$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215600.roa File: AS215600.roa (raw, json) Hash identifier: 7RzVMseQAF74XTLQ76TW57/WxUVoA160UTMZ2y2xdew= Subject key identifier: AD:37:45:DE:FF:EC:E6:37:87:44:1E:C2:55:72:4E:A0:15:D0:2F:BC Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 58FE687D551D39847B3EA9E1993518A6EB07A69D Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215600.roa Signing time: Fri 05 Jun 2026 08:45:53 +0000 ROA not before: Fri 05 Jun 2026 08:40:53 +0000 ROA not after: Fri 04 Jun 2027 08:45:53 +0000 asID: 215600 IP address blocks: 2a07:54c3::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:fe:68:7d:55:1d:39:84:7b:3e:a9:e1:99:35:18:a6:eb:07:a6:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:53 2026 GMT Not After : Jun 4 08:45:53 2027 GMT Subject: CN=AD3745DEFFECE63787441EC255724EA015D02FBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:76:1b:21:c6:ec:c2:6d:59:3b:75:c7:e1: 83:d1:c2:7a:9a:eb:71:74:be:8e:f7:64:94:79:e6: e4:17:93:16:a4:f3:d5:00:59:90:6b:2a:ce:f4:d6: 41:ec:16:52:d3:f0:24:83:51:f1:87:c1:14:ea:8e: a1:c3:cd:30:b3:2c:87:d7:84:2f:c4:15:de:84:a2: 0b:d5:66:f4:6b:da:02:48:a7:f4:99:7d:4e:0d:aa: 33:8d:5c:4d:62:40:34:ca:ab:6d:47:58:e2:36:64: 9e:03:5a:92:f5:58:b0:35:d0:bb:87:b9:b7:a4:87: f4:b7:0d:7d:33:f2:50:de:d3:6c:5e:1c:bb:a9:6b: b7:2e:ba:95:c4:d4:c0:9e:74:22:06:65:c8:19:35: 82:0c:33:60:20:50:4e:2d:6b:2f:c1:a0:bc:0a:18: 83:f9:27:37:25:b3:83:63:e3:05:9a:85:cc:52:3d: db:99:2b:b5:7d:b0:af:c6:06:02:84:1a:22:fe:f9: 76:f0:55:b1:8a:4b:2c:b8:a1:d0:08:1d:1e:68:4d: b9:cf:36:24:19:ef:b6:58:41:76:b3:ec:38:fd:ae: 4c:cc:7e:60:d4:a1:fe:8a:1b:dc:17:ec:8d:e9:d0: 33:7b:c2:56:53:58:d1:04:19:b5:d5:d8:54:88:d6: 20:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:37:45:DE:FF:EC:E6:37:87:44:1E:C2:55:72:4E:A0:15:D0:2F:BC X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215600.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c3::/32 Signature Algorithm: sha256WithRSAEncryption 8f:85:cd:aa:5c:5d:e9:c3:b4:0e:db:ed:57:d8:f0:ef:91:5f: 0f:3b:f6:ed:e8:e1:9b:0d:66:6b:95:a7:e6:dd:63:7b:19:68: bc:0a:46:88:b1:03:10:ed:05:cf:1b:16:27:a7:1d:35:b4:35: 74:36:d4:95:9c:74:c2:1b:d8:8c:70:16:fe:d4:20:13:c2:37: c5:ad:9f:d8:a5:74:4c:a3:6f:2d:3c:55:5c:31:ae:a4:d0:86: f1:59:70:fa:c4:7d:0e:43:de:37:78:41:b8:c0:07:3c:4e:18: 7f:16:aa:d3:bb:c5:0a:b6:d3:9b:db:48:b0:93:07:94:0b:04: 3c:c7:b7:94:e9:6d:f3:9c:2e:6a:8b:5a:c4:b8:e4:bb:de:a3: 84:80:94:2f:2a:bd:8b:04:ae:13:18:f7:62:8c:05:79:82:e1: b9:50:28:9f:57:6d:35:cc:44:21:b8:f6:24:b3:c3:2d:63:68: 6e:21:f4:fa:e7:dd:c0:a5:0d:33:93:9f:e1:75:12:38:c9:bd: 9d:52:9b:a2:d4:0c:3d:af:42:0a:a6:d3:ba:51:f9:a1:f4:af: 4b:e8:e9:ca:5c:e4:fb:0c:8e:d1:c9:b0:e6:b0:73:a6:fc:d9: 80:63:5d:fa:3b:f5:20:ce:10:38:65:e3:b3:84:74:1b:b7:9f: 3c:50:fc:76 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUWP5ofVUdOYR7PqnhmTUYpusHpp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTNaFw0yNzA2MDQwODQ1NTNaMDMxMTAvBgNV BAMTKEFEMzc0NURFRkZFQ0U2Mzc4NzQ0MUVDMjU1NzI0RUEwMTVEMDJGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS/XYbIcbswm1ZO3XH4YPRwnqa 63F0vo73ZJR55uQXkxak89UAWZBrKs701kHsFlLT8CSDUfGHwRTqjqHDzTCzLIfX hC/EFd6EogvVZvRr2gJIp/SZfU4NqjONXE1iQDTKq21HWOI2ZJ4DWpL1WLA10LuH ubekh/S3DX0z8lDe02xeHLupa7cuupXE1MCedCIGZcgZNYIMM2AgUE4tay/BoLwK GIP5Jzcls4Nj4wWahcxSPduZK7V9sK/GBgKEGiL++XbwVbGKSyy4odAIHR5oTbnP NiQZ77ZYQXaz7Dj9rkzMfmDUof6KG9wX7I3p0DN7wlZTWNEEGbXV2FSI1iCbAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUrTdF3v/s5jeHRB7CVXJOoBXQL7wwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE1NjAwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgdU wzANBgkqhkiG9w0BAQsFAAOCAQEAj4XNqlxd6cO0DtvtV9jw75FfDzv27ejhmw1m a5Wn5t1jexlovApGiLEDEO0FzxsWJ6cdNbQ1dDbUlZx0whvYjHAW/tQgE8I3xa2f 2KV0TKNvLTxVXDGupNCG8Vlw+sR9DkPeN3hBuMAHPE4Yfxaq07vFCrbTm9tIsJMH lAsEPMe3lOlt85wuaotaxLjku96jhICULyq9iwSuExj3YowFeYLhuVAon1dtNcxE Ibj2JLPDLWNobiH0+ufdwKUNM5Of4XUSOMm9nVKbotQMPa9CCqbTulH5ofSvS+jp ylzk+wyO0cmw5rBzpvzZgGNd+jv1IM4QOGXjs4R0G7efPFD8dg== -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:12 2026 by rpki-client