$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199765.roa File: AS199765.roa (raw, json) Hash identifier: L2HvUcnGhnRWSh4VtTzmqbdMmyAfXjvKVg2rfHoRwa0= Subject key identifier: 6D:19:D9:BA:B0:70:43:7C:82:66:03:20:34:75:D9:E0:88:36:7C:16 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 1E444298330A204DA8AEB716276398ED9303A495 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199765.roa Signing time: Fri 05 Jun 2026 08:45:54 +0000 ROA not before: Fri 05 Jun 2026 08:40:54 +0000 ROA not after: Fri 04 Jun 2027 08:45:54 +0000 asID: 199765 IP address blocks: 2a07:54c4:1757::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:44:42:98:33:0a:20:4d:a8:ae:b7:16:27:63:98:ed:93:03:a4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:54 2026 GMT Not After : Jun 4 08:45:54 2027 GMT Subject: CN=6D19D9BAB070437C826603203475D9E088367C16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:56:d5:cc:22:bd:f5:14:2c:5b:8e:b8:76: 86:d9:a7:b6:84:0b:37:9e:e5:7b:fc:89:89:16:c5: d1:c7:9b:4a:14:57:75:6f:e2:6a:35:45:fd:04:af: a8:97:2d:9e:72:11:18:f3:a2:c9:a1:3d:e1:2d:a6: ba:08:ca:15:b3:50:1e:c1:85:3f:a5:7c:41:bf:f4: 85:33:84:a0:6d:63:04:29:e6:9d:e3:3c:6f:fb:48: 06:c9:cd:3e:66:69:c3:a4:95:ad:cf:8d:70:e8:78: 77:e7:33:51:90:a9:59:1f:51:e2:de:fb:83:9d:b8: ce:42:d4:d3:e7:02:75:3a:10:7b:4c:47:64:e0:d4: 76:bb:7e:c1:0d:98:79:cd:29:42:b1:8a:19:81:eb: 02:39:fe:14:43:04:6a:54:35:f2:f0:47:85:18:eb: ca:05:08:3c:1a:46:1a:92:9c:c5:4f:17:82:38:76: cd:85:a6:48:e1:22:28:f0:6a:9f:96:7b:a2:b1:e4: 58:d8:67:dd:f3:ef:f2:64:fe:75:9a:4a:2e:c2:18: f2:0b:0f:2c:6a:ec:a8:c4:c7:ab:a5:d7:34:94:b8: 3d:b2:4d:33:21:74:cf:fc:ef:62:09:ac:20:bf:9b: a2:78:c9:2a:a3:6f:51:f3:ea:78:eb:38:5d:6d:be: 19:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:19:D9:BA:B0:70:43:7C:82:66:03:20:34:75:D9:E0:88:36:7C:16 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS199765.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:1757::/48 Signature Algorithm: sha256WithRSAEncryption b4:05:1c:9e:ff:5b:4f:51:0c:23:30:29:c4:50:48:39:06:47: 81:0a:2e:98:57:b7:2c:c8:5b:f0:81:ac:8a:ad:12:d5:36:23: e1:a7:ea:78:ee:d0:99:eb:09:36:d2:6d:c2:b1:8b:b3:2f:8d: c4:12:ba:1a:93:a7:ef:fd:4b:6f:1e:4d:34:3e:17:82:d3:9a: 21:13:8b:c1:30:fc:71:de:8d:9e:c5:29:6d:b3:7b:9a:9b:7b: eb:5f:17:3d:97:ed:5e:36:90:c7:c5:48:2c:50:e3:c2:99:13: bf:ee:ef:e3:f8:eb:94:f5:50:b3:3d:f4:50:6e:e0:a3:e6:b2: 85:f4:16:fa:e5:c8:35:91:84:51:a7:90:06:eb:fa:d2:fd:59: 04:39:e5:73:fa:28:6b:b9:77:ab:1e:2b:d8:32:fb:18:07:a8: f1:19:0e:85:4d:29:91:d6:3e:67:8e:5f:05:58:c2:19:02:5b: d4:0b:59:a7:7e:a5:b7:82:7a:76:2d:45:c6:6b:1b:c8:09:30: c3:ab:40:58:0f:1c:a5:20:56:b9:df:75:82:34:c3:8b:84:27: 90:a0:d6:15:f4:07:a4:c6:0a:a4:9c:38:b1:ef:73:e1:4f:03: 06:46:81:6a:57:3a:00:b3:9c:c4:6f:db:81:51:b5:b2:c8:06: 28:12:75:8b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUHkRCmDMKIE2orrcWJ2OY7ZMDpJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTRaFw0yNzA2MDQwODQ1NTRaMDMxMTAvBgNV BAMTKDZEMTlEOUJBQjA3MDQzN0M4MjY2MDMyMDM0NzVEOUUwODgzNjdDMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDAFbVzCK99RQsW464dobZp7aE Czee5Xv8iYkWxdHHm0oUV3Vv4mo1Rf0Er6iXLZ5yERjzosmhPeEtproIyhWzUB7B hT+lfEG/9IUzhKBtYwQp5p3jPG/7SAbJzT5macOkla3PjXDoeHfnM1GQqVkfUeLe +4OduM5C1NPnAnU6EHtMR2Tg1Ha7fsENmHnNKUKxihmB6wI5/hRDBGpUNfLwR4UY 68oFCDwaRhqSnMVPF4I4ds2FpkjhIijwap+We6Kx5FjYZ93z7/Jk/nWaSi7CGPIL Dyxq7KjEx6ul1zSUuD2yTTMhdM/872IJrCC/m6J4ySqjb1Hz6njrOF1tvhltAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUbRnZurBwQ3yCZgMgNHXZ4Ig2fBYwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMTk5NzY1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU xBdXMA0GCSqGSIb3DQEBCwUAA4IBAQC0BRye/1tPUQwjMCnEUEg5BkeBCi6YV7cs yFvwgayKrRLVNiPhp+p47tCZ6wk20m3CsYuzL43EEroak6fv/UtvHk00PheC05oh E4vBMPxx3o2exSlts3uam3vrXxc9l+1eNpDHxUgsUOPCmRO/7u/j+OuU9VCzPfRQ buCj5rKF9Bb65cg1kYRRp5AG6/rS/VkEOeVz+ihruXerHivYMvsYB6jxGQ6FTSmR 1j5njl8FWMIZAlvUC1mnfqW3gnp2LUXGaxvICTDDq0BYDxylIFa533WCNMOLhCeQ oNYV9AekxgqknDix73PhTwMGRoFqVzoAs5zEb9uBUbWyyAYoEnWL -----END CERTIFICATE-----Generated at Sat Jun 13 10:44:01 2026 by rpki-client