$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216311.roa File: AS216311.roa (raw, json) Hash identifier: TEfDVLQ7M3SuLWUo2BFQ+NBd4ZuJKJtPTFGBjaRkbnY= Subject key identifier: 62:FD:A0:F2:F4:01:3C:57:2D:81:AC:A7:36:05:B5:C7:06:14:C0:08 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 140C9895B8DC73D86C87FE23554CA98B22969612 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216311.roa Signing time: Fri 05 Jun 2026 08:45:54 +0000 ROA not before: Fri 05 Jun 2026 08:40:54 +0000 ROA not after: Fri 04 Jun 2027 08:45:54 +0000 asID: 216311 IP address blocks: 2a07:54c1:c1ab::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:0c:98:95:b8:dc:73:d8:6c:87:fe:23:55:4c:a9:8b:22:96:96:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:54 2026 GMT Not After : Jun 4 08:45:54 2027 GMT Subject: CN=62FDA0F2F4013C572D81ACA73605B5C70614C008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:45:bf:7d:ee:6e:68:8a:e4:2f:38:76:29:df: a0:e5:42:03:a8:7e:83:0d:3f:9b:55:36:c1:0e:64: 86:91:3b:c1:a8:66:77:f3:67:8c:6a:42:4c:2d:78: c2:5e:a8:6c:73:e7:cf:3c:37:6b:16:ca:b6:d9:ee: 56:bf:b8:f7:0e:fd:4b:9a:2a:dc:77:b7:60:20:d7: a5:01:23:45:d0:1c:a2:c7:39:c9:19:f8:20:24:4a: 9f:e9:49:21:46:f6:bc:f6:81:ca:cd:38:65:59:1e: 18:77:ff:84:e0:e2:d3:d7:9f:ab:36:94:e5:00:57: 9d:5a:a8:21:ed:d0:6c:92:64:31:64:80:6b:4e:5d: 22:35:4d:0f:32:1f:37:49:8e:1c:4d:2e:0f:40:ca: 96:25:e4:05:36:27:9e:73:27:d9:ef:d4:0c:69:af: 1e:38:e9:6f:3e:73:ed:b3:57:f4:23:89:6b:de:99: f1:04:ff:11:4b:0c:da:0b:56:d7:62:45:ef:be:23: ed:08:ca:d9:7c:23:73:48:e3:f8:4d:be:97:ad:71: 89:92:e5:10:57:83:84:78:85:80:6b:68:31:2d:8f: a3:e9:65:62:5c:62:dc:10:5e:45:e8:56:a3:61:b4: 20:1c:ba:f5:9d:fd:44:40:1f:16:e3:a7:00:79:29: 3c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FD:A0:F2:F4:01:3C:57:2D:81:AC:A7:36:05:B5:C7:06:14:C0:08 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216311.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:c1ab::/48 Signature Algorithm: sha256WithRSAEncryption 6a:84:f8:94:0c:6a:8b:11:1c:23:31:2f:21:19:29:20:cb:cd: 9a:f3:1d:ca:82:e0:06:a0:c1:8f:d4:bc:d6:11:c5:bc:3d:1a: 2d:02:67:5a:19:32:eb:84:97:89:82:ce:29:2c:2c:38:6c:d7: 0a:3e:9d:f1:46:24:bb:66:05:4d:64:63:b1:66:2c:f1:7c:51: 60:3d:f0:27:41:b1:15:71:ee:1f:9e:85:38:00:3e:54:d9:d7: 54:2c:18:34:fb:7b:a5:0f:4a:49:5f:71:c9:8f:ae:da:3b:30: 85:aa:a1:eb:22:18:c9:41:19:2c:a8:1d:da:75:0d:c8:52:0b: b3:8d:d1:0c:74:36:26:36:d5:d7:15:2b:9b:6e:7c:f3:69:b2: 0f:0e:01:e2:e3:6c:76:34:87:e3:b2:9c:b3:c4:39:d2:ef:3e: 92:43:3c:45:f9:4e:92:56:ff:93:e1:0a:fa:52:28:3b:0a:ed: 69:e5:b8:f9:83:3d:b7:85:23:86:75:da:14:d5:aa:0e:6c:3f: bd:c5:e6:e7:69:4f:85:d2:db:28:d0:1a:24:31:5f:eb:bb:c9: 23:d8:62:3d:db:18:f9:7f:c9:91:d7:8e:ad:ea:37:7d:bb:db: 78:d2:8e:44:08:3a:1e:e3:c5:2e:bc:fe:ff:62:8c:a6:67:64: 1f:da:fc:d3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUFAyYlbjcc9hsh/4jVUypiyKWlhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTRaFw0yNzA2MDQwODQ1NTRaMDMxMTAvBgNV BAMTKDYyRkRBMEYyRjQwMTNDNTcyRDgxQUNBNzM2MDVCNUM3MDYxNEMwMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWRb997m5oiuQvOHYp36DlQgOo foMNP5tVNsEOZIaRO8GoZnfzZ4xqQkwteMJeqGxz5888N2sWyrbZ7la/uPcO/Uua Ktx3t2Ag16UBI0XQHKLHOckZ+CAkSp/pSSFG9rz2gcrNOGVZHhh3/4Tg4tPXn6s2 lOUAV51aqCHt0GySZDFkgGtOXSI1TQ8yHzdJjhxNLg9AypYl5AU2J55zJ9nv1Axp rx446W8+c+2zV/QjiWvemfEE/xFLDNoLVtdiRe++I+0Iytl8I3NI4/hNvpetcYmS 5RBXg4R4hYBraDEtj6PpZWJcYtwQXkXoVqNhtCAcuvWd/URAHxbjpwB5KTzTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUYv2g8vQBPFctgaynNgW1xwYUwAgwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE2MzExLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wcGrMA0GCSqGSIb3DQEBCwUAA4IBAQBqhPiUDGqLERwjMS8hGSkgy82a8x3KguAG oMGP1LzWEcW8PRotAmdaGTLrhJeJgs4pLCw4bNcKPp3xRiS7ZgVNZGOxZizxfFFg PfAnQbEVce4fnoU4AD5U2ddULBg0+3ulD0pJX3HJj67aOzCFqqHrIhjJQRksqB3a dQ3IUguzjdEMdDYmNtXXFSubbnzzabIPDgHi42x2NIfjspyzxDnS7z6SQzxF+U6S Vv+T4Qr6Uig7Cu1p5bj5gz23hSOGddoU1aoObD+9xebnaU+F0tso0BokMV/ru8kj 2GI92xj5f8mR146t6jd9u9t40o5ECDoe48UuvP7/YoymZ2Qf2vzT -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:45 2026 by rpki-client