$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214561.roa File: AS214561.roa (raw, json) Hash identifier: TtVRsQIpE97xnP88uSwubO+VSOC4Tw4GcdhAXD/Gcdk= Subject key identifier: 8C:07:C4:CF:DA:6A:D4:0E:C9:C5:D8:17:45:06:92:E5:2D:E8:23:8C Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 0497BC45A2AE82479C1D6B7C32687AAED2F57DE2 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214561.roa Signing time: Mon 30 Jun 2025 14:59:46 +0000 ROA not before: Mon 30 Jun 2025 14:54:46 +0000 ROA not after: Mon 29 Jun 2026 14:59:46 +0000 asID: 214561 IP address blocks: 2a05:dfc3:fd60::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 17:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:97:bc:45:a2:ae:82:47:9c:1d:6b:7c:32:68:7a:ae:d2:f5:7d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Jun 30 14:54:46 2025 GMT Not After : Jun 29 14:59:46 2026 GMT Subject: CN=8C07C4CFDA6AD40EC9C5D817450692E52DE8238C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:3e:91:5d:5c:dd:10:dc:c5:4f:41:24:65: 47:70:4c:cf:0f:a5:e3:c3:fe:88:b3:a4:5d:cd:67: 50:99:64:5c:8f:ab:18:33:05:e7:f7:4d:0b:e7:b6: 4e:a1:72:d0:c6:e3:4c:b9:d2:d2:b0:5e:b7:fb:06: 25:89:e4:99:b0:5e:e5:e3:7e:50:8d:e2:13:f8:4a: 76:8f:7d:45:3b:49:0a:51:dc:39:6a:17:33:d9:49: 4b:97:4d:78:e0:85:f8:f9:0d:4a:eb:9b:e3:8c:17: fa:1a:47:c7:ad:f9:57:a8:0c:6e:55:7c:c1:e4:0e: 6e:fc:59:67:c7:d8:ff:6c:29:85:7b:08:c2:85:a4: 32:3f:f4:94:9b:87:ca:b1:67:a4:05:ad:9b:af:28: b1:96:93:0d:11:35:e9:32:93:44:fd:54:ef:84:6c: da:a4:a6:a6:80:eb:a5:62:bf:5c:45:fd:80:e3:89: 65:0a:60:11:e6:38:d1:f5:bb:e8:4f:b3:03:29:37: 1c:79:0e:dd:55:e5:04:27:71:ba:ee:18:10:52:64: e1:e0:de:0d:01:b4:64:90:d5:55:b7:a6:f0:ed:4b: a4:d7:d1:ca:0c:05:b9:8b:67:55:b3:45:d7:6d:52: 88:29:d6:2d:ae:60:3d:5a:96:df:fa:df:98:4c:3f: 93:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:07:C4:CF:DA:6A:D4:0E:C9:C5:D8:17:45:06:92:E5:2D:E8:23:8C X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214561.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd60::/44 Signature Algorithm: sha256WithRSAEncryption 3c:4b:81:cb:ff:19:7c:28:c5:0f:52:a6:3c:92:db:e8:1d:c5: 1d:3f:21:ff:87:66:39:3e:e0:2b:a9:8e:98:2d:4c:83:25:c8: f5:fa:23:6c:4c:b9:fb:68:ab:b5:32:4a:63:51:48:d6:aa:20: e2:0a:ba:25:f7:56:2c:f1:b2:a0:67:87:4e:4c:d1:8f:b0:97: c0:b9:1f:b4:e8:29:df:de:bc:f3:20:a1:cf:d5:66:5f:e2:5c: e4:90:09:98:f2:26:47:2b:81:20:44:07:19:83:31:37:d2:5a: 74:d9:84:2b:dc:db:2f:28:ca:55:d1:54:8b:61:25:32:0d:8b: ea:55:cb:c1:2b:24:1b:63:51:c7:6a:b8:ef:ce:f2:c3:70:13: fe:b7:ff:07:7f:85:6f:da:93:e3:b3:62:eb:2e:a5:7b:5a:8c: 7f:00:b1:73:46:f3:c9:68:48:e8:e6:4f:9f:32:0c:ca:7a:99: e2:1b:6c:f9:c4:4c:d6:38:0c:8e:bb:86:a3:0a:b9:b3:d4:f7: 85:ab:13:67:09:e3:f8:69:ba:83:79:3e:61:68:9d:a0:5d:db: 76:b6:3a:2b:60:a4:4d:41:7d:a4:b4:07:5b:54:01:e5:31:f3: e8:cf:8a:7a:de:4c:bb:a5:3f:4a:b7:c7:65:2c:cd:10:6d:95: ce:0a:ba:81 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUBJe8RaKugkecHWt8Mmh6rtL1feIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA2MzAxNDU0NDZaFw0yNjA2MjkxNDU5NDZaMDMxMTAvBgNV BAMTKDhDMDdDNENGREE2QUQ0MEVDOUM1RDgxNzQ1MDY5MkU1MkRFODIzOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZT6RXVzdENzFT0EkZUdwTM8P pePD/oizpF3NZ1CZZFyPqxgzBef3TQvntk6hctDG40y50tKwXrf7BiWJ5JmwXuXj flCN4hP4SnaPfUU7SQpR3DlqFzPZSUuXTXjghfj5DUrrm+OMF/oaR8et+VeoDG5V fMHkDm78WWfH2P9sKYV7CMKFpDI/9JSbh8qxZ6QFrZuvKLGWkw0RNekyk0T9VO+E bNqkpqaA66Viv1xF/YDjiWUKYBHmONH1u+hPswMpNxx5Dt1V5QQncbruGBBSZOHg 3g0BtGSQ1VW3pvDtS6TX0coMBbmLZ1WzRddtUogp1i2uYD1alt/635hMP5OLAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUjAfEz9pq1A7JxdgXRQaS5S3oI4wwHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUt NDlmOS05YjZjLTljOWYzODk4OTk1ZC8zL0FTMjE0NTYxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXf w/1gMA0GCSqGSIb3DQEBCwUAA4IBAQA8S4HL/xl8KMUPUqY8ktvoHcUdPyH/h2Y5 PuArqY6YLUyDJcj1+iNsTLn7aKu1MkpjUUjWqiDiCrol91Ys8bKgZ4dOTNGPsJfA uR+06Cnf3rzzIKHP1WZf4lzkkAmY8iZHK4EgRAcZgzE30lp02YQr3NsvKMpV0VSL YSUyDYvqVcvBKyQbY1HHarjvzvLDcBP+t/8Hf4Vv2pPjs2LrLqV7Wox/ALFzRvPJ aEjo5k+fMgzKepniG2z5xEzWOAyOu4ajCrmz1PeFqxNnCeP4abqDeT5haJ2gXdt2 tjorYKRNQX2ktAdbVAHlMfPoz4p63ky7pT9Kt8dlLM0QbZXOCrqB -----END CERTIFICATE-----Generated at Tue Jul 1 05:00:59 2025 by rpki-client