$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS203868.roa File: AS203868.roa (raw, json) Hash identifier: WuIugEz1mOukbnjNiCL9bIUymrWV3J1VrtH0E7Q0JnQ= Subject key identifier: E2:AB:CA:F3:1B:04:12:6C:06:EB:48:D3:87:FC:C3:EC:B4:4F:EE:C7 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 66D8C85ABC3A2A0FA3CD417033C421A95E37B00A Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS203868.roa Signing time: Fri 05 Jun 2026 08:45:53 +0000 ROA not before: Fri 05 Jun 2026 08:40:53 +0000 ROA not after: Fri 04 Jun 2027 08:45:53 +0000 asID: 203868 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d8:c8:5a:bc:3a:2a:0f:a3:cd:41:70:33:c4:21:a9:5e:37:b0:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:53 2026 GMT Not After : Jun 4 08:45:53 2027 GMT Subject: CN=E2ABCAF31B04126C06EB48D387FCC3ECB44FEEC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:17:54:02:95:c2:69:a8:bd:8e:a6:81:9a:cb: 19:3b:28:74:44:50:94:13:bd:33:78:ee:4c:d6:45: dc:7c:e8:cf:6d:79:c6:7d:77:f6:f1:2f:e9:48:0c: 49:a6:b2:94:93:e4:19:5b:41:3c:d1:95:36:ca:61: 3a:f8:99:f9:1c:cc:14:0d:b6:fc:3c:dd:b4:f1:ba: 20:69:6f:0a:88:4a:33:bc:b1:40:20:99:2d:59:0f: c1:94:c0:33:8e:09:6b:f5:9f:71:cd:cf:04:4c:ac: 02:e0:df:d8:d4:6d:d1:b3:7b:ca:21:6b:5f:73:8c: 79:e7:1e:4e:af:82:f9:eb:56:0e:eb:d8:40:f2:49: 8c:ef:bc:96:b7:28:d3:be:b1:c2:4d:43:1e:d3:1e: d4:88:70:5f:10:73:cd:bc:5c:8f:6b:7f:5c:4f:b6: e4:88:a5:c5:8e:3c:3d:b6:28:19:5d:66:e9:78:65: 60:86:ef:92:45:08:9f:61:db:88:9c:61:8e:67:c2: ac:fc:0b:53:e9:f4:20:9d:18:00:1f:b0:ba:4c:af: 48:2b:eb:36:6a:af:d2:ee:71:88:cf:82:88:18:28: d7:17:af:4c:01:bb:bb:bd:46:ac:c2:6a:73:30:4e: 0f:d8:01:04:06:46:37:83:94:24:c7:e4:f0:72:1c: da:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AB:CA:F3:1B:04:12:6C:06:EB:48:D3:87:FC:C3:EC:B4:4F:EE:C7 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS203868.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 18:a8:65:d8:9b:66:88:a6:70:2e:03:2c:d9:80:32:4c:c9:3e: c3:d0:83:e1:2e:a3:0d:e2:5c:5d:cf:e6:ea:b5:51:12:85:77: 5e:ad:2c:ac:fa:8a:21:8c:f2:f0:13:0a:f6:c5:bc:99:d3:f0: 07:89:00:b6:c9:74:92:df:ba:a2:93:cc:a0:ee:d8:23:04:4a: c3:0a:e5:37:3f:c9:9c:7b:32:ea:4c:31:ee:e3:76:ab:b4:21: de:5f:78:2e:1f:01:f3:72:2a:c8:3f:59:9c:7b:02:e2:8d:2a: be:23:1d:fb:7c:60:a0:70:59:e9:62:bf:08:3c:b3:29:43:ed: 08:e4:a2:34:7e:68:2d:6d:27:52:0e:e2:83:5f:3f:8c:54:30: 41:2e:2a:dd:6a:63:68:40:6c:8b:36:94:67:da:65:9c:21:27: 78:79:16:09:63:f2:bf:a9:34:df:32:d4:f7:c5:83:14:13:9e: ae:f8:1e:91:d9:f2:67:44:8e:60:cb:7e:28:dd:e3:81:44:00: 36:71:0d:cd:e8:23:10:1a:79:11:6a:5d:47:50:35:8a:0c:2b: 89:0b:bc:28:95:9b:1b:35:80:12:20:30:24:77:71:fb:7d:c0: 20:24:7e:f3:f3:dc:0e:0c:b6:e3:53:78:72:b8:45:26:32:dd: e8:2a:13:c5 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZtjIWrw6Kg+jzUFwM8QhqV43sAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTNaFw0yNzA2MDQwODQ1NTNaMDMxMTAvBgNV BAMTKEUyQUJDQUYzMUIwNDEyNkMwNkVCNDhEMzg3RkNDM0VDQjQ0RkVFQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiF1QClcJpqL2OpoGayxk7KHRE UJQTvTN47kzWRdx86M9tecZ9d/bxL+lIDEmmspST5BlbQTzRlTbKYTr4mfkczBQN tvw83bTxuiBpbwqISjO8sUAgmS1ZD8GUwDOOCWv1n3HNzwRMrALg39jUbdGze8oh a19zjHnnHk6vgvnrVg7r2EDySYzvvJa3KNO+scJNQx7THtSIcF8Qc828XI9rf1xP tuSIpcWOPD22KBldZul4ZWCG75JFCJ9h24icYY5nwqz8C1Pp9CCdGAAfsLpMr0gr 6zZqr9LucYjPgogYKNcXr0wBu7u9RqzCanMwTg/YAQQGRjeDlCTH5PByHNohAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU4qvK8xsEEmwG60jTh/zD7LRP7scwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjAzODY4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQAYqGXYm2aIpnAuAyzZgDJMyT7D0IPhLqMN 4lxdz+bqtVEShXderSys+oohjPLwEwr2xbyZ0/AHiQC2yXSS37qik8yg7tgjBErD CuU3P8mcezLqTDHu43artCHeX3guHwHzcirIP1mcewLijSq+Ix37fGCgcFnpYr8I PLMpQ+0I5KI0fmgtbSdSDuKDXz+MVDBBLirdamNoQGyLNpRn2mWcISd4eRYJY/K/ qTTfMtT3xYMUE56u+B6R2fJnRI5gy34o3eOBRAA2cQ3N6CMQGnkRal1HUDWKDCuJ C7wolZsbNYASIDAkd3H7fcAgJH7z89wODLbjU3hyuEUmMt3oKhPF -----END CERTIFICATE-----Generated at Sat Jun 13 06:44:57 2026 by rpki-client