$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS206125.roa File: AS206125.roa (raw, json) Hash identifier: cgyZvGpbVx2eSVSyizehgmDVU8zZD2MNLp1IxnPHFWI= Subject key identifier: FD:74:E9:7B:BF:CD:62:B1:07:D5:EE:B6:BE:7D:E8:99:EE:F8:C3:94 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 7507922CFE81441D2567DB591411567A414DB3B8 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS206125.roa Signing time: Fri 05 Jun 2026 08:45:51 +0000 ROA not before: Fri 05 Jun 2026 08:40:51 +0000 ROA not after: Fri 04 Jun 2027 08:45:51 +0000 asID: 206125 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:07:92:2c:fe:81:44:1d:25:67:db:59:14:11:56:7a:41:4d:b3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:51 2026 GMT Not After : Jun 4 08:45:51 2027 GMT Subject: CN=FD74E97BBFCD62B107D5EEB6BE7DE899EEF8C394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:b3:63:cb:54:fa:73:37:fb:be:8f:43:90: 08:08:ba:ad:30:67:02:5d:c0:b1:b1:3b:61:9a:84: 0a:59:c8:5b:58:93:06:16:b1:2a:94:1f:8f:9e:67: 59:91:61:1d:f9:02:71:e5:6e:e6:03:bc:cc:ea:da: 46:10:71:d6:38:2e:22:fa:2a:20:f3:37:0d:1b:23: 2f:fd:7a:07:ba:07:ad:d1:85:71:de:27:7d:01:ea: 56:ef:8c:96:54:7d:f1:01:ff:4d:13:21:aa:82:a4: 3e:78:8c:51:ad:b4:e6:94:cf:6e:bb:9e:4e:51:a7: 9e:1b:77:90:50:2f:a0:bb:0c:82:5f:9f:9a:7f:09: d7:7a:08:5d:c9:be:f6:28:01:6a:b3:69:12:48:b9: fb:91:c8:d9:80:6e:a6:9a:ef:c1:60:17:a3:7d:64: 68:10:4a:42:3f:dc:81:a0:fa:44:90:0e:34:ca:b3: de:f2:c7:d8:6d:9d:62:9c:00:d6:ec:44:4b:a3:f5: 8c:b9:27:00:1a:ac:1a:d1:c3:cc:eb:ce:4d:6c:06: ca:60:db:c4:d2:b7:41:e9:bc:6c:c5:8a:f4:92:da: 96:35:73:a3:b0:52:cf:97:8b:2c:e9:da:cc:85:1e: dc:d1:4d:14:36:af:6f:5b:f4:c9:3d:7d:6e:fe:50: 49:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:74:E9:7B:BF:CD:62:B1:07:D5:EE:B6:BE:7D:E8:99:EE:F8:C3:94 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS206125.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 81:77:f8:4e:ff:5e:75:1a:53:76:9d:43:55:82:d6:8d:09:bb: 18:c3:5b:20:71:3f:c3:8f:90:75:14:66:14:b6:20:e2:74:e1: 35:47:39:9f:19:f2:31:3d:8a:b7:5d:a4:d4:61:47:dc:b0:11: 3f:b9:1f:7a:02:f7:fd:53:54:18:aa:3d:cc:69:b0:ec:6f:90: 8d:a1:dc:07:1f:14:c0:f4:c8:89:c0:f0:5f:d0:e2:9a:de:91: 04:fe:68:1f:80:08:4c:37:f8:45:66:90:a4:1c:72:30:68:01: 22:f5:74:27:db:d2:fa:ee:3f:36:68:3b:6c:82:1c:c0:1b:35: 63:6c:3b:0a:45:aa:4a:40:7a:9f:39:99:2f:47:77:b7:92:f5: c3:d9:d9:5d:4f:90:b6:bb:8a:a0:d8:2b:b3:db:3f:f5:22:5c: 78:93:4a:ba:11:31:37:cd:61:2e:26:7b:95:f3:16:af:73:9a: 39:20:e8:52:82:95:f9:f7:1e:36:28:c8:51:1a:09:3d:83:32: ec:55:0a:b4:77:c1:33:6e:da:57:f6:d6:d5:6b:26:40:b9:f1: 39:9c:8a:2a:24:8e:89:35:85:55:fa:21:e3:2b:4d:66:d2:ba: a5:b0:21:22:b2:df:2f:8f:ae:0f:b8:fb:42:25:08:7a:17:d4: 33:10:c4:86 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUdQeSLP6BRB0lZ9tZFBFWekFNs7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV BAMTKEZENzRFOTdCQkZDRDYyQjEwN0Q1RUVCNkJFN0RFODk5RUVGOEMzOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8YrNjy1T6czf7vo9DkAgIuq0w ZwJdwLGxO2GahApZyFtYkwYWsSqUH4+eZ1mRYR35AnHlbuYDvMzq2kYQcdY4LiL6 KiDzNw0bIy/9ege6B63RhXHeJ30B6lbvjJZUffEB/00TIaqCpD54jFGttOaUz267 nk5Rp54bd5BQL6C7DIJfn5p/Cdd6CF3JvvYoAWqzaRJIufuRyNmAbqaa78FgF6N9 ZGgQSkI/3IGg+kSQDjTKs97yx9htnWKcANbsREuj9Yy5JwAarBrRw8zrzk1sBspg 28TSt0HpvGzFivSS2pY1c6OwUs+Xiyzp2syFHtzRTRQ2r29b9Mk9fW7+UEl3AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU/XTpe7/NYrEH1e62vn3ome74w5QwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA2MTI1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQCBd/hO/151GlN2nUNVgtaNCbsYw1sgcT/D j5B1FGYUtiDidOE1RzmfGfIxPYq3XaTUYUfcsBE/uR96Avf9U1QYqj3MabDsb5CN odwHHxTA9MiJwPBf0OKa3pEE/mgfgAhMN/hFZpCkHHIwaAEi9XQn29L67j82aDts ghzAGzVjbDsKRapKQHqfOZkvR3e3kvXD2dldT5C2u4qg2Cuz2z/1Ilx4k0q6ETE3 zWEuJnuV8xavc5o5IOhSgpX59x42KMhRGgk9gzLsVQq0d8EzbtpX9tbVayZAufE5 nIoqJI6JNYVV+iHjK01m0rqlsCEist8vj64PuPtCJQh6F9QzEMSG -----END CERTIFICATE-----Generated at Sat Jun 13 06:44:41 2026 by rpki-client