$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS54148.roa File: AS54148.roa (raw, json) Hash identifier: 0i2SWvL4xVODR1P57Yx4OZwelw5m8NkpwASaI99XFcc= Subject key identifier: 4D:89:2B:17:6E:E3:B8:0F:8B:86:81:45:1D:D8:45:7B:7A:63:5E:EA Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 5D91B366D9669A0B816CB5A1FE362D1501CF692E Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS54148.roa Signing time: Sat 08 Feb 2025 22:41:23 +0000 ROA not before: Sat 08 Feb 2025 22:36:23 +0000 ROA not after: Sat 07 Feb 2026 22:41:23 +0000 asID: 54148 IP address blocks: 2a07:54c4:175b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 01:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:91:b3:66:d9:66:9a:0b:81:6c:b5:a1:fe:36:2d:15:01:cf:69:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Feb 8 22:36:23 2025 GMT Not After : Feb 7 22:41:23 2026 GMT Subject: CN=4D892B176EE3B80F8B8681451DD8457B7A635EEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:08:5f:91:24:a2:00:87:46:a7:53:0b:bd:e3: 36:a9:10:80:7f:27:52:19:8b:03:2e:b7:7c:be:b0: 8a:99:7d:63:c0:02:bf:d6:d0:7a:03:91:84:ea:c9: d7:80:f4:69:b7:d1:5d:bc:1e:9b:cb:a4:a5:aa:40: 24:18:f9:b2:ae:26:1f:ab:f7:96:ec:32:e9:5f:b5: f0:90:e7:43:51:6b:c0:1b:f6:f6:78:3e:7a:5c:db: e6:41:cb:bd:b4:b4:c8:2e:4e:45:2c:3c:88:68:62: ee:b7:ab:bc:41:f6:84:8e:0d:1b:29:d3:b4:67:56: b4:dc:57:33:dc:19:cc:1a:8f:b4:1e:fe:b7:89:66: 31:5d:dc:2b:a6:40:c1:84:65:d6:d1:2f:7f:e8:fb: e0:29:8f:25:b7:b2:8a:6b:1b:3e:ed:47:6c:10:52: a3:48:62:75:0b:c3:10:b3:da:68:20:2f:ff:25:42: 50:3f:89:1e:4d:03:cd:21:be:d2:75:51:dc:03:c5: 9b:63:14:cc:75:4b:c4:35:3b:b2:b9:c3:64:e8:f3: 50:80:39:20:ff:60:66:28:f3:2d:00:17:99:27:6c: 7c:8e:b6:0d:00:35:57:22:5d:3f:c5:51:70:d4:d5: af:5e:b6:bc:d6:a4:04:f4:01:28:5a:68:86:cd:e5: 53:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:89:2B:17:6E:E3:B8:0F:8B:86:81:45:1D:D8:45:7B:7A:63:5E:EA X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS54148.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:175b::/48 Signature Algorithm: sha256WithRSAEncryption 2a:dd:ab:28:8d:8e:fc:2d:0c:75:00:ed:49:9e:57:ef:71:94: f6:9a:a6:21:bc:c5:a4:3c:40:b8:00:eb:f3:89:82:49:07:ce: 12:a1:85:90:1e:8c:28:ee:7a:48:b7:2b:4e:0a:eb:f3:d9:c2: 65:ba:bf:b2:92:0c:85:07:03:d9:f0:ea:a6:7a:d3:71:60:d7: 7c:db:21:ca:db:c6:77:1a:f6:58:ed:e3:07:24:d0:38:db:4f: cf:a3:33:f9:72:c5:f7:1c:87:d2:f9:ed:ca:33:8a:9e:bf:ca: db:42:51:c1:66:83:4a:ae:62:8d:3c:27:ec:fb:1d:33:3f:f2: af:57:99:a4:bb:3d:17:cf:78:49:9c:e6:8a:bc:8c:ce:f6:af: 1c:a4:12:37:0e:c9:ac:15:ec:79:29:ee:c8:6f:92:7b:b4:3f: 15:f6:d9:7e:ea:2a:51:1e:85:cf:1b:b6:9d:50:0f:ef:62:e7: e9:ff:7e:6f:67:99:89:6b:b2:21:a3:22:07:bf:8b:88:9f:9a: 0c:e0:54:9e:da:91:1c:8f:37:63:49:e2:a7:95:5e:fd:64:99: 44:38:1b:7a:e8:3e:0f:dc:5f:fe:48:53:c1:5b:1f:92:65:90: 34:45:72:d2:a0:a5:49:c4:ac:5c:7f:b2:cc:14:ec:df:31:d6: 76:b4:76:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZGzZtlmmguBbLWh/jYtFQHPaS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNTAyMDgyMjM2MjNaFw0yNjAyMDcyMjQxMjNaMDMxMTAvBgNV BAMTKDREODkyQjE3NkVFM0I4MEY4Qjg2ODE0NTFERDg0NTdCN0E2MzVFRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoCF+RJKIAh0anUwu94zapEIB/ J1IZiwMut3y+sIqZfWPAAr/W0HoDkYTqydeA9Gm30V28HpvLpKWqQCQY+bKuJh+r 95bsMulftfCQ50NRa8Ab9vZ4Pnpc2+ZBy720tMguTkUsPIhoYu63q7xB9oSODRsp 07RnVrTcVzPcGcwaj7Qe/reJZjFd3CumQMGEZdbRL3/o++ApjyW3soprGz7tR2wQ UqNIYnULwxCz2mggL/8lQlA/iR5NA80hvtJ1UdwDxZtjFMx1S8Q1O7K5w2To81CA OSD/YGYo8y0AF5knbHyOtg0ANVciXT/FUXDU1a9etrzWpAT0AShaaIbN5VPPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTYkrF27juA+LhoFFHdhFe3pjXuowHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTNTQxNDgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqB1TE F1swDQYJKoZIhvcNAQELBQADggEBACrdqyiNjvwtDHUA7UmeV+9xlPaapiG8xaQ8 QLgA6/OJgkkHzhKhhZAejCjueki3K04K6/PZwmW6v7KSDIUHA9nw6qZ603Fg13zb Icrbxnca9ljt4wck0DjbT8+jM/lyxfcch9L57cozip6/yttCUcFmg0quYo08J+z7 HTM/8q9XmaS7PRfPeEmc5oq8jM72rxykEjcOyawV7Hkp7shvknu0PxX22X7qKlEe hc8btp1QD+9i5+n/fm9nmYlrsiGjIge/i4ifmgzgVJ7akRyPN2NJ4qeVXv1kmUQ4 G3roPg/cX/5IU8FbH5JlkDRFctKgpUnErFx/sswU7N8x1na0dr0= -----END CERTIFICATE-----Generated at Sun Jun 15 19:25:18 2025 by rpki-client