$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS132479.roa File: AS132479.roa (raw, json) Hash identifier: 1ipdWoVxCD0FZ6KBwOrgz5BKpNiKLfYC2vktR6khrV0= Subject key identifier: B1:A6:A9:69:35:E0:45:5E:37:E3:35:06:CA:7C:90:1F:57:61:BD:6C Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 3B6E85E038CFD11847A103CC72F20086EBBC2798 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS132479.roa Signing time: Tue 21 Jul 2026 13:32:16 +0000 ROA not before: Tue 21 Jul 2026 13:27:16 +0000 ROA not after: Tue 20 Jul 2027 13:32:16 +0000 asID: 132479 IP address blocks: 2406:840:fd30::/44 maxlen: 48 2406:840:fdd0::/44 maxlen: 48 2406:840:fecf::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6e:85:e0:38:cf:d1:18:47:a1:03:cc:72:f2:00:86:eb:bc:27:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:16 2026 GMT Not After : Jul 20 13:32:16 2027 GMT Subject: CN=B1A6A96935E0455E37E33506CA7C901F5761BD6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:b6:17:7e:65:7c:2b:b3:ef:af:73:c8:d3: 3d:c6:de:6a:fb:33:d0:95:d7:45:63:89:50:13:88: c6:1c:d5:e0:87:81:6b:f8:12:a5:42:ce:14:79:c0: 10:71:c4:6e:00:6e:11:e3:79:7d:89:3b:83:b3:22: 1b:ea:98:12:ca:65:1a:f2:47:73:71:ea:c1:42:ac: 52:1d:74:a4:5e:bd:35:05:fe:ae:d9:d9:11:fe:9c: 7f:ac:d2:c6:16:b7:00:ae:10:fe:8b:80:3b:ef:22: c0:eb:3b:9a:b3:5b:9a:84:37:3a:e0:67:67:28:d8: ee:76:fe:0d:11:d6:2a:e8:39:f4:f0:f9:8c:a8:97: af:e4:26:39:b4:24:38:4b:f6:fa:3c:a8:3d:e2:5e: c3:dc:49:1c:71:55:38:69:7b:e6:8a:db:48:ed:13: 6f:06:c9:db:eb:ca:77:c7:e2:5c:b6:05:b7:4a:b5: 39:fe:10:47:a0:0a:2a:ac:29:50:30:b9:aa:64:50: 18:9c:e9:a0:8f:91:94:49:24:3f:7b:23:26:2d:38: 46:1d:b6:60:9a:44:bc:9d:e8:bd:d4:43:2d:64:6e: 55:0d:bc:d6:1f:95:32:4a:98:c9:0c:a4:c0:60:83: d6:b9:83:b4:76:f7:c3:27:91:f9:72:6f:61:10:78: 9d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A6:A9:69:35:E0:45:5E:37:E3:35:06:CA:7C:90:1F:57:61:BD:6C X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS132479.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fd30::/44 2406:840:fdd0::/44 2406:840:fecf::/48 Signature Algorithm: sha256WithRSAEncryption 46:8d:e4:c9:91:59:b2:8d:1c:0a:07:f7:c6:88:60:4e:85:54: 23:1d:b8:fb:a9:05:8c:43:d5:58:bf:e4:d5:18:fe:d2:85:9d: 3d:d2:36:54:30:9a:9d:7f:02:16:a9:95:eb:d2:d4:97:54:40: cf:e9:dc:0c:e9:bb:03:46:9d:e0:95:82:14:66:ad:f0:0d:04: 9c:da:7c:02:66:0b:76:27:5d:a5:d5:dc:99:91:90:23:05:ea: a5:64:96:3c:31:fd:7c:a8:ec:63:49:18:41:7d:aa:bc:f6:46: 5e:47:8a:49:89:45:85:59:77:fb:73:49:df:0d:17:4f:4b:f5: 40:b0:38:aa:af:18:2b:53:f5:c7:46:81:0d:4e:c4:21:a8:15: 66:25:93:98:1e:e5:f9:79:66:45:1e:c7:a9:05:de:24:2a:96: 25:93:c3:00:22:cd:37:68:92:3a:74:3d:9a:39:f4:55:77:9a: 26:97:5b:03:3f:1a:9e:9e:10:fd:52:43:fa:16:cf:6a:ab:9e: 20:80:43:c7:d5:b0:77:9f:f0:20:14:4c:59:4e:a2:b5:34:e7: 12:63:0b:e9:94:f1:51:ee:a1:66:d9:0e:71:a5:be:b3:0d:5f: fb:f7:32:b1:f4:a3:90:3f:98:c5:6d:0c:38:8d:62:e6:c9:c7: 15:17:9a:f9 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUO26F4DjP0RhHoQPMcvIAhuu8J5gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxNloX DTI3MDcyMDEzMzIxNlowMzExMC8GA1UEAxMoQjFBNkE5NjkzNUUwNDU1RTM3RTMz NTA2Q0E3QzkwMUY1NzYxQkQ2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHBthd+ZXwrs++vc8jTPcbeavsz0JXXRWOJUBOIxhzV4IeBa/gSpULOFHnA EHHEbgBuEeN5fYk7g7MiG+qYEsplGvJHc3HqwUKsUh10pF69NQX+rtnZEf6cf6zS xha3AK4Q/ouAO+8iwOs7mrNbmoQ3OuBnZyjY7nb+DRHWKug59PD5jKiXr+QmObQk OEv2+jyoPeJew9xJHHFVOGl75orbSO0TbwbJ2+vKd8fiXLYFt0q1Of4QR6AKKqwp UDC5qmRQGJzpoI+RlEkkP3sjJi04Rh22YJpEvJ3ovdRDLWRuVQ281h+VMkqYyQyk wGCD1rmDtHb3wyeR+XJvYRB4na0CAwEAAaOCAjkwggI1MB0GA1UdDgQWBBSxpqlp NeBFXjfjNQbKfJAfV2G9bDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzMjQ3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwIQQCAAIwGwMHBCQG CED9MAMHBCQGCED90AMHACQGCED+zzANBgkqhkiG9w0BAQsFAAOCAQEARo3kyZFZ so0cCgf3xohgToVUIx24+6kFjEPVWL/k1Rj+0oWdPdI2VDCanX8CFqmV69LUl1RA z+ncDOm7A0ad4JWCFGat8A0EnNp8AmYLdiddpdXcmZGQIwXqpWSWPDH9fKjsY0kY QX2qvPZGXkeKSYlFhVl3+3NJ3w0XT0v1QLA4qq8YK1P1x0aBDU7EIagVZiWTmB7l +XlmRR7HqQXeJCqWJZPDACLNN2iSOnQ9mjn0VXeaJpdbAz8anp4Q/VJD+hbPaque IIBDx9Wwd5/wIBRMWU6itTTnEmML6ZTxUe6hZtkOcaW+sw1f+/cysfSjkD+YxW0M OI1i5snHFRea+Q== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:53 2026 by rpki-client