$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS132623.roa File: AS132623.roa (raw, json) Hash identifier: aPWv0eWgmsFoQzHeoMQLN0FMWSGn6MNcAQEa0+MZltE= Subject key identifier: 40:BB:CE:19:8F:5F:02:0F:F5:87:F9:F2:C3:32:64:0F:64:BB:A0:4E Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 17CEB6E42395CFB53D5F0F30E9391EF64BBEE5BA Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS132623.roa Signing time: Tue 21 Jul 2026 13:32:19 +0000 ROA not before: Tue 21 Jul 2026 13:27:19 +0000 ROA not after: Tue 20 Jul 2027 13:32:19 +0000 asID: 132623 IP address blocks: 2406:840:fcc0::/44 maxlen: 48 2406:840:fef7::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ce:b6:e4:23:95:cf:b5:3d:5f:0f:30:e9:39:1e:f6:4b:be:e5:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:19 2026 GMT Not After : Jul 20 13:32:19 2027 GMT Subject: CN=40BBCE198F5F020FF587F9F2C332640F64BBA04E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f5:4f:07:3f:d3:12:d7:ad:be:7c:55:30:21: 5c:9a:5e:df:98:f1:77:b7:e5:6e:a8:15:d3:ef:60: 17:11:b5:c6:ec:d4:c5:a1:2d:3a:45:08:2e:b2:98: 33:a2:f4:f6:52:fc:8a:4d:69:fa:0d:b7:2f:6a:fa: 79:05:41:3a:2a:1b:9a:75:fa:59:dd:2d:a9:0d:78: d2:e0:0f:b5:a5:35:b6:38:70:4d:94:62:41:4b:f3: 70:d6:fd:cf:74:99:53:00:c8:97:46:0f:5d:88:12: a5:ad:41:ab:81:65:32:d7:7f:20:a2:76:c2:24:29: 1c:95:77:69:dc:a7:af:dc:39:4d:59:c1:0f:4e:50: aa:d1:2a:81:6d:ec:da:d2:bc:5b:90:d3:eb:0f:01: c7:39:c8:9b:3b:69:bf:1b:02:c8:c9:2d:fe:3c:5e: 96:41:45:f8:96:e5:9f:27:34:11:80:fb:55:ed:34: f1:8f:cd:ab:ad:44:08:7d:bf:f9:c4:6e:79:18:24: 0e:94:0d:9a:c4:6d:99:e8:be:38:11:46:58:80:7a: 7f:1e:9f:5c:dd:7e:46:12:f1:de:4c:64:79:34:df: b4:cf:a5:f6:55:64:50:c0:d2:2c:58:e9:d9:99:91: 45:25:04:df:d0:7f:b5:a7:95:8d:c7:11:a5:4d:50: 75:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BB:CE:19:8F:5F:02:0F:F5:87:F9:F2:C3:32:64:0F:64:BB:A0:4E X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS132623.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fcc0::/44 2406:840:fef7::/48 Signature Algorithm: sha256WithRSAEncryption 11:5c:b5:64:47:2a:45:f4:bf:f3:cb:17:d3:79:6c:cd:25:d0: 34:81:b9:0e:31:00:8a:a0:92:75:18:84:5f:c6:c0:8f:69:55: de:61:bf:af:67:8b:e0:0b:8f:99:1c:a4:63:04:a9:df:82:03: 74:8f:c0:12:b0:dd:04:a2:48:ea:6e:13:f6:52:94:e3:6f:36: 31:6d:cb:0e:a3:7e:91:ac:ee:74:6a:42:61:c0:42:2c:82:13: 21:c3:a6:fe:e6:17:34:a3:ce:9c:9d:ce:40:b9:97:55:5e:57: a9:c2:75:89:a6:84:ca:1a:0a:72:67:e3:60:ae:4d:fa:94:16: 5b:6b:f9:1f:87:d1:f0:32:ef:b3:8c:3d:b2:1e:25:10:11:00: 2b:86:1a:15:fa:75:73:1e:18:2c:fe:23:85:d5:3b:ac:70:ba: dc:0e:e8:bc:b1:b9:da:79:3e:3f:fc:7c:0d:da:60:ef:4b:36: b1:98:c3:28:57:bd:cb:02:f4:15:95:e6:e4:25:64:41:0b:45: fd:c0:c9:2b:4f:1f:8d:7b:8c:2f:65:68:9f:31:be:13:97:65: 47:83:c9:b6:2f:6e:70:40:fb:48:d8:4d:e7:2c:0a:9c:4a:bc: 16:9a:a7:58:4f:57:18:d3:02:7c:90:b5:90:58:8e:ea:22:ba: d6:d3:44:ff -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUF8625COVz7U9Xw8w6Tke9ku+5bowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxOVoX DTI3MDcyMDEzMzIxOVowMzExMC8GA1UEAxMoNDBCQkNFMTk4RjVGMDIwRkY1ODdG OUYyQzMzMjY0MEY2NEJCQTA0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALP1Twc/0xLXrb58VTAhXJpe35jxd7flbqgV0+9gFxG1xuzUxaEtOkUILrKY M6L09lL8ik1p+g23L2r6eQVBOiobmnX6Wd0tqQ140uAPtaU1tjhwTZRiQUvzcNb9 z3SZUwDIl0YPXYgSpa1Bq4FlMtd/IKJ2wiQpHJV3adynr9w5TVnBD05QqtEqgW3s 2tK8W5DT6w8BxznImztpvxsCyMkt/jxelkFF+Jblnyc0EYD7Ve008Y/Nq61ECH2/ +cRueRgkDpQNmsRtmei+OBFGWIB6fx6fXN1+RhLx3kxkeTTftM+l9lVkUMDSLFjp 2ZmRRSUE39B/taeVjccRpU1QdScCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBRAu84Z j18CD/WH+fLDMmQPZLugTjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzMjYyMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED8wAMHACQGCED+9zANBgkqhkiG9w0BAQsFAAOCAQEAEVy1ZEcqRfS/88sX03ls zSXQNIG5DjEAiqCSdRiEX8bAj2lV3mG/r2eL4AuPmRykYwSp34IDdI/AErDdBKJI 6m4T9lKU4282MW3LDqN+kazudGpCYcBCLIITIcOm/uYXNKPOnJ3OQLmXVV5XqcJ1 iaaEyhoKcmfjYK5N+pQWW2v5H4fR8DLvs4w9sh4lEBEAK4YaFfp1cx4YLP4jhdU7 rHC63A7ovLG52nk+P/x8Ddpg70s2sZjDKFe9ywL0FZXm5CVkQQtF/cDJK08fjXuM L2VonzG+E5dlR4PJti9ucED7SNhN5ywKnEq8FpqnWE9XGNMCfJC1kFiO6iK61tNE /w== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:03 2026 by rpki-client