$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS206125.roa File: AS206125.roa (raw, json) Hash identifier: IgJ444upDJrwLc6ECkFPmr4ykx+s4jhBiz2TO1bpRw8= Subject key identifier: 3D:16:F5:DE:04:4D:58:27:02:58:DC:B8:37:A9:85:CE:CC:DD:B9:3A Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 4286C1522250EA5C9E18413CE087EC58DBE5EB69 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS206125.roa Signing time: Fri 04 Jul 2025 07:51:24 +0000 ROA not before: Fri 04 Jul 2025 07:46:24 +0000 ROA not after: Fri 03 Jul 2026 07:51:24 +0000 asID: 206125 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:86:c1:52:22:50:ea:5c:9e:18:41:3c:e0:87:ec:58:db:e5:eb:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:24 2025 GMT Not After : Jul 3 07:51:24 2026 GMT Subject: CN=3D16F5DE044D58270258DCB837A985CECCDDB93A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6f:a9:53:7e:5e:09:be:a0:58:47:31:bb:fb: ad:96:ab:7d:24:60:cc:b3:5d:6f:66:fb:a8:18:17: 30:47:b2:8c:a7:92:84:64:f6:64:a2:cf:4a:aa:ab: 45:ff:25:4f:e9:b6:54:02:f1:59:a2:75:27:1f:53: 47:55:ed:71:c0:c8:8e:08:ad:cc:af:1f:0c:ed:24: c5:78:67:3c:e1:86:1c:6e:23:4d:c2:9f:ea:a5:05: cb:cb:ce:9e:a4:46:4b:a2:41:21:fc:f9:82:d7:e1: c9:ce:a1:6d:46:b8:54:e5:c2:cc:a1:13:fb:98:90: 87:1a:fe:b5:5b:b0:37:0c:fe:93:57:73:a6:b0:7a: 50:b7:0d:99:5e:bb:de:26:ca:4e:c8:d8:0f:81:4d: 27:81:db:45:6e:19:2d:1e:36:f3:8d:5c:37:82:ab: ac:25:17:79:e5:6e:5d:3b:da:1f:4d:a6:47:00:56: a1:4b:c2:db:c3:a9:b4:56:f0:01:26:47:8c:44:ab: a2:b3:e1:4f:84:f8:7a:09:5e:dd:02:8f:53:a8:5d: 90:22:14:f6:d8:67:07:d5:50:3f:6a:34:06:f3:08: ce:60:12:e1:e7:48:16:49:de:f5:3d:74:99:3c:80: 02:73:97:23:e1:2e:49:47:63:e9:65:4b:98:8e:0b: d6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:16:F5:DE:04:4D:58:27:02:58:DC:B8:37:A9:85:CE:CC:DD:B9:3A X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS206125.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 18:e0:06:2c:d8:39:20:6d:e4:65:d7:b9:39:03:8b:61:c8:84: ab:8a:1e:0f:a3:77:50:36:dd:2a:ba:bb:e0:f7:44:ec:2b:e8: ab:a1:ec:3f:94:62:10:3d:18:fa:fd:7a:57:08:cb:53:da:72: b0:bb:23:a8:3f:84:f0:f9:7f:62:4e:62:5a:8d:42:72:6f:20: 5a:68:a1:d7:97:16:7e:a0:21:15:4c:12:f4:c8:a6:5f:ea:2d: 75:8d:34:b7:75:b0:e1:bb:b4:4a:61:23:25:74:c2:30:c8:88: be:6b:4e:11:13:b0:59:80:64:c2:98:b7:e2:5a:e0:50:f5:d4: d7:42:c2:87:fa:f1:65:4f:20:40:2c:04:47:55:9f:f5:57:51: 8b:27:c3:03:11:9a:76:f8:01:bb:91:a1:e1:8f:71:d0:07:35: c4:a2:58:4b:5c:50:5e:d0:bd:f2:06:8d:d0:08:0f:3b:1d:d8: f6:bb:52:ff:16:ee:4a:5e:1e:e8:ac:02:88:9b:d9:2b:7c:e3: 44:66:67:a6:14:b6:93:e0:35:3d:bb:f4:9d:8b:83:87:91:af: 71:83:61:23:1a:7f:ea:e1:03:2c:d7:92:db:2d:56:c6:89:60: c1:62:6b:38:14:91:a7:f4:cb:4d:b4:11:fd:b6:ac:df:65:ce: 80:7d:a3:76 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQobBUiJQ6lyeGEE84IfsWNvl62kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjRaFw0yNjA3MDMwNzUxMjRaMDMxMTAvBgNV BAMTKDNEMTZGNURFMDQ0RDU4MjcwMjU4RENCODM3QTk4NUNFQ0NEREI5M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmb6lTfl4JvqBYRzG7+62Wq30k YMyzXW9m+6gYFzBHsoynkoRk9mSiz0qqq0X/JU/ptlQC8VmidScfU0dV7XHAyI4I rcyvHwztJMV4ZzzhhhxuI03Cn+qlBcvLzp6kRkuiQSH8+YLX4cnOoW1GuFTlwsyh E/uYkIca/rVbsDcM/pNXc6awelC3DZleu94myk7I2A+BTSeB20VuGS0eNvONXDeC q6wlF3nlbl072h9NpkcAVqFLwtvDqbRW8AEmR4xEq6Kz4U+E+HoJXt0Cj1OoXZAi FPbYZwfVUD9qNAbzCM5gEuHnSBZJ3vU9dJk8gAJzlyPhLklHY+llS5iOC9bhAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUPRb13gRNWCcCWNy4N6mFzszduTowHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA2MTI1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQAY4AYs2DkgbeRl17k5A4thyISrih4Po3dQ Nt0qurvg90TsK+iroew/lGIQPRj6/XpXCMtT2nKwuyOoP4Tw+X9iTmJajUJybyBa aKHXlxZ+oCEVTBL0yKZf6i11jTS3dbDhu7RKYSMldMIwyIi+a04RE7BZgGTCmLfi WuBQ9dTXQsKH+vFlTyBALARHVZ/1V1GLJ8MDEZp2+AG7kaHhj3HQBzXEolhLXFBe 0L3yBo3QCA87Hdj2u1L/Fu5KXh7orAKIm9krfONEZmemFLaT4DU9u/Sdi4OHka9x g2EjGn/q4QMs15LbLVbGiWDBYms4FJGn9MtNtBH9tqzfZc6AfaN2 -----END CERTIFICATE-----Generated at Tue Nov 4 22:56:42 2025 by rpki-client