$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS212276.roa File: AS212276.roa (raw, json) Hash identifier: bUdkczqPWOJ33KcmZaydKFsWvZQXAP5DBiQLajP0r60= Subject key identifier: 10:36:69:23:CE:B2:28:20:F6:AE:1E:5D:AF:C9:B2:25:27:E9:02:FF Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 3810405CA76605EF7D4B0E57AB3983A450D753AA Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS212276.roa Signing time: Fri 05 Jun 2026 08:45:53 +0000 ROA not before: Fri 05 Jun 2026 08:40:53 +0000 ROA not after: Fri 04 Jun 2027 08:45:53 +0000 asID: 212276 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:10:40:5c:a7:66:05:ef:7d:4b:0e:57:ab:39:83:a4:50:d7:53:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:53 2026 GMT Not After : Jun 4 08:45:53 2027 GMT Subject: CN=10366923CEB22820F6AE1E5DAFC9B22527E902FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:55:44:68:3d:bb:17:b7:97:35:4b:e4:36:f8: 74:83:02:ec:e2:18:bb:c0:1a:da:29:1b:c4:7f:6a: f7:32:20:fb:88:dd:47:2c:da:3b:56:b3:c2:fc:7a: f5:df:19:39:d5:34:f3:73:df:cf:14:78:92:2d:9b: f2:85:ce:f1:c9:90:d8:c9:37:a0:7c:8f:37:d5:0f: 37:70:1c:35:a7:e8:95:c3:af:13:b6:fc:6d:04:ba: 75:98:d5:43:32:6d:30:23:3b:25:83:51:b0:a1:f1: 2b:21:cb:b7:13:a1:1b:b0:eb:2e:bd:57:8d:b4:4a: 55:d0:9d:fe:dd:79:5a:b8:56:f9:9b:e8:12:cc:1d: 32:0b:44:44:52:e5:d1:0c:f6:d1:be:88:04:4e:52: 96:0b:ee:29:b1:1f:90:80:76:2d:3e:20:37:be:c5: 06:21:03:f7:e6:97:4b:20:52:3b:71:7e:9c:30:7c: 19:33:1b:15:8a:18:dc:a7:fb:28:22:08:22:f6:26: 90:14:19:3b:60:fc:a8:8c:e1:ad:9a:73:a7:48:82: 31:20:f6:49:a0:fe:f4:f8:d9:76:a7:7c:d3:ba:e1: 97:75:87:01:3d:aa:29:3f:6f:b6:b6:18:24:2b:2a: 2b:61:71:05:f0:06:0a:91:5c:db:01:1b:d5:4c:be: 20:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:36:69:23:CE:B2:28:20:F6:AE:1E:5D:AF:C9:B2:25:27:E9:02:FF X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS212276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 13:73:15:f4:b4:23:71:92:20:4f:69:8c:0c:8f:53:6c:7c:a1: ac:c5:08:82:33:d3:10:15:b6:62:93:20:b7:59:aa:87:19:1c: f2:bd:42:51:cf:2d:f6:1f:3f:a6:22:1f:ec:cc:93:41:cf:2d: ce:ad:3e:ac:4c:c5:a6:83:83:3d:f5:aa:6d:15:72:65:3f:74: 23:35:0e:8c:4b:e8:a5:96:43:0f:00:1f:7e:a6:6a:2e:f5:47: 95:13:e9:9f:cb:00:75:8b:c6:59:d3:e4:d5:61:af:e7:9d:15: cc:94:cf:e7:54:0d:9e:bc:39:53:58:90:ff:db:19:1e:31:e3: bd:8d:24:de:90:5e:b6:70:ba:6b:e2:0d:4c:05:d6:27:80:83: be:c6:26:e4:79:88:ec:24:2d:1e:9f:1a:77:8d:48:03:e3:b4: 8a:de:45:e1:24:e9:90:3f:01:01:25:35:7d:bf:73:43:ee:5c: c3:cb:82:78:26:8d:c3:a0:3d:62:1c:03:7e:81:8e:6f:09:4e: aa:b8:de:e0:55:5b:c0:0a:cc:c5:08:05:62:63:81:9c:9c:fd: c9:c6:07:8a:04:b3:36:40:3f:75:ad:a9:b0:9d:bc:8b:c3:ba: 74:81:36:91:3f:73:d0:8e:e5:01:60:74:a7:03:a4:cd:a0:f5: f1:82:83:50 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOBBAXKdmBe99Sw5XqzmDpFDXU6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTNaFw0yNzA2MDQwODQ1NTNaMDMxMTAvBgNV BAMTKDEwMzY2OTIzQ0VCMjI4MjBGNkFFMUU1REFGQzlCMjI1MjdFOTAyRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVURoPbsXt5c1S+Q2+HSDAuzi GLvAGtopG8R/avcyIPuI3Ucs2jtWs8L8evXfGTnVNPNz388UeJItm/KFzvHJkNjJ N6B8jzfVDzdwHDWn6JXDrxO2/G0EunWY1UMybTAjOyWDUbCh8Sshy7cToRuw6y69 V420SlXQnf7deVq4Vvmb6BLMHTILRERS5dEM9tG+iAROUpYL7imxH5CAdi0+IDe+ xQYhA/fml0sgUjtxfpwwfBkzGxWKGNyn+ygiCCL2JpAUGTtg/KiM4a2ac6dIgjEg 9kmg/vT42XanfNO64Zd1hwE9qik/b7a2GCQrKithcQXwBgqRXNsBG9VMviDJAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUEDZpI86yKCD2rh5dr8myJSfpAv8wHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjEyMjc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQATcxX0tCNxkiBPaYwMj1NsfKGsxQiCM9MQ FbZikyC3WaqHGRzyvUJRzy32Hz+mIh/szJNBzy3OrT6sTMWmg4M99aptFXJlP3Qj NQ6MS+illkMPAB9+pmou9UeVE+mfywB1i8ZZ0+TVYa/nnRXMlM/nVA2evDlTWJD/ 2xkeMeO9jSTekF62cLpr4g1MBdYngIO+xibkeYjsJC0enxp3jUgD47SK3kXhJOmQ PwEBJTV9v3ND7lzDy4J4Jo3DoD1iHAN+gY5vCU6quN7gVVvACszFCAViY4GcnP3J xgeKBLM2QD91ramwnbyLw7p0gTaRP3PQjuUBYHSnA6TNoPXxgoNQ -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:08 2026 by rpki-client