$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS142598.roa File: AS142598.roa (raw, json) Hash identifier: xkg0ZMfDFvasbDJ5FbEn8Swg2y453J75TdBLYjJR3R8= Subject key identifier: 62:64:A3:B8:6F:95:1A:72:5A:32:76:F1:C6:A5:85:81:BC:5F:21:DF Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 5470EDC6B10D0663B36E913ED438FE04A37C817A Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS142598.roa Signing time: Fri 05 Jun 2026 08:45:53 +0000 ROA not before: Fri 05 Jun 2026 08:40:53 +0000 ROA not after: Fri 04 Jun 2027 08:45:53 +0000 asID: 142598 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:70:ed:c6:b1:0d:06:63:b3:6e:91:3e:d4:38:fe:04:a3:7c:81:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:53 2026 GMT Not After : Jun 4 08:45:53 2027 GMT Subject: CN=6264A3B86F951A725A3276F1C6A58581BC5F21DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:b7:f5:0c:3c:48:58:d4:7a:b3:18:ea:8a: 16:2c:63:30:6d:bb:b3:98:48:3a:ae:c8:e5:4d:f1: 62:05:a7:92:95:4b:27:c4:5f:66:3a:8c:df:6a:bd: 82:54:83:22:33:27:8a:9f:b7:7b:c7:89:60:12:80: 66:a9:4a:e1:94:14:de:f4:35:ba:3f:11:dd:2d:65: 4b:00:02:66:75:41:c3:96:2b:9c:42:38:f8:f9:3b: 75:3e:49:d3:ff:0b:9d:3b:50:66:27:56:d2:78:f1: 6d:a9:f1:2a:2d:20:d4:8f:36:bc:89:2a:b3:c8:34: fe:4f:2f:69:e5:53:3c:ae:39:fb:b0:b4:d4:73:1b: 10:17:84:fc:03:cd:bb:39:5c:99:2f:24:40:5b:c7: ab:28:7c:98:1b:b5:cb:40:ef:85:9e:98:fc:66:4d: aa:cf:6d:b6:b7:87:6a:bb:58:12:04:a8:be:77:01: 1d:45:43:2a:da:ae:8a:dc:e5:bd:44:05:96:ca:3a: 8a:11:00:b4:36:d5:6b:58:0b:88:af:4b:49:c5:24: cc:6d:c5:b0:17:79:3e:5c:d2:8f:b6:07:45:06:f9: cb:8c:01:4b:1b:57:c5:1b:39:24:a7:b3:c7:c4:86: ae:a9:68:3e:0e:90:3e:86:7f:15:32:1d:5b:e1:bc: 40:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:64:A3:B8:6F:95:1A:72:5A:32:76:F1:C6:A5:85:81:BC:5F:21:DF X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS142598.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption bb:a3:e8:0f:ff:c5:19:43:49:06:f3:36:c2:82:e1:04:f5:81: 27:ad:24:79:3d:08:ec:ff:ad:cc:b2:8c:a5:14:a8:71:b2:34: 9d:70:76:b3:c7:18:e5:9e:7f:49:79:11:fd:cb:c9:9f:bb:cc: 13:8e:c9:89:a5:cd:2b:fc:6b:63:ed:c6:52:af:38:de:24:22: 21:fd:7d:ee:a1:77:5f:ab:d5:e0:a5:06:cf:bf:73:79:34:a7: 80:3a:dd:0b:8d:0f:ed:e0:1f:e2:26:fc:fb:55:b7:f8:93:72: 2f:10:f5:c3:11:05:4c:5f:26:61:71:dd:3c:93:20:56:71:94: b8:f3:ab:87:37:19:e3:87:74:9d:c1:be:11:ba:04:52:e7:82: 5f:b6:ad:fc:39:3d:af:3b:31:89:ec:19:82:ee:32:4e:02:7b: 39:92:35:de:f4:aa:ac:09:64:92:c7:ec:b1:56:62:a9:09:b9: bc:58:2c:51:dc:a2:86:92:14:54:22:85:ad:b3:d7:44:6a:2c: 40:99:7b:f8:8f:5f:92:a1:c4:69:87:6a:4b:43:e5:75:72:57: 64:76:0c:bc:46:0a:28:39:71:1b:3f:5c:7a:88:bf:12:16:19: a5:51:2f:bd:d9:2d:71:f7:85:79:ea:c3:42:bc:d0:31:b8:dc: 05:bd:8e:5d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUVHDtxrENBmOzbpE+1Dj+BKN8gXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTNaFw0yNzA2MDQwODQ1NTNaMDMxMTAvBgNV BAMTKDYyNjRBM0I4NkY5NTFBNzI1QTMyNzZGMUM2QTU4NTgxQkM1RjIxREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCSrf1DDxIWNR6sxjqihYsYzBt u7OYSDquyOVN8WIFp5KVSyfEX2Y6jN9qvYJUgyIzJ4qft3vHiWASgGapSuGUFN70 Nbo/Ed0tZUsAAmZ1QcOWK5xCOPj5O3U+SdP/C507UGYnVtJ48W2p8SotINSPNryJ KrPINP5PL2nlUzyuOfuwtNRzGxAXhPwDzbs5XJkvJEBbx6sofJgbtctA74WemPxm TarPbba3h2q7WBIEqL53AR1FQyrarorc5b1EBZbKOooRALQ21WtYC4ivS0nFJMxt xbAXeT5c0o+2B0UG+cuMAUsbV8UbOSSns8fEhq6paD4OkD6GfxUyHVvhvEAtAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUYmSjuG+VGnJaMnbxxqWFgbxfId8wHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMTQyNTk4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQC7o+gP/8UZQ0kG8zbCguEE9YEnrSR5PQjs /63MsoylFKhxsjSdcHazxxjlnn9JeRH9y8mfu8wTjsmJpc0r/Gtj7cZSrzjeJCIh /X3uoXdfq9XgpQbPv3N5NKeAOt0LjQ/t4B/iJvz7Vbf4k3IvEPXDEQVMXyZhcd08 kyBWcZS486uHNxnjh3Sdwb4RugRS54Jftq38OT2vOzGJ7BmC7jJOAns5kjXe9Kqs CWSSx+yxVmKpCbm8WCxR3KKGkhRUIoWts9dEaixAmXv4j1+SocRph2pLQ+V1cldk dgy8RgooOXEbP1x6iL8SFhmlUS+92S1x94V56sNCvNAxuNwFvY5d -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:08 2026 by rpki-client