$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS47689.roa File: AS47689.roa (raw, json) Hash identifier: 2gbyliVj3yanV97KA9mYRLqCDXshRaexbaWuBgaS1QQ= Subject key identifier: 1E:27:4F:1B:74:3F:36:FC:CC:74:3C:A5:94:26:CF:2A:4B:13:33:D5 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 10226F3AF8E5864619787EE1D93401E891B25557 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS47689.roa Signing time: Fri 05 Jun 2026 08:45:54 +0000 ROA not before: Fri 05 Jun 2026 08:40:54 +0000 ROA not after: Fri 04 Jun 2027 08:45:54 +0000 asID: 47689 IP address blocks: 2a07:54c1:4100::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:22:6f:3a:f8:e5:86:46:19:78:7e:e1:d9:34:01:e8:91:b2:55:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:54 2026 GMT Not After : Jun 4 08:45:54 2027 GMT Subject: CN=1E274F1B743F36FCCC743CA59426CF2A4B1333D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:0b:e1:ff:be:71:97:5a:1d:0a:26:14:5c: 1e:87:08:bc:03:24:3a:ed:72:19:50:cd:c6:d6:58: 10:20:d0:b6:6d:37:9e:48:99:5f:5c:d3:54:e4:a7: 4e:a8:e3:25:bc:60:a0:ad:44:06:51:83:e6:9b:7c: 98:fd:88:97:3e:a8:14:26:f5:d3:af:db:92:31:b0: e2:f3:72:ac:e8:e8:2b:ac:e7:49:48:2c:24:fb:43: 75:78:c2:39:6f:6b:3c:a2:1f:5b:c1:b7:26:90:fd: 94:47:56:23:4d:65:49:d3:8d:89:0f:43:b7:33:66: e3:8b:22:2c:70:45:d8:76:36:61:7e:4f:04:87:af: 8a:69:65:8f:37:56:70:16:03:a3:bc:fb:93:ca:4a: a0:c7:3f:0c:c7:c6:5c:f1:63:e6:e6:2e:9b:3d:28: 11:d5:c6:bd:08:54:7d:46:80:21:7f:85:b8:10:cd: 0a:8f:e2:e3:80:cd:a1:8d:e0:20:6f:d0:75:2b:52: b9:d2:5f:6b:15:e7:31:fa:83:e8:2f:56:b9:60:df: 54:b4:87:70:c8:1e:dc:d4:1f:ae:21:fd:82:9e:9f: ee:2b:66:27:b0:80:8f:ba:7d:98:db:2b:0a:21:b1: e4:dd:56:89:7a:14:39:2f:79:4e:19:ed:57:ae:ee: 93:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:27:4F:1B:74:3F:36:FC:CC:74:3C:A5:94:26:CF:2A:4B:13:33:D5 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS47689.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:4100::/40 Signature Algorithm: sha256WithRSAEncryption 36:99:18:fa:95:d4:83:fb:c8:fb:c3:20:21:b2:9c:d8:0d:1a: a5:af:14:b3:e1:cf:e1:09:4d:02:6c:44:61:76:54:8b:50:b2: 93:58:1e:1e:69:74:d2:05:9d:d0:7c:cd:ef:04:6a:9b:7d:af: 8f:bb:31:10:1d:6a:49:a7:a0:ab:9e:cc:d8:ae:c2:6b:78:aa: f8:f1:e0:0b:fc:94:43:cd:85:79:8b:e4:3b:9d:8c:21:0b:03: 69:0b:f9:7a:cd:56:f3:c8:64:6a:99:33:5f:7f:f0:7d:fc:9f: d7:ca:50:84:1a:b1:7f:01:ee:f8:bf:a2:a1:2c:01:87:fb:17: 74:ce:c1:1e:58:a7:0f:4b:1a:70:b9:32:18:3a:b5:5c:6c:d3: e9:88:47:6a:bc:5e:e5:9b:8a:1c:fe:dc:1d:e8:0b:de:47:92: 19:38:b5:16:c0:9e:f2:dd:41:2c:cf:0d:c6:07:c8:77:70:cb: 08:8f:e5:31:80:15:fa:f1:be:5e:82:e7:ff:ce:d7:89:b2:50: 78:56:87:c6:67:e3:b5:da:1b:1d:dc:14:5b:52:a8:37:b0:af: ec:12:e5:ed:4f:35:dc:e8:92:5e:91:5e:05:14:d9:29:08:db: 50:2e:a8:18:e7:53:4e:fc:7c:bc:90:dc:e5:9e:02:98:ee:38: 22:ad:57:9a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUECJvOvjlhkYZeH7h2TQB6JGyVVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTRaFw0yNzA2MDQwODQ1NTRaMDMxMTAvBgNV BAMTKDFFMjc0RjFCNzQzRjM2RkNDQzc0M0NBNTk0MjZDRjJBNEIxMzMzRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fQvh/75xl1odCiYUXB6HCLwD JDrtchlQzcbWWBAg0LZtN55ImV9c01Tkp06o4yW8YKCtRAZRg+abfJj9iJc+qBQm 9dOv25IxsOLzcqzo6Cus50lILCT7Q3V4wjlvazyiH1vBtyaQ/ZRHViNNZUnTjYkP Q7czZuOLIixwRdh2NmF+TwSHr4ppZY83VnAWA6O8+5PKSqDHPwzHxlzxY+bmLps9 KBHVxr0IVH1GgCF/hbgQzQqP4uOAzaGN4CBv0HUrUrnSX2sV5zH6g+gvVrlg31S0 h3DIHtzUH64h/YKen+4rZiewgI+6fZjbKwohseTdVol6FDkveU4Z7Veu7pOxAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUHidPG3Q/NvzMdDyllCbPKksTM9UwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNDc2ODkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqB1TB QTANBgkqhkiG9w0BAQsFAAOCAQEANpkY+pXUg/vI+8MgIbKc2A0apa8Us+HP4QlN AmxEYXZUi1Cyk1geHml00gWd0HzN7wRqm32vj7sxEB1qSaegq57M2K7Ca3iq+PHg C/yUQ82FeYvkO52MIQsDaQv5es1W88hkapkzX3/wffyf18pQhBqxfwHu+L+ioSwB h/sXdM7BHlinD0sacLkyGDq1XGzT6YhHarxe5ZuKHP7cHegL3keSGTi1FsCe8t1B LM8NxgfId3DLCI/lMYAV+vG+XoLn/87XibJQeFaHxmfjtdobHdwUW1KoN7Cv7BLl 7U813OiSXpFeBRTZKQjbUC6oGOdTTvx8vJDc5Z4CmO44Iq1Xmg== -----END CERTIFICATE-----Generated at Sat Jun 13 07:58:46 2026 by rpki-client