$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS203069.roa File: AS203069.roa (raw, json) Hash identifier: IAiK/fdQSoKDK2CuJKuL7uacBtUIuZ4PoBI3cVYGjLc= Subject key identifier: DF:F2:DA:80:E6:42:2C:10:BA:BE:1B:00:79:09:59:A5:1C:4B:55:5A Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 4F380B4EF760DBA500789170D5C91FC315F93D8C Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS203069.roa Signing time: Fri 05 Jun 2026 08:45:53 +0000 ROA not before: Fri 05 Jun 2026 08:40:53 +0000 ROA not after: Fri 04 Jun 2027 08:45:53 +0000 asID: 203069 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:38:0b:4e:f7:60:db:a5:00:78:91:70:d5:c9:1f:c3:15:f9:3d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:53 2026 GMT Not After : Jun 4 08:45:53 2027 GMT Subject: CN=DFF2DA80E6422C10BABE1B00790959A51C4B555A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:b4:15:b3:d0:55:58:a0:50:59:af:26:52: a3:62:6c:4e:e8:5c:8e:90:2e:a9:3a:8c:19:85:ae: 5b:39:d7:0d:90:14:2a:99:45:7a:2c:30:55:0d:6e: ed:38:44:20:62:16:e3:25:95:97:a0:b4:e7:48:d5: b7:01:19:cd:04:6d:85:24:53:aa:70:20:c2:db:ba: 22:87:4d:41:b1:93:f6:8f:77:36:f0:c1:7f:44:37: 3d:80:f2:89:46:c7:ae:11:62:27:5d:2d:7c:ee:dc: 1e:e0:00:db:89:58:be:b8:0b:c1:cc:16:8f:18:ae: 15:c0:8c:5f:a4:68:07:2a:28:b9:e3:96:35:57:96: c9:7c:78:fa:75:41:f7:17:4f:2c:5d:96:a8:56:d5: d4:8d:0c:4d:76:a2:fe:c1:3d:9a:fa:6d:fb:2f:32: b4:36:8b:b1:86:d4:dd:72:78:7e:40:33:c6:b5:c2: 13:f5:93:4d:6e:c1:0d:30:38:28:59:db:8a:24:33: 6d:0c:6e:61:a4:38:32:75:32:fe:12:2e:71:d6:b6: 21:83:62:8a:f3:7d:71:39:fa:33:e2:1c:17:e3:3d: 63:2e:2f:76:bb:e9:5a:0a:7f:d5:77:63:35:ad:20: c3:07:3f:4c:0b:9f:2c:f9:d5:4f:b2:b8:c1:91:98: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F2:DA:80:E6:42:2C:10:BA:BE:1B:00:79:09:59:A5:1C:4B:55:5A X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS203069.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 99:c9:7b:58:58:09:9e:f3:3a:a2:53:c9:30:fb:a7:9d:fe:dd: 0d:f6:e3:e0:84:a8:ad:9a:2c:c1:5b:40:bf:52:23:ac:9a:66: c1:89:ab:33:21:75:7c:82:42:0c:4d:8b:2b:13:14:3f:8a:1e: d0:f6:2f:04:11:0f:e2:13:a9:05:f6:81:32:e0:cb:59:23:d3: 96:d2:90:65:da:d8:13:4e:13:7c:aa:9e:99:22:9e:71:45:b3: 05:85:bb:1d:1e:46:5a:30:2b:d9:5b:e4:5a:4e:2b:b6:42:35: a9:4a:f5:af:27:82:d6:dd:cc:59:b8:67:64:c7:10:9d:56:ee: c3:cc:87:5e:11:51:bc:84:3a:1d:1f:ac:8e:c2:76:32:6d:4c: d2:7a:28:cf:1e:63:b7:5c:1c:53:8f:92:df:b0:6e:f8:1d:11: f4:bf:cc:51:76:ed:a1:1e:e9:48:d9:8e:a9:7b:eb:e6:69:5b: 88:c6:21:c3:9c:1b:3b:ba:ef:a1:4a:c9:2a:23:2f:51:a5:eb: 30:cb:16:87:eb:53:4e:3b:2f:a8:e5:22:23:e1:eb:fb:fc:40: b9:cf:b9:6f:e5:10:cd:c1:e5:92:12:94:51:31:6a:c4:1f:ad: 02:aa:1a:19:37:61:35:70:77:53:7c:22:75:a7:c4:11:93:5b: aa:56:bd:38 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTzgLTvdg26UAeJFw1ckfwxX5PYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTNaFw0yNzA2MDQwODQ1NTNaMDMxMTAvBgNV BAMTKERGRjJEQTgwRTY0MjJDMTBCQUJFMUIwMDc5MDk1OUE1MUM0QjU1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC507QVs9BVWKBQWa8mUqNibE7o XI6QLqk6jBmFrls51w2QFCqZRXosMFUNbu04RCBiFuMllZegtOdI1bcBGc0EbYUk U6pwIMLbuiKHTUGxk/aPdzbwwX9ENz2A8olGx64RYiddLXzu3B7gANuJWL64C8HM Fo8YrhXAjF+kaAcqKLnjljVXlsl8ePp1QfcXTyxdlqhW1dSNDE12ov7BPZr6bfsv MrQ2i7GG1N1yeH5AM8a1whP1k01uwQ0wOChZ24okM20MbmGkODJ1Mv4SLnHWtiGD YorzfXE5+jPiHBfjPWMuL3a76VoKf9V3YzWtIMMHP0wLnyz51U+yuMGRmJ97AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU3/LagOZCLBC6vhsAeQlZpRxLVVowHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAzMDY5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQCZyXtYWAme8zqiU8kw+6ed/t0N9uPghKit mizBW0C/UiOsmmbBiaszIXV8gkIMTYsrExQ/ih7Q9i8EEQ/iE6kF9oEy4MtZI9OW 0pBl2tgTThN8qp6ZIp5xRbMFhbsdHkZaMCvZW+RaTiu2QjWpSvWvJ4LW3cxZuGdk xxCdVu7DzIdeEVG8hDodH6yOwnYybUzSeijPHmO3XBxTj5LfsG74HRH0v8xRdu2h HulI2Y6pe+vmaVuIxiHDnBs7uu+hSskqIy9RpeswyxaH61NOOy+o5SIj4ev7/EC5 z7lv5RDNweWSEpRRMWrEH60CqhoZN2E1cHdTfCJ1p8QRk1uqVr04 -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:16 2026 by rpki-client