$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200227.roa File: AS200227.roa (raw, json) Hash identifier: nwhgwMUig3AoUrYHWKzj5nSj7DZWBnKb65Kx2ICesj8= Subject key identifier: 1A:62:06:4B:43:36:DE:91:BB:0F:A1:D4:79:00:53:2E:57:48:72:69 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 1E320BFFCB7AE49E4941B74261C4EE1D347F7B74 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200227.roa Signing time: Fri 05 Jun 2026 08:45:52 +0000 ROA not before: Fri 05 Jun 2026 08:40:52 +0000 ROA not after: Fri 04 Jun 2027 08:45:52 +0000 asID: 200227 IP address blocks: 2a07:54c1:4500::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:32:0b:ff:cb:7a:e4:9e:49:41:b7:42:61:c4:ee:1d:34:7f:7b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:52 2026 GMT Not After : Jun 4 08:45:52 2027 GMT Subject: CN=1A62064B4336DE91BB0FA1D47900532E57487269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:f0:c3:02:47:9e:18:a8:35:9b:cc:b1:7b: ee:17:c6:2a:8d:0d:d6:3a:2d:57:d5:f6:d8:f4:61: e5:99:fd:0d:38:57:38:66:cc:5d:f5:24:99:98:7c: 5b:a9:a5:50:05:43:39:b5:8b:6c:0e:38:3b:21:96: 6a:1a:97:ee:80:5b:81:3c:ac:bd:ba:c9:86:d0:27: dd:2c:74:e6:04:9b:71:de:f5:0a:b1:e8:10:85:66: 3d:e8:ec:8b:99:ed:1e:74:c1:5f:ad:75:e9:b8:18: 5d:dc:f2:71:c5:68:74:fd:35:4f:88:f9:44:4d:ed: a2:a7:44:2a:8a:48:ef:ca:57:33:db:75:85:96:df: b1:f4:20:a0:07:8a:ec:d7:58:84:a8:69:8c:3b:b0: 12:70:04:b7:79:93:01:0a:f4:f9:7c:71:d8:42:b5: f2:7f:1a:48:4e:a9:a6:57:d2:33:00:df:d7:c2:da: 7a:24:ac:c1:16:92:60:98:3f:66:b2:82:28:b4:1b: e5:d9:bc:7f:a4:5b:32:16:d2:77:15:fc:ed:7e:bd: 98:cc:ee:b7:7e:ef:9c:af:88:ae:30:29:dd:7b:7f: 65:5b:87:b1:b1:a9:92:1e:c1:c9:7a:78:5e:d3:43: 33:b1:5d:19:b4:55:da:26:56:b4:36:c3:d1:6b:92: 14:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:62:06:4B:43:36:DE:91:BB:0F:A1:D4:79:00:53:2E:57:48:72:69 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200227.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:4500::/40 Signature Algorithm: sha256WithRSAEncryption 55:19:a4:42:7b:3b:8b:3c:bf:ec:19:3e:a1:65:c6:93:d5:29: a6:43:83:07:2b:42:0a:ac:35:fa:e6:bc:d6:c2:99:9f:7c:6b: 03:11:bf:4e:b0:fa:b2:82:ef:66:e2:52:24:91:5b:51:87:99: a5:92:d3:e0:6e:ae:b8:f3:3b:d1:97:f8:3c:93:7c:34:21:f9: 01:31:01:3f:ef:26:45:ef:e0:a0:1d:4d:73:13:89:7d:42:f7: b8:20:a2:1d:43:68:e8:ff:ff:35:25:2c:31:3a:80:a0:69:d3: fa:fa:e2:c9:f1:cf:41:dc:2b:c4:2c:dd:86:1c:13:8b:67:43: 49:b3:3d:89:4f:42:cf:35:e8:76:92:34:83:51:c1:89:a9:0a: 4b:56:37:16:a4:ec:01:84:88:f2:9a:a6:c6:83:c8:7b:5c:18: 47:d0:5e:4f:32:f5:53:a6:0c:22:1b:71:41:8d:c2:91:5a:1f: 83:df:da:ca:b2:97:be:f1:79:06:16:a1:77:07:41:0f:4d:63: 79:40:55:71:5e:dc:14:a3:52:a8:c4:7f:c4:ad:53:cc:ea:92: ae:54:4b:66:f3:cb:81:e2:30:78:78:50:39:e1:50:07:a8:6e: 74:64:7a:57:19:92:a8:ae:bd:ec:43:39:7d:79:3a:c8:97:d7: 47:1f:14:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHjIL/8t65J5JQbdCYcTuHTR/e3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTJaFw0yNzA2MDQwODQ1NTJaMDMxMTAvBgNV BAMTKDFBNjIwNjRCNDMzNkRFOTFCQjBGQTFENDc5MDA1MzJFNTc0ODcyNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHTvDDAkeeGKg1m8yxe+4XxiqN DdY6LVfV9tj0YeWZ/Q04VzhmzF31JJmYfFuppVAFQzm1i2wOODshlmoal+6AW4E8 rL26yYbQJ90sdOYEm3He9Qqx6BCFZj3o7IuZ7R50wV+tdem4GF3c8nHFaHT9NU+I +URN7aKnRCqKSO/KVzPbdYWW37H0IKAHiuzXWISoaYw7sBJwBLd5kwEK9Pl8cdhC tfJ/GkhOqaZX0jMA39fC2nokrMEWkmCYP2aygii0G+XZvH+kWzIW0ncV/O1+vZjM 7rd+75yviK4wKd17f2Vbh7GxqZIewcl6eF7TQzOxXRm0VdomVrQ2w9FrkhQVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGmIGS0M23pG7D6HUeQBTLldIcmkwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAwMjI3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wUUwDQYJKoZIhvcNAQELBQADggEBAFUZpEJ7O4s8v+wZPqFlxpPVKaZDgwcrQgqs NfrmvNbCmZ98awMRv06w+rKC72biUiSRW1GHmaWS0+BurrjzO9GX+DyTfDQh+QEx AT/vJkXv4KAdTXMTiX1C97ggoh1DaOj//zUlLDE6gKBp0/r64snxz0HcK8Qs3YYc E4tnQ0mzPYlPQs816HaSNINRwYmpCktWNxak7AGEiPKapsaDyHtcGEfQXk8y9VOm DCIbcUGNwpFaH4Pf2sqyl77xeQYWoXcHQQ9NY3lAVXFe3BSjUqjEf8StU8zqkq5U S2bzy4HiMHh4UDnhUAeobnRkelcZkqiuvexDOX15OsiX10cfFM4= -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:20 2026 by rpki-client