$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50244.roa File: AS50244.roa (raw, json) Hash identifier: vzKTJ9/bC4zjl+k1ZZRMgJgaOzGxIAiZ5MWzm7kTq8U= Subject key identifier: 87:10:6C:8F:99:DC:31:38:70:F8:D8:10:A8:E3:4E:76:4C:17:8B:EB Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 35E00D5A3610FF72E8E396E20635D011683301C2 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50244.roa Signing time: Fri 04 Jul 2025 07:51:26 +0000 ROA not before: Fri 04 Jul 2025 07:46:26 +0000 ROA not after: Fri 03 Jul 2026 07:51:26 +0000 asID: 50244 IP address blocks: 2a07:54c1:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e0:0d:5a:36:10:ff:72:e8:e3:96:e2:06:35:d0:11:68:33:01:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:26 2025 GMT Not After : Jul 3 07:51:26 2026 GMT Subject: CN=87106C8F99DC313870F8D810A8E34E764C178BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:67:37:65:54:54:72:cc:67:50:87:55:43: 05:4d:20:b8:a0:08:ee:cb:00:c1:26:a8:2d:0b:9a: 07:45:de:92:9d:7d:59:54:05:ea:fa:0d:60:61:09: a5:31:1c:c7:dc:c4:44:5b:f4:70:f9:5b:52:39:13: df:08:82:53:0b:2b:34:81:5f:f1:a5:b9:86:5a:d1: cf:77:78:e7:2c:64:b8:09:62:c0:41:eb:f1:53:18: 9a:d7:4b:43:2d:1f:c2:a0:b0:b4:18:4e:9e:24:fa: be:55:c7:f7:bf:dd:53:4b:b4:8a:a6:73:43:bf:34: 0f:8c:5c:a8:e5:d5:47:12:5a:cb:c2:a0:f7:57:6e: d7:db:ac:24:e1:70:48:72:e0:a2:66:e7:60:91:b0: 74:62:69:c0:be:3f:5d:72:8a:62:64:77:66:28:73: fd:0d:a7:a3:37:8a:96:8b:a6:f9:61:72:33:6d:c3: 90:62:1a:f9:9f:19:67:54:ec:46:61:aa:5a:a4:79: 56:93:e9:de:15:07:2a:f7:ec:66:9e:92:0d:36:bb: 7c:b5:b6:26:af:a3:bd:9c:bb:e0:a4:96:ce:b4:00: 12:e1:bb:9c:15:a9:6e:bc:86:1b:e0:49:c2:da:42: a5:c1:51:54:f6:fc:6a:65:c4:be:e2:d3:a1:bc:3b: 04:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:10:6C:8F:99:DC:31:38:70:F8:D8:10:A8:E3:4E:76:4C:17:8B:EB X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50244.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:c000::/36 Signature Algorithm: sha256WithRSAEncryption 90:f4:98:e3:6a:79:68:99:bb:1e:fd:83:ae:30:9c:21:03:09: 3c:d9:3b:52:00:21:58:dd:e4:65:74:db:58:c0:22:a0:72:31: 44:9d:ed:7f:a1:85:99:15:9f:a9:76:39:80:c2:1b:30:7f:41: e1:b1:d3:cf:1a:3b:49:ed:65:81:5d:80:22:e8:5b:ce:8d:a0: c1:7f:69:d0:77:09:17:e8:65:c1:a2:7d:ef:d1:77:3d:1c:88: d6:5e:84:09:0d:f1:b9:70:78:6c:78:72:93:0e:12:0c:56:8b: b5:cd:62:32:15:78:fa:d0:66:10:fc:ca:db:51:28:d9:37:4f: 3b:08:b7:f8:ad:69:ad:22:0d:96:fd:22:3b:3d:55:b3:0b:1b: 9a:19:74:63:c5:25:d7:e9:cc:2f:11:3c:47:b5:6c:3c:d0:8f: 67:dc:42:98:ee:83:c1:2f:ef:3f:0a:8d:0a:c8:1f:f6:46:cd: 12:b3:92:5a:0c:d9:40:da:d1:69:e5:b2:49:c0:86:fd:97:f9: 5e:72:6d:43:c9:e0:ec:31:e7:aa:46:4a:e7:09:9e:d6:04:f4: 5f:60:f5:87:14:85:b1:28:bc:0c:5a:40:60:80:31:a9:15:a3: 9f:bd:64:fb:f4:ed:b1:48:66:e8:da:88:60:8f:79:90:4d:b1: 22:6d:46:cb -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUNeANWjYQ/3Lo45biBjXQEWgzAcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjZaFw0yNjA3MDMwNzUxMjZaMDMxMTAvBgNV BAMTKDg3MTA2QzhGOTlEQzMxMzg3MEY4RDgxMEE4RTM0RTc2NEMxNzhCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nmc3ZVRUcsxnUIdVQwVNILig CO7LAMEmqC0LmgdF3pKdfVlUBer6DWBhCaUxHMfcxERb9HD5W1I5E98IglMLKzSB X/GluYZa0c93eOcsZLgJYsBB6/FTGJrXS0MtH8KgsLQYTp4k+r5Vx/e/3VNLtIqm c0O/NA+MXKjl1UcSWsvCoPdXbtfbrCThcEhy4KJm52CRsHRiacC+P11yimJkd2Yo c/0Np6M3ipaLpvlhcjNtw5BiGvmfGWdU7EZhqlqkeVaT6d4VByr37Gaekg02u3y1 tiavo72cu+Ckls60ABLhu5wVqW68hhvgScLaQqXBUVT2/GplxL7i06G8OwR3AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUhxBsj5ncMThw+NgQqONOdkwXi+swHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNTAyNDQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqB1TB wDANBgkqhkiG9w0BAQsFAAOCAQEAkPSY42p5aJm7Hv2DrjCcIQMJPNk7UgAhWN3k ZXTbWMAioHIxRJ3tf6GFmRWfqXY5gMIbMH9B4bHTzxo7Se1lgV2AIuhbzo2gwX9p 0HcJF+hlwaJ979F3PRyI1l6ECQ3xuXB4bHhykw4SDFaLtc1iMhV4+tBmEPzK21Eo 2TdPOwi3+K1prSINlv0iOz1Vswsbmhl0Y8Ul1+nMLxE8R7VsPNCPZ9xCmO6DwS/v PwqNCsgf9kbNErOSWgzZQNrRaeWyScCG/Zf5XnJtQ8ng7DHnqkZK5wme1gT0X2D1 hxSFsSi8DFpAYIAxqRWjn71k+/TtsUhm6NqIYI95kE2xIm1Gyw== -----END CERTIFICATE-----Generated at Sat Jul 5 08:15:59 2025 by rpki-client