$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50580.roa File: AS50580.roa (raw, json) Hash identifier: v4No6eCrgsesPblaJCll4b8kduJBLA4yJOTD8ZsHUlk= Subject key identifier: DB:51:49:6C:19:B7:BF:E8:44:2D:B4:52:DE:10:EC:55:A3:93:3E:09 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 142E9016C134B49D3B477FF7979206C9EAA59D05 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50580.roa Signing time: Fri 04 Jul 2025 07:51:25 +0000 ROA not before: Fri 04 Jul 2025 07:46:25 +0000 ROA not after: Fri 03 Jul 2026 07:51:25 +0000 asID: 50580 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:2e:90:16:c1:34:b4:9d:3b:47:7f:f7:97:92:06:c9:ea:a5:9d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:25 2025 GMT Not After : Jul 3 07:51:25 2026 GMT Subject: CN=DB51496C19B7BFE8442DB452DE10EC55A3933E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:20:6a:11:8b:2d:d0:b3:13:3f:be:0d:8f:07: 3e:eb:33:90:7c:e9:c7:a0:3c:17:f1:8a:9f:38:55: ef:ff:b3:2a:cb:7d:5e:f3:27:d6:ce:60:3e:9f:b5: 0d:e5:c2:2d:1c:1c:4c:3c:4a:e0:ce:31:4a:5f:48: 82:9b:e2:fc:be:85:da:0b:3f:c4:ef:e6:f6:ee:f4: 0e:b7:ff:54:bc:b3:e5:bd:c5:bb:40:c3:2c:e7:82: aa:56:fd:14:b7:17:da:fd:c3:e1:c2:d8:6d:26:9c: 42:82:4c:aa:47:21:a7:13:45:96:69:b2:29:05:de: f2:c6:2b:54:4f:56:ba:a6:ea:95:97:67:29:dc:08: d3:97:14:b5:8a:51:59:32:e1:55:92:84:80:9f:87: ef:47:af:68:f3:55:a3:7a:1c:67:03:bb:a0:0c:64: a8:fe:70:a7:6d:7e:76:d3:9f:00:26:a0:99:cd:4c: b4:57:6e:ff:a7:9f:07:1d:c7:14:c8:e2:9d:dd:5c: 7b:58:9d:72:f2:fe:ba:ce:52:e9:52:fc:51:19:14: 96:37:93:64:93:af:dd:fe:13:d7:e2:3b:bc:ad:42: c5:07:ed:2d:f8:a6:92:c3:c3:09:0d:2a:d2:43:a1: ea:fc:5c:76:83:99:d3:80:6c:16:21:dd:90:36:1c: 9b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:51:49:6C:19:B7:BF:E8:44:2D:B4:52:DE:10:EC:55:A3:93:3E:09 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50580.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 78:bd:2d:3c:92:45:3c:2e:46:87:9b:e8:0d:d4:87:8c:8a:67: fc:f7:5e:5e:e1:a5:27:91:04:5e:fa:97:f8:ef:52:fc:a5:ab: 05:00:aa:a9:81:12:5a:ec:df:38:15:93:55:0b:db:e9:8e:b1: ac:70:80:7b:fd:51:3f:32:f2:42:99:97:75:10:6c:01:ff:00: 3e:1c:3e:e9:f2:a9:e7:24:e4:d6:76:4f:ca:11:a7:90:b6:f0: 90:e6:53:15:9a:1d:0d:95:23:5e:bb:28:dd:c1:59:54:ff:3f: 25:4d:dc:40:e2:52:36:38:dd:ac:f1:88:fe:71:df:bc:61:0a: a4:85:a3:b0:9c:65:e7:08:e9:f6:79:24:fb:62:a7:2c:af:5d: 31:2e:c2:f9:0a:5a:96:d7:77:21:05:27:7e:ac:ac:0b:60:8c: 1a:81:bb:d1:47:ba:43:6b:c2:f0:d9:f3:0d:f5:26:1f:52:fe: 45:2c:b0:2d:c5:c1:a1:15:4e:14:23:e3:f4:91:ec:75:29:95: ef:d3:77:6a:21:c9:d5:04:f5:47:71:d6:65:0f:e0:50:d3:87: ae:17:7c:1f:a5:e3:3c:f4:07:33:7d:b3:66:99:31:b3:d9:d0: 75:28:6c:61:b1:58:bf:67:fa:eb:6f:3c:f6:32:d6:c2:81:5c: e4:91:ba:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFC6QFsE0tJ07R3/3l5IGyeqlnQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjVaFw0yNjA3MDMwNzUxMjVaMDMxMTAvBgNV BAMTKERCNTE0OTZDMTlCN0JGRTg0NDJEQjQ1MkRFMTBFQzU1QTM5MzNFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlIGoRiy3QsxM/vg2PBz7rM5B8 6cegPBfxip84Ve//syrLfV7zJ9bOYD6ftQ3lwi0cHEw8SuDOMUpfSIKb4vy+hdoL P8Tv5vbu9A63/1S8s+W9xbtAwyzngqpW/RS3F9r9w+HC2G0mnEKCTKpHIacTRZZp sikF3vLGK1RPVrqm6pWXZyncCNOXFLWKUVky4VWShICfh+9Hr2jzVaN6HGcDu6AM ZKj+cKdtfnbTnwAmoJnNTLRXbv+nnwcdxxTI4p3dXHtYnXLy/rrOUulS/FEZFJY3 k2STr93+E9fiO7ytQsUH7S34ppLDwwkNKtJDoer8XHaDmdOAbBYh3ZA2HJv1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU21FJbBm3v+hELbRS3hDsVaOTPgkwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNTA1ODAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqB1TC sAswDQYJKoZIhvcNAQELBQADggEBAHi9LTySRTwuRoeb6A3Uh4yKZ/z3Xl7hpSeR BF76l/jvUvylqwUAqqmBElrs3zgVk1UL2+mOsaxwgHv9UT8y8kKZl3UQbAH/AD4c Punyqeck5NZ2T8oRp5C28JDmUxWaHQ2VI167KN3BWVT/PyVN3EDiUjY43azxiP5x 37xhCqSFo7CcZecI6fZ5JPtipyyvXTEuwvkKWpbXdyEFJ36srAtgjBqBu9FHukNr wvDZ8w31Jh9S/kUssC3FwaEVThQj4/SR7HUple/Td2ohydUE9Udx1mUP4FDTh64X fB+l4zz0BzN9s2aZMbPZ0HUobGGxWL9n+utvPPYy1sKBXOSRur8= -----END CERTIFICATE-----Generated at Sat Jul 5 08:18:07 2025 by rpki-client