$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS52041.roa File: AS52041.roa (raw, json) Hash identifier: J3yOSoKY1+XHy2dr/D0b0jd6TD5QOq8MkUyQuQxFYro= Subject key identifier: BF:0C:E8:55:A1:01:95:15:2F:9F:D1:A7:40:64:97:96:41:52:CF:2A Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 6511CBD2F679DA97FB952E56FB74162772660FAE Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS52041.roa Signing time: Fri 04 Jul 2025 07:51:23 +0000 ROA not before: Fri 04 Jul 2025 07:46:23 +0000 ROA not after: Fri 03 Jul 2026 07:51:23 +0000 asID: 52041 IP address blocks: 2a07:54c4:174c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:11:cb:d2:f6:79:da:97:fb:95:2e:56:fb:74:16:27:72:66:0f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:23 2025 GMT Not After : Jul 3 07:51:23 2026 GMT Subject: CN=BF0CE855A10195152F9FD1A7406497964152CF2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7e:b6:d8:d4:f8:ee:b3:d4:8a:cb:12:53:52: 5b:7f:ea:17:56:06:ba:fb:c8:fa:bf:61:88:13:7c: 68:53:c8:a5:3f:b4:6b:2c:7f:49:11:97:11:38:c1: 4a:bc:3b:50:75:07:0e:fa:dd:a2:90:0e:5e:6c:32: d4:be:a1:6b:be:b1:20:88:11:fc:44:39:15:5b:e5: c8:dd:75:d4:f3:c4:a2:07:6a:b2:5d:ba:7c:48:8f: cc:a2:b8:82:f6:5d:9d:b2:27:1b:8c:27:29:4e:d8: 9c:dc:00:03:74:9d:d3:4e:4a:04:2d:95:78:2d:69: c9:6e:82:f5:66:03:ba:c6:3c:28:d4:d1:f6:34:fe: 68:90:01:17:66:a0:43:a0:f1:41:6c:fa:a6:e4:d3: d5:2b:0b:1f:fa:9d:68:ae:86:15:42:85:01:92:71: 1f:ec:43:3e:42:26:6f:02:74:87:3c:ee:c7:3a:36: 4b:8c:46:19:a5:da:b3:36:6a:d7:f6:a4:fb:4a:a8: 4e:72:f7:3c:6b:af:33:56:f9:63:29:d7:58:cf:40: a4:34:88:8c:ce:1b:ab:57:ba:53:3a:8f:49:11:f0: 79:6c:07:6e:49:23:36:bb:12:11:4a:ca:4b:75:a6: 6c:4f:23:75:02:0d:89:42:d6:d4:cb:b1:17:a2:d6: c6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0C:E8:55:A1:01:95:15:2F:9F:D1:A7:40:64:97:96:41:52:CF:2A X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS52041.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:174c::/48 Signature Algorithm: sha256WithRSAEncryption 3c:89:f4:11:dd:8a:bb:42:0c:55:c5:a9:51:82:a7:41:ed:d8: 9e:29:3b:aa:95:39:e8:54:1c:0f:2c:5a:7b:0a:65:68:30:6c: 47:8d:46:88:ed:65:38:df:bd:78:b3:68:e0:34:a2:d4:55:ef: af:e6:29:49:74:bf:24:a6:4e:fe:3f:26:9a:dc:84:7a:c0:db: 08:80:68:4e:3d:54:9d:6a:d4:32:d8:3d:3b:26:36:74:2c:52: 92:b8:7c:36:db:1f:44:17:42:79:1e:e6:99:af:b6:9d:09:c3: 23:78:32:47:45:3c:66:ef:45:2b:2a:f4:1d:4f:19:87:d5:09: 26:41:16:e7:0a:fe:dc:29:27:67:38:c3:93:0a:46:7f:c2:ea: 02:b0:3f:42:61:ad:cc:91:52:17:fe:4f:a6:78:86:52:f8:0c: 8f:19:86:c2:3d:98:a3:5f:0e:b8:a1:bd:da:fb:a8:59:0b:c9: ef:51:6d:37:fd:dd:fa:af:71:16:b0:3a:17:6f:61:51:e5:24: da:bd:2c:9d:a7:85:62:25:97:ed:de:1b:e0:95:4f:45:48:b8: f7:43:95:a1:27:09:fe:29:e3:29:b9:4e:5a:b8:dc:57:7b:82: d0:10:2c:08:27:11:42:53:b9:d2:7d:4e:46:df:40:a7:f9:22: bd:d6:04:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZRHL0vZ52pf7lS5W+3QWJ3JmD64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjNaFw0yNjA3MDMwNzUxMjNaMDMxMTAvBgNV BAMTKEJGMENFODU1QTEwMTk1MTUyRjlGRDFBNzQwNjQ5Nzk2NDE1MkNGMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvfrbY1Pjus9SKyxJTUlt/6hdW Brr7yPq/YYgTfGhTyKU/tGssf0kRlxE4wUq8O1B1Bw763aKQDl5sMtS+oWu+sSCI EfxEORVb5cjdddTzxKIHarJdunxIj8yiuIL2XZ2yJxuMJylO2JzcAAN0ndNOSgQt lXgtaclugvVmA7rGPCjU0fY0/miQARdmoEOg8UFs+qbk09UrCx/6nWiuhhVChQGS cR/sQz5CJm8CdIc87sc6NkuMRhml2rM2atf2pPtKqE5y9zxrrzNW+WMp11jPQKQ0 iIzOG6tXulM6j0kR8HlsB25JIza7EhFKykt1pmxPI3UCDYlC1tTLsRei1saPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvwzoVaEBlRUvn9GnQGSXlkFSzyowHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNTIwNDEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqB1TE F0wwDQYJKoZIhvcNAQELBQADggEBADyJ9BHdirtCDFXFqVGCp0Ht2J4pO6qVOehU HA8sWnsKZWgwbEeNRojtZTjfvXizaOA0otRV76/mKUl0vySmTv4/JprchHrA2wiA aE49VJ1q1DLYPTsmNnQsUpK4fDbbH0QXQnke5pmvtp0JwyN4MkdFPGbvRSsq9B1P GYfVCSZBFucK/twpJ2c4w5MKRn/C6gKwP0JhrcyRUhf+T6Z4hlL4DI8ZhsI9mKNf Drihvdr7qFkLye9RbTf93fqvcRawOhdvYVHlJNq9LJ2nhWIll+3eG+CVT0VIuPdD laEnCf4p4ym5Tlq43Fd7gtAQLAgnEUJTudJ9TkbfQKf5Ir3WBFo= -----END CERTIFICATE-----Generated at Sat Jul 5 08:21:25 2025 by rpki-client