$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS215280.roa File: AS215280.roa (raw, json) Hash identifier: 9k2Yzq7watDBGO97HUdfATtunGUIMEXoBcgxtAC2Qgk= Subject key identifier: 21:AB:9C:44:2F:4D:75:68:2B:C9:C7:A1:DE:42:58:19:E4:E7:77:1D Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 351EF3200A8B0642BF8786FE7A802C1B33663BD9 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS215280.roa Signing time: Thu 20 Feb 2025 00:06:18 +0000 ROA not before: Thu 20 Feb 2025 00:01:18 +0000 ROA not after: Thu 19 Feb 2026 00:06:18 +0000 asID: 215280 IP address blocks: 2a07:54c1:3800::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 13:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1e:f3:20:0a:8b:06:42:bf:87:86:fe:7a:80:2c:1b:33:66:3b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Feb 20 00:01:18 2025 GMT Not After : Feb 19 00:06:18 2026 GMT Subject: CN=21AB9C442F4D75682BC9C7A1DE425819E4E7771D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:96:98:cb:53:f7:b4:ce:75:59:31:10:9b:8e: 5f:5b:c9:ff:14:2e:fa:b5:74:dc:93:55:33:d7:03: d9:30:cd:4e:0f:75:48:f3:ee:2d:3e:be:f2:6d:f2: e1:e9:3c:b5:9c:53:f9:22:0a:ee:e0:3d:c9:ee:16: 42:09:fd:b7:70:ea:39:d0:a2:56:6f:86:a5:7a:bc: 92:fc:dc:79:2e:38:64:86:93:80:5f:a0:40:62:82: 52:8b:33:98:66:61:5e:33:2e:90:48:d6:63:31:4d: e3:95:60:76:c9:c0:20:43:7e:4a:7a:74:85:95:57: 28:5f:6a:d5:63:40:df:92:62:b7:df:73:e9:e0:ed: c7:3d:e0:4e:7d:e3:f2:68:e1:d8:b5:e8:51:b2:8d: 5e:3a:aa:da:c6:f5:b8:56:a2:83:98:06:8f:b2:e2: d1:2b:43:a6:a1:c3:14:b7:91:0c:96:4d:0e:25:85: 6b:52:0d:f7:7e:0e:1c:be:d4:ca:1f:c2:93:58:eb: 6c:6a:3c:fb:09:bd:94:28:9e:f4:66:3a:85:d7:71: 9d:74:a5:07:b4:a8:f3:a4:37:a2:f0:ec:1f:56:bb: 5a:7f:8e:a0:dd:0b:7d:92:7e:ed:59:16:c7:a1:f7: 53:f8:8e:9d:fb:2a:86:2e:85:58:9c:38:d8:92:c4: e4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AB:9C:44:2F:4D:75:68:2B:C9:C7:A1:DE:42:58:19:E4:E7:77:1D X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS215280.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:3800::/40 Signature Algorithm: sha256WithRSAEncryption 49:5e:89:33:3e:7d:c3:19:42:df:ed:cb:1b:60:28:36:54:8d: 6a:cc:23:0a:57:dd:79:e3:c2:d4:03:af:38:3c:53:1f:0f:d1: 86:fe:c0:b4:64:13:d1:23:65:74:75:6c:a0:49:da:19:25:ed: e5:d5:30:14:b1:aa:99:92:fd:b5:c4:de:d2:09:f4:fa:e1:7c: ff:3f:15:df:5f:5c:30:b0:72:91:79:3f:33:7d:5c:b5:aa:72: da:81:bd:7f:5d:36:52:1e:0c:b8:67:63:ee:dc:ce:30:ef:df: 71:1d:37:e4:86:d0:9f:3c:ba:e3:69:f9:57:54:52:1e:b0:c6: 5a:a1:33:70:7a:95:eb:ac:22:c0:b4:60:3a:81:c9:7d:80:fa: 65:d8:74:21:43:f9:14:13:f1:aa:ef:91:a5:e2:01:d7:e6:06: e3:1f:c1:2f:27:77:96:c8:f2:a3:cb:cd:63:a2:c7:57:0d:f9: 64:71:c9:cc:67:50:88:51:90:53:4e:0b:c5:6d:76:49:9c:68: 69:23:f7:30:c8:ca:fe:f6:51:6a:6d:fc:d7:10:00:69:dc:2f: fe:96:34:93:df:87:ef:02:01:53:f9:0c:88:9a:c7:bf:90:d8: 4b:1c:69:99:7a:12:41:20:35:2a:02:d9:3c:e2:25:fc:01:02: bd:ea:eb:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNR7zIAqLBkK/h4b+eoAsGzNmO9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNTAyMjAwMDAxMThaFw0yNjAyMTkwMDA2MThaMDMxMTAvBgNV BAMTKDIxQUI5QzQ0MkY0RDc1NjgyQkM5QzdBMURFNDI1ODE5RTRFNzc3MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDelpjLU/e0znVZMRCbjl9byf8U Lvq1dNyTVTPXA9kwzU4PdUjz7i0+vvJt8uHpPLWcU/kiCu7gPcnuFkIJ/bdw6jnQ olZvhqV6vJL83HkuOGSGk4BfoEBiglKLM5hmYV4zLpBI1mMxTeOVYHbJwCBDfkp6 dIWVVyhfatVjQN+SYrffc+ng7cc94E594/Jo4di16FGyjV46qtrG9bhWooOYBo+y 4tErQ6ahwxS3kQyWTQ4lhWtSDfd+Dhy+1MofwpNY62xqPPsJvZQonvRmOoXXcZ10 pQe0qPOkN6Lw7B9Wu1p/jqDdC32Sfu1ZFseh91P4jp37KoYuhVicONiSxOTLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIaucRC9NdWgryceh3kJYGeTndx0wHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTMjE1MjgwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wTgwDQYJKoZIhvcNAQELBQADggEBAEleiTM+fcMZQt/tyxtgKDZUjWrMIwpX3Xnj wtQDrzg8Ux8P0Yb+wLRkE9EjZXR1bKBJ2hkl7eXVMBSxqpmS/bXE3tIJ9PrhfP8/ Fd9fXDCwcpF5PzN9XLWqctqBvX9dNlIeDLhnY+7czjDv33EdN+SG0J88uuNp+VdU Uh6wxlqhM3B6leusIsC0YDqByX2A+mXYdCFD+RQT8arvkaXiAdfmBuMfwS8nd5bI 8qPLzWOix1cN+WRxycxnUIhRkFNOC8VtdkmcaGkj9zDIyv72UWpt/NcQAGncL/6W NJPfh+8CAVP5DIiax7+Q2EscaZl6EkEgNSoC2TziJfwBAr3q600= -----END CERTIFICATE-----Generated at Sun Apr 27 21:47:32 2025 by rpki-client