$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209806.roa File: AS209806.roa (raw, json) Hash identifier: njTtiRT4etGncZ7NGT4oszNp3CYavgKNrR3J4oDBsgY= Subject key identifier: D4:C3:28:9F:91:7E:09:06:87:B6:43:62:F3:28:67:D1:E6:A2:6C:50 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 25E38341EC7700A5A993AD41CD618A856C5C92AE Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209806.roa Signing time: Fri 04 Jul 2025 07:51:26 +0000 ROA not before: Fri 04 Jul 2025 07:46:26 +0000 ROA not after: Fri 03 Jul 2026 07:51:26 +0000 asID: 209806 IP address blocks: 2a07:54c4:d100::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 01:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e3:83:41:ec:77:00:a5:a9:93:ad:41:cd:61:8a:85:6c:5c:92:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:26 2025 GMT Not After : Jul 3 07:51:26 2026 GMT Subject: CN=D4C3289F917E090687B64362F32867D1E6A26C50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:86:0f:e0:a4:e1:db:b7:fd:a1:97:d1:1f:f0: 40:fd:7a:15:d8:08:67:cc:f0:07:4b:cd:35:f8:8c: 9d:0b:30:0a:41:1d:a5:15:5c:d3:33:f9:d7:c8:f3: 50:65:66:e0:b3:fd:b6:da:bb:4c:fa:bc:e8:5f:14: 81:cf:26:81:57:65:58:fb:8f:19:e1:d4:4d:46:ce: 7e:82:0f:a5:08:15:11:c1:f3:71:ea:be:fe:8f:e7: a1:8d:14:1a:ef:56:85:b8:75:bf:54:95:7b:0b:a3: c8:b4:96:90:aa:bf:e9:fb:dc:4a:fe:7c:3b:a8:a4: 0a:b4:37:1a:7a:58:2b:8f:cc:31:78:ec:8c:8a:3b: 82:f4:58:77:91:25:dd:7d:9c:cf:d8:53:cd:28:b6: 0f:79:0e:24:58:bb:bf:84:11:79:d8:8c:6d:93:43: cd:83:78:a9:43:d0:9a:93:75:db:43:e0:26:1d:e0: 32:0c:55:72:cf:4a:06:ca:d5:33:f4:e9:b7:42:a0: b2:61:dd:b6:3d:e4:63:a1:f5:30:aa:49:da:bf:f1: 0b:95:71:dc:02:e5:71:81:33:29:e9:6f:34:ae:e1: 54:b9:b2:4e:a6:ec:1a:97:0b:51:8c:64:81:c0:1d: 0b:ec:15:9c:9b:a6:b9:67:4a:87:3a:4a:1c:f7:1b: 2d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C3:28:9F:91:7E:09:06:87:B6:43:62:F3:28:67:D1:E6:A2:6C:50 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209806.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:d100::/40 Signature Algorithm: sha256WithRSAEncryption bf:7f:f7:c7:7c:0e:ac:92:56:ab:ee:10:de:f2:65:9d:e3:f7: dc:d8:60:0d:bf:1c:99:57:4d:23:cf:4d:8c:23:b3:2a:21:2b: c7:0e:57:cd:50:03:77:26:d6:18:ca:0c:57:9f:65:22:56:bf: 5d:1c:c8:39:c4:e5:1c:41:fc:0f:57:3d:64:42:e5:eb:10:4a: 68:a0:30:24:6b:3d:6f:8d:6b:63:96:6d:73:fc:45:1e:1d:d0: 6e:be:2d:a0:09:eb:23:54:fe:b8:4e:68:14:fa:d6:03:0a:9c: 38:a9:7b:12:fe:1b:e8:b7:d9:db:12:fe:0d:fe:a0:d8:85:03: a5:b7:59:fb:36:d8:ac:1e:56:04:90:a3:7f:50:f0:db:1e:a6: 0c:3b:3f:69:9c:b6:40:81:96:67:6b:22:30:3e:88:29:8b:8e: dc:fd:ce:89:a8:41:2c:dd:f8:25:5a:21:7d:c1:5f:12:27:ec: 3e:e0:1b:7b:a5:70:d5:aa:9b:15:23:b9:c1:0e:36:9f:1b:2b: d0:06:92:99:f3:fc:bd:a6:de:95:bb:37:ff:5b:75:b0:af:b3: ad:05:9b:df:80:9b:df:cc:f3:f9:7f:a3:2c:ef:49:2e:a6:81: 13:77:44:42:ab:89:19:cd:70:f7:9a:f2:68:af:a5:99:c7:96: 0e:de:20:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJeODQex3AKWpk61BzWGKhWxckq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjZaFw0yNjA3MDMwNzUxMjZaMDMxMTAvBgNV BAMTKEQ0QzMyODlGOTE3RTA5MDY4N0I2NDM2MkYzMjg2N0QxRTZBMjZDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHhg/gpOHbt/2hl9Ef8ED9ehXY CGfM8AdLzTX4jJ0LMApBHaUVXNMz+dfI81BlZuCz/bbau0z6vOhfFIHPJoFXZVj7 jxnh1E1Gzn6CD6UIFRHB83Hqvv6P56GNFBrvVoW4db9UlXsLo8i0lpCqv+n73Er+ fDuopAq0Nxp6WCuPzDF47IyKO4L0WHeRJd19nM/YU80otg95DiRYu7+EEXnYjG2T Q82DeKlD0JqTddtD4CYd4DIMVXLPSgbK1TP06bdCoLJh3bY95GOh9TCqSdq/8QuV cdwC5XGBMynpbzSu4VS5sk6m7BqXC1GMZIHAHQvsFZybprlnSoc6Shz3Gy0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1MMon5F+CQaHtkNi8yhn0eaibFAwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA5ODA2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU xNEwDQYJKoZIhvcNAQELBQADggEBAL9/98d8DqySVqvuEN7yZZ3j99zYYA2/HJlX TSPPTYwjsyohK8cOV81QA3cm1hjKDFefZSJWv10cyDnE5RxB/A9XPWRC5esQSmig MCRrPW+Na2OWbXP8RR4d0G6+LaAJ6yNU/rhOaBT61gMKnDipexL+G+i32dsS/g3+ oNiFA6W3Wfs22KweVgSQo39Q8Nsepgw7P2mctkCBlmdrIjA+iCmLjtz9zomoQSzd +CVaIX3BXxIn7D7gG3ulcNWqmxUjucEONp8bK9AGkpnz/L2m3pW7N/9bdbCvs60F m9+Am9/M8/l/oyzvSS6mgRN3REKriRnNcPea8mivpZnHlg7eIEI= -----END CERTIFICATE-----Generated at Wed Nov 5 13:22:01 2025 by rpki-client