$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS8075.roa File: AS8075.roa (raw, json) Hash identifier: cefzYcUV6vrbo1G5cPl262hU+oSMl+jyA3EBDu5MJFI= Subject key identifier: 03:93:D8:30:5D:03:D7:4E:BA:53:52:3B:63:E3:36:13:5F:14:15:7E Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 155F0ED99AE6731A1A7AAEF45CE0F73BC709853C Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS8075.roa Signing time: Fri 04 Jul 2025 07:51:27 +0000 ROA not before: Fri 04 Jul 2025 07:46:27 +0000 ROA not after: Fri 03 Jul 2026 07:51:27 +0000 asID: 8075 IP address blocks: 2a07:54c4:1756::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:5f:0e:d9:9a:e6:73:1a:1a:7a:ae:f4:5c:e0:f7:3b:c7:09:85:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:27 2025 GMT Not After : Jul 3 07:51:27 2026 GMT Subject: CN=0393D8305D03D74EBA53523B63E336135F14157E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:73:0a:86:39:98:58:d1:15:e4:dd:8a:66:e7: 88:99:dd:c2:41:3b:4d:08:83:a8:a3:bd:eb:bb:5c: 08:3a:d2:f1:81:28:08:82:0e:a3:db:5b:45:09:65: f7:1f:c8:c4:20:1a:a1:ea:df:2b:d5:89:85:58:02: c2:1c:b9:e8:d7:7f:62:c9:7e:f7:ad:18:f0:69:0e: a6:57:f6:73:f9:29:2a:c6:c1:c2:fb:7d:7e:af:a3: b9:e4:f5:11:86:6b:b9:f2:66:4c:90:40:eb:55:b1: e5:cf:cb:28:00:17:26:31:79:93:ca:8a:07:4e:8b: be:53:ed:bc:e6:10:02:d5:de:d7:5c:a5:0c:6d:1b: 9e:7e:69:b5:b8:5b:ea:fa:9d:1c:43:67:ca:33:08: 39:8f:5a:65:52:43:79:02:0f:c8:2f:af:81:6a:d9: 7b:07:42:2b:e2:10:53:e4:74:f0:b8:18:43:f0:ec: 06:82:53:e4:da:d6:c7:1f:4f:06:e5:36:71:12:bf: 0a:79:15:4b:7d:ea:4a:36:7d:96:05:c6:e4:bb:4d: 94:d3:2d:1e:78:be:8d:c8:c2:7e:e6:6c:f2:71:52: 5d:9c:92:29:e9:71:9b:b3:b3:05:26:87:f2:c6:ef: f6:6a:36:c7:93:af:22:7a:98:b6:c1:38:ff:70:f0: 04:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:93:D8:30:5D:03:D7:4E:BA:53:52:3B:63:E3:36:13:5F:14:15:7E X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS8075.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:1756::/48 Signature Algorithm: sha256WithRSAEncryption b3:e9:be:f5:3b:62:22:ba:9f:a8:e4:76:d0:cb:b0:54:50:d0: f7:5f:fd:46:4c:a8:54:38:cd:30:54:a7:b3:72:d7:7d:f9:fe: 8d:8b:cd:3e:d7:b7:37:72:ab:6d:13:39:f5:b1:de:62:00:ad: 82:2c:72:ad:4e:12:91:f6:1e:33:8f:d9:58:6d:d0:c0:b1:16: f9:f7:fa:1a:6a:1f:0c:21:4c:fe:56:00:5a:17:b3:06:f6:67: 23:e4:00:f2:db:b1:e4:68:c9:27:cc:27:12:bf:58:22:3b:b3: e1:01:c0:40:2d:ef:5e:e1:df:c5:47:ec:e3:a6:f5:19:e8:86: 7f:c9:8a:3b:4d:b1:da:a0:88:e0:e1:20:36:05:0a:d9:1e:ac: a4:44:3f:1a:fc:4f:37:e5:67:c7:de:78:45:cc:e0:23:c5:ab: c0:87:b6:3b:9d:e0:6a:9b:90:48:a7:66:b6:00:af:25:b9:35: 28:24:70:69:75:70:ad:47:41:15:ec:f4:7f:42:8c:0a:9e:fc: fd:66:b0:06:bc:f5:fd:c0:47:74:6e:32:19:0d:b2:59:83:3d: 5e:3d:59:3f:10:fc:0c:2a:80:e1:42:53:e2:e8:f7:ea:ef:3d: 3d:66:93:71:60:60:61:c1:79:a1:0f:10:ff:92:b3:22:85:bf: e6:20:64:07 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUFV8O2Zrmcxoaeq70XOD3O8cJhTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjdaFw0yNjA3MDMwNzUxMjdaMDMxMTAvBgNV BAMTKDAzOTNEODMwNUQwM0Q3NEVCQTUzNTIzQjYzRTMzNjEzNUYxNDE1N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDicwqGOZhY0RXk3Ypm54iZ3cJB O00Ig6ijveu7XAg60vGBKAiCDqPbW0UJZfcfyMQgGqHq3yvViYVYAsIcuejXf2LJ fvetGPBpDqZX9nP5KSrGwcL7fX6vo7nk9RGGa7nyZkyQQOtVseXPyygAFyYxeZPK igdOi75T7bzmEALV3tdcpQxtG55+abW4W+r6nRxDZ8ozCDmPWmVSQ3kCD8gvr4Fq 2XsHQiviEFPkdPC4GEPw7AaCU+Ta1scfTwblNnESvwp5FUt96ko2fZYFxuS7TZTT LR54vo3Iwn7mbPJxUl2ckinpcZuzswUmh/LG7/ZqNseTryJ6mLbBOP9w8AQfAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUA5PYMF0D1066U1I7Y+M2E18UFX4wHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTODA3NS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMQX VjANBgkqhkiG9w0BAQsFAAOCAQEAs+m+9TtiIrqfqOR20MuwVFDQ91/9RkyoVDjN MFSns3LXffn+jYvNPte3N3KrbRM59bHeYgCtgixyrU4SkfYeM4/ZWG3QwLEW+ff6 GmofDCFM/lYAWhezBvZnI+QA8tux5GjJJ8wnEr9YIjuz4QHAQC3vXuHfxUfs46b1 GeiGf8mKO02x2qCI4OEgNgUK2R6spEQ/GvxPN+Vnx954RczgI8WrwIe2O53gapuQ SKdmtgCvJbk1KCRwaXVwrUdBFez0f0KMCp78/WawBrz1/cBHdG4yGQ2yWYM9Xj1Z PxD8DCqA4UJT4uj36u89PWaTcWBgYcF5oQ8Q/5KzIoW/5iBkBw== -----END CERTIFICATE-----Generated at Sat Jul 5 08:16:00 2025 by rpki-client