$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS47272.roa File: AS47272.roa (raw, json) Hash identifier: V1RLa5EQ7W4hN1LmjSZlID0GEs/XUMXy/qn3TaRNDI0= Subject key identifier: 9C:A6:CC:76:62:3D:DE:2A:36:C8:00:B0:AC:D9:1E:FA:CA:1C:49:E6 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 0C37AFE693F78FCE41B97BC45E612B6014241A18 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS47272.roa Signing time: Fri 04 Jul 2025 07:51:29 +0000 ROA not before: Fri 04 Jul 2025 07:46:29 +0000 ROA not after: Fri 03 Jul 2026 07:51:29 +0000 asID: 47272 IP address blocks: 2a07:54c4:175f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:37:af:e6:93:f7:8f:ce:41:b9:7b:c4:5e:61:2b:60:14:24:1a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:29 2025 GMT Not After : Jul 3 07:51:29 2026 GMT Subject: CN=9CA6CC76623DDE2A36C800B0ACD91EFACA1C49E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:27:af:4a:a1:c2:db:86:aa:af:52:bb:d8:9b: 6c:87:ae:a7:6b:7f:f1:93:00:68:6b:2f:d9:be:70: 91:35:a9:50:40:ec:f3:b0:ac:8d:d8:cc:57:08:4c: 44:75:9a:76:db:d4:cf:4f:ee:ad:2a:be:bf:02:fe: 8b:d1:69:fc:84:fd:ad:24:42:cc:2d:a0:8b:45:be: dd:5d:8c:4d:50:2b:5c:2e:1c:2a:ef:b9:01:07:a7: b5:a0:20:0e:b9:fe:5a:33:72:6e:4f:9c:16:fd:c3: 3d:00:77:9e:b0:6c:60:01:fb:97:13:57:df:33:dc: a2:2e:3e:05:f1:56:cb:02:05:4e:a9:b9:37:86:10: cd:3a:0e:6b:d8:20:cc:66:04:e6:cb:34:7c:be:8b: 0f:a1:32:e7:08:c2:8a:ee:8b:54:05:6f:e9:b4:5a: f6:e0:ea:6a:cc:6b:26:56:cd:a7:52:f7:29:6d:60: 5d:7d:8b:e9:3d:67:d1:80:20:f1:2e:35:c5:44:a6: 91:ef:da:5c:67:5b:df:59:e0:d6:5a:ca:7c:b0:8b: d1:e7:ef:e3:96:68:65:79:93:26:52:bc:7a:27:f6: 2a:4e:39:00:dd:d6:1b:0f:76:97:1d:d4:1a:9c:90: eb:b7:90:53:95:8f:1f:60:0f:9d:6f:bd:53:8a:12: 79:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A6:CC:76:62:3D:DE:2A:36:C8:00:B0:AC:D9:1E:FA:CA:1C:49:E6 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS47272.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:175f::/48 Signature Algorithm: sha256WithRSAEncryption 57:e8:4f:e2:17:1a:de:e2:7b:71:34:ca:0d:60:f4:76:40:67: 9e:3a:18:d4:c4:fb:5f:ef:0d:d9:f3:d8:d8:36:df:65:7f:38: ce:81:71:0b:59:bc:7a:bc:75:92:ef:28:b9:44:b3:58:a7:74: d2:3c:9f:f5:13:bc:d1:b2:32:98:df:ad:66:82:3d:96:c5:85: 8c:d0:e1:2d:30:a9:0a:bc:9b:28:bb:59:13:29:c3:65:ab:22: 0a:61:d6:69:78:0e:bb:c6:53:37:75:6e:d8:33:92:01:0c:93: c3:f4:82:85:9e:2e:9c:05:64:6b:79:f2:2a:54:20:f6:3a:d9: e3:16:5c:16:0e:2f:90:21:01:9a:3f:91:76:a4:77:20:4b:76: f0:fe:e5:fb:23:a4:9d:aa:79:21:7c:1a:90:0f:fb:4e:f4:4c: 35:61:bc:b1:93:bc:89:fb:59:a1:88:b1:51:ba:b9:68:4d:5d: bf:8b:b4:6e:2a:f6:79:04:14:13:7f:65:63:aa:08:fd:c0:13: b1:b8:c5:66:67:d0:61:15:53:0c:08:a7:53:21:d0:80:be:c8: d5:56:09:1e:6c:8d:bf:e8:21:c3:bc:4a:36:50:45:2d:8c:da: 1f:8a:f1:75:94:0f:01:fc:24:d2:65:f4:20:4c:7b:01:84:35: 0b:2c:1e:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDev5pP3j85BuXvEXmErYBQkGhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjlaFw0yNjA3MDMwNzUxMjlaMDMxMTAvBgNV BAMTKDlDQTZDQzc2NjIzRERFMkEzNkM4MDBCMEFDRDkxRUZBQ0ExQzQ5RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOJ69KocLbhqqvUrvYm2yHrqdr f/GTAGhrL9m+cJE1qVBA7POwrI3YzFcITER1mnbb1M9P7q0qvr8C/ovRafyE/a0k QswtoItFvt1djE1QK1wuHCrvuQEHp7WgIA65/lozcm5PnBb9wz0Ad56wbGAB+5cT V98z3KIuPgXxVssCBU6puTeGEM06DmvYIMxmBObLNHy+iw+hMucIworui1QFb+m0 Wvbg6mrMayZWzadS9yltYF19i+k9Z9GAIPEuNcVEppHv2lxnW99Z4NZaynywi9Hn 7+OWaGV5kyZSvHon9ipOOQDd1hsPdpcd1BqckOu3kFOVjx9gD51vvVOKEnmjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnKbMdmI93io2yACwrNke+socSeYwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNDcyNzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqB1TE F18wDQYJKoZIhvcNAQELBQADggEBAFfoT+IXGt7ie3E0yg1g9HZAZ546GNTE+1/v Ddnz2Ng232V/OM6BcQtZvHq8dZLvKLlEs1indNI8n/UTvNGyMpjfrWaCPZbFhYzQ 4S0wqQq8myi7WRMpw2WrIgph1ml4DrvGUzd1btgzkgEMk8P0goWeLpwFZGt58ipU IPY62eMWXBYOL5AhAZo/kXakdyBLdvD+5fsjpJ2qeSF8GpAP+070TDVhvLGTvIn7 WaGIsVG6uWhNXb+LtG4q9nkEFBN/ZWOqCP3AE7G4xWZn0GEVUwwIp1Mh0IC+yNVW CR5sjb/oIcO8SjZQRS2M2h+K8XWUDwH8JNJl9CBMewGENQssHr0= -----END CERTIFICATE-----Generated at Sat Jul 5 08:15:13 2025 by rpki-client