$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199573.roa File: AS199573.roa (raw, json) Hash identifier: xpGVycvDSTZw/KhB4agKASIyY74RbRFmQx/UXJb5O9A= Subject key identifier: 18:BF:D7:0A:62:E5:0F:11:70:F4:C3:30:DF:42:FB:B1:E6:2C:B4:A0 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 59F69ADB8B9E1FF58209C75CD0A6B612CF63426D Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199573.roa Signing time: Fri 04 Jul 2025 07:51:28 +0000 ROA not before: Fri 04 Jul 2025 07:46:28 +0000 ROA not after: Fri 03 Jul 2026 07:51:28 +0000 asID: 199573 IP address blocks: 2a07:54c1:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 01:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f6:9a:db:8b:9e:1f:f5:82:09:c7:5c:d0:a6:b6:12:cf:63:42:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:28 2025 GMT Not After : Jul 3 07:51:28 2026 GMT Subject: CN=18BFD70A62E50F1170F4C330DF42FBB1E62CB4A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:93:cd:23:ca:82:4e:ac:fb:f7:7b:17:0b: ae:bd:59:e0:54:80:b1:68:7b:2c:44:f8:03:fe:d1: 35:33:48:a6:c7:e7:ec:19:6d:82:34:a9:16:a9:cf: 52:dc:37:9e:7c:3c:7a:5e:75:24:c8:28:61:a7:b3: d8:d5:a2:ab:53:16:03:a1:fe:f2:d1:6b:00:55:54: 95:f7:e2:56:ae:d4:7d:a6:6f:ce:9f:5d:65:84:46: 17:f1:59:6c:14:9c:c9:09:63:68:49:7b:05:84:6d: 7d:0d:f0:30:b6:64:79:59:07:4b:4c:c9:0c:c9:3d: 6e:c7:47:44:2d:d7:80:2c:04:5b:6f:3f:12:5f:6a: 00:e2:aa:da:87:1c:56:64:49:30:8f:b4:74:e2:77: 8b:92:a8:e3:30:8f:41:5f:31:b5:9a:1d:6c:ef:b6: 7a:6b:63:a6:02:74:19:53:54:66:f5:c7:3d:79:40: cd:33:02:9c:68:17:4c:81:47:8d:8e:bb:be:85:f7: e8:55:0c:22:a9:fb:70:10:35:14:8d:2a:17:a3:8b: a8:03:4b:6c:a8:50:4d:cb:95:dc:52:1b:89:d2:9b: dc:70:56:aa:04:1a:f9:1b:f3:0c:24:c9:63:35:2d: 1d:50:8f:51:80:3e:9e:4e:0d:e6:b1:6b:15:21:4c: eb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BF:D7:0A:62:E5:0F:11:70:F4:C3:30:DF:42:FB:B1:E6:2C:B4:A0 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199573.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:b000::/40 Signature Algorithm: sha256WithRSAEncryption 9c:16:78:c2:56:6f:92:69:15:56:41:c1:ba:df:50:7e:b6:ce: 39:98:65:d1:d4:9e:c2:3a:c3:5d:dc:1c:2e:7d:5c:78:70:a8: 6b:8c:42:79:26:a9:7c:b5:6b:c7:d0:92:c9:79:d0:e9:a9:0a: b2:2c:3c:a3:14:f2:87:fb:52:55:a1:c1:3e:ed:f0:fb:94:d8: d6:6c:d7:bd:9a:13:a4:96:b4:42:8b:85:db:95:bf:39:38:71: 59:3b:a3:ef:48:c1:b5:48:41:c8:43:31:ba:7e:79:8e:6f:2e: cb:b7:85:aa:43:95:fd:0c:06:73:24:82:5b:14:9e:8a:41:73: 4d:ae:8c:ea:b0:b2:76:86:3a:fc:f6:c5:d6:e0:de:ca:1f:6b: 46:58:77:d8:46:97:12:cb:71:f3:3e:6c:3a:73:1b:ab:40:55: 60:df:5a:55:c8:14:50:40:91:87:66:1a:b5:22:6c:48:c1:81: 78:ff:50:48:6f:e5:2c:3e:cd:22:04:9a:82:b3:f1:dd:59:92: 6d:bc:fb:8c:c1:07:4a:83:a9:70:79:89:84:96:d6:48:41:07: e6:38:c2:bf:4a:42:71:92:9d:c9:54:6c:33:8d:82:4d:0d:f2: f0:eb:cf:71:50:2f:ca:f0:ed:37:5a:1b:21:0a:39:87:ca:70: 1b:ac:0d:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWfaa24ueH/WCCcdc0Ka2Es9jQm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjhaFw0yNjA3MDMwNzUxMjhaMDMxMTAvBgNV BAMTKDE4QkZENzBBNjJFNTBGMTE3MEY0QzMzMERGNDJGQkIxRTYyQ0I0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohZPNI8qCTqz793sXC669WeBU gLFoeyxE+AP+0TUzSKbH5+wZbYI0qRapz1LcN558PHpedSTIKGGns9jVoqtTFgOh /vLRawBVVJX34lau1H2mb86fXWWERhfxWWwUnMkJY2hJewWEbX0N8DC2ZHlZB0tM yQzJPW7HR0Qt14AsBFtvPxJfagDiqtqHHFZkSTCPtHTid4uSqOMwj0FfMbWaHWzv tnprY6YCdBlTVGb1xz15QM0zApxoF0yBR42Ou76F9+hVDCKp+3AQNRSNKheji6gD S2yoUE3LldxSG4nSm9xwVqoEGvkb8wwkyWM1LR1Qj1GAPp5ODeaxaxUhTOu9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGL/XCmLlDxFw9MMw30L7seYstKAwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMTk5NTczLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wbAwDQYJKoZIhvcNAQELBQADggEBAJwWeMJWb5JpFVZBwbrfUH62zjmYZdHUnsI6 w13cHC59XHhwqGuMQnkmqXy1a8fQksl50OmpCrIsPKMU8of7UlWhwT7t8PuU2NZs 172aE6SWtEKLhduVvzk4cVk7o+9IwbVIQchDMbp+eY5vLsu3hapDlf0MBnMkglsU nopBc02ujOqwsnaGOvz2xdbg3sofa0ZYd9hGlxLLcfM+bDpzG6tAVWDfWlXIFFBA kYdmGrUibEjBgXj/UEhv5Sw+zSIEmoKz8d1Zkm28+4zBB0qDqXB5iYSW1khBB+Y4 wr9KQnGSnclUbDONgk0N8vDrz3FQL8rw7TdaGyEKOYfKcBusDQg= -----END CERTIFICATE-----Generated at Wed Nov 5 14:52:04 2025 by rpki-client