$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199582.roa File: AS199582.roa (raw, json) Hash identifier: wGofTrMZnZtzi8ZKb/DVi7fCTYbtF3BsjVMgZHHnAgY= Subject key identifier: E1:7A:BB:01:B3:13:50:63:F2:89:C9:6A:BC:71:2A:03:38:E6:66:78 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 28E67B4510D40BA59639CC1DDE5093EF2C50B64D Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199582.roa Signing time: Fri 04 Jul 2025 07:51:24 +0000 ROA not before: Fri 04 Jul 2025 07:46:24 +0000 ROA not after: Fri 03 Jul 2026 07:51:24 +0000 asID: 199582 IP address blocks: 2a07:54c1:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 23:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e6:7b:45:10:d4:0b:a5:96:39:cc:1d:de:50:93:ef:2c:50:b6:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:24 2025 GMT Not After : Jul 3 07:51:24 2026 GMT Subject: CN=E17ABB01B3135063F289C96ABC712A0338E66678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:95:18:72:4d:ff:8c:50:5f:40:a1:79:67:e1: 44:0c:3e:cb:25:0b:50:96:c1:8e:55:50:eb:3e:10: b6:ed:f2:2c:62:86:f7:12:13:e4:1a:c0:25:77:6c: 6f:17:7d:99:87:60:12:cb:ef:86:7e:ce:0f:ac:41: c7:41:6b:f5:f5:65:06:2c:73:95:c8:6b:6a:25:28: bc:6d:90:e4:93:04:81:7d:d6:ac:34:7c:f5:5b:30: 83:c4:1b:7a:1f:14:bc:17:92:f4:45:9b:4b:79:31: dc:56:64:46:3e:0e:18:9d:2e:b2:e0:ed:78:d1:41: 0f:28:ec:eb:2c:39:35:f3:bf:d1:e2:cf:29:8e:2a: 9d:1b:02:8a:72:76:52:89:45:af:bc:06:3a:0d:c5: 58:ff:80:0a:ab:db:ff:c1:cc:a1:ae:74:de:6c:8c: 96:88:55:70:49:7f:f9:47:33:7d:5d:da:09:83:3f: 22:92:61:98:d1:0b:f9:7f:92:63:f3:d0:2b:e3:9a: 95:ee:20:55:d5:3a:38:55:f6:2b:b8:7e:55:e4:b6: a5:0d:8c:bd:63:f5:5d:62:89:54:e9:bb:55:54:5d: 47:ab:08:d1:1a:c1:7b:31:09:d8:37:d9:67:0f:4d: d7:35:cc:27:8b:df:6e:7c:4e:9e:1e:5a:28:54:6b: 05:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7A:BB:01:B3:13:50:63:F2:89:C9:6A:BC:71:2A:03:38:E6:66:78 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199582.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:c000::/40 Signature Algorithm: sha256WithRSAEncryption ac:59:37:4b:8c:84:c5:b0:62:20:cd:8f:ca:6c:b8:cf:21:ef: 84:0f:77:ef:0a:88:82:00:fb:a4:c5:c5:42:71:bc:ed:2e:23: ca:66:6e:d9:11:0d:01:37:af:88:69:48:ed:c3:ed:91:81:61: ce:3d:82:e9:26:cb:3f:3c:ea:d0:43:d3:07:d7:aa:1c:ab:f9: d6:b1:2d:6a:f2:bc:a8:e7:d2:5d:cf:df:e9:10:03:e4:96:2a: 37:04:28:7c:86:80:c5:69:2f:7a:17:9a:fb:81:05:c1:63:30: ff:88:c6:f5:a4:c8:61:fa:c1:81:2c:b3:ed:88:da:1e:96:fc: ee:5e:53:5f:0c:11:4e:6b:94:8c:74:59:c4:06:88:e8:ff:49: b2:dd:d8:d7:3e:8c:d3:40:d5:7f:4b:e5:52:92:6b:dc:c0:e1: 36:63:a3:67:56:3a:18:2c:7e:a6:c0:32:58:49:14:6d:00:e0: 55:2b:17:19:2d:57:0d:b4:17:c2:c7:30:20:60:a5:8a:8f:29: 48:6d:ae:be:19:b1:64:95:73:51:88:fb:e5:db:02:6d:f8:fa: 1a:cc:ff:64:23:ae:5f:5b:b6:07:ca:b9:db:c7:7a:2e:b4:cc: 4d:c7:be:3c:57:ed:f3:74:c5:3c:da:4b:72:72:be:4e:dd:b6: d7:43:63:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKOZ7RRDUC6WWOcwd3lCT7yxQtk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjRaFw0yNjA3MDMwNzUxMjRaMDMxMTAvBgNV BAMTKEUxN0FCQjAxQjMxMzUwNjNGMjg5Qzk2QUJDNzEyQTAzMzhFNjY2NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lRhyTf+MUF9AoXln4UQMPssl C1CWwY5VUOs+ELbt8ixihvcSE+QawCV3bG8XfZmHYBLL74Z+zg+sQcdBa/X1ZQYs c5XIa2olKLxtkOSTBIF91qw0fPVbMIPEG3ofFLwXkvRFm0t5MdxWZEY+DhidLrLg 7XjRQQ8o7OssOTXzv9HizymOKp0bAopydlKJRa+8BjoNxVj/gAqr2//BzKGudN5s jJaIVXBJf/lHM31d2gmDPyKSYZjRC/l/kmPz0CvjmpXuIFXVOjhV9iu4flXktqUN jL1j9V1iiVTpu1VUXUerCNEawXsxCdg32WcPTdc1zCeL3258Tp4eWihUawUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Xq7AbMTUGPyiclqvHEqAzjmZngwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMTk5NTgyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wcAwDQYJKoZIhvcNAQELBQADggEBAKxZN0uMhMWwYiDNj8psuM8h74QPd+8KiIIA +6TFxUJxvO0uI8pmbtkRDQE3r4hpSO3D7ZGBYc49gukmyz886tBD0wfXqhyr+dax LWryvKjn0l3P3+kQA+SWKjcEKHyGgMVpL3oXmvuBBcFjMP+IxvWkyGH6wYEss+2I 2h6W/O5eU18MEU5rlIx0WcQGiOj/SbLd2Nc+jNNA1X9L5VKSa9zA4TZjo2dWOhgs fqbAMlhJFG0A4FUrFxktVw20F8LHMCBgpYqPKUhtrr4ZsWSVc1GI++XbAm34+hrM /2Qjrl9btgfKudvHei60zE3HvjxX7fN0xTzaS3Jyvk7dttdDY/w= -----END CERTIFICATE-----Generated at Wed Nov 5 08:40:21 2025 by rpki-client