$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS203232.roa File: AS203232.roa (raw, json) Hash identifier: DlG8pmVYZ4j+7yG405a1Niak0YDWN1orwyT8oSwV4ng= Subject key identifier: A0:7A:10:EE:D1:12:E6:6E:C8:3E:F2:1D:1E:3B:49:5D:6C:49:E2:53 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 0C89F41C0EDF56178EFE8330DC8966E4752777D4 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS203232.roa Signing time: Fri 05 Jun 2026 08:45:52 +0000 ROA not before: Fri 05 Jun 2026 08:40:52 +0000 ROA not after: Fri 04 Jun 2027 08:45:52 +0000 asID: 203232 IP address blocks: 2a07:54c1:1000::/36 maxlen: 48 2a07:54c4:1754::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:89:f4:1c:0e:df:56:17:8e:fe:83:30:dc:89:66:e4:75:27:77:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:52 2026 GMT Not After : Jun 4 08:45:52 2027 GMT Subject: CN=A07A10EED112E66EC83EF21D1E3B495D6C49E253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:bf:e1:c3:20:e8:f4:dc:0c:aa:ad:4a:56: f8:69:7f:01:19:81:4b:a5:f4:83:ed:f0:7d:c7:e0: 95:18:66:00:33:c3:81:44:9c:31:71:60:a3:66:ff: d9:d6:35:4e:e4:98:c4:44:46:70:a8:a2:ee:1d:82: db:6a:86:c8:5b:90:23:51:be:f7:97:c9:0f:71:0c: 0b:8c:59:58:5c:f0:52:49:6a:9f:db:2d:3d:9c:7e: 59:11:61:c0:8e:70:13:fa:d4:fe:45:5f:af:65:c5: d8:ce:c8:57:b1:3a:32:d9:9b:42:32:fa:ca:06:87: 22:fd:fc:47:87:e4:60:ec:ed:ed:01:23:e6:85:f6: aa:39:1e:5c:12:fc:ee:31:3c:f6:a0:20:25:86:ca: 40:21:96:39:4f:e1:69:93:6f:2b:d6:ca:93:c3:d8: d4:3f:bb:36:2f:1f:0c:2b:0f:ae:36:1f:ee:3f:b2: fb:2a:de:ab:40:56:90:94:30:85:e2:72:7b:cd:f4: 57:dd:11:59:94:43:69:74:65:17:e7:b9:26:5a:67: 18:17:fa:ca:e6:ec:07:a9:ce:c4:06:49:78:d9:50: a6:1f:c3:d7:2a:5a:cf:13:3e:fe:84:b2:4c:da:13: 19:bf:a5:41:b7:65:83:aa:a1:3d:d9:8c:d4:f6:dc: bb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7A:10:EE:D1:12:E6:6E:C8:3E:F2:1D:1E:3B:49:5D:6C:49:E2:53 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS203232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:1000::/36 2a07:54c4:1754::/48 Signature Algorithm: sha256WithRSAEncryption 04:bd:8d:ec:e3:7a:22:10:df:fb:8a:e2:1a:a8:35:8d:96:10: ab:1a:0a:cf:92:ed:de:03:00:a5:5c:7e:c6:da:e8:12:3c:a7: b3:82:5e:54:29:68:a9:52:76:4f:93:51:30:ff:4f:ca:69:bf: eb:29:89:7e:db:2e:d8:94:41:22:fa:3b:33:85:09:3e:c4:48: 8e:b2:8e:47:82:2f:59:24:8a:70:0c:f7:61:e8:61:48:18:e4: ae:12:1c:72:c7:f4:a2:52:e5:f5:fa:d0:ad:45:13:50:1d:48: cc:ad:b9:dd:ac:06:ee:a8:0b:7a:1c:07:77:71:07:b6:97:e0: 96:8d:2d:0a:f5:04:68:82:cf:72:e5:34:01:0e:46:fc:2e:9a: cb:0a:4a:8e:3c:cd:92:5f:0a:48:e2:1f:8c:f4:d4:5d:60:d4: df:f4:f6:8a:4e:3c:92:07:50:22:2e:0e:c6:5b:8e:27:94:59: 21:78:14:76:91:4f:be:54:dc:4f:38:fa:58:72:71:23:e5:e8: 7c:f9:29:e9:b2:fd:1d:63:30:71:45:6d:18:8b:36:1d:6f:6e: 79:f3:23:e5:c6:61:22:27:72:c2:7d:d9:8f:4e:23:46:a6:16: 3e:9b:cf:fd:a2:28:40:c8:e8:06:67:92:ec:10:f4:bf:73:d7: 0f:4e:b2:d7 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUDIn0HA7fVheO/oMw3Ilm5HUnd9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTJaFw0yNzA2MDQwODQ1NTJaMDMxMTAvBgNV BAMTKEEwN0ExMEVFRDExMkU2NkVDODNFRjIxRDFFM0I0OTVENkM0OUUyNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ar/hwyDo9NwMqq1KVvhpfwEZ gUul9IPt8H3H4JUYZgAzw4FEnDFxYKNm/9nWNU7kmMRERnCoou4dgttqhshbkCNR vveXyQ9xDAuMWVhc8FJJap/bLT2cflkRYcCOcBP61P5FX69lxdjOyFexOjLZm0Iy +soGhyL9/EeH5GDs7e0BI+aF9qo5HlwS/O4xPPagICWGykAhljlP4WmTbyvWypPD 2NQ/uzYvHwwrD642H+4/svsq3qtAVpCUMIXicnvN9FfdEVmUQ2l0ZRfnuSZaZxgX +srm7AepzsQGSXjZUKYfw9cqWs8TPv6EskzaExm/pUG3ZYOqoT3ZjNT23Lt9AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUoHoQ7tES5m7IPvIdHjtJXWxJ4lMwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAzMjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYEKgdU wRADBwAqB1TEF1QwDQYJKoZIhvcNAQELBQADggEBAAS9jezjeiIQ3/uK4hqoNY2W EKsaCs+S7d4DAKVcfsba6BI8p7OCXlQpaKlSdk+TUTD/T8ppv+spiX7bLtiUQSL6 OzOFCT7ESI6yjkeCL1kkinAM92HoYUgY5K4SHHLH9KJS5fX60K1FE1AdSMytud2s Bu6oC3ocB3dxB7aX4JaNLQr1BGiCz3LlNAEORvwumssKSo48zZJfCkjiH4z01F1g 1N/09opOPJIHUCIuDsZbjieUWSF4FHaRT75U3E84+lhycSPl6Hz5Kemy/R1jMHFF bRiLNh1vbnnzI+XGYSIncsJ92Y9OI0amFj6bz/2iKEDI6AZnkuwQ9L9z1w9Ostc= -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:20 2026 by rpki-client