$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS133098.roa File: AS133098.roa (raw, json) Hash identifier: wKvjJapM8I9LI8wJGyhhvIdBvmLsfY8jFZB8fFNpUuI= Subject key identifier: 18:1D:65:B3:83:53:F7:91:C0:45:A3:FA:4A:1D:B1:B4:37:2D:58:22 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 56768F2C12230223B90B7E668911A6B93252DC4A Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS133098.roa Signing time: Fri 05 Jun 2026 08:45:51 +0000 ROA not before: Fri 05 Jun 2026 08:40:51 +0000 ROA not after: Fri 04 Jun 2027 08:45:51 +0000 asID: 133098 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:76:8f:2c:12:23:02:23:b9:0b:7e:66:89:11:a6:b9:32:52:dc:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:51 2026 GMT Not After : Jun 4 08:45:51 2027 GMT Subject: CN=181D65B38353F791C045A3FA4A1DB1B4372D5822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:44:45:87:4b:eb:80:3a:c9:3b:66:cc:56: 62:fe:cf:bc:a8:3d:65:c4:47:f7:7e:b1:34:c6:7a: 9f:94:b3:31:65:8a:42:c2:f6:a0:e7:0d:b3:ee:48: db:97:2f:6e:3e:17:7c:6d:dc:9f:5a:f9:82:d1:cf: 3f:39:bc:41:e4:32:86:25:17:a6:27:c1:f9:19:c6: d3:62:5f:67:7c:d0:ac:8a:c4:e2:a4:4d:6d:15:83: 31:e5:18:72:92:ab:aa:7c:37:f1:20:07:7d:01:12: 14:9c:6f:8e:cf:93:c3:48:69:42:fd:3e:8b:c0:1e: 11:ef:c6:fa:68:66:fb:36:18:53:8d:e9:c1:3e:a8: 6f:cb:9b:13:01:67:36:49:a5:bf:8a:a7:ed:5e:e7: a7:45:cd:e6:8e:9f:5d:76:37:54:a2:77:76:94:96: b3:a9:fa:70:42:a9:1f:b0:19:cf:e0:94:91:43:4b: 12:53:3a:07:e8:dc:55:9e:8c:22:5c:80:d1:32:5b: 0c:17:43:27:f4:17:e5:66:90:e4:6e:86:c9:91:ed: 8a:49:8e:6c:7f:95:c6:a4:b7:bd:d7:04:dd:94:75: ee:66:c8:53:39:c7:2e:1a:61:85:fb:9e:0c:38:0a: 76:07:f9:08:26:79:6c:31:76:f1:09:b1:e5:02:c9: e4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1D:65:B3:83:53:F7:91:C0:45:A3:FA:4A:1D:B1:B4:37:2D:58:22 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS133098.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption b5:fc:3a:ee:b6:23:dd:ce:bb:9d:d4:03:77:3e:b9:8a:62:e4: d0:1f:af:90:85:0f:c2:42:82:d7:ee:58:c5:6d:d0:96:7c:05: cf:b1:66:af:4b:e2:45:8a:25:59:01:d2:2b:34:05:8e:3e:8b: 5c:de:94:2e:d7:f0:f3:7d:eb:81:9c:07:ed:1c:a6:71:99:b8: 5f:0b:a0:fc:8e:20:ee:f1:c8:c6:2c:30:93:7c:98:f7:dd:56: 95:af:20:46:86:4a:f1:02:69:21:83:82:2c:d8:d3:64:a7:1f: 86:27:ba:6f:1f:d6:9b:9f:85:f9:ab:df:73:b3:78:39:39:7e: 60:21:20:ce:b9:9a:38:f4:b6:30:59:f3:bb:bc:0f:35:d8:de: 44:28:dc:74:da:55:e0:25:61:c3:26:82:77:65:53:b7:4d:3f: d4:73:0b:fc:b7:a8:1b:e1:71:a9:34:e9:1c:96:c2:d7:68:76: 91:c9:c4:1e:7c:ec:3d:ad:9c:29:69:c6:65:2e:95:16:a3:0b: 9f:6f:e7:77:02:d2:da:79:cf:ec:60:f0:c7:25:d2:14:7c:1d: 57:3b:5f:96:5f:2a:57:5d:fe:d4:33:75:d4:19:18:d4:80:60: 70:38:24:0b:52:c0:4c:4d:28:a2:c5:e3:8b:b1:03:b9:7e:67: 7b:15:be:4b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUVnaPLBIjAiO5C35miRGmuTJS3EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV BAMTKDE4MUQ2NUIzODM1M0Y3OTFDMDQ1QTNGQTRBMURCMUI0MzcyRDU4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoNURFh0vrgDrJO2bMVmL+z7yo PWXER/d+sTTGep+UszFlikLC9qDnDbPuSNuXL24+F3xt3J9a+YLRzz85vEHkMoYl F6YnwfkZxtNiX2d80KyKxOKkTW0VgzHlGHKSq6p8N/EgB30BEhScb47Pk8NIaUL9 PovAHhHvxvpoZvs2GFON6cE+qG/LmxMBZzZJpb+Kp+1e56dFzeaOn112N1Sid3aU lrOp+nBCqR+wGc/glJFDSxJTOgfo3FWejCJcgNEyWwwXQyf0F+VmkORuhsmR7YpJ jmx/lcakt73XBN2Ude5myFM5xy4aYYX7ngw4CnYH+QgmeWwxdvEJseUCyeQrAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUGB1ls4NT95HARaP6Sh2xtDctWCIwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMTMzMDk4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQC1/DrutiPdzrud1AN3PrmKYuTQH6+QhQ/C QoLX7ljFbdCWfAXPsWavS+JFiiVZAdIrNAWOPotc3pQu1/DzfeuBnAftHKZxmbhf C6D8jiDu8cjGLDCTfJj33VaVryBGhkrxAmkhg4Is2NNkpx+GJ7pvH9abn4X5q99z s3g5OX5gISDOuZo49LYwWfO7vA812N5EKNx02lXgJWHDJoJ3ZVO3TT/Ucwv8t6gb 4XGpNOkclsLXaHaRycQefOw9rZwpacZlLpUWowufb+d3AtLaec/sYPDHJdIUfB1X O1+WXypXXf7UM3XUGRjUgGBwOCQLUsBMTSiixeOLsQO5fmd7Fb5L -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:13 2026 by rpki-client