$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS207598.roa File: AS207598.roa (raw, json) Hash identifier: JDHFKScId3B72lTpjXs3IlBcVniZuSkwubOHX9ViIIE= Subject key identifier: 73:6D:C8:94:1D:D9:DB:BF:65:DD:2C:6C:A7:8F:CD:C8:67:CD:E2:70 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 2170C311CEC19630F3B2ACE017F2154EA5F7CAAF Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS207598.roa Signing time: Fri 05 Jun 2026 08:45:52 +0000 ROA not before: Fri 05 Jun 2026 08:40:52 +0000 ROA not after: Fri 04 Jun 2027 08:45:52 +0000 asID: 207598 IP address blocks: 2a07:54c4:73d1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:70:c3:11:ce:c1:96:30:f3:b2:ac:e0:17:f2:15:4e:a5:f7:ca:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:52 2026 GMT Not After : Jun 4 08:45:52 2027 GMT Subject: CN=736DC8941DD9DBBF65DD2C6CA78FCDC867CDE270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:61:33:79:62:57:b7:82:c4:4a:47:3c:c3:58: e3:e2:d0:61:22:94:54:30:eb:8a:9f:af:9f:51:9d: 1e:61:a9:a9:92:b6:d0:fc:4b:da:66:1e:d0:b6:fd: e6:17:9a:0d:d9:61:4a:3d:14:27:f3:e1:7f:91:f6: 71:75:dd:c6:c3:ce:ac:06:62:21:2b:b2:5f:5e:d4: a4:95:67:b7:cf:21:72:3a:71:3d:b4:ad:53:5a:37: ff:3f:27:6b:6a:71:85:62:17:ae:24:c0:8f:55:26: 8e:df:a5:0c:fe:80:cc:84:20:44:27:dd:43:6b:41: a3:2a:1c:46:21:17:86:4b:cd:d8:0f:47:3e:23:11: 3e:5a:2d:f6:c7:76:e9:18:fd:cd:fa:93:57:d0:12: fa:12:6a:a4:a7:aa:04:8f:8a:8b:da:3b:e2:6f:53: 8f:65:83:8d:7b:63:ff:28:77:e3:20:24:70:30:c3: b9:03:4d:e2:c4:be:3d:35:6f:06:f8:25:7f:51:fe: d7:65:cc:8d:5e:ed:0c:8d:01:be:2a:25:63:56:95: 52:b0:7b:e5:fc:d6:d6:ef:40:18:0b:8d:7c:9e:54: 5c:f9:5d:56:c1:da:68:b6:4b:a1:27:80:b4:7f:07: f3:90:46:96:01:75:44:aa:91:00:5a:34:c7:be:12: 38:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6D:C8:94:1D:D9:DB:BF:65:DD:2C:6C:A7:8F:CD:C8:67:CD:E2:70 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS207598.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:73d1::/48 Signature Algorithm: sha256WithRSAEncryption 24:41:0d:6d:00:cd:1d:dd:e8:cf:50:ee:98:42:e9:f6:3c:7e: ff:a2:8f:6f:02:77:78:58:c0:08:62:74:8e:46:25:11:11:80: ac:67:20:da:5c:b6:2f:ba:5c:12:c5:0a:a5:43:02:42:d4:6e: 3a:90:18:a8:10:6d:8e:98:b0:79:c6:24:ba:ea:7a:16:17:71: 04:18:24:13:c1:d7:7f:33:e0:3c:28:cf:ee:29:08:d8:a8:a7: 19:a7:8d:42:8b:02:0f:86:57:0c:5a:86:fd:b9:03:be:b7:3f: 3e:34:f7:c4:56:cf:17:33:5b:4b:20:46:f3:9c:85:db:2c:45: d6:33:ce:15:c9:e2:f6:bd:3e:b1:44:e6:99:f9:3e:61:1c:42: 8c:9e:93:52:b8:ba:f1:a5:8b:75:4e:77:53:5f:b0:b5:22:d7: ac:3b:f1:5d:49:11:af:78:db:fb:5d:59:cc:49:77:1a:62:9a: da:7d:06:4a:77:e1:01:35:ca:2d:d1:20:8d:10:ca:24:f6:32: d3:08:0c:76:a2:96:f8:f9:2f:45:f5:8e:d7:5d:a1:68:09:75: ec:5d:e9:d7:4e:fe:6d:9a:29:22:34:95:9b:80:dd:49:ad:2e: 39:70:19:94:90:e2:76:77:91:c2:7e:b3:3e:23:51:d3:74:fd: 59:9c:14:24 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIXDDEc7BljDzsqzgF/IVTqX3yq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTJaFw0yNzA2MDQwODQ1NTJaMDMxMTAvBgNV BAMTKDczNkRDODk0MUREOURCQkY2NUREMkM2Q0E3OEZDREM4NjdDREUyNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZYTN5Yle3gsRKRzzDWOPi0GEi lFQw64qfr59RnR5hqamSttD8S9pmHtC2/eYXmg3ZYUo9FCfz4X+R9nF13cbDzqwG YiErsl9e1KSVZ7fPIXI6cT20rVNaN/8/J2tqcYViF64kwI9VJo7fpQz+gMyEIEQn 3UNrQaMqHEYhF4ZLzdgPRz4jET5aLfbHdukY/c36k1fQEvoSaqSnqgSPiovaO+Jv U49lg417Y/8od+MgJHAww7kDTeLEvj01bwb4JX9R/tdlzI1e7QyNAb4qJWNWlVKw e+X81tbvQBgLjXyeVFz5XVbB2mi2S6EngLR/B/OQRpYBdUSqkQBaNMe+EjjXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUc23IlB3Z279l3Sxsp4/NyGfN4nAwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA3NTk4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU xHPRMA0GCSqGSIb3DQEBCwUAA4IBAQAkQQ1tAM0d3ejPUO6YQun2PH7/oo9vAnd4 WMAIYnSORiUREYCsZyDaXLYvulwSxQqlQwJC1G46kBioEG2OmLB5xiS66noWF3EE GCQTwdd/M+A8KM/uKQjYqKcZp41CiwIPhlcMWob9uQO+tz8+NPfEVs8XM1tLIEbz nIXbLEXWM84VyeL2vT6xROaZ+T5hHEKMnpNSuLrxpYt1TndTX7C1ItesO/FdSRGv eNv7XVnMSXcaYprafQZKd+EBNcot0SCNEMok9jLTCAx2opb4+S9F9Y7XXaFoCXXs XenXTv5tmikiNJWbgN1JrS45cBmUkOJ2d5HCfrM+I1HTdP1ZnBQk -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:18 2026 by rpki-client