$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204375.roa File: AS204375.roa (raw, json) Hash identifier: 8oqP3P5Zhxdckzps3JgJ/CzVt/0kxm4xRFulCr9EhSg= Subject key identifier: 1D:5D:0D:AB:5C:96:25:C0:3D:08:F9:CD:2B:B3:3D:63:A1:04:2A:E5 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 35960AF04C9BD1934531F17FD349D511B389B703 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204375.roa Signing time: Fri 05 Jun 2026 08:45:53 +0000 ROA not before: Fri 05 Jun 2026 08:40:53 +0000 ROA not after: Fri 04 Jun 2027 08:45:53 +0000 asID: 204375 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:96:0a:f0:4c:9b:d1:93:45:31:f1:7f:d3:49:d5:11:b3:89:b7:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:53 2026 GMT Not After : Jun 4 08:45:53 2027 GMT Subject: CN=1D5D0DAB5C9625C03D08F9CD2BB33D63A1042AE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6d:ce:59:4b:48:03:bd:b8:35:1e:a9:1f:79: fc:42:61:e5:aa:41:c4:47:d6:76:e3:6e:5d:7a:b8: 1b:f5:26:e5:7d:7d:4a:f0:1a:be:e5:94:36:c9:64: 50:19:92:ca:0e:02:97:ad:37:d2:7e:3b:62:14:da: 19:48:fc:08:b6:59:52:fd:1f:d2:6c:32:ad:6e:f7: 43:46:82:ae:da:a3:55:e1:97:06:89:88:0f:7d:f1: ff:0d:29:3a:29:e9:ee:e6:7c:b2:35:03:92:9a:0c: 8f:83:ee:2b:cd:51:e2:87:15:54:dd:e7:4c:49:34: 84:92:e8:75:fb:5c:49:ee:a8:8c:1f:c5:45:cd:f7: 0e:4e:cb:b0:e6:c4:9c:77:a9:52:0f:af:fc:2e:c9: 60:94:e4:0b:5f:0f:5b:ce:e7:7e:9b:21:c5:ce:de: 5f:36:8d:e2:49:8a:32:c2:3b:4a:eb:d3:a2:56:9d: e8:b0:81:46:08:2a:be:25:1a:4e:74:c3:8f:10:23: 92:20:32:60:70:ff:2d:91:51:7f:9a:23:1b:7e:c8: e5:d6:1b:fc:b7:61:a9:92:d8:43:bb:ff:7b:03:1e: 73:6c:81:ae:5f:b5:a0:fd:75:da:e0:04:88:96:2c: 57:fd:e6:ae:2a:b1:7d:1d:50:02:f8:36:b3:fc:5b: 35:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5D:0D:AB:5C:96:25:C0:3D:08:F9:CD:2B:B3:3D:63:A1:04:2A:E5 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS204375.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 45:a8:df:f0:4f:74:a5:89:6a:84:5b:71:ed:85:23:c4:5b:33: 7e:29:2d:05:5e:66:50:68:e5:c1:af:4d:bd:73:13:6d:90:fc: aa:ec:7a:a0:44:4f:01:a1:20:21:00:c8:69:e6:c2:ba:2c:2c: 0b:ad:9b:22:59:5f:5e:41:a7:92:a0:79:97:fd:65:8e:5f:cf: 2a:01:ed:4f:0f:fb:74:cd:6e:75:ef:84:d4:35:71:7e:84:aa: e0:14:6a:ff:2a:75:91:55:c6:3a:e9:52:63:d0:c3:5b:89:76: 8c:4c:33:ed:ee:08:f8:08:4a:93:96:81:28:11:09:28:f0:88: 10:c3:00:f4:6b:3a:a9:47:2c:25:66:1b:41:99:53:b0:80:87: 64:b2:0b:53:aa:d1:dd:b0:6a:a5:2d:3c:85:2e:8d:0d:b9:c9: 50:53:47:2c:bb:e6:6a:4a:eb:6a:02:5e:e2:73:72:05:cf:6e: 8d:17:67:fb:2f:6f:de:b6:12:d4:21:5f:0e:80:3a:a1:32:86: 87:e8:79:91:1a:1a:06:23:c2:a2:d6:85:40:7d:2c:8a:c3:d9: c0:c0:07:56:8c:24:ba:96:16:8b:c5:14:41:ce:98:e5:85:79: 35:6e:fb:fd:52:86:3f:60:d5:1b:db:11:56:10:8a:5a:0b:e6: 24:39:19:d7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUNZYK8Eyb0ZNFMfF/00nVEbOJtwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTNaFw0yNzA2MDQwODQ1NTNaMDMxMTAvBgNV BAMTKDFENUQwREFCNUM5NjI1QzAzRDA4RjlDRDJCQjMzRDYzQTEwNDJBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNbc5ZS0gDvbg1HqkfefxCYeWq QcRH1nbjbl16uBv1JuV9fUrwGr7llDbJZFAZksoOApetN9J+O2IU2hlI/Ai2WVL9 H9JsMq1u90NGgq7ao1XhlwaJiA998f8NKTop6e7mfLI1A5KaDI+D7ivNUeKHFVTd 50xJNISS6HX7XEnuqIwfxUXN9w5Oy7DmxJx3qVIPr/wuyWCU5AtfD1vO536bIcXO 3l82jeJJijLCO0rr06JWneiwgUYIKr4lGk50w48QI5IgMmBw/y2RUX+aIxt+yOXW G/y3YamS2EO7/3sDHnNsga5ftaD9ddrgBIiWLFf95q4qsX0dUAL4NrP8WzVxAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUHV0Nq1yWJcA9CPnNK7M9Y6EEKuUwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA0Mzc1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQBFqN/wT3SliWqEW3HthSPEWzN+KS0FXmZQ aOXBr029cxNtkPyq7HqgRE8BoSAhAMhp5sK6LCwLrZsiWV9eQaeSoHmX/WWOX88q Ae1PD/t0zW5174TUNXF+hKrgFGr/KnWRVcY66VJj0MNbiXaMTDPt7gj4CEqTloEo EQko8IgQwwD0azqpRywlZhtBmVOwgIdksgtTqtHdsGqlLTyFLo0NuclQU0csu+Zq SutqAl7ic3IFz26NF2f7L2/ethLUIV8OgDqhMoaH6HmRGhoGI8Ki1oVAfSyKw9nA wAdWjCS6lhaLxRRBzpjlhXk1bvv9UoY/YNUb2xFWEIpaC+YkORnX -----END CERTIFICATE-----Generated at Sat Jun 13 10:43:55 2026 by rpki-client