$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204005.roa File: AS204005.roa (raw, json) Hash identifier: 0EZn43jZYoGaERbGgHgo81jaa8Hi4c0T3LGneqy147M= Subject key identifier: F0:6B:92:A4:F9:48:82:93:AE:5E:91:5C:26:3A:59:71:48:37:14:00 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 77F843C353FAE1C6D95E441E66F876A54122A4D6 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204005.roa Signing time: Fri 05 Jun 2026 08:45:53 +0000 ROA not before: Fri 05 Jun 2026 08:40:53 +0000 ROA not after: Fri 04 Jun 2027 08:45:53 +0000 asID: 204005 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f8:43:c3:53:fa:e1:c6:d9:5e:44:1e:66:f8:76:a5:41:22:a4:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:53 2026 GMT Not After : Jun 4 08:45:53 2027 GMT Subject: CN=F06B92A4F9488293AE5E915C263A597148371400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:0a:06:43:86:4d:84:88:10:45:e0:2d:83: 4c:46:59:cd:e5:b4:98:a8:b5:46:45:c6:ae:c6:56: 86:0e:1e:d0:75:5c:7f:97:13:e2:df:c3:60:c4:d4: 3b:2e:e0:ad:28:4c:f5:c5:f4:ff:1f:1b:63:30:09: 60:d1:6c:1e:31:e3:58:66:3c:64:df:42:d9:f9:72: 6c:2e:96:be:ec:3e:71:7f:7b:b5:1f:01:85:19:2c: 43:50:35:e6:43:5c:52:2b:fa:99:5f:68:c4:21:06: c6:95:57:d3:1f:05:c9:e7:59:c1:08:bc:21:db:a0: d6:a0:4a:97:b3:e5:57:f2:e0:46:d2:29:70:6b:6e: f8:ca:8c:0f:4d:ec:78:41:5f:bb:89:80:79:5b:ad: b4:56:7b:3c:ce:d3:2d:ab:1f:aa:0c:28:54:8c:e8: 9d:01:b0:4e:fd:07:aa:61:75:fb:b9:8b:54:65:c9: fb:0c:d0:05:44:17:1a:94:57:08:18:a4:0c:55:8e: 08:b9:5a:c6:c0:3b:06:42:19:48:5e:a7:88:ef:f6: a6:cb:6f:f9:03:72:69:3c:3e:9e:df:1f:15:95:03: cb:41:84:33:7b:45:8e:3b:38:bf:ef:59:8a:5d:25: d8:b2:42:ed:ca:94:7b:2d:51:24:6d:67:d9:ad:93: 6c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6B:92:A4:F9:48:82:93:AE:5E:91:5C:26:3A:59:71:48:37:14:00 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204005.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 2f:43:c1:3c:d0:25:26:cc:e5:71:8b:50:88:6d:5c:b0:b1:54: 3e:89:e9:25:6a:0e:c0:00:43:31:e5:d1:e9:f7:e9:73:40:d3: ef:af:f3:87:f9:11:c8:ef:ff:4c:fa:e4:95:f7:ef:12:db:e8: 68:c1:3c:cd:38:eb:b7:7c:4b:53:dc:4c:07:a8:ed:2a:06:18: 51:dd:cc:d4:56:83:10:df:26:f7:86:91:60:c9:7d:16:6d:8a: f0:bd:cb:8e:df:24:5a:25:e1:eb:0d:f6:eb:d7:4b:0c:c7:b2: d7:c5:11:6a:30:b5:05:a2:c0:fd:4b:5b:ac:90:14:02:d5:9e: f2:6c:b2:e7:26:1e:24:90:e2:2f:66:80:cd:dc:7b:a4:8e:4c: d4:3e:ab:28:80:54:b9:9a:0c:c3:0f:62:ae:dc:8d:57:5b:1d: 56:09:54:0a:41:6f:89:08:0d:31:b1:ee:fc:b7:29:b3:0e:94: 73:ab:e6:ac:2a:b9:68:82:cd:f0:f9:46:08:b5:e9:22:05:d7: 31:a0:21:68:7c:c6:01:95:92:ad:c2:56:2a:60:0e:55:ef:d3: e8:63:39:98:1e:47:94:7b:4a:3a:e4:e6:b1:0c:8c:2a:f7:00: 33:bc:17:0a:97:3e:b2:97:bc:35:f3:f2:5d:7b:91:41:39:8a: 39:90:89:f9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUd/hDw1P64cbZXkQeZvh2pUEipNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTNaFw0yNzA2MDQwODQ1NTNaMDMxMTAvBgNV BAMTKEYwNkI5MkE0Rjk0ODgyOTNBRTVFOTE1QzI2M0E1OTcxNDgzNzE0MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6kgoGQ4ZNhIgQReAtg0xGWc3l tJiotUZFxq7GVoYOHtB1XH+XE+Lfw2DE1Dsu4K0oTPXF9P8fG2MwCWDRbB4x41hm PGTfQtn5cmwulr7sPnF/e7UfAYUZLENQNeZDXFIr+plfaMQhBsaVV9MfBcnnWcEI vCHboNagSpez5Vfy4EbSKXBrbvjKjA9N7HhBX7uJgHlbrbRWezzO0y2rH6oMKFSM 6J0BsE79B6phdfu5i1RlyfsM0AVEFxqUVwgYpAxVjgi5WsbAOwZCGUhep4jv9qbL b/kDcmk8Pp7fHxWVA8tBhDN7RY47OL/vWYpdJdiyQu3KlHstUSRtZ9mtk2zrAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU8GuSpPlIgpOuXpFcJjpZcUg3FAAwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA0MDA1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQAvQ8E80CUmzOVxi1CIbVywsVQ+ieklag7A AEMx5dHp9+lzQNPvr/OH+RHI7/9M+uSV9+8S2+howTzNOOu3fEtT3EwHqO0qBhhR 3czUVoMQ3yb3hpFgyX0WbYrwvcuO3yRaJeHrDfbr10sMx7LXxRFqMLUFosD9S1us kBQC1Z7ybLLnJh4kkOIvZoDN3HukjkzUPqsogFS5mgzDD2Ku3I1XWx1WCVQKQW+J CA0xse78tymzDpRzq+asKrlogs3w+UYItekiBdcxoCFofMYBlZKtwlYqYA5V79Po YzmYHkeUe0o65OaxDIwq9wAzvBcKlz6yl7w18/Jde5FBOYo5kIn5 -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:16 2026 by rpki-client