$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: tJ1ozoiTJxpf8YSloMzpdlHNy+1xIU2RqKnLlbCOm6c= Subject key identifier: 4D:4B:AA:61:5C:26:8A:F6:A7:67:12:B0:1C:94:93:3B:36:46:9A:D9 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 722C15B0AC1387FF61FCAC331D4BEE02C48479BB Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS16509.roa Signing time: Mon 30 Jun 2025 14:59:44 +0000 ROA not before: Mon 30 Jun 2025 14:54:44 +0000 ROA not after: Mon 29 Jun 2026 14:59:44 +0000 asID: 16509 IP address blocks: 2a05:dfc3:f740::/44 maxlen: 44 2a05:dfc3:f750::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 15:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:2c:15:b0:ac:13:87:ff:61:fc:ac:33:1d:4b:ee:02:c4:84:79:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Jun 30 14:54:44 2025 GMT Not After : Jun 29 14:59:44 2026 GMT Subject: CN=4D4BAA615C268AF6A76712B01C94933B36469AD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:ec:b6:a9:9f:35:d4:65:a6:12:f3:d4:71: 78:40:8c:a7:10:69:b6:84:b2:6b:71:19:23:2b:74: f5:33:02:d7:14:ff:15:ea:8a:cc:4f:dd:8f:e7:73: da:ee:7f:6b:42:6f:80:76:ee:38:02:7e:95:1a:52: 0a:3f:72:c2:4e:ed:63:2b:c3:ce:ab:b0:11:ca:77: 6b:d0:58:a9:b1:b2:ca:06:5a:9c:ee:f2:84:c4:80: f0:ef:f7:98:77:27:2e:35:b5:62:db:ad:c2:c0:e4: 3b:16:0c:06:07:3d:e7:89:5f:5e:b4:ee:fe:5f:f5: 2d:6c:e9:b7:1e:d0:0d:cc:71:37:a1:93:c8:ea:05: c1:04:6c:3a:5c:71:af:53:21:c0:a0:00:fa:f7:a3: e7:13:d0:73:67:58:d3:e7:c8:3d:4a:f7:9d:78:46: 72:cc:d8:a3:f5:89:93:51:17:85:a1:43:0c:35:d5: 60:04:b9:19:f1:fc:7a:16:3d:cf:67:b7:76:cb:c2: ef:1e:0b:cb:f8:44:95:86:39:49:e9:81:69:06:08: d8:4f:b0:d1:63:33:9c:09:a5:58:e9:5e:75:c7:31: f2:a5:22:43:9b:da:19:ba:8f:03:d3:9c:bf:ef:2a: 8e:37:f7:8b:b4:d3:9e:35:f2:d4:ef:bf:62:0c:94: ae:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4B:AA:61:5C:26:8A:F6:A7:67:12:B0:1C:94:93:3B:36:46:9A:D9 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:f740::/43 Signature Algorithm: sha256WithRSAEncryption 29:cb:af:80:1d:77:0a:0f:5f:35:be:9d:40:2f:28:bf:bd:79: 48:88:6e:31:34:d6:2c:8c:cc:04:34:cf:09:83:ad:57:42:9d: 5c:7f:18:79:5e:ed:97:0c:45:4a:bc:48:94:01:5b:bf:13:23: b3:df:f6:e0:e6:2a:23:f7:5a:d1:c4:08:b0:8e:72:f9:83:39: b8:4b:36:9e:76:e4:56:1d:16:29:27:3b:db:86:c2:9d:e8:78: bf:9e:e0:2f:b5:01:6b:3b:cc:a5:9c:12:a7:40:88:df:52:73: f9:66:3f:69:2d:cf:60:c3:8e:6e:f9:75:cf:df:51:f4:83:17: 1c:98:57:7c:0a:9b:78:c8:3c:41:64:e1:42:41:df:c1:39:6e: a3:83:87:5e:e9:da:bc:23:32:98:c6:16:0d:19:7e:0c:98:d2: 79:97:e6:c5:81:78:91:39:02:6f:08:e1:c5:a9:06:5c:a1:98: bb:99:95:12:82:d2:02:0a:a3:51:11:ee:8d:3d:71:7f:81:1f: cf:97:e2:c4:aa:a9:14:43:4e:cc:ca:54:6c:b7:9f:55:f1:2c: d1:e0:a7:54:3e:a9:31:06:df:b4:8e:e9:f1:e4:df:aa:5c:97: 80:ec:bc:50:ba:27:c3:ce:02:46:e4:76:5b:ac:25:d2:07:39: df:0f:de:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUciwVsKwTh/9h/KwzHUvuAsSEebswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA2MzAxNDU0NDRaFw0yNjA2MjkxNDU5NDRaMDMxMTAvBgNV BAMTKDRENEJBQTYxNUMyNjhBRjZBNzY3MTJCMDFDOTQ5MzNCMzY0NjlBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvrey2qZ811GWmEvPUcXhAjKcQ abaEsmtxGSMrdPUzAtcU/xXqisxP3Y/nc9ruf2tCb4B27jgCfpUaUgo/csJO7WMr w86rsBHKd2vQWKmxssoGWpzu8oTEgPDv95h3Jy41tWLbrcLA5DsWDAYHPeeJX160 7v5f9S1s6bce0A3McTehk8jqBcEEbDpcca9TIcCgAPr3o+cT0HNnWNPnyD1K9514 RnLM2KP1iZNRF4WhQww11WAEuRnx/HoWPc9nt3bLwu8eC8v4RJWGOUnpgWkGCNhP sNFjM5wJpVjpXnXHMfKlIkOb2hm6jwPTnL/vKo4394u005418tTvv2IMlK7RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTUuqYVwmivanZxKwHJSTOzZGmtkwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUt NDlmOS05YjZjLTljOWYzODk4OTk1ZC8zL0FTMTY1MDkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwUqBd/D 90AwDQYJKoZIhvcNAQELBQADggEBACnLr4AddwoPXzW+nUAvKL+9eUiIbjE01iyM zAQ0zwmDrVdCnVx/GHle7ZcMRUq8SJQBW78TI7Pf9uDmKiP3WtHECLCOcvmDObhL Np525FYdFiknO9uGwp3oeL+e4C+1AWs7zKWcEqdAiN9Sc/lmP2ktz2DDjm75dc/f UfSDFxyYV3wKm3jIPEFk4UJB38E5bqODh17p2rwjMpjGFg0ZfgyY0nmX5sWBeJE5 Am8I4cWpBlyhmLuZlRKC0gIKo1ER7o09cX+BH8+X4sSqqRRDTszKVGy3n1XxLNHg p1Q+qTEG37SO6fHk36pcl4DsvFC6J8POAkbkdlusJdIHOd8P3v4= -----END CERTIFICATE-----Generated at Tue Jul 1 01:40:33 2025 by rpki-client