$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS47689.roa File: AS47689.roa (raw, json) Hash identifier: v7sYeREENg6efi5hAin8Zl6T4b0TgiJrDeFWd8Ao4jw= Subject key identifier: 5B:80:37:0D:37:31:CA:AA:67:29:7F:65:51:8B:EA:E8:45:65:E0:17 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 2EA629611F8F7EB30D7990310975BD53E806C053 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS47689.roa Signing time: Fri 04 Jul 2025 07:51:25 +0000 ROA not before: Fri 04 Jul 2025 07:46:25 +0000 ROA not after: Fri 03 Jul 2026 07:51:25 +0000 asID: 47689 IP address blocks: 2a07:54c1:4100::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a6:29:61:1f:8f:7e:b3:0d:79:90:31:09:75:bd:53:e8:06:c0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:25 2025 GMT Not After : Jul 3 07:51:25 2026 GMT Subject: CN=5B80370D3731CAAA67297F65518BEAE84565E017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:35:89:54:e2:3a:2a:ab:b3:35:18:37:4b:24: b4:67:ae:35:58:14:7e:f3:3f:4c:18:43:3a:3c:12: 97:53:54:cc:a9:5e:f1:7b:17:1e:cc:08:87:b3:d2: de:ac:8e:72:5b:f8:bb:23:97:09:20:58:61:3a:13: df:99:35:fa:fb:e3:98:43:e8:87:13:df:a8:79:6e: 75:90:25:0d:e1:35:29:91:ab:e0:48:85:12:b6:51: 2c:80:13:8b:55:89:02:8f:3d:75:cb:e1:e0:2f:1a: eb:e6:07:81:f7:cf:dd:4a:9c:93:02:6b:55:77:9f: 3f:03:00:9d:30:c2:0f:0f:09:59:8f:c2:d3:f6:69: 1b:4c:7c:24:54:cb:bf:52:22:4a:a6:15:41:42:6d: 4f:e3:42:16:09:b5:ee:74:2f:60:c3:09:0f:da:7c: 4f:19:55:f2:83:5e:4c:16:4d:94:28:b9:a5:f0:10: 5c:ea:fe:07:a0:e1:35:c6:71:92:28:57:0f:50:4e: 02:bb:30:5c:57:c7:4e:79:7f:63:d3:0d:13:1e:59: a9:9e:c9:9a:96:47:61:b5:c3:f2:a2:ae:67:a2:4b: a9:5c:1c:31:bd:cc:00:05:7f:75:51:a8:92:23:4a: 63:f1:74:6a:34:c5:eb:ab:97:5c:b8:42:ad:09:3c: e1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:80:37:0D:37:31:CA:AA:67:29:7F:65:51:8B:EA:E8:45:65:E0:17 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS47689.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:4100::/40 Signature Algorithm: sha256WithRSAEncryption 1a:48:4a:bb:e4:36:39:66:2e:ca:d9:b1:c0:37:18:db:23:e3: 44:f1:c1:1c:76:14:02:85:5b:f5:f3:7a:69:de:1b:ae:a9:0f: 92:92:d7:63:ea:ee:99:24:28:d5:b4:57:ea:4f:c9:37:79:2b: a3:d9:5f:1f:b4:d7:ad:9d:0f:28:d3:18:7c:a2:67:55:7b:21: 00:28:6d:cf:ef:20:39:32:ff:9e:6b:4c:c7:3e:ed:13:42:4c: ed:0d:3e:2c:35:01:30:b6:1f:32:7f:b3:b1:fe:b6:cd:62:b1: 74:d5:ec:5f:ae:99:fb:53:6b:9a:a6:f9:fe:20:cb:7f:aa:ca: a9:98:ba:1e:25:74:c5:33:80:c5:bc:c0:d0:0f:8b:af:a9:56: 81:16:b5:8a:5d:ee:d8:5b:88:80:3b:02:c3:ce:8a:c9:a9:8d: d4:25:c7:1c:de:07:29:d7:3a:b8:a1:fd:3a:e5:62:bc:b1:33: 4c:4f:0e:b3:a3:0c:97:3d:7c:70:55:8a:dc:11:b1:d7:5d:f8: 6a:e5:65:f1:fe:e2:69:85:33:18:bc:7f:83:7b:43:5f:97:c1: fe:3c:4d:6b:a2:0a:0e:11:c1:34:11:98:a3:0f:52:48:02:7b: 2e:76:dc:ae:16:9c:d5:47:61:01:46:7d:dc:2a:a6:d3:73:85: 16:8b:6e:4f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIULqYpYR+PfrMNeZAxCXW9U+gGwFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjVaFw0yNjA3MDMwNzUxMjVaMDMxMTAvBgNV BAMTKDVCODAzNzBEMzczMUNBQUE2NzI5N0Y2NTUxOEJFQUU4NDU2NUUwMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjNYlU4joqq7M1GDdLJLRnrjVY FH7zP0wYQzo8EpdTVMypXvF7Fx7MCIez0t6sjnJb+LsjlwkgWGE6E9+ZNfr745hD 6IcT36h5bnWQJQ3hNSmRq+BIhRK2USyAE4tViQKPPXXL4eAvGuvmB4H3z91KnJMC a1V3nz8DAJ0wwg8PCVmPwtP2aRtMfCRUy79SIkqmFUFCbU/jQhYJte50L2DDCQ/a fE8ZVfKDXkwWTZQouaXwEFzq/geg4TXGcZIoVw9QTgK7MFxXx055f2PTDRMeWame yZqWR2G1w/KirmeiS6lcHDG9zAAFf3VRqJIjSmPxdGo0xeurl1y4Qq0JPOF/AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUW4A3DTcxyqpnKX9lUYvq6EVl4BcwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNDc2ODkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqB1TB QTANBgkqhkiG9w0BAQsFAAOCAQEAGkhKu+Q2OWYuytmxwDcY2yPjRPHBHHYUAoVb 9fN6ad4brqkPkpLXY+rumSQo1bRX6k/JN3kro9lfH7TXrZ0PKNMYfKJnVXshACht z+8gOTL/nmtMxz7tE0JM7Q0+LDUBMLYfMn+zsf62zWKxdNXsX66Z+1Nrmqb5/iDL f6rKqZi6HiV0xTOAxbzA0A+Lr6lWgRa1il3u2FuIgDsCw86KyamN1CXHHN4HKdc6 uKH9OuVivLEzTE8Os6MMlz18cFWK3BGx1134auVl8f7iaYUzGLx/g3tDX5fB/jxN a6IKDhHBNBGYow9SSAJ7Lnbcrhac1UdhAUZ93Cqm03OFFotuTw== -----END CERTIFICATE-----Generated at Sat Jul 5 08:20:30 2025 by rpki-client