$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS211562.roa File: AS211562.roa (raw, json) Hash identifier: rzbENhTueczOERO4GJgiLOHIA8TZdWAsYTIFpPsOBKU= Subject key identifier: D7:26:B7:34:D9:E2:83:AB:9C:3B:F3:C5:4D:93:94:DD:49:6C:AC:90 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 65F073B376AB787D11368DD9617A3DC7B0C88F23 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS211562.roa Signing time: Fri 05 Jun 2026 08:45:51 +0000 ROA not before: Fri 05 Jun 2026 08:40:51 +0000 ROA not after: Fri 04 Jun 2027 08:45:51 +0000 asID: 211562 IP address blocks: 2a07:54c4:1750::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f0:73:b3:76:ab:78:7d:11:36:8d:d9:61:7a:3d:c7:b0:c8:8f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:51 2026 GMT Not After : Jun 4 08:45:51 2027 GMT Subject: CN=D726B734D9E283AB9C3BF3C54D9394DD496CAC90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bf:b2:a9:2c:47:8a:83:d0:dc:6b:9c:8a:a3: d4:b1:94:d8:66:e9:78:d6:19:33:fe:66:38:f5:af: fa:79:f3:82:c2:60:57:8b:d2:90:d4:43:4d:98:9f: 07:cb:e6:68:ae:9d:d1:cc:af:09:a8:e1:85:1c:4c: be:c9:b8:b3:29:17:9c:29:03:26:8d:56:69:28:c8: 27:5d:af:21:c0:18:f9:bf:f5:26:9f:fb:2a:75:e1: 52:04:3d:fe:92:28:47:21:6a:06:96:39:93:b1:0b: 60:62:89:bc:48:c8:28:61:f9:44:ad:15:94:eb:e5: 39:91:f6:62:0d:09:ca:f9:21:b7:fa:81:97:c4:8b: a2:0d:b3:08:04:f7:d9:75:58:b9:41:00:e1:29:7e: 34:e0:93:31:a2:e9:68:db:b2:f0:56:26:e6:d3:f6: 49:10:27:c4:82:5d:54:ce:cc:d3:3d:f5:5d:56:a1: 49:82:ce:94:c9:07:18:38:e6:41:3e:dc:0a:6e:8b: d1:50:d4:53:56:5f:f8:45:73:21:59:b1:db:e9:cf: 5d:2f:35:b0:43:f4:13:12:3d:97:08:98:bf:a4:a4: 2a:51:b6:09:c2:5d:44:28:56:95:21:f3:c1:5e:ef: 3a:27:70:fc:e2:d2:e8:2d:45:37:7a:b6:2c:24:1d: cf:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:26:B7:34:D9:E2:83:AB:9C:3B:F3:C5:4D:93:94:DD:49:6C:AC:90 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS211562.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:1750::/48 Signature Algorithm: sha256WithRSAEncryption 7f:ad:0d:20:18:ef:42:36:5c:a9:b7:d6:2d:0f:84:92:79:96: 6b:40:52:ad:9f:c8:a3:32:8c:aa:b5:90:eb:5b:b5:d8:97:5a: 7f:65:4f:7f:cd:dd:32:88:27:cb:62:f3:2b:94:26:d2:72:91: 61:ee:33:67:0c:f9:51:1d:ba:5b:d8:c6:d8:96:a5:2b:c3:79: 0f:46:92:ac:85:97:70:b7:52:aa:e1:98:ac:47:2c:10:16:0e: ef:73:7f:23:6e:6a:c4:79:f7:80:b4:22:da:e7:78:76:d4:2d: 40:4e:33:82:b4:49:c1:f0:85:d9:12:ab:18:f7:a5:8b:1d:d4: 93:60:3b:5a:9e:2d:22:77:e5:be:d9:3b:2a:46:32:ef:a1:37: 50:2e:7e:dd:0c:fb:b3:59:af:c9:fc:bd:74:74:8d:98:28:5a: 04:98:3a:6c:a0:30:4d:f2:3e:29:30:44:d2:f7:8c:b3:45:76: d6:15:11:47:c0:19:59:fa:41:d6:eb:e5:fa:b1:5a:07:92:56: b3:60:c5:8d:e2:f4:eb:0a:c7:8c:e2:22:53:41:a5:a3:81:41: 72:b7:f5:5f:0f:6a:55:eb:69:10:1f:3a:8a:e1:68:17:dd:9e: 90:71:9b:99:be:db:1b:22:ee:dc:22:a0:f4:af:4e:05:35:43: 2f:87:d2:63 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZfBzs3areH0RNo3ZYXo9x7DIjyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV BAMTKEQ3MjZCNzM0RDlFMjgzQUI5QzNCRjNDNTREOTM5NERENDk2Q0FDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWv7KpLEeKg9Dca5yKo9SxlNhm 6XjWGTP+Zjj1r/p584LCYFeL0pDUQ02YnwfL5miundHMrwmo4YUcTL7JuLMpF5wp AyaNVmkoyCddryHAGPm/9Saf+yp14VIEPf6SKEchagaWOZOxC2BiibxIyChh+USt FZTr5TmR9mINCcr5Ibf6gZfEi6INswgE99l1WLlBAOEpfjTgkzGi6WjbsvBWJubT 9kkQJ8SCXVTOzNM99V1WoUmCzpTJBxg45kE+3Apui9FQ1FNWX/hFcyFZsdvpz10v NbBD9BMSPZcImL+kpCpRtgnCXUQoVpUh88Fe7zoncPzi0ugtRTd6tiwkHc9DAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU1ya3NNnig6ucO/PFTZOU3UlsrJAwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjExNTYyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU xBdQMA0GCSqGSIb3DQEBCwUAA4IBAQB/rQ0gGO9CNlypt9YtD4SSeZZrQFKtn8ij MoyqtZDrW7XYl1p/ZU9/zd0yiCfLYvMrlCbScpFh7jNnDPlRHbpb2MbYlqUrw3kP RpKshZdwt1Kq4ZisRywQFg7vc38jbmrEefeAtCLa53h21C1ATjOCtEnB8IXZEqsY 96WLHdSTYDtani0id+W+2TsqRjLvoTdQLn7dDPuzWa/J/L10dI2YKFoEmDpsoDBN 8j4pMETS94yzRXbWFRFHwBlZ+kHW6+X6sVoHklazYMWN4vTrCseM4iJTQaWjgUFy t/VfD2pV62kQHzqK4WgX3Z6QcZuZvtsbIu7cIqD0r04FNUMvh9Jj -----END CERTIFICATE-----Generated at Sat Jun 13 07:59:20 2026 by rpki-client