$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200952.roa File: AS200952.roa (raw, json) Hash identifier: F+/56T15dEZsFVQk71+c6qrYOC9Mn3oq0IUzN8jdKwk= Subject key identifier: B6:60:EF:E6:EE:6A:F4:47:C4:9E:AD:38:41:8F:0E:68:33:C4:12:02 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 63B4A78476288220BEACF7BA846A1A851B386887 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200952.roa Signing time: Fri 04 Jul 2025 07:51:25 +0000 ROA not before: Fri 04 Jul 2025 07:46:25 +0000 ROA not after: Fri 03 Jul 2026 07:51:25 +0000 asID: 200952 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 01:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b4:a7:84:76:28:82:20:be:ac:f7:ba:84:6a:1a:85:1b:38:68:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:25 2025 GMT Not After : Jul 3 07:51:25 2026 GMT Subject: CN=B660EFE6EE6AF447C49EAD38418F0E6833C41202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2e:d6:b6:05:39:c7:83:d6:8f:de:4d:6a:d0: 5a:bd:e4:81:a6:a4:45:df:52:f7:8b:b9:e4:9d:88: 82:84:d9:77:6c:d2:69:76:eb:d3:9e:2b:76:ab:2a: 84:f8:52:bc:9b:cf:d6:98:2d:e8:66:6d:91:e9:6f: 84:55:0f:46:68:96:b1:f8:b8:70:07:e4:12:11:ba: 13:31:c0:d7:e2:50:1b:09:ac:4a:db:1d:e1:89:31: 2d:84:45:73:0a:0d:a4:2c:48:cf:49:eb:a0:d1:d4: 94:df:48:96:8b:c5:14:2f:5b:7e:ee:5f:ae:89:75: 61:a2:e3:2a:57:ea:26:99:ac:c9:16:22:5c:37:9e: f4:98:e4:f7:ed:0a:fc:d4:e4:cf:32:27:5a:a1:02: 67:eb:ba:4b:b5:2f:2e:c4:a6:1d:96:10:c5:bc:b1: 2d:19:c6:ec:60:41:8b:61:37:1d:57:c6:23:80:ed: 4b:85:6a:26:62:75:f0:21:fe:ba:f1:90:8e:7b:a7: e2:a1:30:f2:57:d3:ed:92:5c:0e:5c:c0:01:53:f6: b2:09:7b:c1:70:51:51:c2:d2:01:38:45:1b:e5:ba: 61:59:20:9d:72:13:7d:9e:23:26:fc:35:b3:e0:f0: 44:ee:71:25:50:39:04:e7:6e:94:07:e8:3c:01:d1: d0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:60:EF:E6:EE:6A:F4:47:C4:9E:AD:38:41:8F:0E:68:33:C4:12:02 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200952.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 9c:4d:49:5f:44:a1:9d:e0:6b:fb:7e:f9:83:4f:a2:e8:02:e8: 50:e4:1c:35:d2:16:9b:13:3b:71:38:f2:70:f2:ab:56:8c:dc: 30:03:17:3e:7a:5b:60:9e:0c:e2:67:fb:0e:b9:cb:94:cb:32: 0c:c3:f6:e7:ce:17:98:d1:a6:03:13:87:bb:05:75:c6:27:d8: c4:d6:ec:c6:b7:20:e0:ac:d6:e5:94:f8:87:ba:dc:f3:f1:98: 52:7b:ac:f7:18:ff:59:97:93:43:9f:34:ae:43:0e:2b:b1:6e: 9b:78:bf:d7:a0:8b:04:bd:ac:c2:fc:b4:9c:bc:b3:3a:0d:00: 64:05:17:46:bd:ff:c8:4d:ca:36:bb:f8:7a:2b:8d:4b:ae:05: a0:72:73:c4:40:35:41:ac:a5:c5:96:b2:ed:84:ae:2f:06:2b: 33:b9:e6:ad:54:bd:e4:a7:52:12:6d:cf:d3:1c:22:d6:5f:87: 58:ac:4f:cf:39:1a:81:46:72:e4:86:60:6d:e6:e3:17:af:3f: a0:13:13:5b:27:4e:a9:ec:e4:f7:14:f1:b6:3b:98:4e:58:95: 52:22:0b:aa:41:47:3a:a8:39:a1:77:cf:51:cf:51:ea:1a:a7: 50:64:4a:5b:e2:21:46:e7:59:8f:43:d8:43:0a:4e:31:5b:6a: 55:b6:72:51 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUY7SnhHYogiC+rPe6hGoahRs4aIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjVaFw0yNjA3MDMwNzUxMjVaMDMxMTAvBgNV BAMTKEI2NjBFRkU2RUU2QUY0NDdDNDlFQUQzODQxOEYwRTY4MzNDNDEyMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaLta2BTnHg9aP3k1q0Fq95IGm pEXfUveLueSdiIKE2Xds0ml269OeK3arKoT4Urybz9aYLehmbZHpb4RVD0ZolrH4 uHAH5BIRuhMxwNfiUBsJrErbHeGJMS2ERXMKDaQsSM9J66DR1JTfSJaLxRQvW37u X66JdWGi4ypX6iaZrMkWIlw3nvSY5PftCvzU5M8yJ1qhAmfruku1Ly7Eph2WEMW8 sS0ZxuxgQYthNx1XxiOA7UuFaiZidfAh/rrxkI57p+KhMPJX0+2SXA5cwAFT9rIJ e8FwUVHC0gE4RRvlumFZIJ1yE32eIyb8NbPg8ETucSVQOQTnbpQH6DwB0dAbAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUtmDv5u5q9EfEnq04QY8OaDPEEgIwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAwOTUyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQCcTUlfRKGd4Gv7fvmDT6LoAuhQ5Bw10hab EztxOPJw8qtWjNwwAxc+eltgngziZ/sOucuUyzIMw/bnzheY0aYDE4e7BXXGJ9jE 1uzGtyDgrNbllPiHutzz8ZhSe6z3GP9Zl5NDnzSuQw4rsW6beL/XoIsEvazC/LSc vLM6DQBkBRdGvf/ITco2u/h6K41LrgWgcnPEQDVBrKXFlrLthK4vBiszueatVL3k p1ISbc/THCLWX4dYrE/PORqBRnLkhmBt5uMXrz+gExNbJ06p7OT3FPG2O5hOWJVS IguqQUc6qDmhd89Rz1HqGqdQZEpb4iFG51mPQ9hDCk4xW2pVtnJR -----END CERTIFICATE-----Generated at Wed Nov 5 13:21:34 2025 by rpki-client