$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS41666.roa File: AS41666.roa (raw, json) Hash identifier: BT1ODBBhkl1/wj68ObCSBatATqgyx4pButF5XNpk6TM= Subject key identifier: 1F:AD:8B:AA:C2:F5:00:EA:79:04:AB:54:D7:2D:98:96:DC:51:C1:9B Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 6BB71133A72955CD1ED862BBAE9BD75FCE018547 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS41666.roa Signing time: Fri 05 Jun 2026 08:45:51 +0000 ROA not before: Fri 05 Jun 2026 08:40:51 +0000 ROA not after: Fri 04 Jun 2027 08:45:51 +0000 asID: 41666 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b7:11:33:a7:29:55:cd:1e:d8:62:bb:ae:9b:d7:5f:ce:01:85:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:51 2026 GMT Not After : Jun 4 08:45:51 2027 GMT Subject: CN=1FAD8BAAC2F500EA7904AB54D72D9896DC51C19B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c4:47:f7:54:70:bd:da:5b:9e:3b:3c:59:d9: 3a:07:25:3d:14:1d:42:ae:24:ad:d8:e5:e4:d7:ad: 13:48:01:82:09:c9:04:dd:4c:a9:56:0f:3a:2f:e4: 80:0c:cf:f1:df:e1:00:f8:d8:75:ef:d8:1b:06:fb: 74:88:2c:2e:d1:a9:5d:af:a2:5e:95:51:55:07:61: 8d:c0:47:f2:73:d7:01:e6:b1:c1:90:20:ce:31:50: d5:70:c7:12:11:92:84:f4:76:11:96:bd:40:70:1b: 5a:dc:fb:84:3b:7c:3f:82:f7:64:06:85:1e:04:02: 61:9f:ff:b4:f7:ff:97:6c:fd:f3:77:dd:1f:1c:02: 0e:43:e0:cb:ac:05:e1:d3:e7:e9:e7:fd:24:88:5d: 21:9f:e3:f1:61:f3:22:f3:52:46:1a:45:61:29:35: 5e:e5:ea:f3:ac:73:1b:1a:28:31:8f:d3:2e:31:2e: bc:41:78:6c:a0:11:55:7d:f3:45:25:70:96:ac:c5: a3:b0:62:32:30:ca:37:99:f3:98:ad:c1:01:47:fd: e6:8d:37:14:7b:d7:d9:f8:8a:d7:94:0b:55:56:1e: 0f:82:14:71:c1:15:3d:15:4e:01:f4:b4:4e:41:c5: 83:f2:39:41:59:cf:2a:27:de:b2:15:7f:f7:f4:4c: 80:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AD:8B:AA:C2:F5:00:EA:79:04:AB:54:D7:2D:98:96:DC:51:C1:9B X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS41666.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption bd:87:f5:60:93:7d:ab:b1:1e:62:e0:cd:fb:e1:df:1c:28:23: a2:7f:28:3d:16:9b:14:71:f4:2c:64:b8:4e:67:8a:57:58:b0: c1:0c:34:2b:73:79:8b:41:f9:c3:1e:0d:a9:d1:d8:52:14:df: 1f:b8:9c:a6:57:eb:60:3d:c5:e8:72:b0:87:ee:84:b8:48:4c: 37:6a:0d:c8:ca:e1:f7:be:21:d9:ba:3e:06:12:92:85:59:a8: 4e:1f:86:ee:8e:09:05:34:dd:aa:9f:43:05:5d:c7:bb:b8:ea: 28:07:d8:a2:33:94:5d:38:b5:27:c4:de:a6:75:60:1e:86:ee: 1c:4d:93:7a:de:a7:c1:22:3c:9f:e9:82:96:e5:a2:db:54:8d: cf:3e:59:fc:7c:8c:d9:b7:20:02:5e:4f:70:15:29:cd:65:63: de:9c:58:97:82:9e:22:cb:a6:d0:76:8e:4d:9d:3a:81:22:3f: 8c:84:bf:da:24:ad:ab:bd:57:26:46:4f:91:53:d9:fa:aa:72: 54:bd:4e:dc:55:bc:86:20:ee:62:0a:4f:66:55:ae:c5:eb:87: 71:89:7f:fa:b1:1a:3a:ef:04:44:18:fe:6f:e5:ea:19:a5:01: be:37:fe:3a:5f:f6:a2:6b:53:fa:cf:fd:9d:b1:aa:56:1a:f7: 17:6e:7f:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7cRM6cpVc0e2GK7rpvXX84BhUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV BAMTKDFGQUQ4QkFBQzJGNTAwRUE3OTA0QUI1NEQ3MkQ5ODk2REM1MUMxOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHxEf3VHC92lueOzxZ2ToHJT0U HUKuJK3Y5eTXrRNIAYIJyQTdTKlWDzov5IAMz/Hf4QD42HXv2BsG+3SILC7RqV2v ol6VUVUHYY3AR/Jz1wHmscGQIM4xUNVwxxIRkoT0dhGWvUBwG1rc+4Q7fD+C92QG hR4EAmGf/7T3/5ds/fN33R8cAg5D4MusBeHT5+nn/SSIXSGf4/Fh8yLzUkYaRWEp NV7l6vOscxsaKDGP0y4xLrxBeGygEVV980UlcJasxaOwYjIwyjeZ85itwQFH/eaN NxR719n4iteUC1VWHg+CFHHBFT0VTgH0tE5BxYPyOUFZzyon3rIVf/f0TIDVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH62LqsL1AOp5BKtU1y2YltxRwZswHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNDE2NjYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqB1TC sAswDQYJKoZIhvcNAQELBQADggEBAL2H9WCTfauxHmLgzfvh3xwoI6J/KD0WmxRx 9CxkuE5nildYsMEMNCtzeYtB+cMeDanR2FIU3x+4nKZX62A9xehysIfuhLhITDdq DcjK4fe+Idm6PgYSkoVZqE4fhu6OCQU03aqfQwVdx7u46igH2KIzlF04tSfE3qZ1 YB6G7hxNk3rep8EiPJ/pgpblottUjc8+Wfx8jNm3IAJeT3AVKc1lY96cWJeCniLL ptB2jk2dOoEiP4yEv9okrau9VyZGT5FT2fqqclS9TtxVvIYg7mIKT2ZVrsXrh3GJ f/qxGjrvBEQY/m/l6hmlAb43/jpf9qJrU/rP/Z2xqlYa9xduf3Y= -----END CERTIFICATE-----Generated at Sat Jun 13 10:23:04 2026 by rpki-client