$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS208548.roa File: AS208548.roa (raw, json) Hash identifier: xr4lIz22aAOcIJhYXtCMiyB2iGljLjF80O1jegTyAF4= Subject key identifier: 03:8C:E8:77:47:CE:42:24:0A:63:D1:15:82:BF:DB:D0:08:06:D1:CF Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 049A73BB99016B30A013C3838396BF64F4A52982 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS208548.roa Signing time: Sat 31 Jan 2026 20:08:29 +0000 ROA not before: Sat 31 Jan 2026 20:03:29 +0000 ROA not after: Sat 30 Jan 2027 20:08:29 +0000 asID: 208548 IP address blocks: 2a07:54c2::/32 maxlen: 40 2a07:54c4:a60::/44 maxlen: 48 2a07:54c4:13f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 05:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:9a:73:bb:99:01:6b:30:a0:13:c3:83:83:96:bf:64:f4:a5:29:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jan 31 20:03:29 2026 GMT Not After : Jan 30 20:08:29 2027 GMT Subject: CN=038CE87747CE42240A63D11582BFDBD00806D1CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5b:ce:fb:a2:99:cb:84:a5:ab:71:73:5b:9a: 09:9f:bd:03:63:b7:76:7c:f5:07:07:50:84:7d:0f: 73:6f:79:9a:d2:63:40:14:67:8a:f5:17:e4:9e:f0: 28:73:08:51:5c:7e:6f:a2:15:10:0f:ce:ca:e4:48: 03:7c:ef:b9:ad:a2:6c:61:b1:57:2d:15:88:cb:f0: 46:a7:47:de:3c:b4:b5:0a:f7:4a:ad:14:60:7b:ae: f7:f6:49:85:6b:68:0d:1d:02:32:e3:66:55:c1:76: 92:4a:10:4d:d6:df:a1:07:5b:72:59:e7:78:7e:1e: ce:bb:1f:2f:fd:4f:ee:14:8a:1b:8d:ea:7c:6f:5e: f5:ba:3f:4d:79:ec:42:3b:30:fb:e9:98:23:b2:1d: bc:2b:c6:b8:cd:93:b5:6c:b3:e3:47:8b:d8:98:f1: 10:c2:e5:7f:31:bf:f4:e3:1c:c8:8c:74:ae:94:d2: 30:df:34:d9:fd:b3:4c:76:b5:c5:32:48:72:e3:c9: dd:2a:56:64:a4:d6:b4:18:17:e3:13:63:9c:98:29: 92:31:a8:72:ad:b5:89:0e:21:66:af:ad:19:c4:b0: ca:75:4b:84:6f:54:c6:d8:fe:6a:f8:85:50:da:59: 89:24:f7:65:00:b3:a3:de:77:be:c9:6d:e6:57:0b: ec:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8C:E8:77:47:CE:42:24:0A:63:D1:15:82:BF:DB:D0:08:06:D1:CF X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS208548.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2::/32 2a07:54c4:a60::/44 2a07:54c4:13f0::/44 Signature Algorithm: sha256WithRSAEncryption 37:31:9a:9d:65:df:7d:33:9f:c1:69:2d:59:f6:e8:ca:06:6f: 08:ec:a0:55:40:0a:56:b4:78:9f:8c:a2:fa:e3:7a:d8:77:2d: 01:ec:7c:ab:a1:23:42:13:38:a7:46:93:05:a8:26:08:b7:d3: 66:cb:c8:4b:51:1d:04:2c:a7:25:36:9a:2e:22:0e:09:fc:cd: de:66:cb:2f:ee:45:2e:fc:02:be:20:f8:e9:2e:8b:26:f6:79: ea:31:40:83:b6:08:94:e6:8f:fd:15:8a:fd:17:e2:77:38:59: 30:e2:fe:45:be:37:1d:3c:a1:be:f2:54:04:e5:98:eb:8b:76: c0:b4:b4:30:c4:0e:6a:1e:09:d5:1f:b0:57:bb:c2:a7:b8:b8: c8:e6:26:86:a3:d5:a7:cd:ff:40:72:b2:59:39:e2:66:53:b3: fa:37:23:25:2f:38:a9:e4:f7:61:63:6a:c5:40:09:20:4f:e5: 24:74:5f:ef:79:59:ac:4f:35:2d:77:b6:63:ca:a0:25:1e:b5: e6:f2:33:1f:94:f5:d8:6a:5e:44:95:4b:3f:2d:46:98:4c:85: ba:33:6b:14:11:5a:d7:8d:39:11:7f:ef:d1:d1:b8:04:d5:d7: c1:e9:5d:e0:59:c9:fd:6f:7b:6c:89:2d:59:9a:b6:c9:73:cf: 15:da:0e:82 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUBJpzu5kBazCgE8ODg5a/ZPSlKYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjAxMzEyMDAzMjlaFw0yNzAxMzAyMDA4MjlaMDMxMTAvBgNV BAMTKDAzOENFODc3NDdDRTQyMjQwQTYzRDExNTgyQkZEQkQwMDgwNkQxQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkW877opnLhKWrcXNbmgmfvQNj t3Z89QcHUIR9D3NveZrSY0AUZ4r1F+Se8ChzCFFcfm+iFRAPzsrkSAN877mtomxh sVctFYjL8EanR948tLUK90qtFGB7rvf2SYVraA0dAjLjZlXBdpJKEE3W36EHW3JZ 53h+Hs67Hy/9T+4UihuN6nxvXvW6P0157EI7MPvpmCOyHbwrxrjNk7Vss+NHi9iY 8RDC5X8xv/TjHMiMdK6U0jDfNNn9s0x2tcUySHLjyd0qVmSk1rQYF+MTY5yYKZIx qHKttYkOIWavrRnEsMp1S4RvVMbY/mr4hVDaWYkk92UAs6Ped77JbeZXC+yFAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUA4zod0fOQiQKY9EVgr/b0AgG0c8wHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA4NTQ4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAAjAZAwUAKgdU wgMHBCoHVMQKYAMHBCoHVMQT8DANBgkqhkiG9w0BAQsFAAOCAQEANzGanWXffTOf wWktWfboygZvCOygVUAKVrR4n4yi+uN62HctAex8q6EjQhM4p0aTBagmCLfTZsvI S1EdBCynJTaaLiIOCfzN3mbLL+5FLvwCviD46S6LJvZ56jFAg7YIlOaP/RWK/Rfi dzhZMOL+Rb43HTyhvvJUBOWY64t2wLS0MMQOah4J1R+wV7vCp7i4yOYmhqPVp83/ QHKyWTniZlOz+jcjJS84qeT3YWNqxUAJIE/lJHRf73lZrE81LXe2Y8qgJR615vIz H5T12GpeRJVLPy1GmEyFujNrFBFa1405EX/v0dG4BNXXweld4FnJ/W97bIktWZq2 yXPPFdoOgg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:10:17 2026 by rpki-client