$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200572.roa File: AS200572.roa (raw, json) Hash identifier: Uq8UbftRkVbcvIfligoUlbp5ICQhzPa7RhUVxNBshXA= Subject key identifier: ED:58:14:0B:BB:F7:FE:94:7A:E2:60:81:61:9D:68:36:21:B5:53:24 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 217D392E4DB181E79585C7696DB00F203F6C3148 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200572.roa Signing time: Fri 05 Jun 2026 08:45:53 +0000 ROA not before: Fri 05 Jun 2026 08:40:53 +0000 ROA not after: Fri 04 Jun 2027 08:45:53 +0000 asID: 200572 IP address blocks: 2a07:54c1:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:7d:39:2e:4d:b1:81:e7:95:85:c7:69:6d:b0:0f:20:3f:6c:31:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:53 2026 GMT Not After : Jun 4 08:45:53 2027 GMT Subject: CN=ED58140BBBF7FE947AE26081619D683621B55324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b2:c9:8f:de:83:fb:a7:e4:23:46:fa:85:74: e3:29:41:80:74:76:3b:f7:f3:89:54:7f:0c:67:01: 0a:69:82:59:41:20:5d:41:5a:36:8a:aa:d8:6b:fc: 52:71:fc:c3:40:92:66:73:93:66:29:4b:b8:45:a7: 31:0f:16:d5:5d:e3:80:ec:47:f3:9e:a5:aa:2b:b6: af:a6:39:d6:85:48:62:3b:85:7e:36:08:55:e5:f6: 7f:9e:09:ca:2d:df:c7:20:db:15:26:8d:37:92:90: f9:a9:01:3d:03:80:5f:59:a6:18:17:28:e0:2b:74: cb:6f:ad:b1:a9:25:0c:42:03:e2:85:d5:7a:11:c1: 88:33:00:97:15:2a:23:8a:a5:70:56:15:87:ae:ae: f7:29:fc:ed:1a:58:27:90:a4:e8:92:71:c3:b9:e7: 16:53:d5:a9:42:a1:98:07:c5:5d:90:c7:5a:9d:e2: a5:c7:0d:6b:8a:b6:fc:81:3a:2a:2b:6e:66:e6:e4: 24:82:dc:77:3d:9a:11:d8:43:c6:f0:3e:2c:38:0c: 24:39:0b:be:8f:28:4b:44:cf:69:69:e5:14:dc:da: 68:38:35:b9:a4:88:92:ea:8b:55:c2:cd:e4:7f:a7: dd:d0:fc:db:20:25:04:29:4a:c5:70:5e:47:f8:27: e4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:58:14:0B:BB:F7:FE:94:7A:E2:60:81:61:9D:68:36:21:B5:53:24 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200572.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:4000::/40 Signature Algorithm: sha256WithRSAEncryption 74:3b:d1:2a:a4:2e:6e:92:8c:14:d1:ad:5f:97:f5:8c:b6:cd: 4c:6d:a4:52:e3:6e:4b:d3:f7:6e:82:0e:32:e2:ab:93:69:17: 5e:31:e1:b7:1e:25:a1:09:26:29:03:01:0c:61:7b:5b:81:ee: 05:cc:f3:ae:9b:b6:3f:df:bf:8d:36:f5:a0:3a:41:08:7e:5b: 57:b7:be:83:0f:a6:d1:d4:2b:62:fc:02:c2:f6:38:f2:f7:f8: 00:2b:e8:2c:84:a5:f6:fc:04:81:83:75:78:e3:78:8f:70:41: af:b4:85:16:a8:f4:d5:a1:82:39:8e:ed:fe:73:a5:7f:66:07: f0:e7:56:0e:2a:f7:14:cb:25:87:ef:c8:fc:f7:1c:6c:8a:ba: 43:43:aa:10:45:03:85:32:37:79:1c:e6:b8:8a:ab:39:8a:4c: 7a:b7:b2:c3:c1:93:8b:25:fb:66:e3:cf:26:ca:29:94:6f:b1: 2b:b0:a5:f1:3b:91:2f:c4:eb:7a:13:e0:04:4e:88:18:02:ee: 1b:79:56:3a:86:7f:13:b7:88:ee:04:66:5e:cf:27:1c:64:63: 46:07:da:7d:b7:49:3f:60:52:c4:4a:c3:33:6c:9a:2b:54:23: 35:24:4e:e3:3c:59:80:73:da:6f:c8:d4:cb:af:bf:e4:2b:73: de:f1:42:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIX05Lk2xgeeVhcdpbbAPID9sMUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTNaFw0yNzA2MDQwODQ1NTNaMDMxMTAvBgNV BAMTKEVENTgxNDBCQkJGN0ZFOTQ3QUUyNjA4MTYxOUQ2ODM2MjFCNTUzMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLssmP3oP7p+QjRvqFdOMpQYB0 djv384lUfwxnAQppgllBIF1BWjaKqthr/FJx/MNAkmZzk2YpS7hFpzEPFtVd44Ds R/Oepaortq+mOdaFSGI7hX42CFXl9n+eCcot38cg2xUmjTeSkPmpAT0DgF9ZphgX KOArdMtvrbGpJQxCA+KF1XoRwYgzAJcVKiOKpXBWFYeurvcp/O0aWCeQpOiSccO5 5xZT1alCoZgHxV2Qx1qd4qXHDWuKtvyBOiorbmbm5CSC3Hc9mhHYQ8bwPiw4DCQ5 C76PKEtEz2lp5RTc2mg4NbmkiJLqi1XCzeR/p93Q/NsgJQQpSsVwXkf4J+QhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7VgUC7v3/pR64mCBYZ1oNiG1UyQwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAwNTcyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wUAwDQYJKoZIhvcNAQELBQADggEBAHQ70SqkLm6SjBTRrV+X9Yy2zUxtpFLjbkvT 926CDjLiq5NpF14x4bceJaEJJikDAQxhe1uB7gXM866btj/fv4029aA6QQh+W1e3 voMPptHUK2L8AsL2OPL3+AAr6CyEpfb8BIGDdXjjeI9wQa+0hRao9NWhgjmO7f5z pX9mB/DnVg4q9xTLJYfvyPz3HGyKukNDqhBFA4UyN3kc5riKqzmKTHq3ssPBk4sl +2bjzybKKZRvsSuwpfE7kS/E63oT4AROiBgC7ht5VjqGfxO3iO4EZl7PJxxkY0YH 2n23ST9gUsRKwzNsmitUIzUkTuM8WYBz2m/I1Muvv+Qrc97xQvE= -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:03 2026 by rpki-client