$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215108.roa File: AS215108.roa (raw, json) Hash identifier: ebo4kMjtA/uuPRYEBUHRrswhlCYRmheS97IjZHmqgsg= Subject key identifier: A3:1E:4F:DC:63:78:59:96:DE:46:E3:3B:EA:47:F3:B9:70:A2:A9:BB Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 41CB1D10CCA22217B06C35DF4E68C96BDDC8519F Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215108.roa Signing time: Mon 30 Jun 2025 14:59:50 +0000 ROA not before: Mon 30 Jun 2025 14:54:50 +0000 ROA not after: Mon 29 Jun 2026 14:59:50 +0000 asID: 215108 IP address blocks: 2a09:54c6:2000::/36 maxlen: 36 2a0a:6044:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 17:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:cb:1d:10:cc:a2:22:17:b0:6c:35:df:4e:68:c9:6b:dd:c8:51:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Jun 30 14:54:50 2025 GMT Not After : Jun 29 14:59:50 2026 GMT Subject: CN=A31E4FDC63785996DE46E33BEA47F3B970A2A9BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c2:72:fe:b6:69:b3:29:db:1b:aa:28:46:52: 09:4e:9a:47:88:62:c4:a4:95:5f:9b:1d:0e:32:e0: 0a:2e:88:0d:6a:02:82:48:36:2b:60:11:be:8c:5c: e4:99:9a:dd:32:69:a2:13:28:2d:1d:f1:bc:e0:4a: c9:bf:0c:84:f0:d6:cd:86:9b:16:23:4e:1e:46:09: db:b2:8d:29:06:06:55:71:0c:a4:f3:24:9c:72:22: af:4e:05:16:6c:8c:5f:ce:c3:e6:00:57:87:d2:bd: a8:24:ff:68:f2:8a:ce:b2:83:4e:5d:20:79:5f:3a: ed:c6:27:10:3b:2c:f2:05:58:9e:38:2d:45:bc:16: 6d:d4:2c:7f:ef:68:db:21:36:d0:d1:e3:28:ee:ce: 7d:49:b9:8a:8a:25:33:b9:b5:58:0b:f3:d3:d1:e0: 60:85:40:d4:cc:54:04:0b:32:ff:7d:f6:c1:56:5a: 96:e5:e8:17:64:1d:45:05:57:67:08:7d:f1:07:af: 25:b0:4a:64:d0:67:52:72:76:c5:78:b5:06:25:31: 76:da:de:02:3d:12:b4:e0:0b:ca:1b:63:21:83:b8: 85:aa:68:03:99:3f:e1:c6:18:11:32:a4:8f:fe:c8: 1b:85:58:68:86:93:3b:ab:56:4e:82:ae:17:68:06: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1E:4F:DC:63:78:59:96:DE:46:E3:3B:EA:47:F3:B9:70:A2:A9:BB X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215108.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:2000::/36 2a0a:6044:2000::/36 Signature Algorithm: sha256WithRSAEncryption 9f:dd:39:c7:04:f8:8a:ea:71:df:de:f4:67:64:76:3d:a5:44: 65:da:3f:94:e7:be:c0:2a:cc:7b:73:ae:55:39:bf:27:ea:24: f0:b4:2e:0b:34:b3:46:3b:c2:ce:8d:8b:da:25:35:37:21:4f: 60:9f:3a:ef:3c:46:e4:54:15:65:73:5b:da:41:01:12:a3:05: 85:ec:f2:4f:bd:d5:9f:21:4b:2d:ec:f3:7a:78:fb:8e:c5:96: 0e:66:79:54:c4:75:c0:e2:40:85:4d:fc:ba:5f:aa:18:b4:8b: 5f:16:fe:f2:60:2f:8e:b5:43:fd:2c:f6:9d:b6:df:b1:b5:d0: 80:c0:a8:ef:94:fc:57:10:af:c5:1e:0a:0e:60:24:9a:86:3e: 5f:aa:e2:8c:8b:95:6c:bc:b5:d9:2e:ab:a4:3a:35:7e:f1:a8: 22:b6:88:69:89:1d:d1:d8:57:2d:7a:bd:96:4c:e9:a4:02:d6: d7:8f:c1:e3:77:4e:bf:cb:d7:e9:4d:66:fd:0b:ef:84:2f:3f: 12:e6:f4:a6:a1:d8:cc:9d:38:b3:80:b6:7e:ed:80:6e:f0:24: f8:c7:59:cf:35:1b:56:eb:f0:80:b6:7b:f3:c8:c6:c2:38:ed: 33:0f:9c:68:10:13:cc:e6:1e:83:f7:73:f0:7f:55:05:d5:86: ec:38:1c:2e -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUQcsdEMyiIhewbDXfTmjJa93IUZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA2MzAxNDU0NTBaFw0yNjA2MjkxNDU5NTBaMDMxMTAvBgNV BAMTKEEzMUU0RkRDNjM3ODU5OTZERTQ2RTMzQkVBNDdGM0I5NzBBMkE5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDewnL+tmmzKdsbqihGUglOmkeI YsSklV+bHQ4y4AouiA1qAoJINitgEb6MXOSZmt0yaaITKC0d8bzgSsm/DITw1s2G mxYjTh5GCduyjSkGBlVxDKTzJJxyIq9OBRZsjF/Ow+YAV4fSvagk/2jyis6yg05d IHlfOu3GJxA7LPIFWJ44LUW8Fm3ULH/vaNshNtDR4yjuzn1JuYqKJTO5tVgL89PR 4GCFQNTMVAQLMv999sFWWpbl6BdkHUUFV2cIffEHryWwSmTQZ1JydsV4tQYlMXba 3gI9ErTgC8obYyGDuIWqaAOZP+HGGBEypI/+yBuFWGiGkzurVk6CrhdoBs6LAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUox5P3GN4WZbeRuM76kfzuXCiqbswHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUt NDlmOS05YjZjLTljOWYzODk4OTk1ZC8zL0FTMjE1MTA4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYEKglU xiADBgQqCmBEIDANBgkqhkiG9w0BAQsFAAOCAQEAn905xwT4iupx3970Z2R2PaVE Zdo/lOe+wCrMe3OuVTm/J+ok8LQuCzSzRjvCzo2L2iU1NyFPYJ867zxG5FQVZXNb 2kEBEqMFhezyT73VnyFLLezzenj7jsWWDmZ5VMR1wOJAhU38ul+qGLSLXxb+8mAv jrVD/Sz2nbbfsbXQgMCo75T8VxCvxR4KDmAkmoY+X6rijIuVbLy12S6rpDo1fvGo IraIaYkd0dhXLXq9lkzppALW14/B43dOv8vX6U1m/QvvhC8/Eub0pqHYzJ04s4C2 fu2AbvAk+MdZzzUbVuvwgLZ788jGwjjtMw+caBATzOYeg/dz8H9VBdWG7DgcLg== -----END CERTIFICATE-----Generated at Tue Jul 1 01:43:40 2025 by rpki-client