$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS48436.roa File: AS48436.roa (raw, json) Hash identifier: 8Hr4zy1viuI3q6ReW5MaRt2g9cvr5uYKpKY406FFdUE= Subject key identifier: A7:1E:B8:19:D4:E0:FA:94:4A:5D:4B:52:30:1B:03:BA:46:89:C2:AC Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 564CEA7FF29817E4DCCC894AA06B866BD6C0DDD6 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS48436.roa Signing time: Fri 27 Jun 2025 22:23:45 +0000 ROA not before: Fri 27 Jun 2025 22:18:45 +0000 ROA not after: Fri 26 Jun 2026 22:23:45 +0000 asID: 48436 IP address blocks: 2a07:54c1:c1e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 21:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4c:ea:7f:f2:98:17:e4:dc:cc:89:4a:a0:6b:86:6b:d6:c0:dd:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Jun 27 22:18:45 2025 GMT Not After : Jun 26 22:23:45 2026 GMT Subject: CN=A71EB819D4E0FA944A5D4B52301B03BA4689C2AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d4:33:3b:24:d5:77:2c:8d:ce:29:7c:95:47: 10:dc:5f:fb:df:48:e8:81:41:ef:9b:ed:0e:4e:e2: c6:fb:cd:87:6a:59:ec:8d:f8:05:b3:eb:fa:73:4e: 14:26:6c:77:08:ae:04:fb:1d:9d:96:ea:d1:59:0f: 67:57:a8:7c:6a:81:4f:4c:73:eb:89:d4:9d:82:75: 90:d0:3a:50:19:76:3f:bf:d5:0c:cc:72:a9:fe:d1: 82:56:67:b1:a8:d5:f0:35:70:5c:ba:b9:c3:65:1d: 04:9b:51:08:70:ff:97:a1:e6:84:0d:6b:c2:50:c5: a1:bf:fe:78:4c:57:02:2f:0c:46:91:22:16:29:6d: ed:7f:f8:79:3a:d6:34:3e:e8:6d:e9:e6:66:4f:19: 4f:ac:a1:91:b3:8c:0b:31:80:37:e2:53:30:58:76: 20:74:ef:05:b2:9f:58:05:2d:ff:ba:56:b7:f3:84: a9:a3:2f:78:be:8f:d0:14:f1:65:f3:72:e6:22:46: a9:15:fb:02:88:9c:3a:b8:e5:4a:94:0b:f1:7f:a8: 01:c8:ab:bc:d6:69:d2:32:ce:d4:6f:2c:f8:98:f0: c8:ab:3a:fb:4d:1b:8a:76:03:96:d7:20:e2:bc:13: b3:83:15:96:2a:a5:44:45:52:f7:f4:b9:99:5c:80: ec:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1E:B8:19:D4:E0:FA:94:4A:5D:4B:52:30:1B:03:BA:46:89:C2:AC X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS48436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:c1e0::/44 Signature Algorithm: sha256WithRSAEncryption 07:fa:4e:dd:d4:49:83:cd:d1:c1:cf:12:33:ba:76:bd:4b:25: 52:51:f5:2b:cd:44:8c:b2:b5:98:b7:a7:89:80:06:f2:35:7b: 19:94:64:c4:1c:6f:42:92:dd:bf:67:a3:cb:99:fb:a9:29:3e: bf:7d:24:ff:74:db:f1:64:a3:fa:41:1c:5d:41:6b:5b:93:fc: a1:c7:7f:c2:c5:96:46:b7:5f:76:1e:20:c5:28:63:f6:a6:bf: 3e:65:ad:c0:38:88:08:ec:1e:02:04:6d:1d:8e:c8:0a:8f:f2: ec:1d:1f:8e:22:ff:5a:0e:52:26:d7:ee:61:a1:00:cf:32:88: ae:e2:74:62:c5:59:61:82:25:ff:12:6f:1e:17:4a:40:7b:3b: 4f:70:15:47:5b:f3:08:84:e5:0d:fd:a2:28:b2:70:e7:a9:39: 19:6c:4d:c3:8d:77:1a:40:ec:16:ce:a5:cc:e1:25:d2:cd:c2: 19:d0:1f:62:6f:43:3f:0e:e8:9c:f3:3b:ba:9b:f8:1e:18:24: 34:e3:fb:3b:fa:c4:67:fc:fa:25:94:73:6b:f4:3d:6d:f9:41: ca:a8:62:47:a1:35:fc:f8:9e:ff:5b:54:8c:34:21:dc:e6:d9: ea:e4:60:38:2f:54:3f:bb:ce:e9:15:bd:82:2a:02:3c:45:5e: 6f:d6:d9:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVkzqf/KYF+TczIlKoGuGa9bA3dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNTA2MjcyMjE4NDVaFw0yNjA2MjYyMjIzNDVaMDMxMTAvBgNV BAMTKEE3MUVCODE5RDRFMEZBOTQ0QTVENEI1MjMwMUIwM0JBNDY4OUMyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX1DM7JNV3LI3OKXyVRxDcX/vf SOiBQe+b7Q5O4sb7zYdqWeyN+AWz6/pzThQmbHcIrgT7HZ2W6tFZD2dXqHxqgU9M c+uJ1J2CdZDQOlAZdj+/1QzMcqn+0YJWZ7Go1fA1cFy6ucNlHQSbUQhw/5eh5oQN a8JQxaG//nhMVwIvDEaRIhYpbe1/+Hk61jQ+6G3p5mZPGU+soZGzjAsxgDfiUzBY diB07wWyn1gFLf+6VrfzhKmjL3i+j9AU8WXzcuYiRqkV+wKInDq45UqUC/F/qAHI q7zWadIyztRvLPiY8MirOvtNG4p2A5bXIOK8E7ODFZYqpURFUvf0uZlcgOz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpx64GdTg+pRKXUtSMBsDukaJwqwwHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTNDg0MzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqB1TB weAwDQYJKoZIhvcNAQELBQADggEBAAf6Tt3USYPN0cHPEjO6dr1LJVJR9SvNRIyy tZi3p4mABvI1exmUZMQcb0KS3b9no8uZ+6kpPr99JP902/Fko/pBHF1Ba1uT/KHH f8LFlka3X3YeIMUoY/amvz5lrcA4iAjsHgIEbR2OyAqP8uwdH44i/1oOUibX7mGh AM8yiK7idGLFWWGCJf8Sbx4XSkB7O09wFUdb8wiE5Q39oiiycOepORlsTcONdxpA 7BbOpczhJdLNwhnQH2JvQz8O6JzzO7qb+B4YJDTj+zv6xGf8+iWUc2v0PW35Qcqo YkehNfz4nv9bVIw0Idzm2erkYDgvVD+7zukVvYIqAjxFXm/W2Vc= -----END CERTIFICATE-----Generated at Sun Jun 29 14:54:16 2025 by rpki-client