$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS924.roa File: AS924.roa (raw, json) Hash identifier: Ywjyj47Tfc5VXn8AkpvZEMYHvKZybBINzN3LK5KOL9Y= Subject key identifier: E5:3B:6F:88:B6:B2:A2:BD:3F:05:57:78:9D:D9:6F:C5:21:53:41:62 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 28709EC317C25EA3CE64B3E3092BD6C4D8E54A1E Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS924.roa Signing time: Fri 05 Jun 2026 08:45:51 +0000 ROA not before: Fri 05 Jun 2026 08:40:51 +0000 ROA not after: Fri 04 Jun 2027 08:45:51 +0000 asID: 924 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:70:9e:c3:17:c2:5e:a3:ce:64:b3:e3:09:2b:d6:c4:d8:e5:4a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:51 2026 GMT Not After : Jun 4 08:45:51 2027 GMT Subject: CN=E53B6F88B6B2A2BD3F0557789DD96FC521534162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:e9:3a:92:1f:44:51:3b:08:19:da:7a:e1: 6a:81:83:75:ba:08:64:d3:a7:aa:4a:1a:82:aa:72: 97:89:08:a7:a6:cc:b0:cd:f8:0b:c8:41:b8:60:a5: 0a:3a:ca:64:03:fc:c2:2f:dd:60:46:40:af:22:86: 82:3a:78:66:bb:fa:c0:e0:85:5f:8c:d0:24:0b:f3: 6f:77:d9:81:08:26:2e:d0:40:f1:16:f0:f4:d1:0d: 1f:66:4f:39:01:45:42:1f:d9:4b:c3:d0:7c:31:10: ac:01:80:f6:a2:32:83:4c:36:3f:39:f5:b9:a5:73: 96:b4:7e:02:17:e9:da:20:c5:78:08:f6:3c:ca:c7: 17:be:69:13:ce:38:d8:e0:f9:d8:35:70:6f:5a:a4: e1:83:1c:8f:78:6f:1c:e8:d4:bc:d3:b5:34:cf:71: 42:cd:4f:58:70:73:d4:be:34:d0:83:f4:77:8d:95: f5:71:74:49:44:27:cf:b3:4f:3c:1e:c8:f3:82:e9: d2:b3:38:a0:8f:d6:f0:33:96:a4:8f:20:f7:f5:aa: fc:0f:b4:f9:17:61:19:cb:3c:40:fa:73:5c:a0:96: bb:60:af:96:fe:92:03:1e:62:86:e5:8f:6b:2b:44: 80:e3:36:a0:fe:e1:55:a0:9e:58:64:2f:c7:a7:2b: 3a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3B:6F:88:B6:B2:A2:BD:3F:05:57:78:9D:D9:6F:C5:21:53:41:62 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS924.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 39:96:6b:da:11:0a:e1:ce:b4:cd:b7:24:4c:e6:4b:6e:4b:ad: 59:aa:63:1f:df:28:e6:8c:48:f5:44:10:e5:16:bd:bd:50:65: be:c4:80:c8:bf:cc:14:8d:77:02:31:68:c7:59:cb:f3:61:f1: 35:e1:b2:a3:69:64:da:e2:1d:19:88:d8:ea:50:5b:ef:5b:f2: 89:10:df:f8:ab:a1:90:05:18:a4:ba:d6:c5:98:ec:8b:c2:2e: e8:37:68:18:3c:f6:e2:6d:84:1a:73:0e:0c:2d:05:36:50:bb: 13:2d:63:39:fc:7b:5e:23:90:96:df:16:73:90:f2:c6:d0:f7: 4c:18:85:86:05:fe:f7:fd:03:db:5f:e5:c4:71:05:db:46:13: 00:8e:01:2e:11:19:de:d6:84:2c:9d:63:97:35:f3:a6:85:15: 84:2f:cc:50:93:a1:95:e0:75:00:02:59:99:7e:7e:12:87:5f: ab:a9:45:9d:f7:96:62:7e:9a:7d:ff:2c:7e:8a:72:19:e0:6f: bc:95:ba:05:36:48:1b:74:ab:dc:64:5f:db:ed:55:d0:7f:77: dd:d8:47:7c:dc:a0:34:ad:e9:0a:92:f3:ea:18:80:0a:b3:9e: 7d:bd:a6:29:3f:d0:7c:f0:7e:85:e8:3d:1d:54:05:6f:fd:ae: d7:25:c8:c5 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUKHCewxfCXqPOZLPjCSvWxNjlSh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV BAMTKEU1M0I2Rjg4QjZCMkEyQkQzRjA1NTc3ODlERDk2RkM1MjE1MzQxNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/ek6kh9EUTsIGdp64WqBg3W6 CGTTp6pKGoKqcpeJCKemzLDN+AvIQbhgpQo6ymQD/MIv3WBGQK8ihoI6eGa7+sDg hV+M0CQL82932YEIJi7QQPEW8PTRDR9mTzkBRUIf2UvD0HwxEKwBgPaiMoNMNj85 9bmlc5a0fgIX6dogxXgI9jzKxxe+aRPOONjg+dg1cG9apOGDHI94bxzo1LzTtTTP cULNT1hwc9S+NNCD9HeNlfVxdElEJ8+zTzweyPOC6dKzOKCP1vAzlqSPIPf1qvwP tPkXYRnLPED6c1yglrtgr5b+kgMeYoblj2srRIDjNqD+4VWgnlhkL8enKzopAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQU5TtviLayor0/BVd4ndlvxSFTQWIwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTOTI0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwrAL MA0GCSqGSIb3DQEBCwUAA4IBAQA5lmvaEQrhzrTNtyRM5ktuS61ZqmMf3yjmjEj1 RBDlFr29UGW+xIDIv8wUjXcCMWjHWcvzYfE14bKjaWTa4h0ZiNjqUFvvW/KJEN/4 q6GQBRikutbFmOyLwi7oN2gYPPbibYQacw4MLQU2ULsTLWM5/HteI5CW3xZzkPLG 0PdMGIWGBf73/QPbX+XEcQXbRhMAjgEuERne1oQsnWOXNfOmhRWEL8xQk6GV4HUA AlmZfn4Sh1+rqUWd95Zifpp9/yx+inIZ4G+8lboFNkgbdKvcZF/b7VXQf3fd2Ed8 3KA0rekKkvPqGIAKs559vaYpP9B88H6F6D0dVAVv/a7XJcjF -----END CERTIFICATE-----Generated at Sat Jun 13 09:25:19 2026 by rpki-client