$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216311.roa File: AS216311.roa (raw, json) Hash identifier: 4LkpWFLXDqtMQDY12byjEEatZNAHa9mQwSX9DVxeyRo= Subject key identifier: 48:09:1B:1A:49:3F:B7:A7:E3:E8:A0:7C:DD:36:DD:BA:24:98:52:6F Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 2C3C932A1F4097E471BE0EED46388A3A076798E6 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216311.roa Signing time: Fri 04 Jul 2025 07:51:27 +0000 ROA not before: Fri 04 Jul 2025 07:46:27 +0000 ROA not after: Fri 03 Jul 2026 07:51:27 +0000 asID: 216311 IP address blocks: 2a07:54c1:c1ab::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:3c:93:2a:1f:40:97:e4:71:be:0e:ed:46:38:8a:3a:07:67:98:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:27 2025 GMT Not After : Jul 3 07:51:27 2026 GMT Subject: CN=48091B1A493FB7A7E3E8A07CDD36DDBA2498526F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:a7:a2:60:db:e2:6c:08:30:54:d4:b4:80: ed:ee:30:09:4e:08:cc:40:cb:51:71:8d:72:94:6a: ba:84:3c:87:ce:6f:20:4a:6a:08:03:fb:d2:9b:1e: 94:63:59:5e:b9:8f:4b:02:85:38:f8:36:fd:a7:cb: d9:09:58:3c:c5:5e:45:d7:4d:a3:15:54:ca:0d:b3: 44:d5:0f:5c:d3:0a:56:61:ce:b3:9b:ba:3b:ba:c4: b4:fd:07:6c:34:8c:58:e6:3d:96:61:c5:e7:3e:7b: 51:23:83:c7:77:09:26:ef:2f:54:b0:e5:3e:c7:e2: bb:26:5a:a4:ff:50:ad:0f:d6:b2:52:e2:58:81:80: dc:2b:53:b4:7d:61:0f:2c:ca:0a:e8:05:41:4d:a8: 68:67:b8:9f:98:77:c5:e5:0d:37:b9:63:b2:84:ab: 4a:b6:ca:03:25:a8:51:44:4d:46:60:3a:42:f8:f6: 93:72:86:91:14:1f:1d:6e:e7:21:42:f8:eb:f9:41: fe:30:16:b5:93:cd:71:88:09:c5:2a:4e:32:30:b3: ea:ca:5a:fd:a0:51:d5:d9:1c:7d:54:2d:b8:64:c7: e0:9b:d9:d1:4b:3b:de:ed:b6:5f:a9:0f:d1:b8:a1: 65:2f:9c:e4:0c:2b:f7:61:5e:7c:d0:f1:6b:19:16: 1e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:09:1B:1A:49:3F:B7:A7:E3:E8:A0:7C:DD:36:DD:BA:24:98:52:6F X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216311.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:c1ab::/48 Signature Algorithm: sha256WithRSAEncryption 2c:a6:a1:94:f8:03:18:1d:1a:b3:1f:0b:98:ea:cc:34:fc:3a: d5:54:eb:50:ce:e0:37:7b:17:b2:c0:14:1a:ae:a9:fa:59:ee: 19:81:90:d9:01:a5:c1:f0:f6:21:d5:33:19:cd:3a:29:c7:5b: 8d:1f:28:07:8c:9d:c2:3f:ee:a7:57:98:ab:96:c9:2b:a6:b0: 8d:7d:81:df:b4:db:e8:d8:99:45:26:4f:03:d8:14:4a:ee:2c: 82:9e:43:c3:ac:78:8a:a2:82:5d:ca:ea:ce:33:86:7d:ad:0f: d9:db:f8:1b:bb:84:5d:3e:fa:e8:4c:2a:b1:5b:a2:3f:9a:35: f9:b3:6d:3c:2d:2c:11:4b:b0:47:e9:be:65:1b:3d:27:d6:02: 7e:22:e1:1c:c1:a3:ad:62:ee:29:7a:0a:a3:ce:b9:07:fa:8e: 5f:da:3e:1c:83:7b:f3:73:0d:2b:76:08:16:e1:f0:94:2b:e6: 2c:f3:4f:8c:b3:1d:a6:ad:45:45:95:da:8f:c9:eb:29:82:56: 73:57:47:99:f5:27:b2:58:07:f3:79:9f:80:9d:e8:38:6a:c3: 54:05:97:4b:ac:02:83:b3:25:b6:ea:52:4c:4e:14:da:97:db: bf:a5:e1:8c:10:98:9d:9f:0b:11:08:e5:7f:2c:5c:19:78:41: f8:39:fb:4a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIULDyTKh9Al+Rxvg7tRjiKOgdnmOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjdaFw0yNjA3MDMwNzUxMjdaMDMxMTAvBgNV BAMTKDQ4MDkxQjFBNDkzRkI3QTdFM0U4QTA3Q0REMzZEREJBMjQ5ODUyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKGKeiYNvibAgwVNS0gO3uMAlO CMxAy1FxjXKUarqEPIfObyBKaggD+9KbHpRjWV65j0sChTj4Nv2ny9kJWDzFXkXX TaMVVMoNs0TVD1zTClZhzrObuju6xLT9B2w0jFjmPZZhxec+e1Ejg8d3CSbvL1Sw 5T7H4rsmWqT/UK0P1rJS4liBgNwrU7R9YQ8sygroBUFNqGhnuJ+Yd8XlDTe5Y7KE q0q2ygMlqFFETUZgOkL49pNyhpEUHx1u5yFC+Ov5Qf4wFrWTzXGICcUqTjIws+rK Wv2gUdXZHH1ULbhkx+Cb2dFLO97ttl+pD9G4oWUvnOQMK/dhXnzQ8WsZFh4TAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUSAkbGkk/t6fj6KB83TbduiSYUm8wHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE2MzExLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wcGrMA0GCSqGSIb3DQEBCwUAA4IBAQAspqGU+AMYHRqzHwuY6sw0/DrVVOtQzuA3 exeywBQarqn6We4ZgZDZAaXB8PYh1TMZzTopx1uNHygHjJ3CP+6nV5irlskrprCN fYHftNvo2JlFJk8D2BRK7iyCnkPDrHiKooJdyurOM4Z9rQ/Z2/gbu4RdPvroTCqx W6I/mjX5s208LSwRS7BH6b5lGz0n1gJ+IuEcwaOtYu4pegqjzrkH+o5f2j4cg3vz cw0rdggW4fCUK+Ys80+Msx2mrUVFldqPyespglZzV0eZ9SeyWAfzeZ+Aneg4asNU BZdLrAKDsyW26lJMThTal9u/peGMEJidnwsRCOV/LFwZeEH4OftK -----END CERTIFICATE-----Generated at Sat Jul 5 08:26:50 2025 by rpki-client