$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS59920.roa File: AS59920.roa (raw, json) Hash identifier: tQUQ7WUIc/V0A7vxfDk0b0QeUQnSdSf+YF6CRRFOPMA= Subject key identifier: 6D:3C:71:C6:15:93:84:58:5A:A8:58:8A:F4:40:FF:3A:BC:B2:98:F6 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 61C5021612EDBC028F05462F97352E45191624A9 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS59920.roa Signing time: Fri 05 Jun 2026 08:45:52 +0000 ROA not before: Fri 05 Jun 2026 08:40:52 +0000 ROA not after: Fri 04 Jun 2027 08:45:52 +0000 asID: 59920 IP address blocks: 2a07:54c1:5000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c5:02:16:12:ed:bc:02:8f:05:46:2f:97:35:2e:45:19:16:24:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:52 2026 GMT Not After : Jun 4 08:45:52 2027 GMT Subject: CN=6D3C71C6159384585AA8588AF440FF3ABCB298F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:70:1e:6d:1b:7a:9a:9d:cf:e8:eb:8e:40:1b: 3f:ee:57:16:6c:b3:20:65:41:31:0e:fa:b1:fe:24: 7c:f2:60:6a:88:0b:cf:bb:6d:6e:21:da:6c:10:94: 83:6e:2f:0f:d8:ce:3e:8c:7b:a4:3f:c4:6a:8d:11: 2c:68:a5:10:ac:3c:ca:43:01:dd:8b:d9:ca:6a:d9: dd:d8:32:1e:a6:a5:82:e8:bc:65:36:56:b4:0c:98: c8:ec:94:0a:6d:ba:cf:f4:90:a4:05:a3:07:66:cb: 32:40:cc:ce:60:ac:64:12:30:bb:0f:77:16:82:eb: c6:08:b8:94:27:eb:8a:fe:b3:18:8b:7f:ec:a8:10: 2a:6b:f0:be:2e:4c:ca:65:7b:35:28:b2:78:c4:10: b6:ff:6b:5b:47:0f:07:a4:ba:13:7e:7b:47:b7:56: f9:ab:a4:f4:9c:88:65:0b:9c:13:77:4c:a8:0d:2f: 37:a8:b3:34:80:85:43:f6:f2:63:48:c3:dc:12:bf: 67:81:18:5e:c0:86:b7:5f:05:a9:dc:ff:d3:cf:f0: 86:94:36:44:01:7b:a4:b3:16:75:47:f8:4d:26:a3: bd:89:99:89:5a:91:4e:64:1a:83:2e:8b:e3:ba:38: e3:c1:2b:b1:01:9b:a6:06:cd:e4:75:86:b1:0d:6f: df:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3C:71:C6:15:93:84:58:5A:A8:58:8A:F4:40:FF:3A:BC:B2:98:F6 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS59920.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:5000::/36 Signature Algorithm: sha256WithRSAEncryption 39:bc:c3:37:27:e4:b3:72:5d:0f:92:c4:41:1e:40:18:e7:47: 1c:bd:0a:f2:fc:d1:03:c3:7a:60:3b:1d:ad:c6:78:95:68:32: 81:6f:61:0d:df:63:d4:09:d0:a6:03:f1:35:78:d9:85:fe:66: 5a:26:fe:1e:45:6b:15:c1:91:5f:89:82:c1:ed:6f:2a:1e:eb: 0b:dd:32:d2:91:f8:e1:6d:6a:0e:d8:9e:1e:2d:45:3a:36:f8: 6d:a4:49:37:8e:39:35:20:34:23:a5:a7:1e:74:ca:c0:e6:54: 5f:1c:f5:ce:37:f3:5c:98:0d:71:43:7e:4a:e4:81:73:36:13: e2:a1:ce:e4:76:26:45:e8:94:a9:4d:dc:a6:06:48:31:71:10: 3a:0b:3a:9a:62:08:e4:37:bb:b0:1a:03:2a:e9:28:ab:9b:ca: e5:3a:62:77:10:17:0b:7a:d7:3b:45:0a:3b:82:85:5b:68:b3: 10:ed:c5:24:d7:92:65:c1:8f:e0:e3:e3:72:b2:0b:52:3f:66: 3e:b5:38:20:e0:f3:6e:bb:f2:66:cd:46:19:27:22:16:8b:23: 7c:35:fd:50:ff:81:3c:3f:b9:55:f7:b8:0f:89:cf:53:36:a4: f7:8d:15:ab:49:16:43:e8:3f:80:bc:04:98:2b:b2:7e:46:a9: 75:66:7a:65 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUYcUCFhLtvAKPBUYvlzUuRRkWJKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTJaFw0yNzA2MDQwODQ1NTJaMDMxMTAvBgNV BAMTKDZEM0M3MUM2MTU5Mzg0NTg1QUE4NTg4QUY0NDBGRjNBQkNCMjk4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUcB5tG3qanc/o645AGz/uVxZs syBlQTEO+rH+JHzyYGqIC8+7bW4h2mwQlINuLw/Yzj6Me6Q/xGqNESxopRCsPMpD Ad2L2cpq2d3YMh6mpYLovGU2VrQMmMjslAptus/0kKQFowdmyzJAzM5grGQSMLsP dxaC68YIuJQn64r+sxiLf+yoECpr8L4uTMplezUosnjEELb/a1tHDwekuhN+e0e3 VvmrpPSciGULnBN3TKgNLzeoszSAhUP28mNIw9wSv2eBGF7AhrdfBanc/9PP8IaU NkQBe6SzFnVH+E0mo72JmYlakU5kGoMui+O6OOPBK7EBm6YGzeR1hrENb9/ZAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUbTxxxhWThFhaqFiK9ED/OryymPYwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNTk5MjAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqB1TB UDANBgkqhkiG9w0BAQsFAAOCAQEAObzDNyfks3JdD5LEQR5AGOdHHL0K8vzRA8N6 YDsdrcZ4lWgygW9hDd9j1AnQpgPxNXjZhf5mWib+HkVrFcGRX4mCwe1vKh7rC90y 0pH44W1qDtieHi1FOjb4baRJN445NSA0I6WnHnTKwOZUXxz1zjfzXJgNcUN+SuSB czYT4qHO5HYmReiUqU3cpgZIMXEQOgs6mmII5De7sBoDKukoq5vK5TpidxAXC3rX O0UKO4KFW2izEO3FJNeSZcGP4OPjcrILUj9mPrU4IODzbrvyZs1GGSciFosjfDX9 UP+BPD+5Vfe4D4nPUzak940Vq0kWQ+g/gLwEmCuyfkapdWZ6ZQ== -----END CERTIFICATE-----Generated at Thu Jun 11 21:50:04 2026 by rpki-client