$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215828.roa File: AS215828.roa (raw, json) Hash identifier: udR1D2uIZabxCS064P1UnnqoRhkv1awwtwDHHjPcYIE= Subject key identifier: 36:60:96:B1:1F:C6:64:CD:BB:D7:3E:3D:EB:A6:04:1D:F2:D6:CC:66 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 23DA8617E4977CDF1011AF9B171213EA5228EAA6 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215828.roa Signing time: Fri 05 Jun 2026 08:45:52 +0000 ROA not before: Fri 05 Jun 2026 08:40:52 +0000 ROA not after: Fri 04 Jun 2027 08:45:52 +0000 asID: 215828 IP address blocks: 2a07:54c1:4400::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:da:86:17:e4:97:7c:df:10:11:af:9b:17:12:13:ea:52:28:ea:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:52 2026 GMT Not After : Jun 4 08:45:52 2027 GMT Subject: CN=366096B11FC664CDBBD73E3DEBA6041DF2D6CC66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:7e:bc:b4:1e:71:04:82:48:6b:b7:df:4f: 50:f0:30:47:e1:14:58:61:7f:a6:21:50:d7:5f:82: f3:86:37:ab:ac:84:f2:ef:43:be:f7:2d:35:c7:f3: f4:2e:e0:6c:c3:8d:e8:6e:8a:7a:fb:e2:37:bd:d8: aa:c0:0e:0b:79:d2:4b:8b:2b:18:56:fc:d1:e8:5b: 08:c6:30:09:57:1e:f3:0a:83:2f:47:ec:33:f4:76: 78:33:71:3a:93:85:71:03:db:a8:12:b6:40:1a:6c: b6:a6:be:6d:7c:da:fe:08:2a:d6:52:33:24:cc:16: 74:f8:75:78:be:70:59:8f:ad:de:e2:a4:e6:57:be: 04:46:f0:9f:d3:5e:56:40:89:5e:fc:b2:78:40:96: d7:81:38:18:0f:2c:e7:9c:dd:72:b0:2f:89:4a:01: ea:3f:a3:f3:61:cd:54:e4:7a:d8:d6:3d:fe:8c:a9: 21:cb:a2:58:ef:3b:ac:7b:af:66:c9:7e:0b:a6:ab: e0:56:51:7a:81:34:e8:da:54:d5:37:cd:ce:77:81: b3:7c:cd:46:be:a5:48:60:e5:4c:91:82:b9:24:41: 6f:12:e2:75:99:fe:d1:19:6c:a3:c0:37:c1:7d:53: 45:74:46:83:13:b4:67:69:c2:5b:30:f3:18:7f:fa: f0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:60:96:B1:1F:C6:64:CD:BB:D7:3E:3D:EB:A6:04:1D:F2:D6:CC:66 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215828.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:4400::/40 Signature Algorithm: sha256WithRSAEncryption c1:ab:42:42:37:f8:f2:10:4c:d2:28:6c:9c:17:fc:96:e3:8c: 72:31:6b:e1:47:e8:ff:c6:6b:88:94:d5:49:98:b2:bb:f5:20: fb:81:85:c6:4d:18:e4:cd:49:1b:6f:47:bb:61:75:3b:75:d9: 75:31:d0:dc:b7:41:0f:e2:d9:59:80:6e:a1:42:88:7f:54:4d: 33:06:08:db:e5:a2:e2:84:72:cb:9c:0c:bf:ff:39:63:96:52: 16:a2:ee:e0:70:a0:c8:ea:09:71:8b:1a:08:49:61:bc:7e:3b: 0f:2a:64:fc:29:c0:0f:55:49:9e:a0:19:26:e9:c3:65:8d:7c: 89:e3:96:57:64:8d:79:89:3c:a1:90:4a:a9:bd:bd:f5:15:7a: 51:b1:d4:39:e3:15:54:5c:1f:e3:56:23:d5:0c:a9:cc:fb:e1: 6d:22:a4:84:f7:49:ff:af:e1:74:ac:a3:1e:1f:ab:ce:ea:05: 44:15:52:87:f5:e7:30:3a:06:28:e7:72:38:42:99:18:0c:83: e1:b3:b3:70:15:1e:5b:44:fd:f7:d9:7f:e2:10:93:70:73:ab: 11:c7:24:cb:9c:1e:20:b6:3d:1b:c5:d6:b5:75:4e:47:d0:bb: c1:1e:bc:e3:e7:a2:2b:bc:59:3e:db:d0:bd:25:aa:64:59:38: ea:4f:b5:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI9qGF+SXfN8QEa+bFxIT6lIo6qYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTJaFw0yNzA2MDQwODQ1NTJaMDMxMTAvBgNV BAMTKDM2NjA5NkIxMUZDNjY0Q0RCQkQ3M0UzREVCQTYwNDFERjJENkNDNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwX68tB5xBIJIa7ffT1DwMEfh FFhhf6YhUNdfgvOGN6ushPLvQ773LTXH8/Qu4GzDjehuinr74je92KrADgt50kuL KxhW/NHoWwjGMAlXHvMKgy9H7DP0dngzcTqThXED26gStkAabLamvm182v4IKtZS MyTMFnT4dXi+cFmPrd7ipOZXvgRG8J/TXlZAiV78snhAlteBOBgPLOec3XKwL4lK Aeo/o/NhzVTketjWPf6MqSHLoljvO6x7r2bJfgumq+BWUXqBNOjaVNU3zc53gbN8 zUa+pUhg5UyRgrkkQW8S4nWZ/tEZbKPAN8F9U0V0RoMTtGdpwlsw8xh/+vApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNmCWsR/GZM271z4966YEHfLWzGYwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE1ODI4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wUQwDQYJKoZIhvcNAQELBQADggEBAMGrQkI3+PIQTNIobJwX/JbjjHIxa+FH6P/G a4iU1UmYsrv1IPuBhcZNGOTNSRtvR7thdTt12XUx0Ny3QQ/i2VmAbqFCiH9UTTMG CNvlouKEcsucDL//OWOWUhai7uBwoMjqCXGLGghJYbx+Ow8qZPwpwA9VSZ6gGSbp w2WNfInjlldkjXmJPKGQSqm9vfUVelGx1DnjFVRcH+NWI9UMqcz74W0ipIT3Sf+v 4XSsox4fq87qBUQVUof15zA6BijncjhCmRgMg+Gzs3AVHltE/ffZf+IQk3BzqxHH JMucHiC2PRvF1rV1TkfQu8EevOPnoiu8WT7b0L0lqmRZOOpPtS4= -----END CERTIFICATE-----Generated at Sat Jun 13 07:58:43 2026 by rpki-client