$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS51019.roa File: AS51019.roa (raw, json) Hash identifier: HjJbBK7ApTVrao5ei77Wfipor+oQTuIYw80Dl8gpeI8= Subject key identifier: 52:8F:19:E7:A5:E3:CC:05:AC:7B:7E:03:85:45:85:84:11:EE:61:A0 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 68C37CDC780E1D603F5CBC4414D94ED4D04FE3B9 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS51019.roa Signing time: Fri 04 Jul 2025 07:51:25 +0000 ROA not before: Fri 04 Jul 2025 07:46:25 +0000 ROA not after: Fri 03 Jul 2026 07:51:25 +0000 asID: 51019 IP address blocks: 160.202.134.0/24 maxlen: 24 2a07:54c4:121a::/48 maxlen: 48 2a07:54c4:175c::/48 maxlen: 48 2a07:54c4:175d::/48 maxlen: 48 2a07:54c4:175e::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c3:7c:dc:78:0e:1d:60:3f:5c:bc:44:14:d9:4e:d4:d0:4f:e3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:25 2025 GMT Not After : Jul 3 07:51:25 2026 GMT Subject: CN=528F19E7A5E3CC05AC7B7E038545858411EE61A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5a:80:76:3a:a9:21:42:52:8f:97:f6:60:9a: 62:9e:be:8a:e6:9f:7a:9b:e9:93:60:2d:85:4a:ab: a6:86:37:0a:17:42:92:5c:7a:69:78:8b:dd:fe:f6: e9:39:49:b8:76:bb:f8:15:eb:a7:fd:69:69:6c:9e: 19:bc:0d:64:d8:37:70:b3:8c:56:80:5d:fb:7b:51: df:fe:ae:90:97:85:2a:f3:a7:9a:b4:56:d9:92:2d: 09:ea:a3:21:5a:ed:c3:e6:7e:6e:54:95:67:c5:38: a0:d1:f9:8b:ae:95:87:0c:fe:51:8c:f4:96:2a:66: e9:85:cb:c3:f5:11:96:ab:b0:37:aa:c9:aa:a0:c7: 84:9d:3f:be:dd:dc:a2:3e:24:56:e3:09:68:2e:ea: 98:82:78:f0:ae:28:d0:26:29:6a:aa:5d:0c:b2:12: 23:4c:0e:8d:f3:ab:3a:48:3b:bc:8e:1c:5b:2c:98: e3:5b:bc:ac:de:7d:86:47:15:7b:65:9f:bc:24:92: 12:15:d0:79:ad:fc:83:26:f8:75:2b:62:41:3c:5a: c2:99:6b:17:02:fb:20:76:f9:ef:24:b2:3f:ae:cb: 4e:f6:b1:5b:db:e2:c7:5c:8d:51:bb:00:d7:55:3c: e6:d5:62:8e:d8:e2:5d:e8:f5:ee:65:fc:54:65:56: b4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8F:19:E7:A5:E3:CC:05:AC:7B:7E:03:85:45:85:84:11:EE:61:A0 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS51019.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.202.134.0/24 IPv6: 2a07:54c4:121a::/48 2a07:54c4:175c::-2a07:54c4:175e:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 15:8a:27:22:a5:c9:95:80:49:d1:ff:bf:51:2c:47:a3:14:73: a0:33:d3:3d:5d:ef:21:82:6b:c7:b9:0b:27:41:4d:df:1b:49: 9f:58:66:35:b6:5b:18:c7:e7:50:65:fc:2d:ea:81:9f:21:df: 9e:cc:dc:3f:a8:5b:e9:c8:43:57:f2:7c:6e:cd:9d:12:e2:b7: 5a:ce:73:02:10:de:56:50:84:3e:a1:e0:da:ae:f3:e0:2b:b9: 4d:a3:67:ea:8c:2e:d1:6e:7f:31:7d:71:76:8c:61:e9:ff:e7: c5:14:da:7f:72:08:a6:f1:ed:4a:bf:94:09:ff:ba:97:b1:66: fe:7e:aa:d5:59:0e:13:54:42:2f:c8:55:06:eb:7f:44:d8:7f: 04:49:57:b9:ed:29:6b:4b:d0:fa:c1:b5:4e:8a:9b:08:fe:64: 7c:0a:95:67:db:79:b9:fa:70:46:a5:d8:8c:db:8a:c0:93:4f: 24:27:54:e3:e5:f7:3b:4c:56:33:6b:ba:c8:c6:34:3e:6a:28: 6c:08:66:35:83:51:1b:99:4f:0e:97:f5:83:7a:42:24:99:8f: 4a:bd:54:21:50:b6:4a:5f:c2:14:37:8f:b6:a5:88:96:bd:fd: 62:bc:35:de:48:65:5e:76:ea:ac:81:04:c3:0c:be:11:ea:55: 0d:4e:77:79 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUaMN83HgOHWA/XLxEFNlO1NBP47kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjVaFw0yNjA3MDMwNzUxMjVaMDMxMTAvBgNV BAMTKDUyOEYxOUU3QTVFM0NDMDVBQzdCN0UwMzg1NDU4NTg0MTFFRTYxQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRWoB2OqkhQlKPl/ZgmmKevorm n3qb6ZNgLYVKq6aGNwoXQpJceml4i93+9uk5Sbh2u/gV66f9aWlsnhm8DWTYN3Cz jFaAXft7Ud/+rpCXhSrzp5q0VtmSLQnqoyFa7cPmfm5UlWfFOKDR+YuulYcM/lGM 9JYqZumFy8P1EZarsDeqyaqgx4SdP77d3KI+JFbjCWgu6piCePCuKNAmKWqqXQyy EiNMDo3zqzpIO7yOHFssmONbvKzefYZHFXtln7wkkhIV0Hmt/IMm+HUrYkE8WsKZ axcC+yB2+e8ksj+uy072sVvb4sdcjVG7ANdVPObVYo7Y4l3o9e5l/FRlVrThAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUUo8Z56XjzAWse34DhUWFhBHuYaAwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNTEwMTkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwRAYIKwYBBQUHAQcBAf8ENTAzMAwEAgABMAYDBACgyoYw IwQCAAIwHQMHACoHVMQSGjASAwcCKgdUxBdcAwcAKgdUxBdeMA0GCSqGSIb3DQEB CwUAA4IBAQAViicipcmVgEnR/79RLEejFHOgM9M9Xe8hgmvHuQsnQU3fG0mfWGY1 tlsYx+dQZfwt6oGfId+ezNw/qFvpyENX8nxuzZ0S4rdaznMCEN5WUIQ+oeDarvPg K7lNo2fqjC7Rbn8xfXF2jGHp/+fFFNp/cgim8e1Kv5QJ/7qXsWb+fqrVWQ4TVEIv yFUG639E2H8ESVe57SlrS9D6wbVOipsI/mR8CpVn23m5+nBGpdiM24rAk08kJ1Tj 5fc7TFYza7rIxjQ+aihsCGY1g1EbmU8Ol/WDekIkmY9KvVQhULZKX8IUN4+2pYiW vf1ivDXeSGVeduqsgQTDDL4R6lUNTnd5 -----END CERTIFICATE-----Generated at Wed Nov 5 00:26:45 2025 by rpki-client