$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS926.roa File: AS926.roa (raw, json) Hash identifier: vQQd8/73ewZb6T65dZKSRP4LxGPqgo2MsykG/BG2fEk= Subject key identifier: E4:F8:83:A0:16:73:E0:DD:A8:5F:4D:9A:A2:1B:67:3E:C2:B7:7E:67 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 65664A8227E0F75788A72F10EF3F9E75EDF36A61 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS926.roa Signing time: Fri 04 Jul 2025 07:51:27 +0000 ROA not before: Fri 04 Jul 2025 07:46:27 +0000 ROA not after: Fri 03 Jul 2026 07:51:27 +0000 asID: 926 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:66:4a:82:27:e0:f7:57:88:a7:2f:10:ef:3f:9e:75:ed:f3:6a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:27 2025 GMT Not After : Jul 3 07:51:27 2026 GMT Subject: CN=E4F883A01673E0DDA85F4D9AA21B673EC2B77E67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f1:df:85:61:d2:d9:53:2a:c7:d3:46:1b:93: 04:0f:22:38:47:44:92:62:97:0e:0c:ac:42:b6:1f: 56:79:4b:99:11:3d:f3:94:1f:60:f6:03:89:1b:c2: 15:34:a8:57:ba:c9:34:87:e2:f7:65:a1:7d:d2:34: 00:ab:28:bb:0f:62:56:7c:da:cb:9a:29:7a:1e:2d: f0:d8:ff:bb:2b:b6:e0:ea:35:16:ba:9e:84:6f:63: ba:31:42:ad:fc:07:b0:ea:6d:82:b0:00:42:cd:02: 5c:0d:77:b7:93:6c:65:9d:be:ea:d5:92:0d:17:4b: 4b:a5:b6:dd:0c:70:43:49:1d:b2:3e:09:ad:83:38: 7f:e8:31:d4:ff:42:da:1b:14:27:ef:47:e8:a9:cb: 70:fc:8a:9b:08:a2:55:1d:dc:d9:c7:0d:3f:04:54: f2:8c:ae:13:ae:77:42:f0:80:1e:65:1d:26:af:cd: 9f:8d:c9:1a:6c:96:b6:f8:8e:8f:d5:96:34:ef:f8: b6:1a:10:46:41:af:8c:f1:6a:b8:a2:0b:fc:83:6f: f2:a4:bc:97:a0:cd:46:51:fa:1f:ff:54:f4:11:aa: 87:dc:e9:ad:9b:5a:21:aa:bc:07:f5:77:70:dd:02: ef:d4:77:5a:e2:41:ff:24:a7:ff:54:a3:95:47:60: bf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F8:83:A0:16:73:E0:DD:A8:5F:4D:9A:A2:1B:67:3E:C2:B7:7E:67 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS926.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption a5:48:24:8d:ac:98:9b:f2:87:c3:9f:0f:fc:c4:a7:40:7c:f8: 4f:d0:35:48:6b:31:aa:d0:f6:8d:7a:5f:9a:27:67:19:2d:1f: fd:ae:11:80:46:66:b4:b5:48:b3:a5:bd:8a:1c:ce:bb:e6:4c: e4:ae:54:6a:1c:24:6c:33:55:80:67:5f:30:d6:ba:7b:47:3b: c7:58:7f:1f:e1:04:9a:2f:04:11:f2:89:e7:d6:c5:d9:3f:64: 6e:87:e0:13:ab:fa:7b:ba:fb:d0:c9:71:79:10:55:a7:54:7b: 4c:35:1d:49:41:9b:3e:81:31:30:de:0e:95:84:28:88:23:29: 5f:28:b5:0e:34:86:a7:cf:42:a3:aa:d6:81:84:c9:f8:ff:09: 75:e0:aa:0d:d4:b4:76:3c:bb:4b:e5:9d:46:2d:3f:e8:89:dd: 97:67:36:e5:eb:5a:c6:78:89:a6:43:32:f1:bb:b9:b7:ca:25: fe:3d:4c:da:49:b6:64:21:1f:d3:3e:76:9e:58:2f:9a:6e:63: c4:65:4c:99:f4:bf:1e:06:0f:be:d3:0d:a9:8f:d9:10:fe:c0: 6a:5c:34:6c:f8:b2:a3:dd:79:e3:6f:24:02:c6:de:a1:39:0f: 6e:21:1a:0e:1d:90:4e:4f:4a:1c:3a:85:57:fd:f2:55:cc:1a: ce:2d:16:71 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUZWZKgifg91eIpy8Q7z+ede3zamEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjdaFw0yNjA3MDMwNzUxMjdaMDMxMTAvBgNV BAMTKEU0Rjg4M0EwMTY3M0UwRERBODVGNEQ5QUEyMUI2NzNFQzJCNzdFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48d+FYdLZUyrH00YbkwQPIjhH RJJilw4MrEK2H1Z5S5kRPfOUH2D2A4kbwhU0qFe6yTSH4vdloX3SNACrKLsPYlZ8 2suaKXoeLfDY/7srtuDqNRa6noRvY7oxQq38B7DqbYKwAELNAlwNd7eTbGWdvurV kg0XS0ultt0McENJHbI+Ca2DOH/oMdT/QtobFCfvR+ipy3D8ipsIolUd3NnHDT8E VPKMrhOud0LwgB5lHSavzZ+NyRpslrb4jo/VljTv+LYaEEZBr4zxariiC/yDb/Kk vJegzUZR+h//VPQRqofc6a2bWiGqvAf1d3DdAu/Ud1riQf8kp/9Uo5VHYL9FAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQU5PiDoBZz4N2oX02aohtnPsK3fmcwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTOTI2LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwrAL MA0GCSqGSIb3DQEBCwUAA4IBAQClSCSNrJib8ofDnw/8xKdAfPhP0DVIazGq0PaN el+aJ2cZLR/9rhGARma0tUizpb2KHM675kzkrlRqHCRsM1WAZ18w1rp7RzvHWH8f 4QSaLwQR8onn1sXZP2Ruh+ATq/p7uvvQyXF5EFWnVHtMNR1JQZs+gTEw3g6VhCiI IylfKLUONIanz0KjqtaBhMn4/wl14KoN1LR2PLtL5Z1GLT/oid2XZzbl61rGeImm QzLxu7m3yiX+PUzaSbZkIR/TPnaeWC+abmPEZUyZ9L8eBg++0w2pj9kQ/sBqXDRs +LKj3XnjbyQCxt6hOQ9uIRoOHZBOT0ocOoVX/fJVzBrOLRZx -----END CERTIFICATE-----Generated at Sat Jul 5 08:10:42 2025 by rpki-client