$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS133555.roa File: AS133555.roa (raw, json) Hash identifier: 0fkyL2E9jMEqV/bFFTyivJo2vxx1O+3LIcu2W6pqJMQ= Subject key identifier: EF:BD:8D:FE:52:2B:2D:74:3C:0B:D9:84:85:FF:C4:06:FB:47:B4:48 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 2ACCB6EAD2B7C6A94BBCC55E713E45A4B8A84AC2 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS133555.roa Signing time: Tue 21 Jul 2026 13:32:38 +0000 ROA not before: Tue 21 Jul 2026 13:27:38 +0000 ROA not after: Tue 20 Jul 2027 13:32:38 +0000 asID: 133555 IP address blocks: 2406:840:f380::/44 maxlen: 48 2406:840:fefc::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:cc:b6:ea:d2:b7:c6:a9:4b:bc:c5:5e:71:3e:45:a4:b8:a8:4a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:38 2026 GMT Not After : Jul 20 13:32:38 2027 GMT Subject: CN=EFBD8DFE522B2D743C0BD98485FFC406FB47B448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a9:b6:8d:4f:07:9c:bf:21:36:d1:69:e3:46: c6:ad:f0:33:fd:65:22:ca:58:e5:ec:6f:19:e3:ad: 65:8d:2a:08:1b:a1:da:cc:ec:81:91:2f:00:9b:46: 8e:c3:db:96:d8:cb:3e:93:b5:75:16:9d:4c:2b:9d: e8:f1:0b:8f:85:1a:2f:f3:ec:39:13:fb:29:c5:0d: 91:11:b5:dc:b7:84:3f:ec:5a:f6:fb:de:5a:af:5b: eb:bc:ef:dc:33:61:78:d2:57:de:0d:f2:66:4c:62: ee:44:88:3f:53:85:e7:9e:4f:df:4b:49:36:e5:fa: 9d:25:b2:7b:94:a6:a9:10:03:75:08:84:bd:56:a6: 4d:41:70:82:e9:ca:57:83:8d:c6:95:d9:1e:76:c8: 6c:2e:3d:00:d7:a5:69:4d:0d:eb:4a:46:13:7d:e9: 03:9b:16:1f:67:5c:03:fa:87:5f:d8:d0:b8:8e:68: f1:6c:c8:b1:fd:1c:cb:ac:4e:c5:68:13:ac:e3:f1: 78:27:14:74:2c:5d:94:c1:d0:0e:b2:d6:03:4e:7d: 02:82:4f:04:ee:8f:f1:18:c0:1f:76:f4:ff:49:5f: 3d:69:4a:e6:cd:bd:29:cb:1c:af:1c:31:14:b6:20: 21:83:e6:16:e3:38:4d:71:87:0f:09:20:cc:78:1c: cc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BD:8D:FE:52:2B:2D:74:3C:0B:D9:84:85:FF:C4:06:FB:47:B4:48 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS133555.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:f380::/44 2406:840:fefc::/48 Signature Algorithm: sha256WithRSAEncryption 1b:9b:37:54:8d:b3:3e:d9:bf:ef:79:e4:0d:71:7d:d1:8a:4e: 2b:01:0c:f3:4d:2c:5a:dd:d8:0b:a7:08:0e:75:65:9f:ce:06: 40:9f:a3:ea:5b:5d:28:9e:0e:59:6c:ca:a4:a1:2c:cf:00:05: f0:32:ef:dd:9e:87:23:a7:58:00:fb:32:e3:f1:73:18:46:c3: ca:11:f5:53:33:a1:7c:46:a8:5c:4b:a5:d1:1d:3e:10:ba:d0: e3:b0:99:67:08:2d:8c:c1:ff:75:a2:fe:f9:f2:32:b3:75:31: 2d:6f:24:a4:46:b6:f1:79:0b:4f:ac:6c:a2:0b:86:3d:3e:28: cb:92:b7:04:11:e1:18:40:58:0d:38:a2:c1:80:0d:0b:5c:d8: 23:cf:bd:cc:2b:3e:91:34:61:14:85:05:54:94:53:73:a6:9a: 5b:bf:5d:3f:a6:62:2b:80:15:18:92:8f:61:e1:18:67:a1:75: ae:a0:02:6a:d0:b9:d7:4f:9b:5a:b9:84:86:b6:b1:64:b6:15: 71:eb:db:34:24:50:6e:b5:66:f1:85:3e:59:cf:e4:7f:21:d4: 64:bf:9d:4e:50:f2:5a:4e:7f:43:9a:af:2f:f2:59:6b:2d:d0: 4f:e8:56:b3:5c:16:f3:e4:67:d3:1c:b5:db:fd:77:51:02:11: 56:7a:2f:b5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKsy26tK3xqlLvMVecT5FpLioSsIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczOFoX DTI3MDcyMDEzMzIzOFowMzExMC8GA1UEAxMoRUZCRDhERkU1MjJCMkQ3NDNDMEJE OTg0ODVGRkM0MDZGQjQ3QjQ0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGpto1PB5y/ITbRaeNGxq3wM/1lIspY5exvGeOtZY0qCBuh2szsgZEvAJtG jsPbltjLPpO1dRadTCud6PELj4UaL/PsORP7KcUNkRG13LeEP+xa9vveWq9b67zv 3DNheNJX3g3yZkxi7kSIP1OF555P30tJNuX6nSWye5SmqRADdQiEvVamTUFwgunK V4ONxpXZHnbIbC49ANelaU0N60pGE33pA5sWH2dcA/qHX9jQuI5o8WzIsf0cy6xO xWgTrOPxeCcUdCxdlMHQDrLWA059AoJPBO6P8RjAH3b0/0lfPWlK5s29Kcscrxwx FLYgIYPmFuM4TXGHDwkgzHgczJMCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBTvvY3+ UistdDwL2YSF/8QG+0e0SDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzMzU1NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CEDzgAMHACQGCED+/DANBgkqhkiG9w0BAQsFAAOCAQEAG5s3VI2zPtm/73nkDXF9 0YpOKwEM800sWt3YC6cIDnVln84GQJ+j6ltdKJ4OWWzKpKEszwAF8DLv3Z6HI6dY APsy4/FzGEbDyhH1UzOhfEaoXEul0R0+ELrQ47CZZwgtjMH/daL++fIys3UxLW8k pEa28XkLT6xsoguGPT4oy5K3BBHhGEBYDTiiwYANC1zYI8+9zCs+kTRhFIUFVJRT c6aaW79dP6ZiK4AVGJKPYeEYZ6F1rqACatC510+bWrmEhraxZLYVcevbNCRQbrVm 8YU+Wc/kfyHUZL+dTlDyWk5/Q5qvL/JZay3QT+hWs1wW8+Rn0xy12/13UQIRVnov tQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:54 2026 by rpki-client