$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS206271.roa File: AS206271.roa (raw, json) Hash identifier: LNpjN6g9EOMYw69uCovOm7OOMT+lWjVmtwj2LC99GJ0= Subject key identifier: 72:84:32:C5:B5:10:CC:1A:81:76:D3:91:E0:7E:F2:C1:53:D3:B3:39 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 632ECAB01CBA3C5173461E11DB4EACBDC4E15AD3 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS206271.roa Signing time: Fri 05 Jun 2026 08:45:51 +0000 ROA not before: Fri 05 Jun 2026 08:40:51 +0000 ROA not after: Fri 04 Jun 2027 08:45:51 +0000 asID: 206271 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2e:ca:b0:1c:ba:3c:51:73:46:1e:11:db:4e:ac:bd:c4:e1:5a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:51 2026 GMT Not After : Jun 4 08:45:51 2027 GMT Subject: CN=728432C5B510CC1A8176D391E07EF2C153D3B339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:7e:5f:6c:25:58:f6:e8:4d:89:ca:99:11: 68:45:88:a1:61:d3:5c:68:c9:15:c6:dd:24:2a:95: ea:a0:50:4c:e4:c4:fd:e3:f3:4d:36:31:93:01:b9: c5:22:fb:e4:63:2f:05:78:f0:2e:7a:56:4c:7d:cb: 25:f1:43:3c:fa:36:59:a4:01:f5:13:eb:ff:34:69: ea:cf:4c:ba:f7:9b:5e:7a:4b:3b:ba:36:f9:9f:a6: e3:57:e2:a2:ac:e3:f6:82:f2:cb:51:3b:5a:83:9b: b2:22:a5:0c:d2:93:01:ba:67:23:39:97:4a:b7:9e: f8:47:6d:b7:67:d8:51:ae:14:68:23:19:24:69:67: cf:b9:f7:2c:e8:9a:7b:d0:57:d9:5f:2f:36:59:f4: 9b:7e:2d:04:8d:56:37:0f:8d:4c:5f:11:bc:5e:86: bd:ff:2d:30:46:05:ac:4a:1f:d2:cc:cf:dd:e9:4e: 34:d9:c6:75:33:35:17:88:dd:3c:fe:a9:81:b9:da: 49:55:f6:49:bb:ed:41:55:50:ff:50:b7:ca:5d:4f: 3d:71:3d:9b:fa:c8:36:6e:2e:47:a7:1b:10:99:f7: a6:99:68:b8:14:8c:50:31:47:be:83:4c:f1:35:f9: 03:3d:81:4b:b1:cf:b6:0d:ad:0e:d2:da:96:92:35: 4b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:84:32:C5:B5:10:CC:1A:81:76:D3:91:E0:7E:F2:C1:53:D3:B3:39 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS206271.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 4b:3e:0a:5b:73:2f:c8:7a:4e:5a:a3:7c:f6:76:5d:e9:07:30: 8b:0b:5a:e8:07:a3:66:1f:bc:6b:7f:4b:6b:cd:b3:c6:d0:38: bf:72:16:0c:a9:17:3d:c4:6a:b4:ca:ec:fc:30:32:d8:38:4e: e5:b7:6a:b8:ef:ce:f7:85:c0:b0:71:67:75:0a:d2:cc:33:7d: d6:af:fc:c2:08:ee:00:f2:76:d8:26:ea:57:c2:30:d4:82:12: 40:40:66:e0:1c:b9:c1:11:37:46:77:57:41:ff:22:88:1c:23: eb:63:3d:1d:70:dc:d4:af:f8:cd:69:e9:45:cb:98:f0:41:ca: 32:60:b4:76:24:70:27:c9:dd:38:e0:e0:4d:7c:34:e5:ca:6e: 8c:7f:25:11:30:a0:c2:7e:a6:98:b3:e0:70:20:73:17:80:47: fb:a9:7a:2d:11:fa:2c:a8:0f:b0:10:08:a8:cd:82:af:95:dd: 42:97:52:21:f8:4d:83:fd:27:ca:fe:37:3f:a8:c8:00:91:97: 64:ad:9b:2c:31:6c:de:03:66:82:29:52:b6:73:13:9f:34:ef: 38:9f:87:39:68:a9:8e:a9:56:ce:1c:56:b5:8e:16:54:de:2a: bb:3f:b4:df:d3:19:b1:94:81:a2:be:6a:27:ab:91:6b:21:33: a4:bb:ce:98 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUYy7KsBy6PFFzRh4R206svcThWtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV BAMTKDcyODQzMkM1QjUxMENDMUE4MTc2RDM5MUUwN0VGMkMxNTNEM0IzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7BX5fbCVY9uhNicqZEWhFiKFh 01xoyRXG3SQqleqgUEzkxP3j8002MZMBucUi++RjLwV48C56Vkx9yyXxQzz6Nlmk AfUT6/80aerPTLr3m156Szu6NvmfpuNX4qKs4/aC8stRO1qDm7IipQzSkwG6ZyM5 l0q3nvhHbbdn2FGuFGgjGSRpZ8+59yzomnvQV9lfLzZZ9Jt+LQSNVjcPjUxfEbxe hr3/LTBGBaxKH9LMz93pTjTZxnUzNReI3Tz+qYG52klV9km77UFVUP9Qt8pdTz1x PZv6yDZuLkenGxCZ96aZaLgUjFAxR76DTPE1+QM9gUuxz7YNrQ7S2paSNUvTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUcoQyxbUQzBqBdtOR4H7ywVPTszkwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA2MjcxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQBLPgpbcy/Iek5ao3z2dl3pBzCLC1roB6Nm H7xrf0trzbPG0Di/chYMqRc9xGq0yuz8MDLYOE7lt2q47873hcCwcWd1CtLMM33W r/zCCO4A8nbYJupXwjDUghJAQGbgHLnBETdGd1dB/yKIHCPrYz0dcNzUr/jNaelF y5jwQcoyYLR2JHAnyd044OBNfDTlym6MfyURMKDCfqaYs+BwIHMXgEf7qXotEfos qA+wEAiozYKvld1Cl1Ih+E2D/SfK/jc/qMgAkZdkrZssMWzeA2aCKVK2cxOfNO84 n4c5aKmOqVbOHFa1jhZU3iq7P7Tf0xmxlIGivmonq5FrITOku86Y -----END CERTIFICATE-----Generated at Sat Jun 13 07:59:22 2026 by rpki-client