Fri 04 Jul 2025 07:46:26 +0000 ROA not after: Fri 03 Jul 2026 07:51:26 +0000 asID: 215828 IP address blocks: 2a07:54c1:4400::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:31:bb:cd:98:c6:ea:01:a7:83:1a:55:11:e0:bd:5b:02:d3:0a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:26 2025 GMT Not After : Jul 3 07:51:26 2026 GMT Subject: CN=92C76CA187EB2CC0EBCDA9712BC8E6B5C3805E71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:ef:a5:1e:5a:06:d9:e0:ce:d6:07:06:a1: 75:91:49:b0:6d:49:92:8c:39:cb:b4:8a:fa:ff:8e: 77:ff:6e:45:3d:8f:8c:c6:da:49:1e:04:24:57:9b: 17:05:3f:0b:8b:3b:ed:93:8a:05:44:d0:c0:6b:a9: bb:c2:48:92:b4:50:ff:2b:7a:92:df:0c:64:ea:0e: 44:64:0f:12:c3:4e:58:e7:ae:80:14:f7:00:88:52: 18:43:42:41:cc:18:48:13:05:a1:16:43:27:c9:4f: 5a:c5:3c:71:5d:82:89:f7:4b:ed:c0:68:59:3b:a0: 00:96:5d:8b:21:68:71:c9:08:21:0c:04:7f:e1:94: 41:d8:17:78:6f:35:f7:8a:42:76:2f:93:37:c3:68: 4d:69:13:b0:3b:60:cb:ed:df:7b:6f:b2:42:01:16: a7:e4:e2:35:86:e6:95:fe:81:92:a2:3f:98:1a:d2: 26:50:06:2a:95:e1:f3:27:80:0b:56:53:1b:ce:d6: 61:2e:5f:5f:52:74:70:72:1e:aa:2d:f0:01:32:5e: 07:7d:0e:08:2c:ae:2d:5e:cb:74:2d:22:38:75:ef: f5:c7:3f:57:96:ba:02:33:07:0c:5d:dd:81:2b:5e: 9e:a6:8d:09:eb:0c:5a:af:75:6b:9d:01:13:1a:49: 1c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C7:6C:A1:87:EB:2C:C0:EB:CD:A9:71:2B:C8:E6:B5:C3:80:5E:71 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215828.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:4400::/40 Signature Algorithm: sha256WithRSAEncryption 91:44:e8:92:5b:db:82:c1:8e:92:eb:00:b0:dc:fa:fe:c9:71: b9:b6:3d:83:35:d9:0b:83:af:80:f9:54:5f:ac:5c:d3:6e:00: 6c:54:fb:91:82:0c:00:71:c9:d0:30:e0:37:33:1c:2e:c3:eb: ab:af:ae:d2:fe:95:eb:5b:a5:d8:7d:29:d1:47:10:98:b2:5b: da:4f:bf:cf:0d:1a:09:93:4e:0b:61:9b:1d:d4:d0:b1:58:a7: 9f:c3:e5:68:48:20:9f:39:10:22:0a:61:d2:f5:b6:cb:ff:ab: 96:aa:53:f9:7e:80:1f:0f:46:b5:9a:68:9c:00:6d:fb:da:d7: e3:be:87:9f:73:56:b6:f2:1f:f6:5b:2d:4c:ca:e9:4c:00:52: a7:bf:46:e0:1c:39:a4:1c:e3:f9:62:4f:b8:fc:25:e9:c3:41: 6a:73:27:2b:81:9a:51:55:b2:1c:e1:c9:e6:e0:66:8b:4a:5e: 06:3d:ac:7b:d7:69:eb:f3:b2:a2:df:77:49:67:f3:84:e9:77: a7:5b:b0:41:41:52:4c:8e:ee:12:29:e5:af:e0:34:86:d9:ea: 8c:f9:61:a5:35:74:e3:1b:46:11:bc:5c:d3:84:fa:55:4a:fa: ae:ff:4e:6e:5f:6a:92:fe:d3:e0:28:30:51:20:0e:54:5a:62: 28:24:47:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWzG7zZjG6gGngxpVEeC9WwLTCnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjZaFw0yNjA3MDMwNzUxMjZaMDMxMTAvBgNV BAMTKDkyQzc2Q0ExODdFQjJDQzBFQkNEQTk3MTJCQzhFNkI1QzM4MDVFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrE++lHloG2eDO1gcGoXWRSbBt SZKMOcu0ivr/jnf/bkU9j4zG2kkeBCRXmxcFPwuLO+2TigVE0MBrqbvCSJK0UP8r epLfDGTqDkRkDxLDTljnroAU9wCIUhhDQkHMGEgTBaEWQyfJT1rFPHFdgon3S+3A aFk7oACWXYshaHHJCCEMBH/hlEHYF3hvNfeKQnYvkzfDaE1pE7A7YMvt33tvskIB Fqfk4jWG5pX+gZKiP5ga0iZQBiqV4fMngAtWUxvO1mEuX19SdHByHqot8AEyXgd9 Dggsri1ey3QtIjh17/XHP1eWugIzBwxd3YErXp6mjQnrDFqvdWudARMaSRyTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUksdsoYfrLMDrzalxK8jmtcOAXnEwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE1ODI4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wUQwDQYJKoZIhvcNAQELBQADggEBAJFE6JJb24LBjpLrALDc+v7Jcbm2PYM12QuD r4D5VF+sXNNuAGxU+5GCDABxydAw4DczHC7D66uvrtL+letbpdh9KdFHEJiyW9pP v88NGgmTTgthmx3U0LFYp5/D5WhIIJ85ECIKYdL1tsv/q5aqU/l+gB8PRrWaaJwA bfva1+O+h59zVrbyH/ZbLUzK6UwAUqe/RuAcOaQc4/liT7j8JenDQWpzJyuBmlFV shzhyebgZotKXgY9rHvXaevzsqLfd0ln84Tpd6dbsEFBUkyO7hIp5a/gNIbZ6oz5 YaU1dOMbRhG8XNOE+lVK+q7/Tm5fapL+0+AoMFEgDlRaYigkR+g= -----END CERTIFICATE-----Generated at Sat Jul 5 08:18:06 2025 by rpki-client