$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS60841.roa File: AS60841.roa (raw, json) Hash identifier: hq8HSFyiRBNFMzQO/Vd3qVA0tIhybrQDsXnBATkVHP4= Subject key identifier: 52:DF:21:86:21:B6:DF:66:8E:6E:F8:16:C1:DD:AF:1B:39:16:FD:28 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 6FAD5FC2D8242AD02AE766625A82503019707C63 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS60841.roa Signing time: Fri 04 Jul 2025 07:51:25 +0000 ROA not before: Fri 04 Jul 2025 07:46:25 +0000 ROA not after: Fri 03 Jul 2026 07:51:25 +0000 asID: 60841 IP address blocks: 2a07:54c1:5000::/36 maxlen: 36 2a07:54c1:5000::/36 maxlen: 48 2a07:54c4:174a::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ad:5f:c2:d8:24:2a:d0:2a:e7:66:62:5a:82:50:30:19:70:7c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:25 2025 GMT Not After : Jul 3 07:51:25 2026 GMT Subject: CN=52DF218621B6DF668E6EF816C1DDAF1B3916FD28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ec:31:61:86:8f:1e:18:dd:5b:8d:87:da:f8: b8:8e:96:bc:94:75:db:58:03:9b:13:de:64:24:c5: e1:a4:24:66:c7:63:0f:7f:5a:2b:ec:fa:ae:ce:f8: 29:7d:e1:de:05:f4:64:72:f0:88:07:2f:5b:95:c8: 00:d2:09:c3:d6:36:40:52:e8:55:02:fa:7a:ae:1e: bb:7b:8a:37:d8:f5:ff:1c:b6:2d:92:6f:f7:03:e3: b7:ff:7e:1f:44:d6:18:93:ce:52:e5:73:7d:be:fd: 58:6c:75:01:ed:d3:80:1d:b2:89:d0:af:82:d6:98: 00:ec:ca:2a:0d:2c:ae:ad:c2:86:5e:6d:73:7f:bf: 29:76:3d:15:71:0d:66:3a:28:fa:81:73:e3:d3:89: d4:f2:d3:96:92:6a:4b:61:b6:7d:5d:f1:86:db:87: 38:ac:10:77:a1:8a:c2:94:51:81:a8:34:b7:89:c5: 6b:c3:97:60:f8:ae:09:e4:45:e7:b5:dc:c5:49:3b: b4:5f:d5:52:57:6e:fe:33:ea:d3:a6:e4:c3:46:9b: 77:d4:d2:c4:6a:eb:d9:cc:46:cd:60:f7:8a:7d:12: 2d:70:68:df:6d:85:f0:f0:60:ee:fd:66:69:fa:ef: 32:6e:4c:05:3e:6b:80:cf:0a:15:9b:8c:90:cd:27: 81:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DF:21:86:21:B6:DF:66:8E:6E:F8:16:C1:DD:AF:1B:39:16:FD:28 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS60841.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:5000::/36 2a07:54c4:174a::/48 Signature Algorithm: sha256WithRSAEncryption b9:4e:ae:c8:0f:0b:40:77:5e:e2:5f:5e:03:67:45:04:cc:8d: 85:ba:8f:4f:f7:32:b3:07:ec:cd:59:94:43:64:1e:e8:27:6f: 66:54:30:3e:52:cb:14:b2:25:30:12:83:56:ef:d2:fb:39:fb: c0:76:bc:c6:c7:ea:1f:0a:ce:78:60:79:18:ec:c1:e9:0f:22: 83:d2:d6:fb:99:f7:29:cf:99:94:0a:fb:fa:a9:52:7a:af:3d: 4a:9b:63:c6:bb:14:ea:16:89:e2:51:11:da:14:26:e5:d0:10: 55:a0:ca:00:58:2a:b8:c8:0e:5f:7a:37:32:3b:4f:f9:b4:5e: 78:f5:cb:a8:b2:9f:fb:c3:e3:7b:b1:d8:7d:d6:61:c1:df:4b: 1b:69:f8:70:93:d2:18:a0:9a:64:c4:c2:fe:82:d4:0a:4e:b1: 52:e8:3b:ee:83:02:13:2b:71:e5:b7:1e:cc:86:24:31:de:1b: 10:9a:48:b4:db:29:94:c6:e8:af:dc:dc:19:5c:6d:04:49:4a: 47:f8:5c:94:3d:d1:c9:f2:29:99:4d:e5:2a:6d:1a:e1:c1:6a: 84:b2:22:1f:3e:9b:ad:45:63:47:a0:27:08:80:9d:85:a2:e9: cc:26:bd:70:42:e3:ab:55:be:71:37:08:69:02:9f:32:d1:45: aa:b9:a4:7d -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUb61fwtgkKtAq52ZiWoJQMBlwfGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjVaFw0yNjA3MDMwNzUxMjVaMDMxMTAvBgNV BAMTKDUyREYyMTg2MjFCNkRGNjY4RTZFRjgxNkMxRERBRjFCMzkxNkZEMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC47DFhho8eGN1bjYfa+LiOlryU ddtYA5sT3mQkxeGkJGbHYw9/Wivs+q7O+Cl94d4F9GRy8IgHL1uVyADSCcPWNkBS 6FUC+nquHrt7ijfY9f8cti2Sb/cD47f/fh9E1hiTzlLlc32+/VhsdQHt04AdsonQ r4LWmADsyioNLK6twoZebXN/vyl2PRVxDWY6KPqBc+PTidTy05aSakthtn1d8Ybb hzisEHehisKUUYGoNLeJxWvDl2D4rgnkRee13MVJO7Rf1VJXbv4z6tOm5MNGm3fU 0sRq69nMRs1g94p9Ei1waN9thfDwYO79Zmn67zJuTAU+a4DPChWbjJDNJ4F5AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUUt8hhiG232aObvgWwd2vGzkW/SgwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNjA4NDEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBgQqB1TB UAMHACoHVMQXSjANBgkqhkiG9w0BAQsFAAOCAQEAuU6uyA8LQHde4l9eA2dFBMyN hbqPT/cyswfszVmUQ2Qe6CdvZlQwPlLLFLIlMBKDVu/S+zn7wHa8xsfqHwrOeGB5 GOzB6Q8ig9LW+5n3Kc+ZlAr7+qlSeq89SptjxrsU6haJ4lER2hQm5dAQVaDKAFgq uMgOX3o3MjtP+bReePXLqLKf+8Pje7HYfdZhwd9LG2n4cJPSGKCaZMTC/oLUCk6x Uug77oMCEytx5bcezIYkMd4bEJpItNsplMbor9zcGVxtBElKR/hclD3RyfIpmU3l Km0a4cFqhLIiHz6brUVjR6AnCICdhaLpzCa9cELjq1W+cTcIaQKfMtFFqrmkfQ== -----END CERTIFICATE-----Generated at Sat Jul 5 08:20:30 2025 by rpki-client