$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216401.roa File: AS216401.roa (raw, json) Hash identifier: Roe38MJLJRkRxu2dtFGHWF26wcaCP9Fy0gyaDhP7PJM= Subject key identifier: D8:71:CF:E0:B8:7C:F9:2E:20:C4:D7:F9:CA:D9:12:58:82:E0:D4:EB Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 4DF4AE68A0AAC6D8EE481940850FCEA510EC62D7 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216401.roa Signing time: Fri 04 Jul 2025 07:51:25 +0000 ROA not before: Fri 04 Jul 2025 07:46:25 +0000 ROA not after: Fri 03 Jul 2026 07:51:25 +0000 asID: 216401 IP address blocks: 2a07:54c7:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 01:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f4:ae:68:a0:aa:c6:d8:ee:48:19:40:85:0f:ce:a5:10:ec:62:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:25 2025 GMT Not After : Jul 3 07:51:25 2026 GMT Subject: CN=D871CFE0B87CF92E20C4D7F9CAD9125882E0D4EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5b:47:7d:c1:21:1e:65:09:0a:4a:01:6e:d3: 18:10:0e:04:08:ea:16:87:05:36:69:b0:aa:73:c6: 84:4f:1a:85:4c:a3:49:45:90:d5:66:fb:b4:5b:7d: 5a:91:30:0a:62:67:4a:b3:de:d8:96:47:39:b6:55: 5e:e7:05:42:84:20:d6:21:48:f7:4b:c6:7d:1c:ef: b2:a4:18:e2:e3:b4:c6:81:ae:35:d7:c0:29:2c:31: a2:d8:35:14:ef:3f:92:05:f7:51:db:60:99:6d:ab: e6:9d:d9:07:6f:b7:b1:e5:81:f2:b1:57:b8:21:f3: 70:3f:d8:00:31:85:c3:a3:5b:d5:8b:eb:fd:bd:28: aa:85:06:9a:14:30:85:60:26:9e:7f:1c:fa:87:ef: b9:b9:b3:36:ac:a9:96:0d:7c:b1:f2:cc:4e:ad:41: 22:b9:48:48:cf:6a:e3:29:cf:7e:ff:2f:49:88:aa: ea:7f:b4:53:1b:33:9f:85:dd:0e:ef:30:25:eb:6a: 45:44:fc:83:b2:58:6d:ab:8c:2f:7f:c3:2e:a7:04: 82:4c:bb:02:90:be:95:46:6c:a2:e5:3f:39:d2:19: 6c:81:dd:44:b4:7c:63:0e:ed:f5:07:4c:3c:60:e8: 8a:e7:55:64:ea:8c:2b:b6:7f:00:7c:38:96:4e:7f: ea:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:71:CF:E0:B8:7C:F9:2E:20:C4:D7:F9:CA:D9:12:58:82:E0:D4:EB X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS216401.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c7:1000::/36 Signature Algorithm: sha256WithRSAEncryption 66:e1:a4:29:09:31:6f:8b:f8:13:80:09:80:e9:b7:62:eb:6d: e6:38:fb:47:c6:e3:6b:33:89:ea:58:3e:8c:d5:8c:84:58:59: b1:8b:fa:3f:1b:91:c7:67:b5:41:cf:98:48:89:ec:85:f2:ac: 4c:08:42:36:e8:44:50:b7:21:e9:4c:c6:19:01:98:b7:51:77: 51:72:65:2e:8f:70:38:1f:8b:00:a2:93:36:1b:8a:e0:26:47: e5:4b:c8:0d:8d:86:6b:79:6a:fa:a3:56:2a:1c:18:15:82:7c: 21:0a:ed:92:d3:15:90:3b:0e:ca:b0:5e:74:40:14:79:a2:df: fb:2a:d4:8e:a0:f9:9a:e7:60:fa:af:67:ba:fb:0b:3c:ac:0b: 31:51:4b:f5:29:c0:36:25:dc:d8:79:e1:c1:20:58:d3:13:56: d1:98:3d:4d:62:8d:d9:0e:17:d9:9c:fe:34:1f:6a:6e:fe:0c: 2d:fd:23:d2:dc:8e:c3:49:06:75:98:f5:51:9c:bd:a5:c3:db: e6:d8:12:96:02:ce:f0:37:f7:a2:35:6c:72:f8:1a:62:3b:c3: a3:07:c7:06:0c:4b:f8:65:4d:f8:51:ae:87:8d:c3:a6:c0:33: 78:c4:c7:b5:0a:c2:ac:ee:59:22:f0:97:ff:0c:ce:6c:01:36: 16:0b:d7:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTfSuaKCqxtjuSBlAhQ/OpRDsYtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjVaFw0yNjA3MDMwNzUxMjVaMDMxMTAvBgNV BAMTKEQ4NzFDRkUwQjg3Q0Y5MkUyMEM0RDdGOUNBRDkxMjU4ODJFMEQ0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeW0d9wSEeZQkKSgFu0xgQDgQI 6haHBTZpsKpzxoRPGoVMo0lFkNVm+7RbfVqRMApiZ0qz3tiWRzm2VV7nBUKEINYh SPdLxn0c77KkGOLjtMaBrjXXwCksMaLYNRTvP5IF91HbYJltq+ad2Qdvt7HlgfKx V7gh83A/2AAxhcOjW9WL6/29KKqFBpoUMIVgJp5/HPqH77m5szasqZYNfLHyzE6t QSK5SEjPauMpz37/L0mIqup/tFMbM5+F3Q7vMCXrakVE/IOyWG2rjC9/wy6nBIJM uwKQvpVGbKLlPznSGWyB3US0fGMO7fUHTDxg6IrnVWTqjCu2fwB8OJZOf+q9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2HHP4Lh8+S4gxNf5ytkSWILg1OswHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE2NDAxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgdU xxAwDQYJKoZIhvcNAQELBQADggEBAGbhpCkJMW+L+BOACYDpt2LrbeY4+0fG42sz iepYPozVjIRYWbGL+j8bkcdntUHPmEiJ7IXyrEwIQjboRFC3IelMxhkBmLdRd1Fy ZS6PcDgfiwCikzYbiuAmR+VLyA2Nhmt5avqjViocGBWCfCEK7ZLTFZA7DsqwXnRA FHmi3/sq1I6g+ZrnYPqvZ7r7CzysCzFRS/UpwDYl3Nh54cEgWNMTVtGYPU1ijdkO F9mc/jQfam7+DC39I9LcjsNJBnWY9VGcvaXD2+bYEpYCzvA396I1bHL4GmI7w6MH xwYMS/hlTfhRroeNw6bAM3jEx7UKwqzuWSLwl/8MzmwBNhYL19A= -----END CERTIFICATE-----Generated at Wed Nov 5 13:21:26 2025 by rpki-client