
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS205980.roa
File: AS205980.roa (raw, json)
Hash identifier: Ly2vnPEYVQeusH6RAt3eEa+uP6EhmH26HdBFNE+hZ/0=
Subject key identifier: E9:68:6E:77:44:DA:B1:AF:20:B5:2C:E3:36:4F:C8:F4:47:80:40:53
Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial: 7F8963C5D81C5D86F56C08CCE727DE422247E2FE
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS205980.roa
Signing time: Fri 05 Jun 2026 08:45:53 +0000
ROA not before: Fri 05 Jun 2026 08:40:53 +0000
ROA not after: Fri 04 Jun 2027 08:45:53 +0000
asID: 205980
IP address blocks: 2a07:54c1:44e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:89:63:c5:d8:1c:5d:86:f5:6c:08:cc:e7:27:de:42:22:47:e2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Validity
Not Before: Jun 5 08:40:53 2026 GMT
Not After : Jun 4 08:45:53 2027 GMT
Subject: CN=E9686E7744DAB1AF20B52CE3364FC8F447804053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:a7:8b:c3:0c:08:16:50:08:24:2b:68:38:
2c:9f:59:9f:52:32:3f:08:03:4b:ed:9a:c6:8c:36:
ef:4c:5e:3e:27:e4:b2:ce:0d:fa:3e:c6:b0:d6:62:
12:bd:e5:1d:6a:39:ce:2c:4f:1c:9b:16:7a:0b:72:
6f:d1:ff:20:23:96:0c:08:ea:28:c2:e1:30:90:ba:
5b:ae:0c:ca:bc:00:78:24:c8:1e:5c:db:2e:9d:91:
76:5c:69:55:7c:4a:27:aa:2e:26:76:5e:68:87:6b:
2d:3d:3d:bd:f6:cd:77:5e:01:b1:68:cb:cb:f1:3d:
e9:2c:bb:1a:a3:fd:4d:25:69:e1:86:72:9b:06:4f:
43:ba:df:90:dd:22:d8:01:66:3a:ce:60:b7:1f:47:
92:ee:89:ac:84:03:ad:e5:f1:de:72:15:fb:41:9d:
dc:bb:2c:1f:5f:b7:c9:5f:0d:c4:fc:bc:e2:c3:7c:
f0:91:07:01:92:69:19:5f:45:e8:df:f5:41:7e:c5:
69:8b:c3:6d:67:4c:4f:c6:4b:c0:d6:be:55:31:c9:
84:d9:56:83:0c:00:ae:bd:e4:44:31:0d:7c:08:2a:
f4:25:c0:97:c8:c3:ef:9b:b1:46:76:41:d7:ae:76:
50:6a:f7:df:2f:65:67:c0:3c:dc:36:83:3d:d4:e8:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:68:6E:77:44:DA:B1:AF:20:B5:2C:E3:36:4F:C8:F4:47:80:40:53
X509v3 Authority Key Identifier:
keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS205980.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1:44e0::/44
Signature Algorithm: sha256WithRSAEncryption
7b:bd:22:58:c7:6a:67:10:50:68:16:57:98:29:95:ec:1e:14:
9b:f1:7c:54:c3:aa:b9:76:f7:4d:53:bb:6d:ea:cd:55:32:53:
f1:9c:90:84:64:27:c8:14:d6:52:38:20:65:f4:74:d0:1b:77:
43:39:60:44:fd:09:04:36:f8:76:9e:87:86:6c:5f:79:74:2a:
eb:86:81:bc:31:ba:36:f1:36:68:e3:fd:4d:7f:fb:62:de:5c:
17:25:ec:a1:10:19:9d:fe:e1:88:60:74:02:f3:9f:67:84:46:
6c:0d:3d:7b:b8:97:64:57:2a:ff:1a:85:49:7f:60:ac:63:ca:
30:c7:83:1c:f5:cf:d5:97:ad:d2:66:00:54:3d:56:0d:40:81:
44:79:73:a6:b6:ed:f9:cb:69:be:1c:32:30:1c:60:b5:85:b1:
84:3b:87:f7:e9:42:2e:9d:f8:52:2d:2a:5c:d9:e8:64:7b:b1:
6f:ec:24:92:57:27:8c:af:4a:7e:e5:47:16:03:0d:25:91:cf:
39:41:83:58:32:cf:bf:9c:33:03:65:2d:6b:df:c9:85:5a:fe:
30:25:23:8e:12:79:5a:24:59:f0:8e:04:65:c8:1b:1b:4c:1f:
e4:40:c2:f4:89:39:9c:37:f9:ea:30:d8:77:0e:57:08:a7:9c:
ee:e3:3d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:26:18 2026 by rpki-client