$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS6939.roa File: AS6939.roa (raw, json) Hash identifier: uxWIkldy8ate0ghkKXvfPFLM0qvKTkmkozMWHHpBAOY= Subject key identifier: 6A:91:6C:F4:1F:8C:19:93:E0:AE:FC:9A:D0:8E:CE:92:14:E3:1E:13 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 285FD6B475CE0C95057F2D2EB9EAC1C45C15A4FD Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS6939.roa Signing time: Fri 05 Jun 2026 08:45:51 +0000 ROA not before: Fri 05 Jun 2026 08:40:51 +0000 ROA not after: Fri 04 Jun 2027 08:45:51 +0000 asID: 6939 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:5f:d6:b4:75:ce:0c:95:05:7f:2d:2e:b9:ea:c1:c4:5c:15:a4:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:51 2026 GMT Not After : Jun 4 08:45:51 2027 GMT Subject: CN=6A916CF41F8C1993E0AEFC9AD08ECE9214E31E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:22:76:a7:6f:56:a9:3a:d0:30:7e:e0:0f: 61:ca:ad:db:68:5e:ea:e4:1e:a7:05:0b:bf:dc:9b: 73:f6:1b:d0:c8:ab:2a:44:10:b2:09:43:d5:cc:ed: 13:af:7f:9f:4d:c4:4c:e1:af:2c:0e:78:e0:db:e2: b4:1d:0b:bf:c5:7b:cc:30:d7:37:65:74:61:72:80: ba:11:98:20:82:9d:f1:57:13:e9:18:2e:1d:5e:5b: 74:f2:b3:db:eb:0e:a2:79:42:4b:db:e7:0c:74:bd: 27:eb:4e:32:6b:30:8e:04:0a:3b:4e:3d:33:f7:9d: 83:2f:97:21:7a:f1:ce:f8:32:8c:6d:a6:b3:f1:74: 58:3c:86:92:8b:d5:38:65:b3:df:d8:0f:7b:9f:78: 6c:a2:0f:a5:2b:2c:9d:77:ad:2a:47:91:84:f0:60: ef:d2:4a:39:bc:21:d4:d8:53:fc:44:26:ba:b4:a7: 8b:b2:1f:2b:38:2a:9d:78:8d:4b:be:34:53:b7:7d: c3:0d:c2:fe:80:44:c0:85:01:d1:99:a2:07:de:ab: 4c:00:ac:cd:f1:fe:43:55:54:52:5a:74:5b:90:b4: ba:a1:4d:3b:3d:aa:87:4c:6b:ed:59:dc:54:e2:2c: d0:a8:c7:81:86:ea:cd:67:9e:06:26:79:05:97:5a: ed:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:91:6C:F4:1F:8C:19:93:E0:AE:FC:9A:D0:8E:CE:92:14:E3:1E:13 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS6939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption b7:fb:04:07:03:a0:41:6a:6e:bb:82:20:7b:e8:b1:73:d3:9e: a3:d4:2c:b4:9a:f0:0a:ca:90:91:4d:50:ad:41:26:7e:58:57: 78:99:ff:94:2b:8a:cb:4f:13:c2:19:ce:59:1e:52:43:aa:d9: fd:98:77:fb:5d:36:89:a9:23:3e:55:2e:0e:cd:d1:bb:bf:11: e5:11:39:6d:ce:73:1e:e3:4f:cb:37:b9:08:20:91:ef:30:d5: 96:db:65:c3:2b:ba:15:55:bf:d2:74:06:d9:27:95:6a:f1:86: 11:0d:e6:11:57:a9:ff:f6:17:59:38:9e:38:93:2c:2e:f9:be: 9f:79:17:83:e6:b3:a3:6a:60:eb:86:55:b6:d8:1a:16:7d:7c: 32:62:fd:8f:5f:47:e8:75:27:99:23:dc:7d:07:a4:66:65:0c: 84:4e:9f:d8:42:76:96:9a:13:e3:c5:9d:82:74:6e:a7:a2:ba: 45:d3:83:ee:46:8b:46:3c:7a:36:29:df:12:0e:20:0a:02:64: 54:84:4f:03:46:58:2d:5d:6b:73:2c:12:ef:49:f4:7f:97:8a: 54:71:09:74:3d:54:de:e3:fd:35:6c:b3:5f:0a:35:03:75:1d: 5d:89:79:b6:a0:eb:49:26:3a:1f:7a:ad:38:a8:b2:42:97:88: 82:e9:f4:aa -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUKF/WtHXODJUFfy0uuerBxFwVpP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV BAMTKDZBOTE2Q0Y0MUY4QzE5OTNFMEFFRkM5QUQwOEVDRTkyMTRFMzFFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+YiJ2p29WqTrQMH7gD2HKrdto XurkHqcFC7/cm3P2G9DIqypEELIJQ9XM7ROvf59NxEzhrywOeODb4rQdC7/Fe8ww 1zdldGFygLoRmCCCnfFXE+kYLh1eW3Tys9vrDqJ5Qkvb5wx0vSfrTjJrMI4ECjtO PTP3nYMvlyF68c74MoxtprPxdFg8hpKL1Thls9/YD3ufeGyiD6UrLJ13rSpHkYTw YO/SSjm8IdTYU/xEJrq0p4uyHys4Kp14jUu+NFO3fcMNwv6ARMCFAdGZogfeq0wA rM3x/kNVVFJadFuQtLqhTTs9qodMa+1Z3FTiLNCox4GG6s1nngYmeQWXWu1hAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUapFs9B+MGZPgrvya0I7OkhTjHhMwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNjkzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMKw CzANBgkqhkiG9w0BAQsFAAOCAQEAt/sEBwOgQWpuu4Ige+ixc9Oeo9QstJrwCsqQ kU1QrUEmflhXeJn/lCuKy08TwhnOWR5SQ6rZ/Zh3+102iakjPlUuDs3Ru78R5RE5 bc5zHuNPyze5CCCR7zDVlttlwyu6FVW/0nQG2SeVavGGEQ3mEVep//YXWTieOJMs Lvm+n3kXg+azo2pg64ZVttgaFn18MmL9j19H6HUnmSPcfQekZmUMhE6f2EJ2lpoT 48WdgnRup6K6RdOD7kaLRjx6NinfEg4gCgJkVIRPA0ZYLV1rcywS70n0f5eKVHEJ dD1U3uP9NWyzXwo1A3UdXYl5tqDrSSY6H3qtOKiyQpeIgun0qg== -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:06 2026 by rpki-client