$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216212.roa File: AS216212.roa (raw, json) Hash identifier: Z9y8sozh3CXMMZsA08IC6oV3nbQbz/pCDgG8dxICjco= Subject key identifier: 25:C9:58:19:89:DC:5D:3A:FD:3E:F4:EC:27:CF:2A:44:A6:09:2A:B0 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 3A733D24B402463DCD316ED4DECEBA03E1289197 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216212.roa Signing time: Fri 04 Jul 2025 07:51:26 +0000 ROA not before: Fri 04 Jul 2025 07:46:26 +0000 ROA not after: Fri 03 Jul 2026 07:51:26 +0000 asID: 216212 IP address blocks: 2a07:54c4:b10::/44 maxlen: 48 2a07:54c4:1080::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:73:3d:24:b4:02:46:3d:cd:31:6e:d4:de:ce:ba:03:e1:28:91:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:26 2025 GMT Not After : Jul 3 07:51:26 2026 GMT Subject: CN=25C9581989DC5D3AFD3EF4EC27CF2A44A6092AB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1b:64:f7:3e:62:15:05:ee:a8:f5:42:2d:21: 77:e1:98:4c:2d:79:0f:ff:38:36:92:0d:76:07:83: 7c:c8:36:7e:44:39:0f:36:d6:44:5c:ce:b0:a6:58: 29:af:6e:cd:b6:92:4b:22:35:92:52:d5:ee:3e:2a: 42:0f:9d:45:ef:4e:81:ac:4c:89:98:2c:bb:46:75: 4c:72:b0:90:9b:88:a2:89:dd:f6:e1:62:c7:fe:2f: cd:40:d9:e6:1c:b1:95:f1:d9:e1:d5:e1:35:47:0e: f3:74:86:93:aa:d7:38:88:47:26:0b:14:4f:b2:eb: 9a:3a:e5:8e:a3:d9:e6:f7:11:66:10:f7:d8:50:87: b2:7a:ff:6d:26:3c:73:d4:3e:47:dd:45:4b:9b:2d: 6d:a7:c8:e6:f9:93:6a:82:ef:57:ce:db:01:00:f4: f3:6d:52:fd:06:b3:db:f8:e6:4e:13:60:dc:59:90: 8b:fb:e4:a4:e0:ab:6f:9c:4d:6a:ca:36:cb:2b:fd: 0b:c7:3e:3c:7e:6f:d2:28:d3:ab:49:79:e7:27:22: 8a:4a:73:f9:12:d5:64:59:57:12:ba:1b:45:59:36: 70:27:e0:c4:1a:7d:3f:5d:0e:62:40:5c:c3:b8:c1: 83:39:35:48:da:45:8d:4f:b1:e2:16:c9:c0:e9:20: 3b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C9:58:19:89:DC:5D:3A:FD:3E:F4:EC:27:CF:2A:44:A6:09:2A:B0 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216212.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:b10::/44 2a07:54c4:1080::/44 Signature Algorithm: sha256WithRSAEncryption 8e:d1:2f:2b:2b:0e:a1:27:b8:4a:0d:76:f4:40:4e:46:9b:dd: b8:cd:7e:96:5d:7d:94:b4:9f:99:45:da:e5:f4:6d:bd:75:c7: f2:dd:0c:f9:28:53:a0:28:35:f6:cf:3a:46:a0:4e:48:13:35: 18:1f:cb:25:5d:3f:4c:3e:49:59:dc:f9:2f:f4:f2:b3:4b:13: 06:1c:04:cd:58:d5:18:35:38:0d:28:92:b6:07:ca:d7:c4:8f: 96:f6:b0:d1:55:0c:bb:5a:be:6c:54:70:ab:69:19:ab:28:b3: 58:d4:1a:4f:5a:f5:32:b3:b5:ec:53:3c:c3:19:e4:16:b7:78: 11:94:4e:ec:8d:14:a9:96:75:2e:22:56:20:5f:fd:e9:21:90: 5a:b9:54:f3:15:66:37:30:6b:f1:99:34:24:d4:97:51:7c:db: d5:1f:41:1f:af:bb:6e:a8:99:53:c9:d5:2e:46:d5:b5:d5:73: 34:1c:fe:93:f0:01:5d:d6:70:2d:6f:84:d2:c1:1d:a9:14:b2: 2e:9d:51:df:c5:1a:88:76:68:1f:98:4c:5a:2a:b3:60:d7:57: 09:d8:4e:79:8e:99:51:6e:21:46:e9:1c:91:4e:14:79:9c:18: 8c:dc:58:13:10:f4:4a:72:4b:01:31:6d:a2:0b:60:d5:cd:0a: d6:37:6f:43 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUOnM9JLQCRj3NMW7U3s66A+EokZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjZaFw0yNjA3MDMwNzUxMjZaMDMxMTAvBgNV BAMTKDI1Qzk1ODE5ODlEQzVEM0FGRDNFRjRFQzI3Q0YyQTQ0QTYwOTJBQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnG2T3PmIVBe6o9UItIXfhmEwt eQ//ODaSDXYHg3zINn5EOQ821kRczrCmWCmvbs22kksiNZJS1e4+KkIPnUXvToGs TImYLLtGdUxysJCbiKKJ3fbhYsf+L81A2eYcsZXx2eHV4TVHDvN0hpOq1ziIRyYL FE+y65o65Y6j2eb3EWYQ99hQh7J6/20mPHPUPkfdRUubLW2nyOb5k2qC71fO2wEA 9PNtUv0Gs9v45k4TYNxZkIv75KTgq2+cTWrKNssr/QvHPjx+b9Io06tJeecnIopK c/kS1WRZVxK6G0VZNnAn4MQafT9dDmJAXMO4wYM5NUjaRY1PseIWycDpIDsFAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUJclYGYncXTr9PvTsJ88qRKYJKrAwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE2MjEyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgdU xAsQAwcEKgdUxBCAMA0GCSqGSIb3DQEBCwUAA4IBAQCO0S8rKw6hJ7hKDXb0QE5G m924zX6WXX2UtJ+ZRdrl9G29dcfy3Qz5KFOgKDX2zzpGoE5IEzUYH8slXT9MPklZ 3Pkv9PKzSxMGHATNWNUYNTgNKJK2B8rXxI+W9rDRVQy7Wr5sVHCraRmrKLNY1BpP WvUys7XsUzzDGeQWt3gRlE7sjRSplnUuIlYgX/3pIZBauVTzFWY3MGvxmTQk1JdR fNvVH0Efr7tuqJlTydUuRtW11XM0HP6T8AFd1nAtb4TSwR2pFLIunVHfxRqIdmgf mExaKrNg11cJ2E55jplRbiFG6RyRThR5nBiM3FgTEPRKcksBMW2iC2DVzQrWN29D -----END CERTIFICATE-----Generated at Sat Jul 5 08:23:06 2025 by rpki-client