$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS198057.roa File: AS198057.roa (raw, json) Hash identifier: EzUXuyOKQKLLFmIsb1y4rbTtgPurJG13Bho8jJ/JC+4= Subject key identifier: 06:78:ED:68:D5:6B:EF:60:CE:BD:3D:76:95:D4:41:16:76:2B:BE:48 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 2C0FBD44A4519CBD8567E8A63DC82DCC4B6BF479 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS198057.roa Signing time: Fri 04 Jul 2025 07:51:23 +0000 ROA not before: Fri 04 Jul 2025 07:46:23 +0000 ROA not after: Fri 03 Jul 2026 07:51:23 +0000 asID: 198057 IP address blocks: 2a07:54c1:44f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0f:bd:44:a4:51:9c:bd:85:67:e8:a6:3d:c8:2d:cc:4b:6b:f4:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:23 2025 GMT Not After : Jul 3 07:51:23 2026 GMT Subject: CN=0678ED68D56BEF60CEBD3D7695D44116762BBE48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4b:5c:db:b6:cf:23:e2:85:44:ec:29:8a:a1: 00:c7:29:9c:28:70:af:c1:2a:0a:23:14:f8:dc:02: d0:fa:ee:08:50:f9:b2:1a:8d:58:bf:e2:8f:6b:a9: c0:f0:2f:da:c3:2b:77:87:22:0f:17:1a:08:20:0e: 77:a5:b8:a6:9d:81:b5:5a:34:a8:21:96:f7:83:40: ab:de:42:6c:ea:79:28:13:65:70:18:db:43:b5:89: a4:ed:11:f3:dd:f9:3b:00:55:59:f6:76:c6:81:01: e7:96:14:81:6f:71:22:af:c1:c2:12:3f:8c:84:a8: a5:02:4f:24:2c:93:f0:f8:ee:e4:46:ae:49:00:bb: b7:55:d5:a5:2f:b6:51:07:68:09:c8:24:bf:d2:e6: a4:8e:33:0b:98:11:3c:e0:ca:3d:98:2f:96:85:c2: df:ab:20:dd:ea:64:69:d6:74:02:da:0f:4c:49:dd: ca:1a:1c:7b:92:02:d9:05:fa:40:b9:03:6e:ae:4a: f1:ad:7b:fc:32:0d:cd:f9:ec:e6:8a:26:73:2b:85: 19:78:ca:f3:cd:99:74:a1:da:35:f4:2a:e2:a7:2c: 44:9c:ee:26:eb:e0:6d:54:c8:6b:9c:f8:b2:0a:b7: 20:96:8e:00:ad:cf:d4:ae:65:5b:71:3e:34:8f:98: a5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:78:ED:68:D5:6B:EF:60:CE:BD:3D:76:95:D4:41:16:76:2B:BE:48 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS198057.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:44f0::/44 Signature Algorithm: sha256WithRSAEncryption b6:a0:1b:21:9f:df:f9:a3:6b:ca:8c:ba:03:7b:2a:fa:6e:c5: 54:27:ef:28:99:2b:bd:cc:f4:6f:eb:c3:43:3a:7b:02:a1:af: a8:cf:3b:52:34:18:0c:f5:e9:54:00:7d:90:97:ff:12:62:71: 95:63:18:ba:3b:a9:1f:7f:04:21:10:46:7c:fc:0b:55:17:35: 40:a4:7e:b5:65:fd:be:0c:d7:0d:93:6c:c4:cc:3a:60:c9:09: 3e:39:69:36:fa:0b:05:59:75:7a:93:23:08:6a:26:84:0e:4b: d7:31:22:c0:82:e9:6b:84:dd:99:2a:95:06:dc:ae:11:b0:0d: ff:65:96:c6:ea:6a:63:9f:86:4c:66:ff:5e:ba:ad:89:99:43: 4e:3b:59:61:7f:e4:cd:09:3d:6b:58:97:78:45:c0:11:ce:35: 93:92:3c:da:e3:18:6a:e6:34:9f:1b:2d:fa:8f:fb:64:31:57: f8:c7:d8:5b:c6:b1:0d:c4:af:9a:ff:95:2d:4a:17:f9:a4:57: d2:e0:86:ea:96:71:07:0d:20:46:b2:b3:c7:2a:ad:2b:ea:3e: d2:b7:10:26:c5:e6:41:60:b6:28:21:1a:94:96:2b:87:b2:be: 7b:8d:0d:8f:83:b8:76:32:75:4d:20:f6:05:10:59:5c:c9:e3: df:62:77:19 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIULA+9RKRRnL2FZ+imPcgtzEtr9HkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjNaFw0yNjA3MDMwNzUxMjNaMDMxMTAvBgNV BAMTKDA2NzhFRDY4RDU2QkVGNjBDRUJEM0Q3Njk1RDQ0MTE2NzYyQkJFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPS1zbts8j4oVE7CmKoQDHKZwo cK/BKgojFPjcAtD67ghQ+bIajVi/4o9rqcDwL9rDK3eHIg8XGgggDneluKadgbVa NKghlveDQKveQmzqeSgTZXAY20O1iaTtEfPd+TsAVVn2dsaBAeeWFIFvcSKvwcIS P4yEqKUCTyQsk/D47uRGrkkAu7dV1aUvtlEHaAnIJL/S5qSOMwuYETzgyj2YL5aF wt+rIN3qZGnWdALaD0xJ3coaHHuSAtkF+kC5A26uSvGte/wyDc357OaKJnMrhRl4 yvPNmXSh2jX0KuKnLESc7ibr4G1UyGuc+LIKtyCWjgCtz9SuZVtxPjSPmKXVAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUBnjtaNVr72DOvT12ldRBFnYrvkgwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMTk4MDU3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgdU wUTwMA0GCSqGSIb3DQEBCwUAA4IBAQC2oBshn9/5o2vKjLoDeyr6bsVUJ+8omSu9 zPRv68NDOnsCoa+ozztSNBgM9elUAH2Ql/8SYnGVYxi6O6kffwQhEEZ8/AtVFzVA pH61Zf2+DNcNk2zEzDpgyQk+OWk2+gsFWXV6kyMIaiaEDkvXMSLAgulrhN2ZKpUG 3K4RsA3/ZZbG6mpjn4ZMZv9euq2JmUNOO1lhf+TNCT1rWJd4RcARzjWTkjza4xhq 5jSfGy36j/tkMVf4x9hbxrENxK+a/5UtShf5pFfS4IbqlnEHDSBGsrPHKq0r6j7S txAmxeZBYLYoIRqUliuHsr57jQ2Pg7h2MnVNIPYFEFlcyePfYncZ -----END CERTIFICATE-----Generated at Tue Nov 4 22:55:19 2025 by rpki-client