$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS924.roa File: AS924.roa (raw, json) Hash identifier: dLm+oyRhYL4Rszn3qzh8I+0qVmNO+glKglOuehn22wA= Subject key identifier: 7C:36:09:CB:E5:91:35:6C:DE:B0:E9:68:8B:5C:8A:87:DA:AE:4F:EC Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 1705AB8712C3721437BDDE711A7CB203CDF0A776 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS924.roa Signing time: Fri 04 Jul 2025 07:51:25 +0000 ROA not before: Fri 04 Jul 2025 07:46:25 +0000 ROA not after: Fri 03 Jul 2026 07:51:25 +0000 asID: 924 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:05:ab:87:12:c3:72:14:37:bd:de:71:1a:7c:b2:03:cd:f0:a7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:25 2025 GMT Not After : Jul 3 07:51:25 2026 GMT Subject: CN=7C3609CBE591356CDEB0E9688B5C8A87DAAE4FEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:d9:bf:0f:51:18:ec:4d:df:f6:4e:2d:5b: 46:fb:19:f1:06:af:88:2c:ab:5e:90:56:3a:45:46: 25:2b:81:63:45:51:e7:bb:1e:4e:73:a5:83:ab:2d: 9f:b4:81:84:4b:85:7b:c3:44:28:80:13:f5:d0:3c: f8:90:ea:b1:5b:1b:94:fb:d0:f5:e1:e5:4b:ad:b7: 32:ab:a0:28:cd:8d:fc:c9:d5:ae:eb:cc:cc:ac:eb: 7b:15:72:9a:d1:00:32:37:67:31:38:93:50:4d:cf: 55:b1:c0:7c:c0:25:c7:91:90:ea:8e:fe:8d:12:c4: c3:a5:c2:22:8a:1e:f2:99:a0:dd:65:3c:c4:43:4f: e0:fd:f8:c1:8c:05:4f:2a:39:08:f8:40:90:fd:31: 89:65:36:e2:4b:8a:d2:ab:79:0e:16:0d:3c:a9:c7: 6d:f7:67:47:b6:03:c5:f9:8e:79:71:82:24:71:19: 0b:9f:86:64:4b:0e:1e:f8:40:01:65:12:d2:99:72: eb:f7:8f:76:80:e5:ce:07:32:54:12:92:59:21:b5: 65:99:71:d6:a7:2e:d2:b5:19:2f:3f:03:26:2a:82: c5:c3:05:f3:54:35:13:76:53:87:86:e8:14:63:e7: d2:e4:40:07:2c:2c:dd:8e:b1:dc:86:ad:d2:4b:83: 90:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:36:09:CB:E5:91:35:6C:DE:B0:E9:68:8B:5C:8A:87:DA:AE:4F:EC X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS924.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 72:be:88:1b:c5:95:ef:92:7e:ad:08:ef:52:4e:79:61:c0:19: 3c:0e:4a:13:09:f9:65:24:45:c3:b3:a5:c4:07:70:a9:ea:de: 00:a6:b6:64:d5:b0:23:62:1d:ff:d5:7c:65:79:9d:cc:9c:9e: 4d:1a:11:75:80:c7:44:18:09:10:84:8b:03:c7:3d:41:4b:8a: ff:a2:3a:ac:db:e9:70:fc:ba:ef:d1:9c:4e:51:5a:73:67:44: f7:3c:7e:b8:54:3c:32:ab:7a:c1:f0:28:36:5f:a2:ee:80:2e: fd:09:c9:56:1e:95:42:49:05:f8:69:bc:35:f9:b4:23:af:26: eb:0a:95:1c:dc:e4:a8:36:37:c9:c4:17:ae:77:eb:6e:03:50: c7:58:9d:93:25:b4:bd:3f:34:c0:f1:5e:51:f0:64:92:e8:51: b6:dc:18:84:e3:ed:b3:93:f1:a5:61:50:67:93:65:0f:1a:c0: ff:2f:a2:a2:95:71:22:91:b8:da:19:3a:da:6f:92:13:29:5e: f7:87:0b:6d:24:d4:2f:4a:f6:b2:d5:07:14:c1:9d:2f:d0:09: 6c:0e:6d:c9:cd:86:d0:df:74:e5:d7:d7:f6:75:cd:9c:59:a8: 85:37:f6:c9:82:40:aa:98:8a:bf:b1:a0:05:d3:71:25:91:c9: f9:90:48:35 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUFwWrhxLDchQ3vd5xGnyyA83wp3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjVaFw0yNjA3MDMwNzUxMjVaMDMxMTAvBgNV BAMTKDdDMzYwOUNCRTU5MTM1NkNERUIwRTk2ODhCNUM4QTg3REFBRTRGRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC44dm/D1EY7E3f9k4tW0b7GfEG r4gsq16QVjpFRiUrgWNFUee7Hk5zpYOrLZ+0gYRLhXvDRCiAE/XQPPiQ6rFbG5T7 0PXh5UuttzKroCjNjfzJ1a7rzMys63sVcprRADI3ZzE4k1BNz1WxwHzAJceRkOqO /o0SxMOlwiKKHvKZoN1lPMRDT+D9+MGMBU8qOQj4QJD9MYllNuJLitKreQ4WDTyp x233Z0e2A8X5jnlxgiRxGQufhmRLDh74QAFlEtKZcuv3j3aA5c4HMlQSklkhtWWZ cdanLtK1GS8/AyYqgsXDBfNUNRN2U4eG6BRj59LkQAcsLN2OsdyGrdJLg5AZAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUfDYJy+WRNWzesOloi1yKh9quT+wwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTOTI0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwrAL MA0GCSqGSIb3DQEBCwUAA4IBAQByvogbxZXvkn6tCO9STnlhwBk8DkoTCfllJEXD s6XEB3Cp6t4AprZk1bAjYh3/1XxleZ3MnJ5NGhF1gMdEGAkQhIsDxz1BS4r/ojqs 2+lw/Lrv0ZxOUVpzZ0T3PH64VDwyq3rB8Cg2X6LugC79CclWHpVCSQX4abw1+bQj rybrCpUc3OSoNjfJxBeud+tuA1DHWJ2TJbS9PzTA8V5R8GSS6FG23BiE4+2zk/Gl YVBnk2UPGsD/L6KilXEikbjaGTrab5ITKV73hwttJNQvSvay1QcUwZ0v0AlsDm3J zYbQ33Tl19f2dc2cWaiFN/bJgkCqmIq/saAF03Elkcn5kEg1 -----END CERTIFICATE-----Generated at Sat Jul 5 08:11:20 2025 by rpki-client