$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199177.roa File: AS199177.roa (raw, json) Hash identifier: ksz/UV61q+jeic3dWswsr2kxGlbX/pYtdc+QdodBaJI= Subject key identifier: C3:65:03:8D:78:2B:8E:C0:90:D8:39:2B:D2:16:73:7A:3D:FD:0E:2E Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 107033D3F76CC5E7091784AF1124AAD2EF616BC9 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199177.roa Signing time: Fri 04 Jul 2025 07:51:24 +0000 ROA not before: Fri 04 Jul 2025 07:46:24 +0000 ROA not after: Fri 03 Jul 2026 07:51:24 +0000 asID: 199177 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 01:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:70:33:d3:f7:6c:c5:e7:09:17:84:af:11:24:aa:d2:ef:61:6b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:24 2025 GMT Not After : Jul 3 07:51:24 2026 GMT Subject: CN=C365038D782B8EC090D8392BD216737A3DFD0E2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3a:61:fd:6a:16:32:c4:4d:f2:c0:4d:31:57: 53:5f:83:94:ff:51:fb:1b:a5:da:e2:42:28:99:45: 7f:ca:c9:2b:74:00:42:88:d0:f1:de:19:e2:5c:65: 29:bc:0e:93:17:e1:11:73:a4:1c:84:07:b0:01:48: 11:59:af:cb:f1:59:1e:6d:b4:39:5f:80:6c:f3:f4: f9:d6:16:c8:48:89:ad:a6:f8:53:0d:20:8f:90:f5: 2e:b1:61:84:8f:b6:54:a7:9e:6f:90:98:06:60:49: 55:ae:1f:42:f5:a7:79:02:c7:33:3f:88:5d:ae:dc: 52:6c:cb:c2:1a:bf:ec:60:34:c1:b0:86:e7:c5:55: 96:7e:65:a0:2c:73:96:c2:01:7b:66:e7:c7:64:89: f4:b8:0c:f3:4d:6d:0f:90:eb:d7:4f:86:b1:a4:4d: ca:08:6b:05:16:33:9a:f5:57:63:84:f8:ba:27:0b: f0:18:06:16:1c:0c:2b:48:9b:64:8a:ff:0f:ec:28: 88:f5:fb:82:b3:44:2a:86:3b:ed:b8:a1:a0:78:1a: 37:af:b4:f4:f3:ce:3e:20:26:af:6a:9c:f4:be:5d: 46:56:13:ba:1e:81:1e:a7:94:da:cd:6e:6e:74:ba: fb:c1:1e:74:09:58:92:63:6f:45:0b:50:6c:c8:b7: 24:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:65:03:8D:78:2B:8E:C0:90:D8:39:2B:D2:16:73:7A:3D:FD:0E:2E X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199177.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption a9:12:e2:fd:9e:c8:b1:3e:c3:cd:5e:6a:f9:59:91:d3:ef:0d: 4c:e9:a5:f3:59:c6:f9:11:9a:63:38:7f:1a:2a:14:02:5d:61: 9e:98:71:69:34:47:b9:d9:05:ef:c2:ad:a6:1d:cd:e5:9c:0c: c0:87:22:b0:6d:3f:b8:e0:9c:4f:23:e2:64:27:cd:f9:de:57: c6:d8:61:d9:9b:64:b6:2c:6c:28:0e:b6:68:0a:e3:12:2b:ad: 52:2a:54:5b:03:ec:43:0f:35:2d:60:20:1e:b7:e0:2b:fa:ef: 21:b1:b0:4f:9e:fa:3f:6c:64:62:c9:a6:64:6f:2b:b8:21:e1: 53:06:a9:f3:e0:c1:85:a0:37:10:94:18:c5:a1:37:7a:e8:ae: 37:09:f5:61:a9:26:ed:c5:3c:76:67:aa:bd:4e:7c:af:42:1f: 9a:64:bb:d9:f5:50:3c:da:a3:7c:66:4e:7e:57:40:1d:6d:09: 45:a1:75:98:ea:d0:ef:3c:9f:84:1c:cb:19:10:b0:f2:00:4f: 9c:18:c1:52:ed:d0:79:40:fc:bb:0f:c6:0d:2c:9f:6b:aa:e6: e9:c1:04:fe:a7:9b:22:db:93:73:06:e3:8e:bf:45:7d:c9:d1: 4c:db:4a:17:2a:3a:0f:f1:ba:e1:e5:b7:e6:cc:ea:77:a5:e3: 31:39:f9:a1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUEHAz0/dsxecJF4SvESSq0u9ha8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjRaFw0yNjA3MDMwNzUxMjRaMDMxMTAvBgNV BAMTKEMzNjUwMzhENzgyQjhFQzA5MEQ4MzkyQkQyMTY3MzdBM0RGRDBFMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0OmH9ahYyxE3ywE0xV1Nfg5T/ UfsbpdriQiiZRX/KySt0AEKI0PHeGeJcZSm8DpMX4RFzpByEB7ABSBFZr8vxWR5t tDlfgGzz9PnWFshIia2m+FMNII+Q9S6xYYSPtlSnnm+QmAZgSVWuH0L1p3kCxzM/ iF2u3FJsy8Iav+xgNMGwhufFVZZ+ZaAsc5bCAXtm58dkifS4DPNNbQ+Q69dPhrGk TcoIawUWM5r1V2OE+LonC/AYBhYcDCtIm2SK/w/sKIj1+4KzRCqGO+24oaB4Gjev tPTzzj4gJq9qnPS+XUZWE7oegR6nlNrNbm50uvvBHnQJWJJjb0ULUGzItyQZAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUw2UDjXgrjsCQ2Dkr0hZzej39Di4wHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMTk5MTc3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQCpEuL9nsixPsPNXmr5WZHT7w1M6aXzWcb5 EZpjOH8aKhQCXWGemHFpNEe52QXvwq2mHc3lnAzAhyKwbT+44JxPI+JkJ8353lfG 2GHZm2S2LGwoDrZoCuMSK61SKlRbA+xDDzUtYCAet+Ar+u8hsbBPnvo/bGRiyaZk byu4IeFTBqnz4MGFoDcQlBjFoTd66K43CfVhqSbtxTx2Z6q9TnyvQh+aZLvZ9VA8 2qN8Zk5+V0AdbQlFoXWY6tDvPJ+EHMsZELDyAE+cGMFS7dB5QPy7D8YNLJ9rqubp wQT+p5si25NzBuOOv0V9ydFM20oXKjoP8brh5bfmzOp3peMxOfmh -----END CERTIFICATE-----Generated at Wed Nov 5 13:21:31 2025 by rpki-client