$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200454.roa File: AS200454.roa (raw, json) Hash identifier: +V1PASFpjItQAqrmf38Iayv4lN2jr7w74FF0aPncvRE= Subject key identifier: 89:A9:87:9C:1D:8C:79:B4:46:FD:D5:28:45:D0:FF:79:7B:4E:60:69 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 32A7591ED3911183909D18D68492C3FBC4DE43F4 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200454.roa Signing time: Fri 05 Jun 2026 08:45:53 +0000 ROA not before: Fri 05 Jun 2026 08:40:53 +0000 ROA not after: Fri 04 Jun 2027 08:45:53 +0000 asID: 200454 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 2a07:54c4:1759::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a7:59:1e:d3:91:11:83:90:9d:18:d6:84:92:c3:fb:c4:de:43:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:53 2026 GMT Not After : Jun 4 08:45:53 2027 GMT Subject: CN=89A9879C1D8C79B446FDD52845D0FF797B4E6069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4c:93:ea:db:2e:52:56:2c:f6:07:27:de:f5: 14:f4:42:69:45:bf:ff:8a:0d:09:7d:a0:92:b3:fe: e5:b9:6d:ab:e9:b0:21:d3:99:c3:fe:ee:19:ba:a3: 1f:8b:5a:d0:a2:03:14:50:bb:5f:a1:42:b3:7c:64: 7e:02:3d:0c:83:a0:18:56:3b:36:b6:56:09:a9:37: 55:1d:85:f5:ed:09:90:fe:66:5e:26:c9:d9:82:6e: 7c:b8:8f:ed:ee:0a:41:03:a7:22:2d:b3:0b:65:ca: 2e:3c:52:1e:d7:00:58:4c:60:c9:fd:48:45:28:5e: ea:fc:6d:64:2b:28:00:03:13:15:1e:c9:86:a1:44: a1:86:82:80:9a:0b:2a:71:04:7e:ac:53:37:75:b3: f4:d6:72:a3:01:88:0c:c0:f4:41:87:b7:e0:3d:bc: 34:59:ae:7d:24:ca:95:38:9e:34:e9:cf:d5:d8:6a: 28:a5:e2:aa:3c:99:2a:43:8d:36:bc:91:13:c1:da: c2:1e:25:2d:c6:1c:4f:15:d2:76:a3:bc:99:07:23: 48:e5:94:2e:66:72:60:ab:34:5e:72:62:cd:22:5d: 9e:46:1e:4a:bd:81:ee:9a:6f:88:ac:2d:37:2a:2f: c4:5c:85:ad:cc:7b:56:1f:b2:3b:a9:91:2e:2b:58: 81:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A9:87:9C:1D:8C:79:B4:46:FD:D5:28:45:D0:FF:79:7B:4E:60:69 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200454.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 2a07:54c4:1759::/48 Signature Algorithm: sha256WithRSAEncryption 86:cc:1e:24:1b:e9:9d:c0:d6:89:3c:fd:64:00:87:37:58:0d: 04:44:2b:58:40:25:ec:d2:4c:9d:1c:8e:6e:1b:65:dc:54:e4: fb:89:93:7c:54:e8:b1:ad:35:61:45:46:63:5f:9d:b5:6d:96: ff:0a:9a:89:fc:f8:57:c8:3d:73:a9:83:8a:21:76:f1:7c:1f: 57:fa:21:f9:81:38:c9:09:46:90:aa:a1:e2:ff:1a:ef:c9:c8: 3f:5e:02:7e:37:90:7c:28:d1:93:d1:a8:d1:0a:63:9f:9d:52: df:80:b7:be:40:c5:2a:25:65:ed:6f:57:b5:25:cd:e0:85:e5: 57:07:48:91:cf:ad:10:97:5b:05:a1:43:e3:c2:f2:b5:a7:92: fc:f1:fb:a7:04:14:9a:4c:13:f4:29:a0:b1:e1:51:45:e8:dc: c5:b0:c6:70:30:a6:82:de:17:b7:9f:27:d4:fd:b4:14:f9:00: da:99:0b:13:0a:8a:23:09:f5:ba:d9:9e:05:da:d8:17:8b:f3: ff:ae:bf:b7:d3:06:14:5f:4d:47:29:c6:db:6b:43:61:35:ea: 44:ee:06:b3:e7:29:39:c5:76:bb:e3:0c:96:eb:63:6e:0a:62: 68:db:0c:b3:d8:29:16:68:85:3a:6b:63:cf:ef:af:58:f1:ad: 14:16:7c:03 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUMqdZHtOREYOQnRjWhJLD+8TeQ/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTNaFw0yNzA2MDQwODQ1NTNaMDMxMTAvBgNV BAMTKDg5QTk4NzlDMUQ4Qzc5QjQ0NkZERDUyODQ1RDBGRjc5N0I0RTYwNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwTJPq2y5SViz2Byfe9RT0QmlF v/+KDQl9oJKz/uW5bavpsCHTmcP+7hm6ox+LWtCiAxRQu1+hQrN8ZH4CPQyDoBhW Oza2VgmpN1UdhfXtCZD+Zl4mydmCbny4j+3uCkEDpyItswtlyi48Uh7XAFhMYMn9 SEUoXur8bWQrKAADExUeyYahRKGGgoCaCypxBH6sUzd1s/TWcqMBiAzA9EGHt+A9 vDRZrn0kypU4njTpz9XYaiil4qo8mSpDjTa8kRPB2sIeJS3GHE8V0najvJkHI0jl lC5mcmCrNF5yYs0iXZ5GHkq9ge6ab4isLTcqL8Rcha3Me1YfsjupkS4rWIGZAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUiamHnB2MebRG/dUoRdD/eXtOYGkwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAwNDU0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgdU wrALAwcAKgdUxBdZMA0GCSqGSIb3DQEBCwUAA4IBAQCGzB4kG+mdwNaJPP1kAIc3 WA0ERCtYQCXs0kydHI5uG2XcVOT7iZN8VOixrTVhRUZjX521bZb/CpqJ/PhXyD1z qYOKIXbxfB9X+iH5gTjJCUaQqqHi/xrvycg/XgJ+N5B8KNGT0ajRCmOfnVLfgLe+ QMUqJWXtb1e1Jc3gheVXB0iRz60Ql1sFoUPjwvK1p5L88funBBSaTBP0KaCx4VFF 6NzFsMZwMKaC3he3nyfU/bQU+QDamQsTCoojCfW62Z4F2tgXi/P/rr+30wYUX01H Kcbba0NhNepE7gaz5yk5xXa74wyW62NuCmJo2wyz2CkWaIU6a2PP769Y8a0UFnwD -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:10 2026 by rpki-client