$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199177.roa File: AS199177.roa (raw, json) Hash identifier: 8yDH9CUhmDkdnmHNItjEXzvy0s6VG8BjHn3mG9p0Xg8= Subject key identifier: 70:13:D9:D4:F1:C2:9B:48:9E:63:C6:0E:8C:BC:C9:7C:B9:1B:4B:32 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 27AC4ACDC7E20D7FE826E37CA86C49C2AE25457F Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199177.roa Signing time: Fri 05 Jun 2026 08:45:54 +0000 ROA not before: Fri 05 Jun 2026 08:40:54 +0000 ROA not after: Fri 04 Jun 2027 08:45:54 +0000 asID: 199177 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 07:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ac:4a:cd:c7:e2:0d:7f:e8:26:e3:7c:a8:6c:49:c2:ae:25:45:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:54 2026 GMT Not After : Jun 4 08:45:54 2027 GMT Subject: CN=7013D9D4F1C29B489E63C60E8CBCC97CB91B4B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:bb:4a:0b:ab:00:cc:f9:aa:d8:e0:29:91:61: dd:af:db:7d:9c:42:2c:e1:a4:4e:9e:48:3e:ae:80: 13:0a:71:27:de:51:95:d9:c3:fa:60:ab:d8:59:d3: 54:f6:3e:c4:31:dd:0d:c7:b3:80:fa:b2:89:a9:18: e9:0d:8a:a5:dc:55:bf:62:7a:23:d9:ce:10:20:1e: 95:1a:44:52:6c:95:86:55:2d:f8:fc:5a:0b:68:c9: 04:5b:ed:ae:ae:2f:9f:ac:29:b9:83:7f:17:08:26: 8c:55:86:72:2e:b8:6e:5a:a1:6d:27:c0:43:31:87: a3:67:f2:29:45:36:e4:0b:39:d9:6b:f8:25:8e:98: 44:ad:dc:cf:a2:d7:dd:86:87:87:17:72:b8:0a:27: 5c:be:85:f7:31:dc:6c:1e:68:74:30:e2:70:f9:66: f5:1b:9d:29:ce:b7:e6:49:db:ca:6f:b1:06:19:7b: f6:ab:ed:09:e6:62:66:51:50:02:09:71:71:eb:ef: 0a:ef:2d:7a:a5:6e:82:c7:59:2b:9c:7b:e3:3b:f6: c1:a2:fb:7b:4d:9a:76:27:56:35:2f:21:e4:21:66: fd:1a:51:b9:cd:f6:84:71:17:7a:f4:d8:cc:62:84: 6b:12:ef:f0:7f:40:30:8f:24:d5:01:7d:68:ab:cb: f9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:13:D9:D4:F1:C2:9B:48:9E:63:C6:0E:8C:BC:C9:7C:B9:1B:4B:32 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199177.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 09:11:e6:2b:f1:ce:38:26:7e:98:fb:d2:05:54:05:9e:1a:97: 83:3f:33:ed:cf:a7:78:e2:cd:72:8c:e6:c5:44:4d:cc:d3:98: cf:fe:7e:d8:c6:2e:39:70:72:cc:82:0a:91:10:ea:95:bc:b8: 46:51:1a:52:8e:c8:1b:2d:75:79:b4:8e:ce:32:6e:8d:bc:e6: ec:ba:36:41:f6:42:21:67:74:96:b5:81:1b:5c:4d:b8:1c:b4: bd:3c:7b:68:34:7d:52:4c:e7:26:89:e1:b4:41:8b:6e:dd:49: fe:00:08:d9:b3:d8:03:c5:2a:2e:11:ba:93:d7:b1:13:85:04: ff:d5:52:61:8e:26:b1:f7:8b:50:ff:80:00:fe:60:31:e9:54: 3d:46:0d:a8:ac:22:b0:ec:66:b8:58:45:4a:3e:7f:ad:b6:fb: 89:87:23:b2:b9:10:3c:5e:69:17:37:63:46:5b:e0:44:db:17: 58:d9:21:ad:b0:93:69:5e:42:1c:cb:d5:81:60:cc:78:26:d4: f7:7a:5f:b9:a7:8f:58:8a:d2:f7:82:08:83:87:b0:e2:a6:cd: c2:87:47:e3:fd:da:fc:2e:b7:b7:9c:c1:fc:2c:5f:83:17:8a: 2e:40:3a:76:b0:56:35:23:4d:74:32:fd:7c:fa:41:a6:22:74: ff:fa:05:d7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJ6xKzcfiDX/oJuN8qGxJwq4lRX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTRaFw0yNzA2MDQwODQ1NTRaMDMxMTAvBgNV BAMTKDcwMTNEOUQ0RjFDMjlCNDg5RTYzQzYwRThDQkNDOTdDQjkxQjRCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0u0oLqwDM+arY4CmRYd2v232c QizhpE6eSD6ugBMKcSfeUZXZw/pgq9hZ01T2PsQx3Q3Hs4D6sompGOkNiqXcVb9i eiPZzhAgHpUaRFJslYZVLfj8WgtoyQRb7a6uL5+sKbmDfxcIJoxVhnIuuG5aoW0n wEMxh6Nn8ilFNuQLOdlr+CWOmESt3M+i192Gh4cXcrgKJ1y+hfcx3GweaHQw4nD5 ZvUbnSnOt+ZJ28pvsQYZe/ar7QnmYmZRUAIJcXHr7wrvLXqlboLHWSuce+M79sGi +3tNmnYnVjUvIeQhZv0aUbnN9oRxF3r02MxihGsS7/B/QDCPJNUBfWiry/lpAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUcBPZ1PHCm0ieY8YOjLzJfLkbSzIwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMTk5MTc3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQAJEeYr8c44Jn6Y+9IFVAWeGpeDPzPtz6d4 4s1yjObFRE3M05jP/n7Yxi45cHLMggqREOqVvLhGURpSjsgbLXV5tI7OMm6NvObs ujZB9kIhZ3SWtYEbXE24HLS9PHtoNH1STOcmieG0QYtu3Un+AAjZs9gDxSouEbqT 17EThQT/1VJhjiax94tQ/4AA/mAx6VQ9Rg2orCKw7Ga4WEVKPn+ttvuJhyOyuRA8 XmkXN2NGW+BE2xdY2SGtsJNpXkIcy9WBYMx4JtT3el+5p49YitL3ggiDh7Dips3C h0fj/dr8Lre3nMH8LF+DF4ouQDp2sFY1I010Mv18+kGmInT/+gXX -----END CERTIFICATE-----Generated at Sat Jun 13 12:42:39 2026 by rpki-client