$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS400542.roa File: AS400542.roa (raw, json) Hash identifier: 0TRwQ+uTjsu9ELbzZmKcJGwweAkc/t8JBYzZXt1Yqvk= Subject key identifier: 15:45:03:90:1D:84:5F:77:6F:BD:FB:C7:3A:10:69:63:28:31:84:18 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 7913252F5BAEEF3C92C2841B1AD79E8975C2E045 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS400542.roa Signing time: Fri 05 Jun 2026 08:45:51 +0000 ROA not before: Fri 05 Jun 2026 08:40:51 +0000 ROA not after: Fri 04 Jun 2027 08:45:51 +0000 asID: 400542 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:13:25:2f:5b:ae:ef:3c:92:c2:84:1b:1a:d7:9e:89:75:c2:e0:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:51 2026 GMT Not After : Jun 4 08:45:51 2027 GMT Subject: CN=154503901D845F776FBDFBC73A10696328318418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:34:92:ba:34:5b:65:4a:6d:09:f6:4a:e3:e9: ce:9d:19:b4:bd:ee:74:de:e5:1d:1b:3d:eb:bf:a5: 41:03:9f:7d:ff:88:c7:2d:e1:fb:4b:d5:9c:1b:cb: 2f:5c:6e:73:9e:a6:a8:34:0d:af:7f:9c:63:7d:31: 59:1d:ef:6e:56:6e:54:bd:63:78:21:e9:60:f8:52: f5:40:47:83:ae:ef:1d:e0:6c:fb:81:65:48:f8:1f: e4:4c:08:61:9b:09:9a:0f:95:9f:73:3c:3a:6c:48: f0:d0:17:e0:00:6a:02:46:b0:b5:d2:73:fb:f6:cd: d4:19:cb:cb:83:10:ba:94:1c:4a:16:a9:e0:4b:f6: d9:35:36:3f:8f:55:b1:c5:b0:bd:7c:99:e3:76:86: e0:90:66:41:b2:7d:d9:f6:8d:a0:52:8b:c2:fd:75: 0f:e3:e1:c8:0d:b1:11:9b:1c:95:09:97:e6:51:cc: 66:fd:ab:2f:2b:01:37:ae:1e:24:20:40:4e:26:4e: e5:5b:91:c3:f0:07:2c:34:8e:d9:4b:f1:fa:5f:88: 40:7c:d0:da:10:52:f2:a5:29:1f:d5:b6:17:6a:27: 1f:7e:10:2b:ee:23:79:f2:6c:52:b6:5d:84:36:7f: 61:ba:30:30:a3:80:2c:5d:bb:d2:3a:f1:a1:82:a9: 3e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:45:03:90:1D:84:5F:77:6F:BD:FB:C7:3A:10:69:63:28:31:84:18 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS400542.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption be:38:27:39:94:55:b6:df:bf:97:d5:38:40:93:db:e7:aa:70: 83:ec:35:33:f8:c4:18:b7:f3:3a:33:03:48:fb:6f:6f:f3:98: 55:36:7d:f5:4f:1d:0b:e6:50:ba:ba:37:dc:5e:46:4d:db:66: fa:fd:82:47:bc:eb:4e:4b:90:42:ca:5a:f2:fa:01:1b:33:f3: 12:e4:c7:58:4e:c1:62:28:b4:6d:e8:01:b9:0b:e6:cf:2d:d7: 89:37:9b:70:d4:7c:76:c3:9c:de:b7:f4:56:f1:a9:1b:61:89: c1:ab:77:06:95:77:d3:2c:4d:0b:f3:dd:87:b5:a7:1c:18:f8: be:b8:9a:0b:3f:ce:ac:a2:a3:cd:8a:d9:37:b2:9e:00:0f:9a: 92:26:69:8b:ed:bb:36:6f:58:88:b4:3f:a8:dd:36:4c:75:db: 94:d1:4d:2b:bb:bb:8e:a1:de:cf:a4:ad:5b:57:bd:4c:46:76: 88:a5:cc:d7:87:92:f9:85:69:75:d5:56:f0:61:a3:f2:60:42: 8f:3a:7d:42:ed:43:b4:21:a1:6b:83:23:1e:aa:84:60:7c:92: 80:92:75:32:c1:26:f4:77:00:7c:23:83:a8:57:a1:6c:22:96: c7:b0:3a:c3:01:52:a5:cf:55:83:c1:4c:1a:f7:97:ac:21:cd: 7e:01:27:a7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUeRMlL1uu7zySwoQbGteeiXXC4EUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV BAMTKDE1NDUwMzkwMUQ4NDVGNzc2RkJERkJDNzNBMTA2OTYzMjgzMTg0MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuNJK6NFtlSm0J9krj6c6dGbS9 7nTe5R0bPeu/pUEDn33/iMct4ftL1Zwbyy9cbnOepqg0Da9/nGN9MVkd725WblS9 Y3gh6WD4UvVAR4Ou7x3gbPuBZUj4H+RMCGGbCZoPlZ9zPDpsSPDQF+AAagJGsLXS c/v2zdQZy8uDELqUHEoWqeBL9tk1Nj+PVbHFsL18meN2huCQZkGyfdn2jaBSi8L9 dQ/j4cgNsRGbHJUJl+ZRzGb9qy8rATeuHiQgQE4mTuVbkcPwByw0jtlL8fpfiEB8 0NoQUvKlKR/VthdqJx9+ECvuI3nybFK2XYQ2f2G6MDCjgCxdu9I68aGCqT5BAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUFUUDkB2EX3dvvfvHOhBpYygxhBgwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNDAwNTQyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQC+OCc5lFW237+X1ThAk9vnqnCD7DUz+MQY t/M6MwNI+29v85hVNn31Tx0L5lC6ujfcXkZN22b6/YJHvOtOS5BCylry+gEbM/MS 5MdYTsFiKLRt6AG5C+bPLdeJN5tw1Hx2w5zet/RW8akbYYnBq3cGlXfTLE0L892H taccGPi+uJoLP86soqPNitk3sp4AD5qSJmmL7bs2b1iItD+o3TZMdduU0U0ru7uO od7PpK1bV71MRnaIpczXh5L5hWl11VbwYaPyYEKPOn1C7UO0IaFrgyMeqoRgfJKA knUywSb0dwB8I4OoV6FsIpbHsDrDAVKlz1WDwUwa95esIc1+ASen -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:18 2026 by rpki-client