$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216056.roa File: AS216056.roa (raw, json) Hash identifier: eUTX4Wy4BttYpM3AljHJFVzzvvc9La59TBDuH2mJwzw= Subject key identifier: C6:A4:17:02:A8:F6:94:DD:01:76:45:2E:0E:C5:8D:B3:4A:10:22:94 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 605DF55846835E95E93747B9F1EA325C7079F8FF Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216056.roa Signing time: Fri 05 Jun 2026 08:45:51 +0000 ROA not before: Fri 05 Jun 2026 08:40:51 +0000 ROA not after: Fri 04 Jun 2027 08:45:51 +0000 asID: 216056 IP address blocks: 2a07:54c1:2200::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 22:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:5d:f5:58:46:83:5e:95:e9:37:47:b9:f1:ea:32:5c:70:79:f8:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:51 2026 GMT Not After : Jun 4 08:45:51 2027 GMT Subject: CN=C6A41702A8F694DD0176452E0EC58DB34A102294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8d:59:1c:77:4c:e9:fb:a2:78:e3:a8:89:f7: e9:ac:02:37:01:e9:94:bf:9e:6c:2b:a2:e9:2d:42: 09:af:91:9e:9f:e2:83:c3:57:b6:b9:c2:8d:fc:d2: c1:44:9a:9d:0e:cc:e8:62:5d:21:3c:2e:ed:f7:38: c0:66:b8:f7:df:45:18:1e:d8:a6:62:15:f4:5c:48: 83:d8:5a:22:91:c2:4e:a2:ce:a9:ed:a0:9f:eb:cb: 4e:0d:c1:f2:58:03:68:c1:ba:61:09:93:da:69:9f: b7:a5:43:3b:e7:8f:c4:9a:a1:42:81:33:d5:89:de: ce:4d:5e:f2:3d:b5:7e:a2:0e:9d:d6:0d:67:4a:39: 09:10:e8:80:0d:c1:98:9f:bb:4f:7d:a9:5f:c6:fc: 39:6b:9d:16:02:c8:5e:1b:40:49:23:1d:55:a1:3f: a0:ef:cc:da:71:fe:79:2f:50:a8:94:c8:0f:fb:70: d0:7c:f1:ba:71:39:04:f0:6d:d1:11:cb:d5:19:8c: cd:93:cb:15:d9:02:52:e3:66:11:ca:eb:f7:d9:2f: f4:7b:de:91:13:b8:33:79:ce:be:0b:6a:a5:cf:61: ab:4d:47:b4:9e:17:92:1b:af:e2:05:42:86:84:dc: e3:c4:8a:3c:a4:95:03:c2:5b:ab:2e:b6:b5:63:50: d3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A4:17:02:A8:F6:94:DD:01:76:45:2E:0E:C5:8D:B3:4A:10:22:94 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216056.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:2200::/40 Signature Algorithm: sha256WithRSAEncryption 17:69:ee:e6:53:91:f7:78:f1:ac:fb:47:6d:71:cd:c1:28:48: 7e:49:66:67:79:a9:df:32:48:4e:a2:d8:63:08:35:6e:4c:f1: d7:f8:76:52:64:0b:4e:5a:9b:35:7e:47:71:9a:56:28:4f:a9: 5d:71:b5:8e:79:d1:a8:d1:38:54:f5:bd:c7:80:8f:c7:13:93: 17:86:86:ea:55:3b:b9:ac:f5:ba:8c:41:d5:f7:83:cd:66:0d: 03:4a:10:0f:0c:30:a8:de:3c:64:f8:1f:78:06:97:a8:36:c0: 5c:0a:be:a1:bb:99:5c:e1:f9:40:1e:fb:07:1a:11:80:7f:47: 8f:01:f6:fc:4c:be:b6:9d:b9:14:c7:01:d0:2e:bc:d1:10:ca: 42:08:7d:15:9f:3b:ea:ca:fc:28:76:c2:1e:be:4b:7c:82:34: e4:6d:12:1f:22:d2:7f:2f:d7:85:b5:16:f0:5a:f1:37:a5:18: 66:44:f1:82:36:85:7d:aa:98:91:cf:af:9d:ba:39:4d:d5:71: 82:2f:1e:b3:33:67:76:a6:eb:fd:ca:50:19:d1:76:ee:d3:8b: 3e:9d:d1:a3:7a:39:f2:5f:89:50:19:b0:a1:a9:e7:20:28:48: 29:2e:c8:3d:b1:46:d2:dc:64:9b:b6:4a:6f:af:9a:88:4d:6a: d4:3c:c1:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYF31WEaDXpXpN0e58eoyXHB5+P8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV BAMTKEM2QTQxNzAyQThGNjk0REQwMTc2NDUyRTBFQzU4REIzNEExMDIyOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+jVkcd0zp+6J446iJ9+msAjcB 6ZS/nmwrouktQgmvkZ6f4oPDV7a5wo380sFEmp0OzOhiXSE8Lu33OMBmuPffRRge 2KZiFfRcSIPYWiKRwk6izqntoJ/ry04NwfJYA2jBumEJk9ppn7elQzvnj8SaoUKB M9WJ3s5NXvI9tX6iDp3WDWdKOQkQ6IANwZifu099qV/G/DlrnRYCyF4bQEkjHVWh P6DvzNpx/nkvUKiUyA/7cNB88bpxOQTwbdERy9UZjM2TyxXZAlLjZhHK6/fZL/R7 3pETuDN5zr4LaqXPYatNR7SeF5Ibr+IFQoaE3OPEijyklQPCW6sutrVjUNPrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxqQXAqj2lN0BdkUuDsWNs0oQIpQwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE2MDU2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wSIwDQYJKoZIhvcNAQELBQADggEBABdp7uZTkfd48az7R21xzcEoSH5JZmd5qd8y SE6i2GMINW5M8df4dlJkC05amzV+R3GaVihPqV1xtY550ajROFT1vceAj8cTkxeG hupVO7ms9bqMQdX3g81mDQNKEA8MMKjePGT4H3gGl6g2wFwKvqG7mVzh+UAe+wca EYB/R48B9vxMvraduRTHAdAuvNEQykIIfRWfO+rK/Ch2wh6+S3yCNORtEh8i0n8v 14W1FvBa8TelGGZE8YI2hX2qmJHPr526OU3VcYIvHrMzZ3am6/3KUBnRdu7Tiz6d 0aN6OfJfiVAZsKGp5yAoSCkuyD2xRtLcZJu2Sm+vmohNatQ8wSE= -----END CERTIFICATE-----Generated at Wed Jun 17 08:51:51 2026 by rpki-client