$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215459.roa File: AS215459.roa (raw, json) Hash identifier: tHoUqqLnokFyZX8P/opSG8qKDiAvnN/23gcVMxOshAg= Subject key identifier: 38:0E:52:E7:62:F4:75:EC:4E:B6:D4:C5:ED:36:DB:BD:66:C1:96:53 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 44F70A22B03939716B373D2CE06133FE01AD3494 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215459.roa Signing time: Fri 05 Jun 2026 08:45:52 +0000 ROA not before: Fri 05 Jun 2026 08:40:52 +0000 ROA not after: Fri 04 Jun 2027 08:45:52 +0000 asID: 215459 IP address blocks: 2a07:54c4:19a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f7:0a:22:b0:39:39:71:6b:37:3d:2c:e0:61:33:fe:01:ad:34:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:52 2026 GMT Not After : Jun 4 08:45:52 2027 GMT Subject: CN=380E52E762F475EC4EB6D4C5ED36DBBD66C19653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:7d:42:6f:86:9e:da:94:39:ee:b6:68:80: 30:28:ea:9a:2e:17:bc:4f:69:ca:a3:e6:9b:ad:f6: 34:39:0c:a6:80:3d:ba:2b:7b:85:10:ce:f6:55:d7: d5:a0:e8:c1:23:2f:c4:68:88:9a:56:92:de:5f:c9: 2b:12:86:44:fd:c4:06:ff:23:7e:ff:b3:1a:96:e5: e0:43:9c:67:87:12:63:99:de:50:22:35:8e:fa:85: f8:1c:e7:13:4f:62:e8:3b:b8:b7:66:cd:e2:6f:24: 1c:1d:21:0c:57:5d:55:4a:4f:69:e2:5e:49:cd:a1: 85:4e:ab:82:02:31:9c:af:b8:b9:13:a4:5d:fa:c3: bd:93:a8:cb:6a:3a:b6:76:08:ac:5e:55:40:3e:0d: 1a:91:06:ad:2d:07:7a:76:68:a0:c9:27:5d:2f:28: 40:59:c0:3a:c1:2d:66:c6:d1:7a:83:fd:04:fd:10: a1:89:b4:c7:c6:3d:42:31:ee:36:05:35:fd:5c:a2: 84:a5:86:7a:82:f0:7b:6c:79:61:06:c4:f4:4d:e2: 37:45:2f:c5:ad:73:30:fc:86:5d:a8:ac:fc:c0:df: 31:1f:c0:05:50:af:d2:08:b6:e6:20:24:4a:d3:33: cf:4a:30:5d:8a:57:74:9b:9d:3d:a6:76:1e:bf:f4: 23:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0E:52:E7:62:F4:75:EC:4E:B6:D4:C5:ED:36:DB:BD:66:C1:96:53 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215459.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:19a0::/44 Signature Algorithm: sha256WithRSAEncryption 8e:59:20:89:75:e8:1d:7c:f8:1a:39:60:c1:e2:0b:69:6e:45: 2d:64:9a:e8:41:22:71:7e:47:bb:b7:df:fc:f1:1a:36:4c:4c: c2:a6:80:53:9a:c2:f3:85:13:de:8a:8d:0c:1f:69:4a:ba:ec: 36:37:c5:ec:3e:41:70:5e:81:6a:29:27:d7:9b:5d:3d:c8:fd: 0f:45:65:1e:e2:fb:59:5d:5e:4b:8a:9d:d2:47:26:4b:2b:cc: 7a:b4:72:cc:1b:2c:b5:de:d0:4c:23:17:ad:41:3a:1b:7d:1f: 3b:57:7c:45:23:11:49:f9:8c:78:9e:1b:0e:bb:d8:4d:b7:a4: fb:2a:b6:57:0d:dc:de:73:e5:32:20:d8:49:0d:20:8e:80:cd: 80:ad:a0:ea:6b:89:52:58:b1:da:19:e7:0e:a4:a3:2d:68:83: 11:e0:b6:f8:0e:6a:cb:32:b9:5c:2d:00:c7:60:df:cb:38:04: 0f:ed:ef:62:9e:b0:2d:91:13:1c:ca:e5:69:33:c0:7e:54:bc: 96:93:d5:21:74:01:10:4b:98:de:4e:02:c6:5b:5b:4d:61:d5: ea:3c:e3:0d:30:de:ef:25:45:0d:ba:6c:61:8d:00:9b:11:cf: f8:cb:be:2b:8b:3b:64:b0:95:df:14:9d:ac:e3:ee:86:5a:77: 00:32:95:e0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIURPcKIrA5OXFrNz0s4GEz/gGtNJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTJaFw0yNzA2MDQwODQ1NTJaMDMxMTAvBgNV BAMTKDM4MEU1MkU3NjJGNDc1RUM0RUI2RDRDNUVEMzZEQkJENjZDMTk2NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBB31Cb4ae2pQ57rZogDAo6pou F7xPacqj5put9jQ5DKaAPbore4UQzvZV19Wg6MEjL8RoiJpWkt5fySsShkT9xAb/ I37/sxqW5eBDnGeHEmOZ3lAiNY76hfgc5xNPYug7uLdmzeJvJBwdIQxXXVVKT2ni XknNoYVOq4ICMZyvuLkTpF36w72TqMtqOrZ2CKxeVUA+DRqRBq0tB3p2aKDJJ10v KEBZwDrBLWbG0XqD/QT9EKGJtMfGPUIx7jYFNf1cooSlhnqC8HtseWEGxPRN4jdF L8WtczD8hl2orPzA3zEfwAVQr9IItuYgJErTM89KMF2KV3SbnT2mdh6/9CN3AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUOA5S52L0dexOttTF7TbbvWbBllMwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE1NDU5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgdU xBmgMA0GCSqGSIb3DQEBCwUAA4IBAQCOWSCJdegdfPgaOWDB4gtpbkUtZJroQSJx fke7t9/88Ro2TEzCpoBTmsLzhRPeio0MH2lKuuw2N8XsPkFwXoFqKSfXm109yP0P RWUe4vtZXV5Lip3SRyZLK8x6tHLMGyy13tBMIxetQTobfR87V3xFIxFJ+Yx4nhsO u9hNt6T7KrZXDdzec+UyINhJDSCOgM2AraDqa4lSWLHaGecOpKMtaIMR4Lb4DmrL MrlcLQDHYN/LOAQP7e9inrAtkRMcyuVpM8B+VLyWk9UhdAEQS5jeTgLGW1tNYdXq POMNMN7vJUUNumxhjQCbEc/4y74riztksJXfFJ2s4+6GWncAMpXg -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:15 2026 by rpki-client