$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215459.roa File: AS215459.roa (raw, json) Hash identifier: qS4YA5jM/A21UEaQdWetCNomdQlIFtYicGc+9SOIupo= Subject key identifier: 1D:99:BB:3C:7A:28:53:0D:58:A4:E6:8F:17:7A:CD:71:33:7E:FE:23 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 3EB881552170BDA6624CF61E215888A0A04C4BD5 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215459.roa Signing time: Fri 04 Jul 2025 07:51:24 +0000 ROA not before: Fri 04 Jul 2025 07:46:24 +0000 ROA not after: Fri 03 Jul 2026 07:51:24 +0000 asID: 215459 IP address blocks: 2a07:54c4:19a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 01:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b8:81:55:21:70:bd:a6:62:4c:f6:1e:21:58:88:a0:a0:4c:4b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:24 2025 GMT Not After : Jul 3 07:51:24 2026 GMT Subject: CN=1D99BB3C7A28530D58A4E68F177ACD71337EFE23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:69:c3:e4:61:b6:30:5c:0b:13:67:23:a9: 53:4c:8b:1a:28:48:9b:10:a9:ae:db:89:d7:53:b4: 97:29:f1:e5:46:c8:2a:5c:0b:00:ac:2b:62:b1:9c: 6c:1b:cc:1b:ff:df:eb:8e:68:c7:a0:46:aa:cf:ff: 8a:e7:6c:3c:c8:a6:2e:a1:71:f2:65:e3:d6:f2:93: 38:2c:ae:1b:5d:2c:a7:16:e2:47:85:85:76:d7:3f: bb:2f:8e:ea:7c:5d:8b:5c:35:1a:06:57:4b:50:d2: a3:ba:11:90:28:0c:84:91:f1:17:ac:f7:2c:fa:92: 59:49:e6:f8:04:d8:e1:8e:79:9e:b4:d2:c8:8c:5b: 78:76:60:a7:9d:2f:74:97:a4:70:58:de:9f:01:42: b8:43:1e:bf:97:18:84:33:2e:b5:60:48:58:db:a1: 29:a7:f0:4b:05:7c:d5:b4:3e:6e:d3:7c:07:aa:35: 7c:34:74:d4:2e:fc:65:53:20:f4:85:4e:22:83:1b: d7:cc:10:94:7e:84:74:20:44:ba:a5:22:b2:18:fd: a9:46:2e:a7:6b:4b:7c:54:7a:c6:3d:2d:e0:65:3a: 63:d4:a5:b9:b3:9d:ad:06:14:15:50:65:a2:f6:de: 51:78:d8:13:1a:23:50:56:a2:c8:50:20:be:38:b3: ad:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:99:BB:3C:7A:28:53:0D:58:A4:E6:8F:17:7A:CD:71:33:7E:FE:23 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215459.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:19a0::/44 Signature Algorithm: sha256WithRSAEncryption 02:89:4a:91:c5:35:15:bc:38:f2:b0:d8:cf:25:83:96:9a:d8: b7:a5:56:a8:a4:52:04:0c:74:95:6c:b9:4b:29:18:69:47:08: d2:7d:1a:c0:9b:16:c2:06:ce:14:6e:26:05:5d:18:cf:50:55: b5:bf:67:c4:fc:e1:3b:16:f3:7d:e5:cc:36:00:d9:f5:ac:f0: 7d:16:07:5a:98:19:46:60:8d:42:3a:cb:fd:73:f4:13:c1:98: 1d:f0:f5:70:9e:97:49:86:03:14:ef:06:d2:94:b6:ee:af:96: 57:d9:ac:6e:04:12:b8:83:3d:2d:29:68:6a:ec:a5:b5:a9:9e: e0:68:41:fe:41:f6:50:46:d1:f9:37:e1:ee:6f:62:0c:15:eb: b3:63:7d:f9:9e:59:de:6b:95:77:a6:b5:fd:7b:d7:ef:72:81: 67:ab:97:7e:a6:71:9b:71:29:06:03:83:af:5b:90:9a:39:b5: ce:f1:38:91:9b:da:ec:60:36:43:db:3a:b1:ee:d4:1a:c3:8b: ee:58:3b:7f:5e:c8:2c:16:af:46:1d:d6:d9:b4:93:26:0b:63: d3:b0:70:9a:90:e2:18:7f:44:bf:01:d5:07:22:2e:6f:79:1a: 26:fb:44:96:25:bf:5b:78:01:d8:7d:b3:fa:b6:05:7d:93:ef: 4a:72:17:9b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUPriBVSFwvaZiTPYeIViIoKBMS9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjRaFw0yNjA3MDMwNzUxMjRaMDMxMTAvBgNV BAMTKDFEOTlCQjNDN0EyODUzMEQ1OEE0RTY4RjE3N0FDRDcxMzM3RUZFMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87GnD5GG2MFwLE2cjqVNMixoo SJsQqa7biddTtJcp8eVGyCpcCwCsK2KxnGwbzBv/3+uOaMegRqrP/4rnbDzIpi6h cfJl49bykzgsrhtdLKcW4keFhXbXP7svjup8XYtcNRoGV0tQ0qO6EZAoDISR8Res 9yz6kllJ5vgE2OGOeZ600siMW3h2YKedL3SXpHBY3p8BQrhDHr+XGIQzLrVgSFjb oSmn8EsFfNW0Pm7TfAeqNXw0dNQu/GVTIPSFTiKDG9fMEJR+hHQgRLqlIrIY/alG LqdrS3xUesY9LeBlOmPUpbmzna0GFBVQZaL23lF42BMaI1BWoshQIL44s62HAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUHZm7PHooUw1YpOaPF3rNcTN+/iMwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE1NDU5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgdU xBmgMA0GCSqGSIb3DQEBCwUAA4IBAQACiUqRxTUVvDjysNjPJYOWmti3pVaopFIE DHSVbLlLKRhpRwjSfRrAmxbCBs4UbiYFXRjPUFW1v2fE/OE7FvN95cw2ANn1rPB9 FgdamBlGYI1COsv9c/QTwZgd8PVwnpdJhgMU7wbSlLbur5ZX2axuBBK4gz0tKWhq 7KW1qZ7gaEH+QfZQRtH5N+Hub2IMFeuzY335nlnea5V3prX9e9fvcoFnq5d+pnGb cSkGA4OvW5CaObXO8TiRm9rsYDZD2zqx7tQaw4vuWDt/XsgsFq9GHdbZtJMmC2PT sHCakOIYf0S/AdUHIi5veRom+0SWJb9beAHYfbP6tgV9k+9Kcheb -----END CERTIFICATE-----Generated at Wed Nov 5 13:21:40 2025 by rpki-client