$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200676.roa File: AS200676.roa (raw, json) Hash identifier: 13xLkyTvSvg0yrf7YPA8knFwXH6YHeqB7ky+ZDDCbVw= Subject key identifier: 85:5F:34:D9:1D:66:4D:07:52:37:96:31:3B:75:10:1C:01:14:90:5B Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 6CE496B4E7538D012F4B5CD3382B11D219F61DBB Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200676.roa Signing time: Fri 05 Jun 2026 08:45:51 +0000 ROA not before: Fri 05 Jun 2026 08:40:51 +0000 ROA not after: Fri 04 Jun 2027 08:45:51 +0000 asID: 200676 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:e4:96:b4:e7:53:8d:01:2f:4b:5c:d3:38:2b:11:d2:19:f6:1d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:51 2026 GMT Not After : Jun 4 08:45:51 2027 GMT Subject: CN=855F34D91D664D07523796313B75101C0114905B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:96:e7:fe:cc:36:4f:53:2a:7c:7e:ea:77:dc: 5a:64:58:ed:07:91:01:ef:90:8f:0b:4b:da:3a:fe: d6:e6:bf:86:2d:ce:bd:05:ea:97:98:a9:ba:74:e9: 83:b1:75:7c:25:99:86:9e:44:d5:cd:e8:f8:1e:1d: a7:28:e1:a6:c5:3b:12:b8:c9:66:54:58:50:d0:24: bd:c2:bc:77:da:87:58:f6:df:ae:42:f2:f8:43:dc: 4b:4d:3e:ce:44:74:45:b1:7a:57:16:66:7a:89:cf: 8e:79:c0:0c:2e:14:5c:a7:31:4c:bc:17:ba:bb:c6: f0:59:1f:a7:72:6a:2a:cc:02:ef:f4:de:39:b5:2d: 1b:7b:b8:83:6a:30:56:01:01:fb:2b:cb:e6:20:7d: c8:9a:75:1c:79:c6:53:25:55:97:38:78:3c:3f:75: fe:de:dd:cf:a0:40:26:e1:fd:1a:55:16:e5:28:8c: 94:44:b5:db:7a:41:2b:c3:ef:57:0b:c9:dc:f3:de: 1d:d6:9b:94:d4:4e:84:2a:2a:88:f5:23:84:cf:e3: 98:42:cf:6a:1d:47:7e:d0:2f:0d:8c:c6:8f:dd:59: 5b:6a:af:bd:55:13:5f:c7:24:a7:0b:97:54:14:e2: ed:86:79:72:68:be:5c:86:e9:54:e8:25:b0:e6:04: 76:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5F:34:D9:1D:66:4D:07:52:37:96:31:3B:75:10:1C:01:14:90:5B X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 53:b3:ad:45:4a:01:8d:c2:2a:9e:94:df:05:ee:cd:8e:b2:2c: ab:c0:ed:a4:af:04:74:6b:ad:d0:de:b3:6a:d2:48:83:ba:bc: 3c:6b:3f:7c:4e:2d:0b:df:57:db:36:21:ea:aa:fa:0c:85:07: 2a:71:8d:ce:41:aa:ba:d4:e0:05:24:23:3a:b2:36:6d:d9:4d: c6:2a:fc:4f:82:46:36:29:32:3d:e4:af:b9:43:48:bf:a2:33: cf:39:46:80:77:98:2e:5e:c0:68:dd:93:6f:1a:77:9e:04:f1: ca:b8:00:52:8a:2b:5a:9e:4e:f6:db:46:dc:bd:f0:af:76:4c: 39:02:c5:3e:c2:d9:93:b4:52:09:05:a7:24:65:f5:83:d9:14: 5b:1e:c1:8f:b3:11:a7:17:23:58:22:76:11:b4:14:f3:23:f1: a2:a3:01:1f:c2:a0:55:66:3f:12:d3:90:97:1b:75:a7:08:13: 4b:3f:23:f2:e5:ad:b7:76:95:18:bf:fd:b8:04:bb:ca:ea:af: fa:5b:90:e4:c4:f9:7a:df:88:e0:50:d6:57:9a:e8:6a:5e:1e: 6a:ae:30:4c:41:c9:3b:2c:94:f5:39:06:db:ec:0d:3a:d6:84: 77:e5:93:3b:06:2b:85:30:74:05:eb:e8:18:0d:cb:9a:57:0f: 85:b4:32:17 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUbOSWtOdTjQEvS1zTOCsR0hn2HbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV BAMTKDg1NUYzNEQ5MUQ2NjREMDc1MjM3OTYzMTNCNzUxMDFDMDExNDkwNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJluf+zDZPUyp8fup33FpkWO0H kQHvkI8LS9o6/tbmv4Ytzr0F6peYqbp06YOxdXwlmYaeRNXN6PgeHaco4abFOxK4 yWZUWFDQJL3CvHfah1j2365C8vhD3EtNPs5EdEWxelcWZnqJz455wAwuFFynMUy8 F7q7xvBZH6dyairMAu/03jm1LRt7uINqMFYBAfsry+YgfciadRx5xlMlVZc4eDw/ df7e3c+gQCbh/RpVFuUojJREtdt6QSvD71cLydzz3h3Wm5TUToQqKoj1I4TP45hC z2odR37QLw2Mxo/dWVtqr71VE1/HJKcLl1QU4u2GeXJovlyG6VToJbDmBHaDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUhV802R1mTQdSN5YxO3UQHAEUkFswHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAwNjc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQBTs61FSgGNwiqelN8F7s2OsiyrwO2krwR0 a63Q3rNq0kiDurw8az98Ti0L31fbNiHqqvoMhQcqcY3OQaq61OAFJCM6sjZt2U3G KvxPgkY2KTI95K+5Q0i/ojPPOUaAd5guXsBo3ZNvGneeBPHKuABSiitank7220bc vfCvdkw5AsU+wtmTtFIJBackZfWD2RRbHsGPsxGnFyNYInYRtBTzI/GiowEfwqBV Zj8S05CXG3WnCBNLPyPy5a23dpUYv/24BLvK6q/6W5DkxPl634jgUNZXmuhqXh5q rjBMQck7LJT1OQbb7A061oR35ZM7BiuFMHQF6+gYDcuaVw+FtDIX -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:20 2026 by rpki-client