$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS204676.roa File: AS204676.roa (raw, json) Hash identifier: Ne3GZt6mqhk9mV50rAY2R/x9chAv3sn0hx5FDkOlmNA= Subject key identifier: CF:AB:5C:32:DD:C3:E4:16:1B:A6:69:EA:CC:6C:3E:6A:11:5F:D6:89 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 285B95148C346B563D2C6408973B6EB26B3F9A4D Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS204676.roa Signing time: Mon 30 Jun 2025 14:59:42 +0000 ROA not before: Mon 30 Jun 2025 14:54:42 +0000 ROA not after: Mon 29 Jun 2026 14:59:42 +0000 asID: 204676 IP address blocks: 2a09:54c6:8000::/36 maxlen: 64 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 00:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:5b:95:14:8c:34:6b:56:3d:2c:64:08:97:3b:6e:b2:6b:3f:9a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Jun 30 14:54:42 2025 GMT Not After : Jun 29 14:59:42 2026 GMT Subject: CN=CFAB5C32DDC3E4161BA669EACC6C3E6A115FD689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4e:4f:ad:84:d0:fc:cf:a8:ad:1f:97:2d:01: 31:0c:cf:a3:07:20:ab:51:db:cd:d8:16:63:90:55: 44:7a:05:54:15:bb:c4:04:4c:95:a3:65:93:b3:5d: bb:bb:f9:17:d1:aa:33:86:df:7e:e2:ee:5b:10:1c: 5d:75:5e:68:e6:9d:b3:02:a9:ef:04:31:da:04:06: e8:fb:c5:2f:20:8c:b8:20:4b:9a:71:e7:39:b0:f8: 10:98:11:58:cd:9a:04:40:a2:76:b2:23:b5:d2:c4: a2:1d:ae:35:74:e9:c9:24:c8:6a:1b:20:67:70:24: b6:5e:b2:67:ef:ea:a1:8d:5f:28:0b:36:53:8e:30: c2:6f:38:d8:9e:e0:d4:9f:59:c3:fb:89:ee:4b:0a: e1:e0:d0:1e:f4:de:a6:b7:97:a7:62:0f:97:a3:82: 46:db:ec:0d:42:78:e8:52:48:df:ba:3c:87:5a:4c: b6:f3:fe:26:d7:c0:9d:c9:7d:f1:e4:69:cf:42:b6: 82:23:85:d3:2b:91:98:58:71:5f:65:a9:80:bc:e4: e2:e5:d6:4d:ed:5a:93:a2:d2:10:32:15:a5:d4:92: fd:7f:6f:5c:19:15:2a:47:46:ab:73:9c:8b:0c:2c: 1f:02:8e:f8:33:71:e8:0d:da:a6:21:79:49:05:0e: 13:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AB:5C:32:DD:C3:E4:16:1B:A6:69:EA:CC:6C:3E:6A:11:5F:D6:89 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS204676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:8000::/36 Signature Algorithm: sha256WithRSAEncryption 72:8d:9e:2a:85:42:22:27:80:63:fb:81:fb:a5:0d:46:db:dd: 04:79:e0:03:e1:b8:6c:e7:76:33:2d:6c:c5:29:86:dd:55:1b: 4f:a5:2b:65:a1:d7:e9:01:c0:e0:f4:39:8c:d9:ff:54:b3:bb: 8a:23:c3:a8:90:fc:f5:22:1a:fe:05:f4:20:6d:c2:99:b0:b6: 54:9c:64:d9:2a:e8:cf:ee:5c:fc:a4:24:e9:93:7c:cc:87:af: 49:77:cf:16:e3:f5:a2:7d:27:17:92:45:e3:05:45:e1:c4:ae: bc:bf:64:ea:b3:61:6c:01:39:85:68:c4:a7:ea:ef:9f:66:66: 4d:f1:fe:ba:6a:27:6f:72:c2:44:29:9b:01:b3:ec:c3:a3:7f: 29:31:f5:9f:33:07:1f:b9:a2:ab:b1:fa:e5:aa:de:f8:24:fd: f3:16:91:aa:a8:ac:1f:cd:01:a1:d0:3b:b7:c7:26:2e:21:55: c6:bb:83:2f:96:ab:ad:f8:73:96:65:1c:5c:da:5b:43:ea:f9: 91:d3:04:c7:7e:a9:57:bb:d9:42:49:5c:40:ff:f5:a7:f4:65: ea:74:69:0b:38:c9:61:00:98:6c:65:09:11:5b:bf:4c:9c:6a: 09:09:4a:25:8d:45:89:4c:97:68:7f:0f:37:de:e4:d7:73:ac: 28:ee:df:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKFuVFIw0a1Y9LGQIlztusms/mk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA2MzAxNDU0NDJaFw0yNjA2MjkxNDU5NDJaMDMxMTAvBgNV BAMTKENGQUI1QzMyRERDM0U0MTYxQkE2NjlFQUNDNkMzRTZBMTE1RkQ2ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Tk+thND8z6itH5ctATEMz6MH IKtR283YFmOQVUR6BVQVu8QETJWjZZOzXbu7+RfRqjOG337i7lsQHF11XmjmnbMC qe8EMdoEBuj7xS8gjLggS5px5zmw+BCYEVjNmgRAonayI7XSxKIdrjV06ckkyGob IGdwJLZesmfv6qGNXygLNlOOMMJvONie4NSfWcP7ie5LCuHg0B703qa3l6diD5ej gkbb7A1CeOhSSN+6PIdaTLbz/ibXwJ3JffHkac9CtoIjhdMrkZhYcV9lqYC85OLl 1k3tWpOi0hAyFaXUkv1/b1wZFSpHRqtznIsMLB8CjvgzcegN2qYheUkFDhOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz6tcMt3D5BYbpmnqzGw+ahFf1okwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUt NDlmOS05YjZjLTljOWYzODk4OTk1ZC8zL0FTMjA0Njc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKglU xoAwDQYJKoZIhvcNAQELBQADggEBAHKNniqFQiIngGP7gfulDUbb3QR54APhuGzn djMtbMUpht1VG0+lK2Wh1+kBwOD0OYzZ/1Szu4ojw6iQ/PUiGv4F9CBtwpmwtlSc ZNkq6M/uXPykJOmTfMyHr0l3zxbj9aJ9JxeSReMFReHErry/ZOqzYWwBOYVoxKfq 759mZk3x/rpqJ29ywkQpmwGz7MOjfykx9Z8zBx+5oqux+uWq3vgk/fMWkaqorB/N AaHQO7fHJi4hVca7gy+Wq634c5ZlHFzaW0Pq+ZHTBMd+qVe72UJJXED/9af0Zep0 aQs4yWEAmGxlCRFbv0ycagkJSiWNRYlMl2h/Dzfe5NdzrCju32k= -----END CERTIFICATE-----Generated at Wed Jul 2 14:20:46 2025 by rpki-client