$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS210965.roa File: AS210965.roa (raw, json) Hash identifier: V6j9GJbQZp1NvSEcRPZZaD0WFNRkysipVLGfM/Oxuaw= Subject key identifier: 74:73:9C:4B:8B:C4:F6:8D:95:42:0A:7D:37:67:0F:99:E3:10:64:07 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 53EB87AFC75F0BB512D528446FF5F68C6E6FC7A0 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS210965.roa Signing time: Fri 04 Jul 2025 07:51:27 +0000 ROA not before: Fri 04 Jul 2025 07:46:27 +0000 ROA not after: Fri 03 Jul 2026 07:51:27 +0000 asID: 210965 IP address blocks: 2a07:54c4:1764::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 01:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:eb:87:af:c7:5f:0b:b5:12:d5:28:44:6f:f5:f6:8c:6e:6f:c7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:27 2025 GMT Not After : Jul 3 07:51:27 2026 GMT Subject: CN=74739C4B8BC4F68D95420A7D37670F99E3106407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1e:4c:ff:b5:4e:69:b5:eb:b9:19:38:a8:c6: 56:72:12:cf:c5:93:ee:85:35:ae:56:27:87:74:3d: 72:f6:95:15:89:b9:d2:5f:09:03:c5:2c:ac:96:b5: 86:bb:dd:03:e0:83:92:0a:1b:bb:7a:9e:c7:e3:8f: ec:37:c4:ed:b5:57:00:ae:99:f3:cd:b6:33:7a:aa: 21:1d:d1:d6:30:ad:07:2b:62:41:c9:5c:47:dc:06: a1:ed:bb:d2:da:bd:49:16:27:6a:15:c3:6e:26:aa: 23:d0:be:d1:80:99:2d:f4:0a:aa:91:c8:dc:f0:17: 59:1f:ae:08:14:11:2c:51:e1:06:22:8c:6c:31:73: 2f:36:0b:0f:48:60:6b:81:39:30:bf:5b:bc:db:75: b3:9b:32:dc:f4:34:01:37:6b:eb:d7:cc:03:db:d4: b0:97:9b:e3:c2:10:1a:43:6f:59:f1:86:b8:5a:a7: bc:d0:04:d3:9d:49:d8:b6:2f:27:17:49:58:92:62: 49:e8:df:6b:4d:99:2f:75:04:5c:57:7c:22:7f:20: 0f:fc:f6:9d:2a:db:eb:52:f9:fc:b6:d0:55:90:f8: fe:99:01:43:54:d5:e0:30:20:55:56:e8:64:e6:b3: 7b:57:de:70:82:7a:84:6d:c4:85:b5:ad:34:b9:c3: 75:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:73:9C:4B:8B:C4:F6:8D:95:42:0A:7D:37:67:0F:99:E3:10:64:07 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS210965.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:1764::/48 Signature Algorithm: sha256WithRSAEncryption 63:91:7f:bf:bc:ec:7f:ea:21:48:b3:ab:fe:56:5c:65:fc:3f: 9a:1c:b7:d6:22:93:b1:65:0b:66:1e:c6:91:13:3b:52:fe:53: 21:db:dd:49:1e:02:ab:88:69:15:fe:d9:6c:f8:96:af:30:a1: 26:bb:a0:c1:0a:69:45:c6:22:5c:25:f7:68:af:5e:5f:9a:66: e3:44:26:41:8f:4b:44:9b:d1:d1:db:5c:ec:f5:6f:a3:c6:ca: 09:af:1a:d7:0f:28:d9:09:a8:96:d2:cf:0e:7d:ba:bc:09:19: 2a:48:e1:ed:30:16:8f:fd:de:55:14:84:30:4b:0a:77:83:1e: 83:0f:c1:09:fb:ce:0e:70:5d:e6:e9:71:7d:5c:81:fc:6a:44: f7:4e:b8:80:18:95:0e:d5:58:9a:7e:33:f7:58:c8:7a:98:c4: 2d:f6:00:a2:4f:bb:da:f2:5c:da:f0:40:2c:18:39:ab:d8:57: 72:06:0e:fa:9f:43:15:a6:e1:be:6c:d6:7b:c2:c9:ee:4d:58: eb:a9:7d:3f:1f:07:22:73:a4:c9:6e:d4:67:47:dc:a8:45:f0: ae:66:b5:84:5d:d1:7b:d7:e6:82:6d:6b:08:51:0d:86:e2:c6: b1:c4:51:cf:63:35:fb:0b:61:17:95:5e:dc:08:74:5e:7b:a8: 36:0e:b2:b0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUU+uHr8dfC7US1ShEb/X2jG5vx6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjdaFw0yNjA3MDMwNzUxMjdaMDMxMTAvBgNV BAMTKDc0NzM5QzRCOEJDNEY2OEQ5NTQyMEE3RDM3NjcwRjk5RTMxMDY0MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNHkz/tU5pteu5GTioxlZyEs/F k+6FNa5WJ4d0PXL2lRWJudJfCQPFLKyWtYa73QPgg5IKG7t6nsfjj+w3xO21VwCu mfPNtjN6qiEd0dYwrQcrYkHJXEfcBqHtu9LavUkWJ2oVw24mqiPQvtGAmS30CqqR yNzwF1kfrggUESxR4QYijGwxcy82Cw9IYGuBOTC/W7zbdbObMtz0NAE3a+vXzAPb 1LCXm+PCEBpDb1nxhrhap7zQBNOdSdi2LycXSViSYkno32tNmS91BFxXfCJ/IA/8 9p0q2+tS+fy20FWQ+P6ZAUNU1eAwIFVW6GTms3tX3nCCeoRtxIW1rTS5w3UZAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUdHOcS4vE9o2VQgp9N2cPmeMQZAcwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjEwOTY1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU xBdkMA0GCSqGSIb3DQEBCwUAA4IBAQBjkX+/vOx/6iFIs6v+Vlxl/D+aHLfWIpOx ZQtmHsaREztS/lMh291JHgKriGkV/tls+JavMKEmu6DBCmlFxiJcJfdor15fmmbj RCZBj0tEm9HR21zs9W+jxsoJrxrXDyjZCaiW0s8Ofbq8CRkqSOHtMBaP/d5VFIQw Swp3gx6DD8EJ+84OcF3m6XF9XIH8akT3TriAGJUO1ViafjP3WMh6mMQt9gCiT7va 8lza8EAsGDmr2FdyBg76n0MVpuG+bNZ7wsnuTVjrqX0/Hwcic6TJbtRnR9yoRfCu ZrWEXdF71+aCbWsIUQ2G4saxxFHPYzX7C2EXlV7cCHRee6g2DrKw -----END CERTIFICATE-----Generated at Wed Nov 5 13:21:49 2025 by rpki-client