$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215473.roa File: AS215473.roa (raw, json) Hash identifier: 47mbbTtkg4HKYPRG3zkRhoThEUa+MRbdTNI4BsMKcp0= Subject key identifier: F1:7F:3D:A8:85:4E:89:D6:3D:C0:DE:93:45:4A:28:51:05:64:EE:C2 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: DF771C2CAB40BE7AACB7182600098CD568B126 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215473.roa Signing time: Fri 04 Jul 2025 07:51:28 +0000 ROA not before: Fri 04 Jul 2025 07:46:28 +0000 ROA not after: Fri 03 Jul 2026 07:51:28 +0000 asID: 215473 IP address blocks: 2a07:54c1:4900::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 01:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: df:77:1c:2c:ab:40:be:7a:ac:b7:18:26:00:09:8c:d5:68:b1:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:28 2025 GMT Not After : Jul 3 07:51:28 2026 GMT Subject: CN=F17F3DA8854E89D63DC0DE93454A28510564EEC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:19:c3:94:cb:ed:16:93:53:14:12:e9:6b:d7: f4:f3:c2:bf:12:b0:78:d1:18:09:0f:03:cf:92:fb: c8:41:a2:e9:dd:e7:75:8f:f0:8c:f2:23:31:4a:29: 14:d6:75:58:37:d4:2c:0e:2e:9e:52:d6:b9:1d:0b: 2c:ab:9c:14:74:99:7f:bb:62:6c:54:93:8a:96:05: 0c:23:87:be:77:ca:c6:0c:22:8a:0e:d1:11:21:99: 65:61:41:ca:ce:47:c3:b5:ee:b3:7f:fd:f1:68:1c: 54:5c:d8:c6:9f:fa:7e:b6:7a:a3:f1:28:1f:02:32: 49:2a:2b:06:00:3e:4f:0a:d2:83:67:b3:d9:5e:23: 77:90:26:09:20:06:3a:1e:16:c6:1c:95:5a:b9:12: 62:f5:18:55:60:ad:24:d5:60:54:d2:d9:a0:3d:0d: 31:d0:70:4e:ee:8e:cd:9d:50:57:f2:05:d6:ce:8e: 04:25:53:a4:f9:97:da:08:78:3e:33:43:62:0c:55: e3:2c:f0:01:73:83:3f:0f:d9:63:57:d6:a3:c6:2e: f3:71:a1:00:c7:49:a1:16:4c:f4:ec:a7:37:db:01: 18:22:fa:df:ee:39:29:af:40:92:14:b6:45:2b:0a: dc:fc:26:5e:91:eb:8f:c4:05:28:be:ae:b5:c2:d2: 54:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7F:3D:A8:85:4E:89:D6:3D:C0:DE:93:45:4A:28:51:05:64:EE:C2 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:4900::/40 Signature Algorithm: sha256WithRSAEncryption 00:27:4e:c4:76:5e:df:2e:41:8b:42:ac:19:df:e4:7f:94:b0: 44:75:e7:3f:b3:37:16:74:68:89:65:8b:d8:4c:00:86:6e:ac: ca:8e:59:9b:f2:0c:07:29:96:08:10:9b:1f:04:d9:a3:ea:ce: 18:9a:83:1d:e5:3d:4e:80:e4:65:93:a3:9a:db:5e:50:a5:1e: 39:f4:65:a4:34:f7:b7:9d:ad:8c:a2:43:57:6e:8a:65:83:21: f5:db:04:8f:40:c1:62:2e:c7:78:98:05:89:33:fc:45:27:53: 72:3c:99:d8:f3:15:34:87:cb:ea:96:a6:18:81:e2:80:af:01: 0d:11:9b:5b:a4:1c:91:3f:a5:0c:7c:8c:1b:26:9f:7d:97:e3: 84:d0:c7:5b:dc:f4:b6:83:bd:ec:5a:3d:f9:b6:e5:04:c7:1a: fe:bd:ea:56:af:56:0c:77:cf:09:37:c3:72:7c:55:03:0f:4e: 4a:c3:f4:7e:3c:d8:ce:4e:18:74:66:ef:55:75:c0:b2:bd:a9: bf:6c:fe:3c:36:5a:bf:ba:b8:da:29:cd:e1:6b:00:97:a5:f8: b6:d1:96:b3:10:43:cd:b2:6c:ea:cd:de:1e:95:6b:b8:e4:65: 31:9a:4c:8e:97:79:55:8b:a3:5d:87:19:c0:10:bd:d8:2c:3e: 4c:a4:33:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAN93HCyrQL56rLcYJgAJjNVosSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjhaFw0yNjA3MDMwNzUxMjhaMDMxMTAvBgNV BAMTKEYxN0YzREE4ODU0RTg5RDYzREMwREU5MzQ1NEEyODUxMDU2NEVFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGcOUy+0Wk1MUEulr1/Tzwr8S sHjRGAkPA8+S+8hBound53WP8IzyIzFKKRTWdVg31CwOLp5S1rkdCyyrnBR0mX+7 YmxUk4qWBQwjh753ysYMIooO0REhmWVhQcrOR8O17rN//fFoHFRc2Maf+n62eqPx KB8CMkkqKwYAPk8K0oNns9leI3eQJgkgBjoeFsYclVq5EmL1GFVgrSTVYFTS2aA9 DTHQcE7ujs2dUFfyBdbOjgQlU6T5l9oIeD4zQ2IMVeMs8AFzgz8P2WNX1qPGLvNx oQDHSaEWTPTspzfbARgi+t/uOSmvQJIUtkUrCtz8Jl6R64/EBSi+rrXC0lSpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8X89qIVOidY9wN6TRUooUQVk7sIwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE1NDczLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wUkwDQYJKoZIhvcNAQELBQADggEBAAAnTsR2Xt8uQYtCrBnf5H+UsER15z+zNxZ0 aIlli9hMAIZurMqOWZvyDAcplggQmx8E2aPqzhiagx3lPU6A5GWTo5rbXlClHjn0 ZaQ097edrYyiQ1duimWDIfXbBI9AwWIux3iYBYkz/EUnU3I8mdjzFTSHy+qWphiB 4oCvAQ0Rm1ukHJE/pQx8jBsmn32X44TQx1vc9LaDvexaPfm25QTHGv696lavVgx3 zwk3w3J8VQMPTkrD9H482M5OGHRm71V1wLK9qb9s/jw2Wr+6uNopzeFrAJel+LbR lrMQQ82ybOrN3h6Va7jkZTGaTI6XeVWLo12HGcAQvdgsPkykMww= -----END CERTIFICATE-----Generated at Wed Nov 5 13:21:34 2025 by rpki-client