$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS208453.roa File: AS208453.roa (raw, json) Hash identifier: WRsvSP9ueA1yLDd/F8Oar+HHXOCI0MPy6EpJeSe8eU8= Subject key identifier: 63:0C:16:CB:A4:DC:58:0A:5D:3B:91:E2:51:CF:66:A7:5E:5F:08:A2 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 37CFCDECEE0E7BF11BDAE7731F742CD8A8968745 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS208453.roa Signing time: Fri 05 Jun 2026 08:45:51 +0000 ROA not before: Fri 05 Jun 2026 08:40:51 +0000 ROA not after: Fri 04 Jun 2027 08:45:51 +0000 asID: 208453 IP address blocks: 2a07:54c4:1761::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:cf:cd:ec:ee:0e:7b:f1:1b:da:e7:73:1f:74:2c:d8:a8:96:87:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:51 2026 GMT Not After : Jun 4 08:45:51 2027 GMT Subject: CN=630C16CBA4DC580A5D3B91E251CF66A75E5F08A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:00:21:cb:cb:89:da:78:51:fa:9e:39:8b:30: fb:12:2a:23:cc:8b:8d:7b:f8:fd:6c:e0:3a:12:1e: 8b:9b:14:16:ef:2a:f2:7e:68:e3:44:8d:ef:99:6a: 13:be:6c:18:50:88:42:57:56:33:a2:72:26:af:8d: a1:05:23:ea:0c:b8:96:8a:84:c8:54:97:20:85:48: f2:8d:0a:2c:71:b2:68:21:2c:cf:64:7e:82:a9:d9: 64:ab:60:63:c5:63:6b:bc:86:18:29:5a:5d:08:e6: 69:d8:31:3d:cc:dd:29:22:ac:fe:cc:27:f1:8e:48: 16:9a:3f:dc:0f:ee:53:b4:10:f5:66:4b:22:94:a1: d7:79:15:21:5a:b5:8b:e6:7e:29:0a:31:e4:7f:ce: 3b:d0:cc:60:23:99:4d:4a:cb:40:d5:9e:fb:41:0f: 92:93:38:13:87:af:5a:de:11:54:c1:f6:63:f1:86: 64:fc:a5:33:7f:74:c8:2e:4f:f2:29:cb:5b:d7:96: 30:05:e9:15:3f:cc:72:da:b5:3a:03:1e:1d:4c:ca: 7d:b6:72:60:60:79:9d:b9:5b:05:a6:f3:9a:6c:fd: cb:df:59:6e:22:83:a9:44:00:9e:88:2d:aa:2a:71: a6:78:3d:e7:98:35:ff:e2:d4:87:6c:ee:23:fe:61: c6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0C:16:CB:A4:DC:58:0A:5D:3B:91:E2:51:CF:66:A7:5E:5F:08:A2 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS208453.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:1761::/48 Signature Algorithm: sha256WithRSAEncryption 96:53:68:a8:53:bb:79:05:48:f5:29:34:cc:9c:dd:9a:ba:50: 6a:8d:85:0d:e2:61:17:c9:7f:5e:d4:b7:3f:6c:36:c0:20:63: be:57:21:d2:70:f0:8f:fe:e2:b1:c8:ed:4b:da:2e:e7:be:01: d0:b3:6c:b6:81:2d:1a:77:9a:0f:5c:9d:03:51:a8:5b:5a:54: 0c:b7:9e:a2:fe:79:1a:75:64:d5:e6:10:ef:17:b8:f4:1b:68: 2e:f4:ab:7b:00:f7:fc:45:fc:c4:9a:fe:15:61:7a:db:b2:3b: 19:aa:2d:d1:ee:42:73:8e:2d:85:0c:1c:a1:60:26:2d:d4:21: c9:0d:24:a9:13:60:8f:fe:8d:34:8d:08:33:1c:38:1f:26:79: 7c:9f:e9:2c:c5:61:68:a1:e3:5f:78:f9:7e:f2:56:2e:bf:5b: 48:f5:0e:47:44:54:00:f4:6d:93:31:78:a9:12:f4:85:ea:9f: 22:45:b7:5e:52:d6:cf:c2:07:17:03:a0:c6:98:25:6d:0e:52: a3:8b:ff:c3:6e:15:7d:1f:8d:11:34:24:f5:a0:e3:72:58:81: 49:83:06:61:bc:ef:84:25:c9:ad:28:64:be:eb:35:cb:da:f8: d4:fc:96:ea:78:13:3b:44:12:17:f5:14:88:f3:51:37:fd:fa: 9d:6f:20:62 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUN8/N7O4Oe/Eb2udzH3Qs2KiWh0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV BAMTKDYzMEMxNkNCQTREQzU4MEE1RDNCOTFFMjUxQ0Y2NkE3NUU1RjA4QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdACHLy4naeFH6njmLMPsSKiPM i417+P1s4DoSHoubFBbvKvJ+aONEje+ZahO+bBhQiEJXVjOiciavjaEFI+oMuJaK hMhUlyCFSPKNCixxsmghLM9kfoKp2WSrYGPFY2u8hhgpWl0I5mnYMT3M3SkirP7M J/GOSBaaP9wP7lO0EPVmSyKUodd5FSFatYvmfikKMeR/zjvQzGAjmU1Ky0DVnvtB D5KTOBOHr1reEVTB9mPxhmT8pTN/dMguT/Ipy1vXljAF6RU/zHLatToDHh1Myn22 cmBgeZ25WwWm85ps/cvfWW4ig6lEAJ6ILaoqcaZ4PeeYNf/i1Ids7iP+YcZpAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUYwwWy6TcWApdO5HiUc9mp15fCKIwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA4NDUzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU xBdhMA0GCSqGSIb3DQEBCwUAA4IBAQCWU2ioU7t5BUj1KTTMnN2aulBqjYUN4mEX yX9e1Lc/bDbAIGO+VyHScPCP/uKxyO1L2i7nvgHQs2y2gS0ad5oPXJ0DUahbWlQM t56i/nkadWTV5hDvF7j0G2gu9Kt7APf8RfzEmv4VYXrbsjsZqi3R7kJzji2FDByh YCYt1CHJDSSpE2CP/o00jQgzHDgfJnl8n+ksxWFooeNfePl+8lYuv1tI9Q5HRFQA 9G2TMXipEvSF6p8iRbdeUtbPwgcXA6DGmCVtDlKji//DbhV9H40RNCT1oONyWIFJ gwZhvO+EJcmtKGS+6zXL2vjU/JbqeBM7RBIX9RSI81E3/fqdbyBi -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:09 2026 by rpki-client