$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS198342.roa File: AS198342.roa (raw, json) Hash identifier: Snuz+Gj5/JUEZb4alWhDCeZQw+t5TmE/SO3fcDF4gMg= Subject key identifier: F5:97:86:3A:DA:04:E6:CF:04:76:51:FD:28:B4:0B:A5:63:E4:79:56 Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 7241EEFD4D91D7D2A136F7E5B9E69CBED4EAAD1D Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS198342.roa Signing time: Thu 02 Jan 2025 01:30:34 +0000 ROA not before: Thu 02 Jan 2025 01:25:34 +0000 ROA not after: Thu 01 Jan 2026 01:30:34 +0000 asID: 198342 IP address blocks: 2a07:54c1:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 23:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:41:ee:fd:4d:91:d7:d2:a1:36:f7:e5:b9:e6:9c:be:d4:ea:ad:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Jan 2 01:25:34 2025 GMT Not After : Jan 1 01:30:34 2026 GMT Subject: CN=F597863ADA04E6CF047651FD28B40BA563E47956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e7:b7:d4:00:24:b1:a2:fc:99:88:3c:78:0d: 30:68:93:e8:4b:54:c8:a0:1d:df:e3:52:60:3e:53: 32:b1:49:2f:7f:6c:e9:48:28:80:d9:ab:55:7a:1c: 59:f1:99:b4:0e:97:3a:55:cd:3e:ae:b2:e5:a2:02: 12:fc:5c:6f:9f:a9:ea:98:e9:f1:a2:ae:e0:35:94: af:5a:f7:5d:87:59:e8:b9:d3:e8:b0:3d:21:cb:c9: 52:f0:18:a7:dd:d9:9a:df:24:4d:46:31:86:36:8b: aa:7c:43:de:fe:d9:76:e4:68:0d:56:c0:32:65:fd: 46:d3:08:7e:3a:58:29:57:c6:8f:8f:23:15:24:e2: 8c:30:b7:33:68:3f:82:61:0e:65:46:6a:9f:a5:fc: 57:17:bb:f4:3b:0d:55:eb:9c:a5:0e:8f:89:3c:6a: 57:da:a7:10:a1:39:c1:85:8b:81:0f:1a:7d:92:35: 82:c8:3a:64:09:9d:de:72:d7:08:54:dd:8e:b6:41: 2e:e2:ce:f6:5c:83:2d:ad:d7:1a:9f:f1:a5:77:e4: db:ba:ed:ab:ad:82:9e:72:76:4f:86:5e:da:30:fd: 0f:b3:36:4b:64:47:57:f8:91:e8:e5:c8:74:a3:c2: fd:25:fa:df:a5:32:e9:19:92:b3:8f:63:53:20:95: 72:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:97:86:3A:DA:04:E6:CF:04:76:51:FD:28:B4:0B:A5:63:E4:79:56 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS198342.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 75:b7:97:84:97:f3:61:c0:39:4b:31:6b:d7:eb:f6:34:d3:bc: 05:c9:56:e2:4a:cd:d0:2e:26:30:94:18:45:77:82:48:50:96: fe:b5:f6:3b:67:c8:53:d5:8e:c1:83:7e:17:7b:e1:24:35:96: 16:09:92:30:7e:f6:f7:3d:8a:cf:ed:26:ac:6e:4f:b7:31:52: 02:f1:b1:bb:7f:ea:e6:4a:9c:ea:ba:20:4f:83:ca:00:b3:3f: f4:8f:82:48:33:84:b4:9c:a4:71:01:79:44:90:57:a2:ab:5a: cd:6b:31:2c:02:50:2a:9f:27:a8:2c:3b:92:5b:b7:4a:94:31: 09:26:94:f8:24:5f:df:ea:d1:9f:04:7a:70:94:ca:fe:ed:6e: ec:be:40:24:58:88:79:fe:09:83:7a:b3:22:b5:6f:e4:5a:46: 0c:5a:41:98:8c:f6:c0:9e:07:41:02:e0:04:1a:3f:b1:95:6c: c4:7c:02:36:76:20:8a:01:75:74:b1:13:f0:9e:2f:7f:29:43: ff:ff:99:cc:d7:b4:d8:7f:33:65:aa:55:46:54:73:eb:b0:95: 7b:0a:47:0e:07:94:3c:5a:47:65:44:eb:34:aa:d8:ac:79:83: f0:b3:21:19:c4:35:a7:2e:1e:ef:3a:60:a0:7e:3f:32:69:89: b8:c5:85:a2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUckHu/U2R19KhNvflueacvtTqrR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNTAxMDIwMTI1MzRaFw0yNjAxMDEwMTMwMzRaMDMxMTAvBgNV BAMTKEY1OTc4NjNBREEwNEU2Q0YwNDc2NTFGRDI4QjQwQkE1NjNFNDc5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf57fUACSxovyZiDx4DTBok+hL VMigHd/jUmA+UzKxSS9/bOlIKIDZq1V6HFnxmbQOlzpVzT6usuWiAhL8XG+fqeqY 6fGiruA1lK9a912HWei50+iwPSHLyVLwGKfd2ZrfJE1GMYY2i6p8Q97+2XbkaA1W wDJl/UbTCH46WClXxo+PIxUk4owwtzNoP4JhDmVGap+l/FcXu/Q7DVXrnKUOj4k8 alfapxChOcGFi4EPGn2SNYLIOmQJnd5y1whU3Y62QS7izvZcgy2t1xqf8aV35Nu6 7autgp5ydk+GXtow/Q+zNktkR1f4kejlyHSjwv0l+t+lMukZkrOPY1MglXK7AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU9ZeGOtoE5s8EdlH9KLQLpWPkeVYwHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTMTk4MzQyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wbALMA0GCSqGSIb3DQEBCwUAA4IBAQB1t5eEl/NhwDlLMWvX6/Y007wFyVbiSs3Q LiYwlBhFd4JIUJb+tfY7Z8hT1Y7Bg34Xe+EkNZYWCZIwfvb3PYrP7Sasbk+3MVIC 8bG7f+rmSpzquiBPg8oAsz/0j4JIM4S0nKRxAXlEkFeiq1rNazEsAlAqnyeoLDuS W7dKlDEJJpT4JF/f6tGfBHpwlMr+7W7svkAkWIh5/gmDerMitW/kWkYMWkGYjPbA ngdBAuAEGj+xlWzEfAI2diCKAXV0sRPwni9/KUP//5nM17TYfzNlqlVGVHPrsJV7 CkcOB5Q8WkdlROs0qtiseYPwsyEZxDWnLh7vOmCgfj8yaYm4xYWi -----END CERTIFICATE-----Generated at Wed May 7 12:18:01 2025 by rpki-client