$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS398057.roa File: AS398057.roa (raw, json) Hash identifier: 5ZYsovePkuWk2nKb+K4UWq5EcIABjjgVtfcVbs7/gfk= Subject key identifier: 19:09:71:31:67:CD:DC:75:7C:AA:A5:1F:59:AC:A4:3C:0A:49:65:35 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 724A5A6B9042490F72608536A86EA31E8B6C1D63 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS398057.roa Signing time: Fri 05 Jun 2026 08:45:53 +0000 ROA not before: Fri 05 Jun 2026 08:40:53 +0000 ROA not after: Fri 04 Jun 2027 08:45:53 +0000 asID: 398057 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:4a:5a:6b:90:42:49:0f:72:60:85:36:a8:6e:a3:1e:8b:6c:1d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:53 2026 GMT Not After : Jun 4 08:45:53 2027 GMT Subject: CN=1909713167CDDC757CAAA51F59ACA43C0A496535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:e9:33:55:6e:77:ac:fa:84:58:31:36:36: b3:10:16:8f:27:85:81:de:12:74:78:0b:e2:df:9e: 01:02:5f:e5:ae:5b:78:c6:ea:1a:ec:ab:9d:c3:7f: 45:39:aa:f1:ea:75:95:df:78:0d:f3:8b:8f:ad:72: 0a:4f:29:2a:fd:16:9a:5f:85:1f:e1:1a:ec:fb:b0: b0:f0:fe:a2:5e:28:4a:6f:73:73:dd:52:a5:7e:42: 93:df:d3:c8:c3:71:e8:13:e1:92:68:bd:47:d9:a3: 1c:9f:6d:48:eb:34:15:e9:28:b4:0b:d9:5a:bb:97: 19:b0:2f:54:d9:f8:1c:17:10:01:0c:31:95:cd:b9: c8:85:da:6c:a4:1f:ea:2a:54:ee:00:b0:bb:00:89: cf:05:7a:5a:18:13:07:a6:0a:1e:20:38:92:25:c2: c2:4e:35:41:af:86:8f:0b:e2:18:d5:74:b3:b3:a3: a7:fb:74:c5:7f:71:d8:3e:41:e4:54:db:8b:1a:98: e7:7a:f9:0f:6c:ba:51:92:8b:e7:46:7d:02:1c:ce: a8:74:fa:e1:df:5b:9e:ae:b7:37:d9:1a:3c:cf:78: f3:dc:3d:51:47:dd:ae:d9:bb:25:8a:e3:f2:82:37: cf:77:02:56:b1:42:69:87:25:51:a6:65:e4:4b:8a: 47:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:09:71:31:67:CD:DC:75:7C:AA:A5:1F:59:AC:A4:3C:0A:49:65:35 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS398057.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 22:25:6d:2c:cb:1b:da:2c:ca:03:2b:3b:f0:b7:a5:6e:31:f7: 0e:17:f0:55:af:f9:c7:26:55:ef:8b:c9:da:d7:b9:56:03:8b: a4:28:dd:1f:6c:d7:1f:d3:dd:41:93:89:d3:92:3c:a9:f8:f4: 81:40:7d:33:e1:64:c7:87:f3:1d:c6:05:9c:56:72:f1:6a:65: 98:49:fc:c6:b2:a8:ac:ac:aa:df:90:cf:7a:9b:cd:33:37:2f: e9:66:dc:b3:c8:24:8c:18:99:08:cd:df:c6:f7:a7:b1:51:7c: 92:fe:94:d2:34:b7:5d:c2:50:ef:fb:87:63:66:ca:9e:8b:03: d2:d5:70:42:92:ec:81:ac:08:af:24:1d:24:9d:82:b8:fc:4a: 8d:23:88:25:9c:ec:10:81:c2:e7:d7:2f:6d:31:38:57:61:61: 0c:f5:bb:17:a3:48:51:d4:99:0c:de:b9:ed:42:7a:47:dd:9e: 4e:17:7f:68:09:bd:f8:31:07:25:46:28:4b:ba:04:4c:85:c5: 09:c8:28:f6:03:bf:16:2e:6c:61:c1:7a:12:46:5d:d3:db:50: c1:1e:13:20:4d:dd:31:a3:92:6e:38:bd:e5:9c:9a:bd:14:e7: ba:15:47:c0:d6:1d:f4:ec:77:36:7b:eb:c2:69:70:9a:37:da: c0:2a:01:7b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUckpaa5BCSQ9yYIU2qG6jHotsHWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTNaFw0yNzA2MDQwODQ1NTNaMDMxMTAvBgNV BAMTKDE5MDk3MTMxNjdDRERDNzU3Q0FBQTUxRjU5QUNBNDNDMEE0OTY1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHekzVW53rPqEWDE2NrMQFo8n hYHeEnR4C+LfngECX+WuW3jG6hrsq53Df0U5qvHqdZXfeA3zi4+tcgpPKSr9Fppf hR/hGuz7sLDw/qJeKEpvc3PdUqV+QpPf08jDcegT4ZJovUfZoxyfbUjrNBXpKLQL 2Vq7lxmwL1TZ+BwXEAEMMZXNuciF2mykH+oqVO4AsLsAic8FeloYEwemCh4gOJIl wsJONUGvho8L4hjVdLOzo6f7dMV/cdg+QeRU24samOd6+Q9sulGSi+dGfQIczqh0 +uHfW56utzfZGjzPePPcPVFH3a7ZuyWK4/KCN893AlaxQmmHJVGmZeRLikdnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUGQlxMWfN3HV8qqUfWaykPApJZTUwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMzk4MDU3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQAiJW0syxvaLMoDKzvwt6VuMfcOF/BVr/nH JlXvi8na17lWA4ukKN0fbNcf091Bk4nTkjyp+PSBQH0z4WTHh/MdxgWcVnLxamWY SfzGsqisrKrfkM96m80zNy/pZtyzyCSMGJkIzd/G96exUXyS/pTSNLddwlDv+4dj ZsqeiwPS1XBCkuyBrAivJB0knYK4/EqNI4glnOwQgcLn1y9tMThXYWEM9bsXo0hR 1JkM3rntQnpH3Z5OF39oCb34MQclRihLugRMhcUJyCj2A78WLmxhwXoSRl3T21DB HhMgTd0xo5JuOL3lnJq9FOe6FUfA1h307Hc2e+vCaXCaN9rAKgF7 -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:12 2026 by rpki-client