$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS197532.roa File: AS197532.roa (raw, json) Hash identifier: pMPp+5AegVEODT3dJbzFGx84SF09Qi/tdB0IB5ld9jY= Subject key identifier: 93:9B:49:8B:86:72:C0:73:E0:59:4D:AD:B4:DF:A9:B2:7B:9B:29:05 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 4ACDE4E2AD6D79FD68400A537D331D6E945AE7C9 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS197532.roa Signing time: Fri 05 Jun 2026 08:45:54 +0000 ROA not before: Fri 05 Jun 2026 08:40:54 +0000 ROA not after: Fri 04 Jun 2027 08:45:54 +0000 asID: 197532 IP address blocks: 2a07:54c1:3600::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:cd:e4:e2:ad:6d:79:fd:68:40:0a:53:7d:33:1d:6e:94:5a:e7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:54 2026 GMT Not After : Jun 4 08:45:54 2027 GMT Subject: CN=939B498B8672C073E0594DADB4DFA9B27B9B2905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:eb:c5:31:1e:c6:e8:27:36:f2:20:47:c7:ae: f3:f8:c8:62:71:d9:ba:24:da:d4:cc:71:c2:a8:3a: 65:18:e4:17:27:96:b5:f5:1d:20:cf:bd:fc:a8:fe: 01:fa:ed:58:15:7c:e8:7b:9d:e2:94:d8:f8:1b:7d: 97:8e:c1:3d:be:07:f1:3e:89:96:c5:e2:95:9f:bc: 4a:d3:eb:b9:e0:c1:73:62:34:0d:2d:2e:e7:c4:cb: ce:37:63:c3:61:9c:3a:92:74:bd:71:96:c5:55:0a: 9d:fb:1b:21:03:ae:1e:3c:5c:55:62:56:9d:99:e4: 13:d7:8e:54:4c:80:87:6a:e1:1a:64:0e:38:0e:6a: 9e:34:48:90:08:02:cd:b0:ae:0c:42:93:10:00:f3: 12:1e:e8:9d:b8:e0:2a:5e:03:d4:9b:8d:07:e9:0d: d7:41:3d:3f:3b:39:58:eb:71:39:84:cd:bb:08:8a: e3:55:38:f9:97:e8:70:b9:f4:40:e4:14:76:b1:c3: 9c:9c:b1:63:1d:16:9f:a9:76:55:3b:d8:c5:59:f8: 84:03:62:0f:25:97:ce:f3:53:11:96:ef:86:cb:a0: ac:8e:2f:cc:77:48:f8:b9:6a:30:c8:f1:b8:ef:df: 4e:e9:0e:af:cc:51:5d:5d:64:91:64:15:1d:b7:39: db:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9B:49:8B:86:72:C0:73:E0:59:4D:AD:B4:DF:A9:B2:7B:9B:29:05 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS197532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:3600::/40 Signature Algorithm: sha256WithRSAEncryption 8b:d2:96:8e:27:45:3a:3e:bd:70:9b:f6:e4:bf:51:e6:c5:bb: 96:61:03:37:11:7c:63:a7:2f:c1:26:51:6f:00:0d:c5:ac:67: ed:0e:dd:72:93:27:fd:29:4f:c5:14:11:38:36:64:75:d9:6d: b1:d2:e4:47:6b:9a:73:b8:8f:f6:34:2f:24:43:77:75:01:3a: 31:d0:fb:71:0b:5a:0b:c0:75:8e:1f:79:1a:98:99:8c:12:3d: d0:9d:6b:fa:a2:d6:f2:e3:74:4a:19:15:b0:5a:27:20:b4:78: b2:8c:19:fe:9b:21:3c:f4:eb:dd:a3:90:af:a7:ad:28:51:cd: 36:d3:45:49:6b:e1:7e:3a:0d:c1:d1:df:40:2d:95:73:a8:98: dc:52:69:1c:c4:9b:45:92:43:71:28:ea:33:4f:6e:99:0b:b2: 95:f0:2c:97:4f:8c:82:2e:e6:7c:21:f2:10:b7:59:34:52:f9: e4:64:f5:79:55:fa:da:5b:a3:47:ea:91:ee:9a:a3:7a:0e:88: c2:4a:4a:eb:ce:cd:4e:0a:17:ff:fe:84:93:27:6f:ae:67:71: e1:95:2c:10:87:59:5c:99:8c:22:25:a5:0f:1e:a4:81:64:6e: 0b:64:97:9b:11:8a:ff:9e:9d:42:10:92:ed:d2:1a:58:06:d5: 0e:0b:16:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSs3k4q1tef1oQApTfTMdbpRa58kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTRaFw0yNzA2MDQwODQ1NTRaMDMxMTAvBgNV BAMTKDkzOUI0OThCODY3MkMwNzNFMDU5NERBREI0REZBOUIyN0I5QjI5MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY68UxHsboJzbyIEfHrvP4yGJx 2bok2tTMccKoOmUY5BcnlrX1HSDPvfyo/gH67VgVfOh7neKU2PgbfZeOwT2+B/E+ iZbF4pWfvErT67ngwXNiNA0tLufEy843Y8NhnDqSdL1xlsVVCp37GyEDrh48XFVi Vp2Z5BPXjlRMgIdq4RpkDjgOap40SJAIAs2wrgxCkxAA8xIe6J244CpeA9SbjQfp DddBPT87OVjrcTmEzbsIiuNVOPmX6HC59EDkFHaxw5ycsWMdFp+pdlU72MVZ+IQD Yg8ll87zUxGW74bLoKyOL8x3SPi5ajDI8bjv307pDq/MUV1dZJFkFR23OdspAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk5tJi4ZywHPgWU2ttN+psnubKQUwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMTk3NTMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wTYwDQYJKoZIhvcNAQELBQADggEBAIvSlo4nRTo+vXCb9uS/UebFu5ZhAzcRfGOn L8EmUW8ADcWsZ+0O3XKTJ/0pT8UUETg2ZHXZbbHS5EdrmnO4j/Y0LyRDd3UBOjHQ +3ELWgvAdY4feRqYmYwSPdCda/qi1vLjdEoZFbBaJyC0eLKMGf6bITz0692jkK+n rShRzTbTRUlr4X46DcHR30AtlXOomNxSaRzEm0WSQ3Eo6jNPbpkLspXwLJdPjIIu 5nwh8hC3WTRS+eRk9XlV+tpbo0fqke6ao3oOiMJKSuvOzU4KF//+hJMnb65nceGV LBCHWVyZjCIlpQ8epIFkbgtkl5sRiv+enUIQku3SGlgG1Q4LFoU= -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:08 2026 by rpki-client