$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200952.roa File: AS200952.roa (raw, json) Hash identifier: rzIRRs07LayDNItjFeit6baIzvVPCqI00rf6E7e8oWk= Subject key identifier: 68:87:3A:1E:D2:0B:4C:85:12:3A:97:6E:F1:EA:70:E4:B0:74:B2:BA Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 74AB6A36DA1BDAC534D5E09E7B2A87266A2085A4 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200952.roa Signing time: Fri 05 Jun 2026 08:45:54 +0000 ROA not before: Fri 05 Jun 2026 08:40:54 +0000 ROA not after: Fri 04 Jun 2027 08:45:54 +0000 asID: 200952 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ab:6a:36:da:1b:da:c5:34:d5:e0:9e:7b:2a:87:26:6a:20:85:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:54 2026 GMT Not After : Jun 4 08:45:54 2027 GMT Subject: CN=68873A1ED20B4C85123A976EF1EA70E4B074B2BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5d:fa:af:d5:42:98:03:4a:be:17:ad:df:fb: 07:0a:f1:50:9c:78:9e:24:62:20:7c:0e:58:ae:87: 0e:33:ab:8b:92:ea:28:00:bc:ef:15:e8:fc:c1:4a: 8b:31:f2:22:16:b1:b8:b8:10:b9:95:a4:1f:3c:1f: 8b:1e:2e:b9:30:03:5c:56:a0:c4:1e:cc:0b:95:3c: 1d:af:f9:ef:5b:4d:4f:4b:f5:3e:62:e7:fb:6e:d2: c9:2f:fe:50:c7:56:0a:2c:01:de:c6:5b:fe:cc:fa: 4f:f9:22:db:67:ac:8a:5e:a7:63:18:79:df:75:be: 37:2c:16:36:cf:93:a7:dd:e2:a1:ef:ed:76:39:7f: 7e:eb:87:06:30:19:35:c4:63:ad:51:3d:40:d3:3f: 69:1c:0d:9e:9f:78:97:7b:26:24:27:88:78:22:f0: e7:54:45:d8:d4:f3:72:ac:29:bf:da:e3:9f:1a:c4: 4d:b5:44:dc:73:1d:7e:3a:8e:18:e7:fe:71:a7:22: 4e:1e:7d:52:85:6d:b8:a9:3f:29:fe:15:75:0f:f0: 8d:39:28:68:b8:00:f5:f4:e4:c7:e8:5a:ef:4f:8b: 63:7e:ce:0c:5f:99:e0:8a:01:e3:74:5f:31:2d:1a: 07:52:e5:5f:57:58:f0:02:11:db:5d:df:4e:c3:c6: 6e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:87:3A:1E:D2:0B:4C:85:12:3A:97:6E:F1:EA:70:E4:B0:74:B2:BA X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS200952.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption a6:68:c8:d6:2e:a6:f5:28:dd:7f:e6:f2:11:91:50:b6:06:cd: 02:96:43:7b:c3:19:f4:a3:04:9a:a4:84:83:83:5b:9e:b6:ba: 9d:ab:c7:c1:50:cb:fd:59:27:60:2c:12:da:73:f0:7a:f8:2f: 83:b2:09:0f:a9:9a:93:d9:57:2b:29:78:ab:76:ab:49:95:2a: 1e:f1:9d:52:64:22:b2:5a:1e:ca:7e:f7:70:9c:30:47:95:4c: d5:45:a3:1d:44:82:bd:e2:ff:24:05:eb:8f:69:11:7e:65:86: d5:05:1c:fd:13:ba:4d:a6:9c:ab:8e:eb:07:d4:9f:79:95:27: 3a:45:20:ea:a9:cd:a5:b4:94:2b:c7:3a:6d:4d:61:47:03:5f: 27:23:4d:79:26:04:7a:7e:e8:41:b4:ce:72:c0:06:27:84:b8: 7a:92:a4:0e:90:7e:b9:c9:38:53:da:36:ac:0d:63:4e:b4:c7: 8e:bd:58:4b:91:77:6d:47:83:d4:02:4a:4a:61:9d:37:36:7d: 6c:95:4d:9b:d6:fd:ca:49:44:d1:c3:3c:87:40:91:52:85:26: cf:3d:70:e7:e5:16:e3:49:61:01:54:39:40:fa:66:f8:32:3d: b2:61:5d:91:e2:a9:55:17:cf:80:82:a9:30:4d:ee:3d:1f:1a: c5:98:25:99 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUdKtqNtob2sU01eCeeyqHJmoghaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTRaFw0yNzA2MDQwODQ1NTRaMDMxMTAvBgNV BAMTKDY4ODczQTFFRDIwQjRDODUxMjNBOTc2RUYxRUE3MEU0QjA3NEIyQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcXfqv1UKYA0q+F63f+wcK8VCc eJ4kYiB8Dliuhw4zq4uS6igAvO8V6PzBSosx8iIWsbi4ELmVpB88H4seLrkwA1xW oMQezAuVPB2v+e9bTU9L9T5i5/tu0skv/lDHVgosAd7GW/7M+k/5IttnrIpep2MY ed91vjcsFjbPk6fd4qHv7XY5f37rhwYwGTXEY61RPUDTP2kcDZ6feJd7JiQniHgi 8OdURdjU83KsKb/a458axE21RNxzHX46jhjn/nGnIk4efVKFbbipPyn+FXUP8I05 KGi4APX05MfoWu9Pi2N+zgxfmeCKAeN0XzEtGgdS5V9XWPACEdtd307Dxm4TAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUaIc6HtILTIUSOpdu8epw5LB0srowHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAwOTUyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQCmaMjWLqb1KN1/5vIRkVC2Bs0ClkN7wxn0 owSapISDg1uetrqdq8fBUMv9WSdgLBLac/B6+C+DsgkPqZqT2VcrKXirdqtJlSoe 8Z1SZCKyWh7KfvdwnDBHlUzVRaMdRIK94v8kBeuPaRF+ZYbVBRz9E7pNppyrjusH 1J95lSc6RSDqqc2ltJQrxzptTWFHA18nI015JgR6fuhBtM5ywAYnhLh6kqQOkH65 yThT2jasDWNOtMeOvVhLkXdtR4PUAkpKYZ03Nn1slU2b1v3KSUTRwzyHQJFShSbP PXDn5RbjSWEBVDlA+mb4Mj2yYV2R4qlVF8+AgqkwTe49HxrFmCWZ -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:14 2026 by rpki-client