$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS207598.roa File: AS207598.roa (raw, json) Hash identifier: WrF8uD4LKzGffawIATCdOx6+aRkOIJJPaPtvXXP2q1M= Subject key identifier: 96:8B:30:A6:F1:59:72:3B:29:DC:F4:11:E1:78:8E:EF:C9:8F:9B:FF Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 3B5A672F07A1190F2B6E1C706406ABDEB6533DDC Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS207598.roa Signing time: Fri 04 Jul 2025 07:51:29 +0000 ROA not before: Fri 04 Jul 2025 07:46:29 +0000 ROA not after: Fri 03 Jul 2026 07:51:29 +0000 asID: 207598 IP address blocks: 2a07:54c4:73d1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 01:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:5a:67:2f:07:a1:19:0f:2b:6e:1c:70:64:06:ab:de:b6:53:3d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:29 2025 GMT Not After : Jul 3 07:51:29 2026 GMT Subject: CN=968B30A6F159723B29DCF411E1788EEFC98F9BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:31:39:d6:4a:0d:c2:62:fe:69:87:aa:85:ca: cd:fd:28:7d:b8:2e:e0:3d:81:70:55:31:4c:1e:85: 59:4e:35:de:6c:d6:47:8d:4b:0a:33:fa:68:4f:ff: 27:6f:1e:af:cb:6f:1f:a5:ad:db:e8:db:b5:16:63: 6d:3c:60:47:bb:b5:ef:aa:c6:54:4b:3d:6b:a8:bc: d0:c7:16:3f:d5:2e:07:09:d7:ff:df:b4:17:b8:4d: 8a:ba:a3:15:fc:a7:2d:1a:32:2d:5e:09:bf:e2:68: 3a:e5:55:44:c9:45:50:e6:b4:fa:f7:af:77:c4:db: 1d:a5:fc:eb:ec:35:1c:da:57:5c:e6:1e:f5:21:40: f7:32:84:5f:db:b0:8b:33:a9:61:5e:82:80:19:66: e3:26:99:cd:51:54:a4:5e:ba:76:1e:b1:f3:c9:27: db:df:e8:ea:bd:f3:b9:f5:c9:09:03:2a:9b:1a:1e: 41:ee:f5:e9:97:d8:78:20:79:34:d0:cb:33:2b:34: 92:3a:3c:73:f5:ee:10:8d:9f:c9:ef:59:67:4c:5e: 29:ce:28:61:46:02:2c:fd:3c:36:49:de:4d:67:2c: c4:b5:b7:c9:9d:0b:05:a4:ba:e9:1b:ec:69:08:c9: 61:67:67:94:ca:c0:ee:3f:fb:f9:db:fd:ad:bc:eb: 3a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8B:30:A6:F1:59:72:3B:29:DC:F4:11:E1:78:8E:EF:C9:8F:9B:FF X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS207598.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:73d1::/48 Signature Algorithm: sha256WithRSAEncryption 04:e0:a0:3d:47:84:d3:c2:47:b9:45:36:90:fc:1a:d7:49:a8: 69:ee:5b:d2:6e:71:07:e8:e8:29:f4:50:86:d0:4c:14:44:bf: 56:11:42:a9:2c:53:87:9c:77:f3:b5:b5:54:48:96:e8:9a:b4: 71:83:95:4d:91:67:ed:e5:a9:1d:bb:63:bd:7a:07:8c:a7:03: fa:f8:e4:7f:33:fc:16:1e:c7:e2:fd:8c:51:35:78:4e:2a:bc: b3:c9:8d:c7:4a:4c:0d:b8:18:b8:75:32:16:ad:88:c0:99:16: 2f:19:b3:bc:60:8c:b6:e8:db:e6:fb:9b:de:ef:ee:06:16:4c: f2:59:bc:2a:92:b4:9f:0a:1b:01:ba:cf:30:45:01:4e:37:95: fb:87:8b:ec:71:11:43:bc:96:d1:a3:97:cc:71:2b:3f:6c:12: 31:c8:51:63:30:f9:0d:04:ba:b1:f1:65:39:36:64:9e:bb:e2: fd:ca:f7:a6:bc:90:b0:d3:f9:b8:82:fb:f2:83:6a:01:32:4f: 3c:9e:76:43:e6:9e:78:a4:d8:b9:c3:8f:5d:6c:d3:1f:74:88: c7:1c:64:7a:31:00:a7:ce:c6:21:58:82:58:c9:8e:cc:7a:04: c0:eb:9f:cd:bf:c7:94:f0:3f:77:a0:bf:49:7d:cc:64:08:53: 8a:7c:11:2b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUO1pnLwehGQ8rbhxwZAar3rZTPdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjlaFw0yNjA3MDMwNzUxMjlaMDMxMTAvBgNV BAMTKDk2OEIzMEE2RjE1OTcyM0IyOURDRjQxMUUxNzg4RUVGQzk4RjlCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXMTnWSg3CYv5ph6qFys39KH24 LuA9gXBVMUwehVlONd5s1keNSwoz+mhP/ydvHq/Lbx+lrdvo27UWY208YEe7te+q xlRLPWuovNDHFj/VLgcJ1//ftBe4TYq6oxX8py0aMi1eCb/iaDrlVUTJRVDmtPr3 r3fE2x2l/OvsNRzaV1zmHvUhQPcyhF/bsIszqWFegoAZZuMmmc1RVKReunYesfPJ J9vf6Oq987n1yQkDKpsaHkHu9emX2HggeTTQyzMrNJI6PHP17hCNn8nvWWdMXinO KGFGAiz9PDZJ3k1nLMS1t8mdCwWkuukb7GkIyWFnZ5TKwO4/+/nb/a286zprAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUloswpvFZcjsp3PQR4XiO78mPm/8wHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA3NTk4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU xHPRMA0GCSqGSIb3DQEBCwUAA4IBAQAE4KA9R4TTwke5RTaQ/BrXSahp7lvSbnEH 6Ogp9FCG0EwURL9WEUKpLFOHnHfztbVUSJbomrRxg5VNkWft5akdu2O9egeMpwP6 +OR/M/wWHsfi/YxRNXhOKryzyY3HSkwNuBi4dTIWrYjAmRYvGbO8YIy26Nvm+5ve 7+4GFkzyWbwqkrSfChsBus8wRQFON5X7h4vscRFDvJbRo5fMcSs/bBIxyFFjMPkN BLqx8WU5NmSeu+L9yvemvJCw0/m4gvvyg2oBMk88nnZD5p54pNi5w49dbNMfdIjH HGR6MQCnzsYhWIJYyY7MegTA65/Nv8eU8D93oL9JfcxkCFOKfBEr -----END CERTIFICATE-----Generated at Wed Nov 5 12:55:27 2025 by rpki-client