$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152892.roa File: AS152892.roa (raw, json) Hash identifier: do9toBLeuHzkyq87qh/GRGAAxiiRhN/jcVN3+6WDO5Y= Subject key identifier: 9B:F1:E7:9A:E1:09:5E:C3:A3:84:28:B3:8B:8D:B5:81:27:DB:C1:AD Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 169D79786ECC485355A3F35670939246704C2102 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152892.roa Signing time: Tue 21 Jul 2026 13:32:31 +0000 ROA not before: Tue 21 Jul 2026 13:27:31 +0000 ROA not after: Tue 20 Jul 2027 13:32:31 +0000 asID: 152892 IP address blocks: 2406:840:e330::/44 maxlen: 48 2406:840:fe9d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9d:79:78:6e:cc:48:53:55:a3:f3:56:70:93:92:46:70:4c:21:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:31 2026 GMT Not After : Jul 20 13:32:31 2027 GMT Subject: CN=9BF1E79AE1095EC3A38428B38B8DB58127DBC1AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:06:da:36:47:cd:21:5d:73:49:6a:4c:36:1e: 81:d8:32:8f:a8:3e:2c:44:12:0d:84:0d:10:24:c4: 8e:b9:d4:b8:59:d2:64:9a:bd:62:01:9c:d1:95:c8: e9:ac:39:ee:bd:68:3d:32:33:3e:5e:ba:4f:81:f4: 14:f0:68:e1:66:4e:6f:3a:da:bf:e2:d0:ec:9d:88: 02:cd:bb:93:af:5a:fa:c7:d7:d8:75:41:94:44:b2: 79:bd:e7:d5:84:4e:9b:31:ba:0c:4c:48:bb:f3:f2: f7:d1:d2:b7:c6:e8:1e:c0:e6:75:51:31:c2:60:55: a6:d9:f6:e9:36:4d:07:f9:58:9c:24:17:a8:87:08: 28:d5:e7:68:a0:7c:b1:82:8d:44:14:a1:d1:04:18: ff:0b:34:ca:ee:1c:81:c4:27:ea:22:5d:bf:2c:7c: bc:bc:16:89:c5:08:da:9d:61:5a:63:4b:07:db:c8: dc:08:b6:d2:cd:82:f8:a1:f9:fb:02:44:20:db:93: 5c:41:f4:23:55:23:26:43:e8:44:bb:93:9c:ff:71: 94:27:b6:82:bf:cf:b1:97:48:e6:ad:fc:51:71:59: 91:e5:9d:8e:13:a3:6f:ce:ad:dd:b3:33:79:dc:f5: eb:d7:bd:42:3e:a9:39:21:c5:e8:7c:27:ca:54:2f: aa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F1:E7:9A:E1:09:5E:C3:A3:84:28:B3:8B:8D:B5:81:27:DB:C1:AD X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152892.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e330::/44 2406:840:fe9d::/48 Signature Algorithm: sha256WithRSAEncryption 59:9c:1e:8d:6c:16:cc:98:1a:97:24:1c:7c:1d:f5:be:34:d1: cf:14:7e:ce:59:71:a6:c9:40:56:9c:a6:48:b4:16:7e:c3:c7: 1b:87:3a:7c:a8:1d:48:35:3e:7d:bf:ec:7f:3f:9a:e5:ce:6e: c8:68:5c:d9:c8:d4:c3:d1:5b:8a:ce:45:36:56:70:21:e8:a5: 84:d7:c5:c1:6d:67:80:a3:fb:80:82:3a:17:de:98:9a:7d:02: 63:2e:22:79:01:4e:f0:df:59:79:eb:20:08:b4:15:ac:ac:ee: a3:97:44:1b:10:8d:ca:5e:94:62:9d:db:e1:83:be:89:64:c1: cf:a1:5d:12:1d:ea:aa:0d:82:95:2f:8c:92:1f:28:5e:53:c0: 51:04:e1:db:c5:5d:ee:85:d3:e1:45:3b:39:86:d6:e8:14:e3: 4c:3f:3a:8b:cd:ac:7e:68:90:44:36:3e:0b:05:e3:f6:40:3f: b6:c1:26:1d:5d:e8:c3:72:43:29:b7:dd:df:c9:73:a7:b1:38: 6b:a3:3b:9a:40:56:a2:2c:9c:39:1b:e2:84:2b:07:65:84:ae: 06:58:cb:0e:b9:a2:2a:f6:ad:be:ae:b1:b2:d1:77:b8:ae:37: 96:0c:9e:79:0a:d7:f9:23:79:7e:22:65:83:d8:36:fb:ba:3e: 23:b3:ee:e2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFp15eG7MSFNVo/NWcJOSRnBMIQIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczMVoX DTI3MDcyMDEzMzIzMVowMzExMC8GA1UEAxMoOUJGMUU3OUFFMTA5NUVDM0EzODQy OEIzOEI4REI1ODEyN0RCQzFBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOIG2jZHzSFdc0lqTDYegdgyj6g+LEQSDYQNECTEjrnUuFnSZJq9YgGc0ZXI 6aw57r1oPTIzPl66T4H0FPBo4WZObzrav+LQ7J2IAs27k69a+sfX2HVBlESyeb3n 1YROmzG6DExIu/Py99HSt8boHsDmdVExwmBVptn26TZNB/lYnCQXqIcIKNXnaKB8 sYKNRBSh0QQY/ws0yu4cgcQn6iJdvyx8vLwWicUI2p1hWmNLB9vI3Ai20s2C+KH5 +wJEINuTXEH0I1UjJkPoRLuTnP9xlCe2gr/PsZdI5q38UXFZkeWdjhOjb86t3bMz edz169e9Qj6pOSHF6HwnylQvqgECAwEAAaOCAjAwggIsMB0GA1UdDgQWBBSb8eea 4Qlew6OEKLOLjbWBJ9vBrTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1Mjg5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CEDjMAMHACQGCED+nTANBgkqhkiG9w0BAQsFAAOCAQEAWZwejWwWzJgalyQcfB31 vjTRzxR+zllxpslAVpymSLQWfsPHG4c6fKgdSDU+fb/sfz+a5c5uyGhc2cjUw9Fb is5FNlZwIeilhNfFwW1ngKP7gII6F96Ymn0CYy4ieQFO8N9ZeesgCLQVrKzuo5dE GxCNyl6UYp3b4YO+iWTBz6FdEh3qqg2ClS+Mkh8oXlPAUQTh28Vd7oXT4UU7OYbW 6BTjTD86i82sfmiQRDY+CwXj9kA/tsEmHV3ow3JDKbfd38lzp7E4a6M7mkBWoiyc ORvihCsHZYSuBljLDrmiKvatvq6xstF3uK43lgyeeQrX+SN5fiJlg9g2+7o+I7Pu 4g== -----END CERTIFICATE-----Generated at Tue Jul 21 19:39:38 2026 by rpki-client