$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS44487.roa File: AS44487.roa (raw, json) Hash identifier: 0DRMBbZmxsz2MguimozOPZ5vPSJnI4SaTOuAhrpO81A= Subject key identifier: F1:80:39:F3:B9:A4:79:41:60:0A:26:82:8A:2E:E1:EB:4A:47:DD:C7 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 54D7AEEA27F50C1EF20746063BCC799DD3614E9D Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS44487.roa Signing time: Fri 05 Jun 2026 08:45:51 +0000 ROA not before: Fri 05 Jun 2026 08:40:51 +0000 ROA not after: Fri 04 Jun 2027 08:45:51 +0000 asID: 44487 IP address blocks: 2a07:54c1:3400::/39 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d7:ae:ea:27:f5:0c:1e:f2:07:46:06:3b:cc:79:9d:d3:61:4e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:51 2026 GMT Not After : Jun 4 08:45:51 2027 GMT Subject: CN=F18039F3B9A47941600A26828A2EE1EB4A47DDC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:63:04:e8:19:1c:0a:85:f7:2c:88:81:a4:02: 4b:6d:e1:c1:d5:d8:94:d7:b4:9a:44:0c:c4:2e:25: 61:9b:25:e5:6e:0f:76:84:29:5b:99:c2:1a:ec:77: d7:ef:39:bc:0a:6f:72:b0:7a:d3:ea:d6:61:f9:cc: e1:34:e6:d7:c1:6e:98:80:41:e7:a8:b9:97:de:a7: 7b:cd:9a:e6:0d:38:84:99:03:ba:ad:5c:fd:10:a6: 70:13:69:5b:8a:5f:ea:ca:72:b2:a5:1c:b1:14:b7: af:a7:20:04:36:46:96:27:75:cc:1b:bc:7a:b6:4f: dd:c4:22:ba:22:67:95:29:42:29:e3:bc:00:00:3e: 9f:6b:ed:ed:c3:60:6c:69:37:a7:92:15:3c:13:2a: 04:33:17:de:8b:86:27:7f:b4:63:91:8c:a4:47:dc: 9d:7d:2e:4a:b7:9e:66:d5:5e:de:19:72:3c:be:7f: 0d:26:78:be:1c:23:c5:1b:b8:b4:b6:2b:15:0c:c5: 0e:04:d9:b8:1a:0f:1f:ae:72:0d:9a:41:22:00:e3: ba:60:e4:0d:8d:72:9e:55:41:1a:75:81:8a:e4:84: aa:65:a8:a7:f8:61:9d:cb:7a:7d:b8:bb:d6:8c:1a: 86:11:eb:a6:4a:82:ae:41:bf:48:68:24:89:71:ec: 9c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:80:39:F3:B9:A4:79:41:60:0A:26:82:8A:2E:E1:EB:4A:47:DD:C7 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS44487.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:3400::/39 Signature Algorithm: sha256WithRSAEncryption 51:2c:c9:f3:c1:1a:ec:fd:7d:e6:27:44:cb:9e:92:ec:40:7b: 00:c4:c3:d9:33:bc:3d:05:1e:e0:e8:d7:c5:36:d4:a3:57:74: 8c:f3:df:30:6e:f8:a0:3a:f2:46:ea:55:fd:df:08:cb:1a:83: 24:20:ea:8d:70:20:e7:5a:9b:51:13:32:22:b6:0c:53:0f:2d: 34:14:1b:73:c0:3e:d2:9b:fa:91:cf:4b:78:59:6b:1a:8d:c1: 71:77:98:58:69:47:35:f1:c3:90:02:ce:85:2e:ee:4d:ae:1e: e2:f4:79:4e:03:5b:0b:de:17:23:04:35:7e:98:2e:df:bc:da: 9b:f0:d7:5b:b5:68:ba:db:0b:20:3a:43:14:5d:85:83:0f:b1: 8c:f5:a6:60:36:09:4a:48:d4:01:6d:e3:c5:d9:15:3e:fe:e9: 21:90:a8:bd:0e:0e:75:72:c3:5a:c7:dc:8d:2e:9b:0c:17:77: 76:49:31:06:01:68:6f:ff:02:16:59:b4:68:be:8f:f6:1a:04: 24:07:80:06:12:19:c1:f8:ad:d9:11:f6:88:40:87:75:60:03: fb:0b:9f:12:2d:a7:d3:55:66:bc:ee:66:a7:f8:fc:a1:43:89: ef:7f:e4:5e:d8:80:62:07:52:42:39:a3:34:c1:e2:bc:5c:09: 71:16:d2:4e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUVNeu6if1DB7yB0YGO8x5ndNhTp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV BAMTKEYxODAzOUYzQjlBNDc5NDE2MDBBMjY4MjhBMkVFMUVCNEE0N0REQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYwToGRwKhfcsiIGkAktt4cHV 2JTXtJpEDMQuJWGbJeVuD3aEKVuZwhrsd9fvObwKb3KwetPq1mH5zOE05tfBbpiA QeeouZfep3vNmuYNOISZA7qtXP0QpnATaVuKX+rKcrKlHLEUt6+nIAQ2RpYndcwb vHq2T93EIroiZ5UpQinjvAAAPp9r7e3DYGxpN6eSFTwTKgQzF96Lhid/tGORjKRH 3J19Lkq3nmbVXt4Zcjy+fw0meL4cI8UbuLS2KxUMxQ4E2bgaDx+ucg2aQSIA47pg 5A2Ncp5VQRp1gYrkhKplqKf4YZ3Len24u9aMGoYR66ZKgq5Bv0hoJIlx7JzzAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU8YA587mkeUFgCiaCii7h60pH3ccwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNDQ0ODcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgEqB1TB NDANBgkqhkiG9w0BAQsFAAOCAQEAUSzJ88Ea7P195idEy56S7EB7AMTD2TO8PQUe 4OjXxTbUo1d0jPPfMG74oDryRupV/d8IyxqDJCDqjXAg51qbURMyIrYMUw8tNBQb c8A+0pv6kc9LeFlrGo3BcXeYWGlHNfHDkALOhS7uTa4e4vR5TgNbC94XIwQ1fpgu 37zam/DXW7VoutsLIDpDFF2Fgw+xjPWmYDYJSkjUAW3jxdkVPv7pIZCovQ4OdXLD WsfcjS6bDBd3dkkxBgFob/8CFlm0aL6P9hoEJAeABhIZwfit2RH2iECHdWAD+wuf Ei2n01VmvO5mp/j8oUOJ73/kXtiAYgdSQjmjNMHivFwJcRbSTg== -----END CERTIFICATE-----Generated at Sat Jun 13 10:44:03 2026 by rpki-client