$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS201242.roa File: AS201242.roa (raw, json) Hash identifier: UGN7JG49v2ZMWUB09xtqdT2STAsTukC0DZ/PXB/H09I= Subject key identifier: 7F:00:56:53:50:E4:E5:4B:7C:0D:25:59:64:CA:CC:25:92:7E:49:C2 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 2003783131963A178F2673F8AFF6B43D302727BF Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS201242.roa Signing time: Fri 05 Jun 2026 08:45:54 +0000 ROA not before: Fri 05 Jun 2026 08:40:54 +0000 ROA not after: Fri 04 Jun 2027 08:45:54 +0000 asID: 201242 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:03:78:31:31:96:3a:17:8f:26:73:f8:af:f6:b4:3d:30:27:27:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:54 2026 GMT Not After : Jun 4 08:45:54 2027 GMT Subject: CN=7F00565350E4E54B7C0D255964CACC25927E49C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8a:f9:65:89:92:0c:2d:4c:ac:f0:dd:6c:84: 56:1f:94:16:5f:6a:16:f7:78:41:66:1b:45:3e:3b: 84:e5:76:0c:b2:a2:ac:4e:ac:2f:25:5b:c4:b3:c7: b6:33:cf:f3:76:1f:de:40:b4:30:1f:ef:4e:99:b2: a0:27:59:e5:f4:5a:ba:8a:40:f3:af:dd:c4:f2:71: 7f:a1:3a:c9:9d:70:8e:8f:dd:22:12:d2:67:2a:bd: 4d:bd:6a:59:e8:5a:44:14:b0:d2:56:33:b6:cc:4f: 21:e5:9f:d3:78:89:7d:1a:9f:09:1c:a9:39:39:ad: ae:ec:7a:d7:a6:35:ee:77:3e:be:45:a1:3a:ac:68: 85:c8:87:07:9b:92:ef:2d:2d:c5:f6:f8:be:b5:a4: d9:8d:b8:7e:b7:0a:ce:58:0c:47:68:59:bd:18:35: cd:2d:b6:a8:5c:15:0b:f0:05:b8:41:4b:93:ba:0e: f6:0b:31:e9:73:c2:45:a9:2d:f3:19:e2:d2:3b:19: aa:20:6b:f4:84:cb:74:a4:54:d6:f6:7f:84:53:54: a4:f9:ea:fe:ef:0a:19:ab:fe:9f:e6:42:4c:71:cb: 50:56:12:15:2c:7a:36:86:d6:e1:0b:49:d1:0e:67: 1c:96:e9:82:7f:a8:76:0a:6b:88:ab:48:cb:4b:83: 8c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:00:56:53:50:E4:E5:4B:7C:0D:25:59:64:CA:CC:25:92:7E:49:C2 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS201242.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption af:b6:07:c5:e8:ca:7c:88:fb:c5:ee:85:87:77:03:dd:5d:6d: 1c:6b:27:79:6f:48:cb:c7:c6:de:9b:e4:bb:4e:71:fc:4a:07: 27:ac:8d:de:23:33:b0:56:06:22:ab:3e:8c:91:df:ce:bf:a9: 43:3e:a6:c8:c5:33:be:95:25:63:cf:b6:d1:1f:ed:28:ae:0a: e6:d7:a9:95:fa:ee:d1:df:38:05:a7:cb:8b:96:b2:1f:26:36: 67:db:42:23:71:b4:9e:62:8b:86:3f:18:66:50:bd:96:1b:d9: 13:be:bd:69:a5:1f:98:be:3e:0c:aa:8a:44:f2:8f:85:9c:d7: 48:f9:36:49:04:90:e2:66:ff:e1:45:3a:f7:9d:74:78:65:39: c4:28:d6:b6:f4:4c:a1:d2:07:3f:e5:cf:00:f0:fd:61:0d:ed: 4b:ac:8e:b9:37:8f:ca:c8:af:9a:93:6c:97:5e:4f:d8:61:76: a7:df:7a:fe:90:79:3e:97:64:80:b9:60:f6:96:04:a3:fe:3d: 77:84:d9:9c:92:95:4e:fa:2a:57:d1:a3:98:e8:86:37:3e:7e: f0:1d:96:cf:21:c1:3b:52:97:01:95:c3:eb:35:c9:2e:96:97: 6e:28:bc:52:98:32:62:ab:a5:cb:dd:1b:cc:ba:50:18:59:1c: 36:b6:24:3b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIAN4MTGWOhePJnP4r/a0PTAnJ78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTRaFw0yNzA2MDQwODQ1NTRaMDMxMTAvBgNV BAMTKDdGMDA1NjUzNTBFNEU1NEI3QzBEMjU1OTY0Q0FDQzI1OTI3RTQ5QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQivlliZIMLUys8N1shFYflBZf ahb3eEFmG0U+O4TldgyyoqxOrC8lW8Szx7Yzz/N2H95AtDAf706ZsqAnWeX0WrqK QPOv3cTycX+hOsmdcI6P3SIS0mcqvU29alnoWkQUsNJWM7bMTyHln9N4iX0anwkc qTk5ra7setemNe53Pr5FoTqsaIXIhwebku8tLcX2+L61pNmNuH63Cs5YDEdoWb0Y Nc0ttqhcFQvwBbhBS5O6DvYLMelzwkWpLfMZ4tI7Gaoga/SEy3SkVNb2f4RTVKT5 6v7vChmr/p/mQkxxy1BWEhUsejaG1uELSdEOZxyW6YJ/qHYKa4irSMtLg4wxAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUfwBWU1Dk5Ut8DSVZZMrMJZJ+ScIwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAxMjQyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQCvtgfF6Mp8iPvF7oWHdwPdXW0cayd5b0jL x8bem+S7TnH8SgcnrI3eIzOwVgYiqz6Mkd/Ov6lDPqbIxTO+lSVjz7bRH+0orgrm 16mV+u7R3zgFp8uLlrIfJjZn20IjcbSeYouGPxhmUL2WG9kTvr1ppR+Yvj4MqopE 8o+FnNdI+TZJBJDiZv/hRTr3nXR4ZTnEKNa29Eyh0gc/5c8A8P1hDe1LrI65N4/K yK+ak2yXXk/YYXan33r+kHk+l2SAuWD2lgSj/j13hNmckpVO+ipX0aOY6IY3Pn7w HZbPIcE7UpcBlcPrNckulpduKLxSmDJiq6XL3RvMulAYWRw2tiQ7 -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:21 2026 by rpki-client