$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS54009.roa File: AS54009.roa (raw, json) Hash identifier: OkTkACpQsXWpQ6liIn/kctk9KiC+PqUVqy/cviicw44= Subject key identifier: 35:61:CF:0F:23:81:9C:B4:FA:37:04:13:44:1A:C9:CC:B6:7A:E2:61 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 4B0E2428330851DF06BB11493B25C5B7965584DF Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS54009.roa Signing time: Fri 05 Jun 2026 08:45:53 +0000 ROA not before: Fri 05 Jun 2026 08:40:53 +0000 ROA not after: Fri 04 Jun 2027 08:45:53 +0000 asID: 54009 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:0e:24:28:33:08:51:df:06:bb:11:49:3b:25:c5:b7:96:55:84:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:53 2026 GMT Not After : Jun 4 08:45:53 2027 GMT Subject: CN=3561CF0F23819CB4FA370413441AC9CCB67AE261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:01:29:16:b8:2d:9e:ef:81:19:9d:b5:87:39: 4b:2c:69:8f:fe:b1:23:f8:70:ea:c0:0e:c0:65:b0: 7f:24:40:2b:4a:b6:18:50:d9:dc:a2:93:06:02:54: 01:51:17:4b:37:9c:7d:52:db:73:1e:4a:51:95:2e: 68:cb:ab:a6:95:d5:65:86:77:e5:a8:fe:24:db:db: 4a:1b:4e:3b:a4:eb:fa:07:4c:f5:95:16:6b:d2:9d: 4f:aa:03:08:dd:dd:d1:a7:6d:58:94:e2:50:27:a6: 78:e8:74:2d:37:ce:10:72:48:67:06:76:d3:0a:a1: 6b:3d:35:5d:03:b6:b7:aa:b8:be:c4:fe:df:08:58: b3:7e:dc:e2:5e:6e:96:6e:8a:c1:1d:50:7c:3c:54: 2d:59:10:fc:a6:3b:a2:ef:ef:0c:48:54:40:27:0f: eb:98:a0:bc:ae:de:6f:66:71:82:1f:25:c3:4b:dd: e9:3e:a9:67:d0:f0:95:1d:98:9c:e0:65:6f:c9:50: 80:49:b7:d1:d9:05:64:78:91:4e:32:78:85:da:d8: a9:dd:0e:9a:e6:50:31:3f:90:81:2f:e1:6a:48:33: da:19:2c:ab:ba:e0:8c:b0:a7:ee:9d:04:7b:4d:c0: ec:8c:f8:eb:a5:d7:0a:50:73:d0:04:30:15:61:f1: c7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:61:CF:0F:23:81:9C:B4:FA:37:04:13:44:1A:C9:CC:B6:7A:E2:61 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS54009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 02:9e:21:7f:72:0a:ef:8d:03:02:b0:23:41:8a:52:6b:9e:84: b0:51:0c:c0:4b:0f:1f:6f:d6:ef:39:76:3d:03:75:ff:73:79: c4:98:24:09:6e:f4:58:d0:bb:9a:91:bd:b8:14:f2:8e:26:a7: d7:78:15:94:b6:c5:b7:d4:ba:d2:ea:63:13:c4:e6:42:26:11: f8:c3:1c:4f:79:cb:5b:87:ba:8b:c3:24:21:5f:ba:52:7e:ee: c3:c8:78:c5:26:dd:7c:c4:e5:fb:3b:10:9b:36:e6:0d:48:ed: 80:98:a4:f0:74:ae:e0:fc:de:c9:67:21:d6:db:e1:a0:8c:61: 27:89:ee:b6:f6:46:33:94:53:00:27:4b:34:49:2f:f9:53:4a: 69:80:b5:d4:32:0b:81:93:58:f6:69:6d:db:58:50:97:53:e6: 12:ff:4d:0b:e6:dd:d7:8e:a8:1b:7d:4d:5b:93:56:46:4c:52: dc:85:0f:ba:99:10:af:b0:74:b2:96:a8:97:e0:44:c4:99:f3: dd:e1:4e:b2:d0:14:83:19:42:e7:6a:76:2a:f4:8f:ea:63:d8: 89:90:86:74:9c:b0:7b:e7:02:21:fa:df:b0:b0:86:95:c5:7e: 14:7d:d0:bc:b8:86:ae:cb:4e:16:1c:b9:81:26:22:71:3d:49: 6c:1e:8d:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSw4kKDMIUd8GuxFJOyXFt5ZVhN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTNaFw0yNzA2MDQwODQ1NTNaMDMxMTAvBgNV BAMTKDM1NjFDRjBGMjM4MTlDQjRGQTM3MDQxMzQ0MUFDOUNDQjY3QUUyNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVASkWuC2e74EZnbWHOUssaY/+ sSP4cOrADsBlsH8kQCtKthhQ2dyikwYCVAFRF0s3nH1S23MeSlGVLmjLq6aV1WWG d+Wo/iTb20obTjuk6/oHTPWVFmvSnU+qAwjd3dGnbViU4lAnpnjodC03zhBySGcG dtMKoWs9NV0DtrequL7E/t8IWLN+3OJebpZuisEdUHw8VC1ZEPymO6Lv7wxIVEAn D+uYoLyu3m9mcYIfJcNL3ek+qWfQ8JUdmJzgZW/JUIBJt9HZBWR4kU4yeIXa2Knd DprmUDE/kIEv4WpIM9oZLKu64Iywp+6dBHtNwOyM+Oul1wpQc9AEMBVh8cfXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNWHPDyOBnLT6NwQTRBrJzLZ64mEwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNTQwMDkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqB1TC sAswDQYJKoZIhvcNAQELBQADggEBAAKeIX9yCu+NAwKwI0GKUmuehLBRDMBLDx9v 1u85dj0Ddf9zecSYJAlu9FjQu5qRvbgU8o4mp9d4FZS2xbfUutLqYxPE5kImEfjD HE95y1uHuovDJCFfulJ+7sPIeMUm3XzE5fs7EJs25g1I7YCYpPB0ruD83slnIdbb 4aCMYSeJ7rb2RjOUUwAnSzRJL/lTSmmAtdQyC4GTWPZpbdtYUJdT5hL/TQvm3deO qBt9TVuTVkZMUtyFD7qZEK+wdLKWqJfgRMSZ893hTrLQFIMZQudqdir0j+pj2ImQ hnScsHvnAiH637CwhpXFfhR90Ly4hq7LThYcuYEmInE9SWwejcI= -----END CERTIFICATE-----Generated at Sat Jun 13 10:44:03 2026 by rpki-client