$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216401.roa File: AS216401.roa (raw, json) Hash identifier: tA8ycixum87sNr/JlgKtZH5Vz20TlebdRsG0P/2/aGE= Subject key identifier: D0:28:61:EA:E3:58:B5:DC:D8:9A:D1:04:3E:64:3C:4E:37:27:67:C4 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 3F6CA98E38B6A1E48E84E93D941A5ABA9B715CC3 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216401.roa Signing time: Fri 05 Jun 2026 08:45:52 +0000 ROA not before: Fri 05 Jun 2026 08:40:52 +0000 ROA not after: Fri 04 Jun 2027 08:45:52 +0000 asID: 216401 IP address blocks: 2a07:54c7:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:6c:a9:8e:38:b6:a1:e4:8e:84:e9:3d:94:1a:5a:ba:9b:71:5c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:52 2026 GMT Not After : Jun 4 08:45:52 2027 GMT Subject: CN=D02861EAE358B5DCD89AD1043E643C4E372767C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f7:62:c9:c6:56:b6:4a:17:c0:c9:15:f0:6b: a0:a2:f2:12:05:b8:ec:34:2c:e2:c6:b9:02:ef:0c: 7e:e2:d5:9b:c1:31:f8:ca:65:7c:88:dd:33:73:f8: 4f:0b:5f:34:5c:ed:d7:82:eb:8d:26:bf:9a:f0:4c: fd:87:84:2d:ba:00:aa:4b:b8:01:a9:77:a3:58:72: fd:e1:94:03:4b:7e:20:dc:8f:c1:fc:9e:17:5c:f3: bd:b1:07:1c:3a:ec:63:26:2b:9e:2a:83:f0:a4:37: 4b:c9:db:92:d6:ab:b9:9a:9f:c6:eb:ec:dd:a0:64: f0:8c:55:32:0b:a1:02:65:c9:81:bf:fe:56:57:ad: 64:29:40:79:f6:b6:99:fa:65:1e:0b:a1:a4:6f:29: 2b:2f:65:14:36:aa:2e:ac:5d:79:df:70:60:7e:33: bf:95:a3:17:29:c0:6a:8a:69:f0:83:ff:72:ba:a2: ab:3f:f1:f2:78:96:d8:11:c7:d5:e6:55:bc:1e:98: 3e:08:34:2f:0d:d9:a2:39:f0:b3:ca:14:02:9a:c9: 6e:25:f5:72:28:02:85:42:63:f9:fb:f8:93:0c:4b: bf:44:50:41:d3:b8:78:88:02:5c:fe:6b:0e:ae:0c: 45:59:eb:28:22:85:b5:61:c9:5e:fe:d1:a6:ce:51: 07:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:28:61:EA:E3:58:B5:DC:D8:9A:D1:04:3E:64:3C:4E:37:27:67:C4 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216401.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c7:1000::/36 Signature Algorithm: sha256WithRSAEncryption 20:40:b8:d4:d6:29:69:cf:58:96:52:ec:65:54:72:46:11:f9: 85:a0:3c:02:34:76:70:41:e4:39:eb:a1:48:40:6c:9a:b4:b9: 37:4a:51:18:7c:1a:10:44:75:f5:c9:a9:06:38:66:2f:6a:11: 1a:1b:60:e8:87:ee:54:42:f3:8e:8c:71:04:e4:95:a8:55:68: 3f:41:35:72:a2:b6:74:7e:25:ea:82:36:f5:aa:91:5e:f1:cf: d3:f2:93:5a:3d:b6:39:9b:8a:c9:06:2f:ac:1d:ca:ef:56:fc: ce:35:42:ef:53:76:b6:bb:e0:c3:34:c9:e5:e4:6e:44:df:31: bb:b0:30:06:90:dc:67:9b:06:27:51:a4:08:10:5e:19:84:a1: 41:bb:4e:b2:f3:af:e7:88:8c:dc:66:e6:37:ac:91:7d:b8:2f: 9a:15:93:7c:c9:71:ca:3c:c2:6f:42:b2:0d:de:60:4f:95:ba: 30:45:8d:07:77:57:f7:39:63:45:72:d7:e1:1f:bc:53:4a:7a: 18:f6:2f:c6:b4:ef:57:be:fb:8b:6d:b9:56:0b:1e:75:d0:3e: 36:22:c0:74:8a:f7:c5:8c:c9:0e:38:04:44:6c:08:44:12:74: 39:3a:52:04:13:4d:38:69:86:8f:35:62:d8:8f:59:7e:90:5a: 61:8e:6f:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP2ypjji2oeSOhOk9lBpauptxXMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTJaFw0yNzA2MDQwODQ1NTJaMDMxMTAvBgNV BAMTKEQwMjg2MUVBRTM1OEI1RENEODlBRDEwNDNFNjQzQzRFMzcyNzY3QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn92LJxla2ShfAyRXwa6Ci8hIF uOw0LOLGuQLvDH7i1ZvBMfjKZXyI3TNz+E8LXzRc7deC640mv5rwTP2HhC26AKpL uAGpd6NYcv3hlANLfiDcj8H8nhdc872xBxw67GMmK54qg/CkN0vJ25LWq7man8br 7N2gZPCMVTILoQJlyYG//lZXrWQpQHn2tpn6ZR4LoaRvKSsvZRQ2qi6sXXnfcGB+ M7+VoxcpwGqKafCD/3K6oqs/8fJ4ltgRx9XmVbwemD4INC8N2aI58LPKFAKayW4l 9XIoAoVCY/n7+JMMS79EUEHTuHiIAlz+aw6uDEVZ6ygihbVhyV7+0abOUQcbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Chh6uNYtdzYmtEEPmQ8TjcnZ8QwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE2NDAxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgdU xxAwDQYJKoZIhvcNAQELBQADggEBACBAuNTWKWnPWJZS7GVUckYR+YWgPAI0dnBB 5DnroUhAbJq0uTdKURh8GhBEdfXJqQY4Zi9qERobYOiH7lRC846McQTklahVaD9B NXKitnR+JeqCNvWqkV7xz9Pyk1o9tjmbiskGL6wdyu9W/M41Qu9Tdra74MM0yeXk bkTfMbuwMAaQ3GebBidRpAgQXhmEoUG7TrLzr+eIjNxm5jeskX24L5oVk3zJcco8 wm9Csg3eYE+VujBFjQd3V/c5Y0Vy1+EfvFNKehj2L8a071e++4ttuVYLHnXQPjYi wHSK98WMyQ44BERsCEQSdDk6UgQTTThpho81YtiPWX6QWmGOb+Y= -----END CERTIFICATE-----Generated at Thu Jun 11 23:50:11 2026 by rpki-client