$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50224.roa File: AS50224.roa (raw, json) Hash identifier: gH8VvrKncYuZfyO9PZXEWqaPO5TxrrbCWAE8pY8XedI= Subject key identifier: DD:6C:6F:5E:07:A1:1C:54:2B:08:CD:C1:F8:ED:F0:FF:27:26:2E:A2 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 5A47520F1831AA9512FB547E0A2EE1E55AFD25A1 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50224.roa Signing time: Sat 31 Jan 2026 20:07:17 +0000 ROA not before: Sat 31 Jan 2026 20:02:17 +0000 ROA not after: Sat 30 Jan 2027 20:07:17 +0000 asID: 50224 IP address blocks: 2a07:54c0::/48 maxlen: 48 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 05:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:47:52:0f:18:31:aa:95:12:fb:54:7e:0a:2e:e1:e5:5a:fd:25:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jan 31 20:02:17 2026 GMT Not After : Jan 30 20:07:17 2027 GMT Subject: CN=DD6C6F5E07A11C542B08CDC1F8EDF0FF27262EA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:84:11:db:57:20:fc:6e:1d:7c:4e:8f:69:b2: 48:ee:e0:c2:e4:28:2f:42:96:8a:50:e6:f1:91:0c: 28:37:bc:7e:1a:b7:a7:c5:2a:2b:d8:0f:18:b1:13: d2:56:79:16:e2:90:68:1f:5f:52:ec:f1:0e:05:ae: 18:39:ca:28:ff:be:81:93:b8:68:33:4a:33:84:76: 2c:cf:e9:8b:0f:ab:60:08:83:c0:2b:ca:93:e4:40: 7d:93:09:5b:70:5d:ca:9e:59:6d:cf:b8:b6:ad:6c: 50:0d:b5:55:1b:8d:55:3f:76:ae:da:56:61:37:38: b2:58:95:07:0e:12:25:92:8f:1d:cc:a8:23:35:9f: 3b:a2:30:d5:c7:c5:cc:e1:af:b0:9a:40:a7:f7:35: 32:f0:10:e1:c0:4f:54:cd:2a:99:b3:0d:d9:f2:0a: 5e:8d:92:e0:07:ee:50:f3:9a:2f:ef:bb:e5:fc:7c: e7:41:29:b6:4e:94:e1:aa:e2:57:66:a7:32:65:5a: d4:6c:c4:9c:a2:a9:99:6c:22:74:78:9e:83:8c:79: 53:ad:b6:82:08:f4:9e:1a:52:56:02:d3:ae:dd:b6: 29:59:1e:97:f7:bf:4d:66:6a:5b:f3:d3:77:5c:c3: 40:6c:3d:df:62:b2:52:b9:c6:82:4b:84:65:8f:dc: d8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6C:6F:5E:07:A1:1C:54:2B:08:CD:C1:F8:ED:F0:FF:27:26:2E:A2 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50224.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c0::/48 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption b7:5a:07:ee:52:a1:5f:39:c0:65:aa:0b:c0:98:24:87:fd:2d: b6:af:91:06:cd:05:13:5f:c0:bc:43:f5:83:63:60:3d:5c:5f: 2d:ed:ae:4b:33:bb:db:66:b2:93:63:c1:ba:cf:eb:5a:9b:73: 01:c2:c3:e3:ff:03:47:c8:13:fe:00:f2:05:65:ff:d5:0c:eb: 69:4b:4e:cd:c6:40:24:5e:5e:27:9a:9c:6c:12:5f:18:d9:b6: b0:29:fe:eb:cc:22:c7:8f:80:ac:6a:2a:b0:97:d1:d6:7a:ec: 78:cb:ad:4b:4d:01:fb:1c:cb:0a:f5:d0:d1:36:74:af:45:b0: 8b:2e:ba:18:29:a5:a4:9a:04:e0:c3:db:68:c0:f4:d2:a1:ec: 60:77:41:b2:19:45:20:cd:0b:06:96:a9:25:77:20:c1:48:8b: 6a:40:f8:6f:50:7d:4a:09:94:f8:0f:23:8b:53:ce:b5:4b:f2: f7:9b:96:91:43:80:fd:4b:78:18:9c:69:1d:62:40:f3:06:cc: d0:4d:a7:56:a1:4c:ad:33:01:a5:dd:df:5e:5b:63:e1:d8:fb: 4d:c8:ba:a4:2c:98:6f:2f:54:fb:d8:16:b1:65:e9:68:9e:3d: 3c:0c:14:07:e9:df:37:56:1e:e7:3d:28:a8:a3:15:5c:1b:0a: 45:b9:1f:54 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUWkdSDxgxqpUS+1R+Ci7h5Vr9JaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjAxMzEyMDAyMTdaFw0yNzAxMzAyMDA3MTdaMDMxMTAvBgNV BAMTKERENkM2RjVFMDdBMTFDNTQyQjA4Q0RDMUY4RURGMEZGMjcyNjJFQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhBHbVyD8bh18To9pskju4MLk KC9ClopQ5vGRDCg3vH4at6fFKivYDxixE9JWeRbikGgfX1Ls8Q4Frhg5yij/voGT uGgzSjOEdizP6YsPq2AIg8ArypPkQH2TCVtwXcqeWW3PuLatbFANtVUbjVU/dq7a VmE3OLJYlQcOEiWSjx3MqCM1nzuiMNXHxczhr7CaQKf3NTLwEOHAT1TNKpmzDdny Cl6NkuAH7lDzmi/vu+X8fOdBKbZOlOGq4ldmpzJlWtRsxJyiqZlsInR4noOMeVOt toII9J4aUlYC067dtilZHpf3v01malvz03dcw0BsPd9islK5xoJLhGWP3NgPAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU3WxvXgehHFQrCM3B+O3w/ycmLqIwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNTAyMjQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAqB1TA AAADBwAqB1TCsAswDQYJKoZIhvcNAQELBQADggEBALdaB+5SoV85wGWqC8CYJIf9 LbavkQbNBRNfwLxD9YNjYD1cXy3trkszu9tmspNjwbrP61qbcwHCw+P/A0fIE/4A 8gVl/9UM62lLTs3GQCReXieanGwSXxjZtrAp/uvMIsePgKxqKrCX0dZ67HjLrUtN Afscywr10NE2dK9FsIsuuhgppaSaBODD22jA9NKh7GB3QbIZRSDNCwaWqSV3IMFI i2pA+G9QfUoJlPgPI4tTzrVL8veblpFDgP1LeBicaR1iQPMGzNBNp1ahTK0zAaXd 315bY+HY+03IuqQsmG8vVPvYFrFl6WiePTwMFAfp3zdWHuc9KKijFVwbCkW5H1Q= -----END CERTIFICATE-----Generated at Sun Mar 1 18:11:53 2026 by rpki-client