$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS212934.roa File: AS212934.roa (raw, json) Hash identifier: jHjKxEcABrMlvGTYpx+mKXDcC9Qejc1IQJPajvPZcyQ= Subject key identifier: 30:E3:77:E1:73:E6:5C:2A:9C:F2:C5:DE:E1:5D:7E:10:E1:EC:89:E5 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 4510E32001A0AE585BB1E9B052A6C34CBBE89BFC Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS212934.roa Signing time: Fri 05 Jun 2026 08:45:52 +0000 ROA not before: Fri 05 Jun 2026 08:40:52 +0000 ROA not after: Fri 04 Jun 2027 08:45:52 +0000 asID: 212934 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:10:e3:20:01:a0:ae:58:5b:b1:e9:b0:52:a6:c3:4c:bb:e8:9b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:52 2026 GMT Not After : Jun 4 08:45:52 2027 GMT Subject: CN=30E377E173E65C2A9CF2C5DEE15D7E10E1EC89E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8f:01:4f:57:c4:6e:59:cc:7d:38:ae:d4:4a: 1e:50:85:83:d6:5e:36:90:98:48:4e:f7:85:bf:63: a9:8f:d6:11:7b:e8:9e:ae:13:a3:e9:c0:c4:44:ab: 49:d6:e1:90:1e:d7:14:89:c3:60:72:7e:41:53:0c: dc:74:7b:e4:4e:29:fe:22:13:ab:cc:39:62:a9:c5: de:4c:01:9d:68:e2:3f:7e:43:58:70:dd:5a:55:d7: 5e:76:a3:b0:cc:30:90:0b:6e:2d:05:18:f3:28:45: 76:43:c8:52:44:b4:24:88:ab:9f:e2:e9:d0:9f:d2: 28:da:95:c2:1a:7b:15:d7:80:67:02:06:f8:9a:42: 1e:8b:11:27:21:6b:dd:4e:e0:80:ba:c1:59:ac:4e: 17:2f:51:a1:f5:3b:f6:bb:c4:e2:3f:85:78:15:92: b0:b0:d5:3b:93:20:42:be:b7:df:1b:32:62:aa:fd: 1a:51:64:ec:3e:8f:26:92:1d:20:8a:f2:f4:c0:cc: 22:9b:68:b6:f3:81:83:fe:75:1c:02:06:3e:59:18: bd:3d:3c:e1:bf:ec:40:83:17:18:ef:ac:a8:ae:93: ba:4a:77:cc:30:97:26:5b:1d:4e:b6:34:72:07:9a: 87:d2:58:a2:d0:ca:b5:7c:2b:e1:1d:c6:ed:2d:cb: b8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E3:77:E1:73:E6:5C:2A:9C:F2:C5:DE:E1:5D:7E:10:E1:EC:89:E5 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS212934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 79:05:e4:3d:9d:36:15:94:e4:0d:41:6d:b2:28:c0:4f:f5:b1: 19:2a:d9:07:34:21:62:5e:32:15:73:f4:65:90:28:d5:39:39: da:fd:f7:e7:af:66:42:e2:7a:be:e0:28:31:ad:d6:5d:cb:15: e3:bc:0b:ef:38:96:d8:f9:3d:b6:c3:97:ea:a1:ca:2b:ce:0b: b7:b2:70:c0:b4:68:de:ac:0f:c5:6e:e0:63:12:db:fa:83:4e: 1c:30:32:7c:df:7c:72:a3:02:db:2c:2d:cb:86:07:c1:f4:56: c1:b9:2c:1b:98:b2:39:80:2d:f3:0b:f3:79:2c:dd:84:5f:33: d2:92:3b:1f:7e:f3:06:42:8d:86:08:5c:a3:3d:14:08:04:66: fa:fe:3c:db:4e:47:67:9c:ee:11:30:40:4e:3e:7b:2b:0b:6d: 6c:9b:ab:ba:15:bb:61:06:ba:e9:f4:8e:d7:f2:42:9f:e9:3a: 7c:17:bb:43:96:10:6f:42:ba:dd:60:74:c9:b2:45:73:8c:bb: 2d:4b:2b:88:23:32:cf:57:04:b8:f8:81:7b:87:77:43:d7:fb: 7f:99:93:7d:16:bc:bf:ef:43:8c:5d:ce:3d:ee:59:0b:4d:58: fa:b2:1f:2b:0a:b4:88:6a:76:ec:f7:36:16:54:58:f5:06:86: 81:da:6d:6f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIURRDjIAGgrlhbsemwUqbDTLvom/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTJaFw0yNzA2MDQwODQ1NTJaMDMxMTAvBgNV BAMTKDMwRTM3N0UxNzNFNjVDMkE5Q0YyQzVERUUxNUQ3RTEwRTFFQzg5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtjwFPV8RuWcx9OK7USh5QhYPW XjaQmEhO94W/Y6mP1hF76J6uE6PpwMREq0nW4ZAe1xSJw2ByfkFTDNx0e+ROKf4i E6vMOWKpxd5MAZ1o4j9+Q1hw3VpV1152o7DMMJALbi0FGPMoRXZDyFJEtCSIq5/i 6dCf0ijalcIaexXXgGcCBviaQh6LEScha91O4IC6wVmsThcvUaH1O/a7xOI/hXgV krCw1TuTIEK+t98bMmKq/RpRZOw+jyaSHSCK8vTAzCKbaLbzgYP+dRwCBj5ZGL09 POG/7ECDFxjvrKiuk7pKd8wwlyZbHU62NHIHmofSWKLQyrV8K+Edxu0ty7i3AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUMON34XPmXCqc8sXe4V1+EOHsieUwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjEyOTM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQB5BeQ9nTYVlOQNQW2yKMBP9bEZKtkHNCFi XjIVc/RlkCjVOTna/ffnr2ZC4nq+4CgxrdZdyxXjvAvvOJbY+T22w5fqocorzgu3 snDAtGjerA/FbuBjEtv6g04cMDJ833xyowLbLC3LhgfB9FbBuSwbmLI5gC3zC/N5 LN2EXzPSkjsffvMGQo2GCFyjPRQIBGb6/jzbTkdnnO4RMEBOPnsrC21sm6u6Fbth Brrp9I7X8kKf6Tp8F7tDlhBvQrrdYHTJskVzjLstSyuIIzLPVwS4+IF7h3dD1/t/ mZN9Fry/70OMXc497lkLTVj6sh8rCrSIanbs9zYWVFj1BoaB2m1v -----END CERTIFICATE-----Generated at Sat Jun 13 09:25:18 2026 by rpki-client