$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS202262.roa File: AS202262.roa (raw, json) Hash identifier: MZeOJtFKw3T9cyulEsSYsPYDgIZYPHxMdWfrFPAIr4w= Subject key identifier: 60:60:44:90:37:87:C5:29:C6:F4:71:A4:93:31:2B:DA:66:F9:2B:E2 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 698294C12929B2931285F770A3DFB9693DD91693 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS202262.roa Signing time: Fri 04 Jul 2025 07:51:23 +0000 ROA not before: Fri 04 Jul 2025 07:46:23 +0000 ROA not after: Fri 03 Jul 2026 07:51:23 +0000 asID: 202262 IP address blocks: 2a07:54c1:3000::/40 maxlen: 48 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:82:94:c1:29:29:b2:93:12:85:f7:70:a3:df:b9:69:3d:d9:16:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:23 2025 GMT Not After : Jul 3 07:51:23 2026 GMT Subject: CN=606044903787C529C6F471A493312BDA66F92BE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c5:16:68:ae:63:65:74:62:25:4b:74:5e:b3: d2:42:40:80:17:6c:74:22:11:26:56:44:e2:77:72: cc:9f:0f:8e:bb:c3:3f:05:55:ef:e5:5c:ac:1a:e8: 44:25:40:bc:54:c3:ca:b8:e2:b3:6f:9e:ae:cd:33: 14:6f:22:d4:12:1a:09:6a:7b:d6:d3:f0:96:ad:eb: e8:b2:3f:93:e3:98:cf:99:f6:f0:40:c6:28:17:1b: aa:5f:f8:11:bc:ec:35:f5:13:21:83:88:a5:97:c3: 3f:97:a8:a5:3a:75:f0:c9:e8:e8:95:c1:36:02:9d: b4:e9:7d:92:32:10:b3:2e:03:38:0b:f3:c3:86:86: 25:b4:66:2c:08:59:44:44:79:3b:96:55:3a:66:98: f7:50:34:ca:e5:3c:87:c4:fa:c9:9e:9c:fc:f4:c6: b8:c2:08:ff:56:49:86:29:0b:42:a7:6c:81:ba:76: 67:af:03:83:1a:f1:e0:21:18:df:6d:2d:1f:03:dc: 59:92:d6:2e:4a:3e:df:b6:22:5c:bc:7e:4f:e1:7d: 52:d1:fa:bc:47:ad:ba:a2:ce:03:6a:46:ba:ae:a0: 9f:c4:31:91:9b:95:d3:8d:c3:1e:07:4b:88:e6:8c: fb:09:8a:2f:69:09:e1:10:f3:b2:09:ee:d1:9f:dc: f3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:60:44:90:37:87:C5:29:C6:F4:71:A4:93:31:2B:DA:66:F9:2B:E2 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS202262.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:3000::/40 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 14:5e:b6:b7:d1:1c:a5:e8:21:d5:31:bd:68:7e:de:cd:64:7b: 06:b9:07:2f:7a:99:58:7a:ad:8d:b2:24:e8:6b:8b:35:e2:06: a7:4f:b0:d9:e2:58:2d:02:52:ce:1a:43:6e:4d:e6:a7:69:13: 3d:96:df:0e:82:86:18:1c:e6:70:73:1e:a5:41:9e:27:78:30: 38:f2:62:e1:76:fc:14:22:46:a4:a2:b6:99:d0:f0:ca:18:84: 38:71:bb:1b:2b:65:24:c0:39:3a:b8:ce:6e:27:6d:68:a3:53: 1d:df:25:f0:53:d3:f4:7a:64:91:4f:1c:37:0e:41:06:7a:90: 88:48:bc:68:4f:bb:03:3f:eb:a7:fd:c4:c7:4c:e7:2c:d0:45: 36:4f:e9:c1:fa:b7:a5:80:9e:c4:83:0e:6c:70:32:ed:e5:e4: e5:a3:2c:c2:7e:3e:e9:31:fa:20:f5:fc:00:ab:70:c8:3c:b0: 06:3d:c1:11:af:85:8c:f2:7d:98:d7:7c:4a:f8:51:15:0c:2c: 84:f6:fe:c3:92:5d:ef:f0:74:06:b4:69:b9:9c:c1:ec:e1:27: cf:6c:b1:e0:bd:d3:4f:d0:d2:26:31:ff:49:6d:dc:97:90:e3: 0d:56:6d:f5:81:01:5a:fb:e8:e8:7c:d5:4f:b1:05:97:3b:b6: b5:89:e4:e6 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUaYKUwSkpspMShfdwo9+5aT3ZFpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjNaFw0yNjA3MDMwNzUxMjNaMDMxMTAvBgNV BAMTKDYwNjA0NDkwMzc4N0M1MjlDNkY0NzFBNDkzMzEyQkRBNjZGOTJCRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6xRZormNldGIlS3Res9JCQIAX bHQiESZWROJ3csyfD467wz8FVe/lXKwa6EQlQLxUw8q44rNvnq7NMxRvItQSGglq e9bT8Jat6+iyP5PjmM+Z9vBAxigXG6pf+BG87DX1EyGDiKWXwz+XqKU6dfDJ6OiV wTYCnbTpfZIyELMuAzgL88OGhiW0ZiwIWUREeTuWVTpmmPdQNMrlPIfE+smenPz0 xrjCCP9WSYYpC0KnbIG6dmevA4Ma8eAhGN9tLR8D3FmS1i5KPt+2Ily8fk/hfVLR +rxHrbqizgNqRrquoJ/EMZGbldONwx4HS4jmjPsJii9pCeEQ87IJ7tGf3PPFAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUYGBEkDeHxSnG9HGkkzEr2mb5K+IwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAyMjYyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYAKgdU wTADBwAqB1TCsAswDQYJKoZIhvcNAQELBQADggEBABRetrfRHKXoIdUxvWh+3s1k ewa5By96mVh6rY2yJOhrizXiBqdPsNniWC0CUs4aQ25N5qdpEz2W3w6Chhgc5nBz HqVBnid4MDjyYuF2/BQiRqSitpnQ8MoYhDhxuxsrZSTAOTq4zm4nbWijUx3fJfBT 0/R6ZJFPHDcOQQZ6kIhIvGhPuwM/66f9xMdM5yzQRTZP6cH6t6WAnsSDDmxwMu3l 5OWjLMJ+Pukx+iD1/ACrcMg8sAY9wRGvhYzyfZjXfEr4URUMLIT2/sOSXe/wdAa0 abmcwezhJ89sseC900/Q0iYx/0lt3JeQ4w1WbfWBAVr76Oh81U+xBZc7trWJ5OY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:14:24 2025 by rpki-client