$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS205848.roa File: AS205848.roa (raw, json) Hash identifier: 3jbjXU0yJ6DAMvSBNo4QIstsFuR1MO3+QBd9VbvRJKk= Subject key identifier: DD:6F:82:9C:33:C6:37:0E:5B:79:CE:20:34:BD:81:32:6D:8B:99:B2 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 6523FFD976A67FCF96F5B08ADF6C8790E4198086 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS205848.roa Signing time: Fri 05 Jun 2026 08:45:54 +0000 ROA not before: Fri 05 Jun 2026 08:40:54 +0000 ROA not after: Fri 04 Jun 2027 08:45:54 +0000 asID: 205848 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:23:ff:d9:76:a6:7f:cf:96:f5:b0:8a:df:6c:87:90:e4:19:80:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:54 2026 GMT Not After : Jun 4 08:45:54 2027 GMT Subject: CN=DD6F829C33C6370E5B79CE2034BD81326D8B99B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:92:35:ac:c7:cd:27:e2:ee:98:04:89:bd:68: a8:31:7a:42:54:53:e3:81:a7:d1:45:9d:ca:7e:8b: 4b:3c:60:ed:d8:97:4c:a0:c2:b9:12:65:40:e9:5a: ee:f4:26:85:97:0b:8d:6a:18:b6:ca:04:10:0c:54: 24:be:82:b9:4c:80:32:8a:50:20:7a:5f:42:00:5d: f4:03:8a:cd:11:80:e5:5c:4e:73:3c:65:95:2d:4b: 2c:d5:4e:ee:2d:51:3b:40:0f:36:db:68:5c:d4:a6: b6:6f:d7:e6:1d:81:60:f0:be:5b:ce:f4:e9:07:ea: 25:34:e4:fd:6a:67:60:12:81:b8:b5:ea:27:ad:44: 96:3b:45:4d:23:18:4d:a2:fc:a9:b9:7c:d5:ee:8f: fe:8f:6e:4f:89:32:db:9e:f5:ce:d6:37:f4:95:59: d6:34:46:4c:6d:05:a2:c4:f3:77:73:29:9e:7e:a3: f3:21:f2:70:89:ff:8c:e4:ad:ca:f4:27:63:97:26: 6f:7d:b6:01:72:6c:41:9c:78:39:43:13:56:9a:2a: 5f:16:0f:5b:7b:c4:b5:e6:be:cb:a3:af:b6:8b:51: 68:b0:28:1e:ba:10:af:34:b7:21:0a:ac:94:28:29: 2a:36:40:76:aa:13:d5:09:2d:4b:72:4e:1b:f8:98: 45:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6F:82:9C:33:C6:37:0E:5B:79:CE:20:34:BD:81:32:6D:8B:99:B2 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS205848.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 2e:b2:df:02:23:da:6d:96:58:d2:52:f9:95:06:2f:7f:f2:52: 3f:d1:66:98:4d:c2:f2:3b:4c:47:0e:5f:2a:d1:60:98:14:92: 23:89:e2:7b:87:d1:8b:3d:3d:50:a1:23:68:bd:42:39:8b:89: 8e:96:45:e2:4e:3e:ee:f1:a8:e6:b0:7e:9b:46:fd:fb:55:b3: b8:84:be:2f:95:41:11:e3:8d:37:95:48:2e:49:14:4d:42:64: cf:9a:eb:69:13:35:65:59:f1:8e:a6:e7:1c:a9:d7:10:3c:0d: 71:7e:5b:97:a6:0d:5d:98:03:d2:83:50:67:91:a4:73:18:31: 4a:12:6f:80:60:1f:33:d0:45:42:e4:01:73:61:1d:fa:5a:bc: 60:28:d2:32:0a:78:2f:e2:c5:26:cf:08:6a:38:06:8f:2b:a2: a4:93:7e:6a:c9:2c:20:bc:54:6a:e4:79:71:a2:b6:1b:94:fd: df:45:e3:a5:5c:cf:1b:42:9f:e8:89:fa:c8:2d:d2:fb:6a:48: 5c:42:d6:ea:04:f5:2b:51:ea:9a:d2:04:90:98:49:23:c1:9d: ed:25:b2:61:bd:4a:9d:66:77:c7:9d:02:24:ae:7b:e5:43:45: 52:d7:8a:03:c7:43:ba:b7:94:31:09:cf:df:7f:63:8d:dd:98: 93:5e:89:80 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZSP/2Xamf8+W9bCK32yHkOQZgIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTRaFw0yNzA2MDQwODQ1NTRaMDMxMTAvBgNV BAMTKERENkY4MjlDMzNDNjM3MEU1Qjc5Q0UyMDM0QkQ4MTMyNkQ4Qjk5QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkjWsx80n4u6YBIm9aKgxekJU U+OBp9FFncp+i0s8YO3Yl0ygwrkSZUDpWu70JoWXC41qGLbKBBAMVCS+grlMgDKK UCB6X0IAXfQDis0RgOVcTnM8ZZUtSyzVTu4tUTtADzbbaFzUprZv1+YdgWDwvlvO 9OkH6iU05P1qZ2ASgbi16ietRJY7RU0jGE2i/Km5fNXuj/6Pbk+JMtue9c7WN/SV WdY0RkxtBaLE83dzKZ5+o/Mh8nCJ/4zkrcr0J2OXJm99tgFybEGceDlDE1aaKl8W D1t7xLXmvsujr7aLUWiwKB66EK80tyEKrJQoKSo2QHaqE9UJLUtyThv4mEWDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU3W+CnDPGNw5bec4gNL2BMm2LmbIwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA1ODQ4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQAust8CI9ptlljSUvmVBi9/8lI/0WaYTcLy O0xHDl8q0WCYFJIjieJ7h9GLPT1QoSNovUI5i4mOlkXiTj7u8ajmsH6bRv37VbO4 hL4vlUER4403lUguSRRNQmTPmutpEzVlWfGOpuccqdcQPA1xfluXpg1dmAPSg1Bn kaRzGDFKEm+AYB8z0EVC5AFzYR36WrxgKNIyCngv4sUmzwhqOAaPK6Kkk35qySwg vFRq5HlxorYblP3fReOlXM8bQp/oifrILdL7akhcQtbqBPUrUeqa0gSQmEkjwZ3t JbJhvUqdZnfHnQIkrnvlQ0VS14oDx0O6t5QxCc/ff2ON3ZiTXomA -----END CERTIFICATE-----Generated at Sat Jun 13 06:44:57 2026 by rpki-client