$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209870.roa File: AS209870.roa (raw, json) Hash identifier: jgCUfYFR6EdP4pfFSuBgPfCxzt0h9nbEhHPTvLl0SsY= Subject key identifier: 44:E4:C1:F6:D2:6A:C8:7B:32:1B:8B:5A:1C:C1:53:E6:22:5E:85:9B Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 16C574116C49E33423D7243371EBBD882804C4E3 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209870.roa Signing time: Fri 05 Jun 2026 08:45:51 +0000 ROA not before: Fri 05 Jun 2026 08:40:51 +0000 ROA not after: Fri 04 Jun 2027 08:45:51 +0000 asID: 209870 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c5:74:11:6c:49:e3:34:23:d7:24:33:71:eb:bd:88:28:04:c4:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:51 2026 GMT Not After : Jun 4 08:45:51 2027 GMT Subject: CN=44E4C1F6D26AC87B321B8B5A1CC153E6225E859B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fd:ad:b5:33:53:7d:cc:02:76:22:f4:89:dc: d5:35:1f:d1:eb:b7:18:e7:99:ec:88:f9:af:1c:09: 0b:09:bb:6f:62:c7:6b:43:af:fa:b1:fa:82:46:18: ce:7c:77:07:74:70:33:21:40:83:c4:63:01:36:eb: 77:5f:39:a8:e6:1c:b7:30:2d:d1:01:3e:53:7b:4d: 2d:c8:33:af:30:4f:be:d1:fd:54:5b:ca:77:ae:fe: c1:ab:40:3b:bd:1f:f3:45:09:e7:82:c3:46:c8:04: 16:54:c6:1d:9f:d0:eb:6b:fb:2c:a7:b8:2d:aa:fa: 31:9a:b4:62:2b:3f:cb:1f:15:bc:a4:41:77:13:4b: db:4c:72:8d:2b:7a:f4:63:9c:fa:83:dd:00:91:6b: 06:7b:90:ae:b9:4f:c9:96:63:94:b0:73:a4:72:e1: fb:63:e3:02:33:88:f3:e1:4c:61:b1:28:81:63:a7: 62:84:30:21:8a:c7:0a:24:ae:d2:35:10:a9:15:c1: 60:2c:6a:34:6f:94:04:48:52:60:9f:e5:29:79:ff: de:50:65:b5:40:a9:c7:49:f5:61:93:ae:0f:4f:fe: da:6b:88:97:a4:33:33:ba:ae:62:28:1c:d7:b9:a4: 21:0c:2a:ef:f2:2e:66:f3:00:c6:49:25:83:48:48: 0b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E4:C1:F6:D2:6A:C8:7B:32:1B:8B:5A:1C:C1:53:E6:22:5E:85:9B X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS209870.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 31:d1:54:78:4d:43:5f:3b:95:66:bc:6e:04:c1:e9:40:12:16: 26:68:cf:d3:a8:18:25:96:e2:49:7a:dd:8c:39:cd:64:43:5c: 79:dd:84:eb:1a:28:86:45:5f:8a:66:68:0c:40:68:83:51:82: 55:e4:ab:2b:8c:31:19:25:57:41:81:51:fd:3c:ca:98:cc:03: fb:5a:da:fc:b6:b1:29:8b:b0:dc:06:65:57:8f:5b:85:1a:bf: ae:35:48:6a:de:e8:57:c4:d0:d4:78:cd:68:8a:06:e1:31:14: 13:4d:20:ba:1f:6a:3c:81:63:3d:b7:16:5f:5d:d5:c2:61:a3: e2:ce:58:c1:37:49:0a:ff:70:02:12:76:d3:c0:b2:2c:d7:ca: f0:e2:46:07:90:c4:28:7f:78:0b:be:92:00:42:26:bf:2c:19: d4:a6:f4:de:5c:90:e8:b4:aa:98:1b:4c:81:df:30:c6:96:74: 72:65:6d:d8:c9:01:8a:d4:dc:a5:42:ca:8c:0a:c4:7e:51:21: 80:e7:b2:17:65:3c:61:1f:60:99:4a:e3:b3:ac:b5:e1:fd:2c: a7:fb:c9:ef:95:fa:6f:8c:1f:0a:99:c5:88:4a:8d:9d:a5:39: b3:73:92:bf:20:fd:6a:07:19:2a:86:ed:79:b5:75:bf:4e:c7: 88:1b:45:40 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUFsV0EWxJ4zQj1yQzceu9iCgExOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV BAMTKDQ0RTRDMUY2RDI2QUM4N0IzMjFCOEI1QTFDQzE1M0U2MjI1RTg1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/a21M1N9zAJ2IvSJ3NU1H9Hr txjnmeyI+a8cCQsJu29ix2tDr/qx+oJGGM58dwd0cDMhQIPEYwE263dfOajmHLcw LdEBPlN7TS3IM68wT77R/VRbyneu/sGrQDu9H/NFCeeCw0bIBBZUxh2f0Otr+yyn uC2q+jGatGIrP8sfFbykQXcTS9tMco0revRjnPqD3QCRawZ7kK65T8mWY5Swc6Ry 4ftj4wIziPPhTGGxKIFjp2KEMCGKxwokrtI1EKkVwWAsajRvlARIUmCf5Sl5/95Q ZbVAqcdJ9WGTrg9P/tpriJekMzO6rmIoHNe5pCEMKu/yLmbzAMZJJYNISAtZAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUROTB9tJqyHsyG4taHMFT5iJehZswHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjA5ODcwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQAx0VR4TUNfO5VmvG4EwelAEhYmaM/TqBgl luJJet2MOc1kQ1x53YTrGiiGRV+KZmgMQGiDUYJV5KsrjDEZJVdBgVH9PMqYzAP7 Wtr8trEpi7DcBmVXj1uFGr+uNUhq3uhXxNDUeM1oigbhMRQTTSC6H2o8gWM9txZf XdXCYaPizljBN0kK/3ACEnbTwLIs18rw4kYHkMQof3gLvpIAQia/LBnUpvTeXJDo tKqYG0yB3zDGlnRyZW3YyQGK1NylQsqMCsR+USGA57IXZTxhH2CZSuOzrLXh/Syn +8nvlfpvjB8KmcWISo2dpTmzc5K/IP1qBxkqhu15tXW/TseIG0VA -----END CERTIFICATE-----Generated at Sat Jun 13 06:44:56 2026 by rpki-client