$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215680.roa File: AS215680.roa (raw, json) Hash identifier: 0m/H6DfZip47OKek5j1B82KW1YjsQuK55LIWJ7/6gdw= Subject key identifier: 26:EC:23:BB:99:A7:04:28:70:FF:11:61:9E:3E:53:1D:59:BD:8C:41 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 2D9D5C98453893293BCB6A9FB8ADEF50A92ADFE4 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215680.roa Signing time: Fri 05 Jun 2026 08:45:51 +0000 ROA not before: Fri 05 Jun 2026 08:40:51 +0000 ROA not after: Fri 04 Jun 2027 08:45:51 +0000 asID: 215680 IP address blocks: 2a07:54c1:c600::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:9d:5c:98:45:38:93:29:3b:cb:6a:9f:b8:ad:ef:50:a9:2a:df:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:51 2026 GMT Not After : Jun 4 08:45:51 2027 GMT Subject: CN=26EC23BB99A7042870FF11619E3E531D59BD8C41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:c3:7e:fa:39:82:ac:a1:36:11:35:ae:7c: 1f:b0:18:32:bb:f5:e9:b9:f8:4d:30:64:1b:8f:00: b6:7d:50:f0:c8:bb:31:41:4d:02:89:5f:59:e8:0a: 40:d8:79:ca:6b:2f:37:b9:72:6f:09:ae:2a:86:03: 88:1b:7a:97:d5:bc:b7:85:bd:e8:21:2b:13:5c:0f: 2b:54:e7:76:bb:58:77:89:ee:cb:22:15:71:f3:f1: c1:e7:5f:38:11:50:98:c0:77:69:73:50:6d:8e:fb: bc:ee:2c:a5:98:21:0f:da:9a:8f:07:7c:fa:0b:1a: 7e:77:29:3f:24:3b:5d:44:73:03:e0:5e:33:94:6a: 0b:6d:f7:63:1f:10:b5:1d:b7:f1:20:0e:8b:64:76: ec:e6:36:ac:fb:94:77:5c:c0:aa:95:bc:6a:9a:16: ae:7f:5f:62:43:c7:92:6c:40:86:20:a0:b8:ed:71: 52:2f:42:d8:ff:84:1d:64:d9:9f:4c:a3:f4:2d:ca: 67:e7:90:9a:bb:b8:62:1d:87:d4:dc:5b:51:26:f9: 3c:06:12:c2:58:dd:66:bf:99:8c:e3:a2:51:c2:49: 35:9a:78:5b:36:2d:b2:95:72:1b:f6:b9:30:29:16: 21:64:7d:f5:c0:9f:ba:57:34:f2:ff:8d:38:c4:72: 81:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EC:23:BB:99:A7:04:28:70:FF:11:61:9E:3E:53:1D:59:BD:8C:41 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215680.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:c600::/40 Signature Algorithm: sha256WithRSAEncryption c1:de:73:58:c0:4d:72:f3:f3:af:e6:23:78:02:f7:45:b3:78: 7c:2d:53:26:b9:3b:f9:a1:ce:39:b9:8c:28:3d:72:9e:33:ba: cd:9c:a8:e9:59:f4:92:c9:df:04:58:d4:83:de:9b:4a:a9:d9: b3:00:a9:fe:b2:52:03:bb:4b:fa:df:c1:03:83:d9:73:f1:2d: af:bc:e8:d1:64:05:2b:f5:a1:d1:cc:90:ea:c4:42:3a:9d:2f: 1b:96:83:86:64:cf:65:b4:33:4b:30:a0:d1:48:9a:bf:fd:07: 1e:bd:fd:2a:f6:1a:0d:29:c1:51:94:92:cd:3e:e1:16:36:ec: be:94:8c:e0:87:5d:fa:d6:7e:b6:f4:8e:87:88:2c:21:ee:da: 43:be:78:19:d3:41:cf:36:38:10:1c:14:e8:19:c1:49:33:77: fd:cc:9f:2d:70:1a:b6:9a:5d:ea:f1:75:5d:f9:bc:c1:ef:3d: 66:2a:45:56:a2:97:f3:38:d8:53:aa:5c:f3:c3:36:e7:90:ae: 7d:b9:2d:a4:10:8b:a4:a2:9c:2a:47:9f:4c:a6:ad:00:4b:4a: 9c:28:45:26:e2:47:0b:d3:35:27:8a:74:42:58:be:40:fb:f6: b8:1c:bd:78:f4:c4:b8:c4:c6:c3:89:e9:60:51:2f:07:49:d2: 5a:3a:db:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZ1cmEU4kyk7y2qfuK3vUKkq3+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV BAMTKDI2RUMyM0JCOTlBNzA0Mjg3MEZGMTE2MTlFM0U1MzFENTlCRDhDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEm8N++jmCrKE2ETWufB+wGDK7 9em5+E0wZBuPALZ9UPDIuzFBTQKJX1noCkDYecprLze5cm8JriqGA4gbepfVvLeF veghKxNcDytU53a7WHeJ7ssiFXHz8cHnXzgRUJjAd2lzUG2O+7zuLKWYIQ/amo8H fPoLGn53KT8kO11EcwPgXjOUagtt92MfELUdt/EgDotkduzmNqz7lHdcwKqVvGqa Fq5/X2JDx5JsQIYgoLjtcVIvQtj/hB1k2Z9Mo/QtymfnkJq7uGIdh9TcW1Em+TwG EsJY3Wa/mYzjolHCSTWaeFs2LbKVchv2uTApFiFkffXAn7pXNPL/jTjEcoF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJuwju5mnBChw/xFhnj5THVm9jEEwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE1NjgwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wcYwDQYJKoZIhvcNAQELBQADggEBAMHec1jATXLz86/mI3gC90WzeHwtUya5O/mh zjm5jCg9cp4zus2cqOlZ9JLJ3wRY1IPem0qp2bMAqf6yUgO7S/rfwQOD2XPxLa+8 6NFkBSv1odHMkOrEQjqdLxuWg4Zkz2W0M0swoNFImr/9Bx69/Sr2Gg0pwVGUks0+ 4RY27L6UjOCHXfrWfrb0joeILCHu2kO+eBnTQc82OBAcFOgZwUkzd/3Mny1wGraa XerxdV35vMHvPWYqRVail/M42FOqXPPDNueQrn25LaQQi6SinCpHn0ymrQBLSpwo RSbiRwvTNSeKdEJYvkD79rgcvXj0xLjExsOJ6WBRLwdJ0lo625c= -----END CERTIFICATE-----Generated at Sat Jun 13 10:44:02 2026 by rpki-client