$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS134413.roa File: AS134413.roa (raw, json) Hash identifier: 9Do3m29aUs1lcc632z37iT5ZjQX9gqQM63WLRDtk5NA= Subject key identifier: B8:04:80:E3:09:BA:40:73:47:84:9A:22:37:B0:DB:98:AF:0C:60:BC Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 52A9A04393162139D99FEDF700DAF7DCD1E9B811 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS134413.roa Signing time: Tue 21 Jul 2026 13:32:25 +0000 ROA not before: Tue 21 Jul 2026 13:27:25 +0000 ROA not after: Tue 20 Jul 2027 13:32:25 +0000 asID: 134413 IP address blocks: 2406:840:fef2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a9:a0:43:93:16:21:39:d9:9f:ed:f7:00:da:f7:dc:d1:e9:b8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:25 2026 GMT Not After : Jul 20 13:32:25 2027 GMT Subject: CN=B80480E309BA407347849A2237B0DB98AF0C60BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:90:33:86:48:3b:c8:ba:80:14:a9:b2:fc:20: 26:a9:f3:2b:cd:20:b8:f1:b2:ec:7a:ad:fb:a6:8c: f0:34:20:ad:19:e4:db:17:0a:0c:f4:75:d2:a1:28: c4:79:fb:e9:a5:1a:ef:99:eb:dd:db:05:0a:02:fa: 01:31:1f:b5:53:8b:d5:d4:c7:1b:c3:da:33:b8:b7: 0e:01:8b:db:33:6b:56:13:5e:bc:59:cb:df:02:7f: 4a:c6:44:38:0e:d9:cd:39:04:e0:96:a5:7a:ed:59: 7f:57:26:3c:0d:24:a0:0a:ed:3e:84:62:ce:a9:c7: 69:53:a1:8e:d6:e7:3b:80:bd:1d:b9:18:34:a8:54: a6:8a:d9:dd:2c:5f:9a:65:eb:3f:60:6d:95:bb:a6: f1:5d:ae:02:c9:3a:54:9c:1f:e4:11:da:29:61:1a: 14:53:c3:f6:c8:ea:92:07:72:58:32:28:0f:91:1e: d0:66:84:b2:ed:94:2c:a8:e9:fb:50:13:d8:ee:f3: bd:fd:a4:41:8c:a7:51:59:36:03:40:a7:86:28:a4: f3:80:63:eb:b1:42:d8:7a:d1:8f:87:48:d9:64:04: 3b:1f:a3:58:28:e0:77:96:ed:38:cb:3b:13:f0:ed: cb:53:ee:aa:42:31:f9:9c:93:d0:47:91:31:05:5c: 18:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:04:80:E3:09:BA:40:73:47:84:9A:22:37:B0:DB:98:AF:0C:60:BC X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS134413.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fef2::/48 Signature Algorithm: sha256WithRSAEncryption 7b:3b:77:46:56:dd:bb:d5:e0:2e:7c:cd:e2:f4:46:b1:90:2f: f5:43:41:26:b1:af:af:78:f6:28:f0:3d:aa:44:d8:73:76:37: 1d:b3:94:6b:27:23:d0:e1:01:7e:d5:02:21:4a:2a:23:a8:82: ae:33:39:db:77:ba:51:77:33:23:b0:c8:05:cc:8e:d5:48:bc: 47:e4:28:19:43:3c:1b:28:5a:20:39:8a:cd:53:77:41:e8:34: d3:eb:71:dd:58:bc:c3:28:b8:fa:7a:dd:cc:73:36:fd:29:99: fb:5b:88:44:88:57:88:e4:61:a8:15:56:cc:7b:47:17:31:d2: 74:77:9c:09:2a:ae:49:30:1e:91:a9:b8:df:78:06:29:b5:04: b8:ee:8e:9d:fd:56:5a:c3:51:40:a3:8a:58:a6:2f:7a:38:17: 3a:d3:f8:0a:96:e7:b7:d2:4f:1f:ec:ea:22:8f:48:46:e7:26: ef:63:3f:49:1f:2b:12:c8:b5:dc:db:d0:40:1a:db:79:dc:40: ca:f9:16:46:c2:45:8b:98:5e:d8:e3:1a:f4:50:f7:15:f2:48: 38:dc:cf:2d:82:74:b3:b7:32:db:66:c1:c7:e9:52:24:cc:dd: 24:8c:63:d3:84:29:a8:6b:c1:5d:52:b7:68:71:fd:c2:76:de: 28:01:b1:dd -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUUqmgQ5MWITnZn+33ANr33NHpuBEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyNVoX DTI3MDcyMDEzMzIyNVowMzExMC8GA1UEAxMoQjgwNDgwRTMwOUJBNDA3MzQ3ODQ5 QTIyMzdCMERCOThBRjBDNjBCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqQM4ZIO8i6gBSpsvwgJqnzK80guPGy7Hqt+6aM8DQgrRnk2xcKDPR10qEo xHn76aUa75nr3dsFCgL6ATEftVOL1dTHG8PaM7i3DgGL2zNrVhNevFnL3wJ/SsZE OA7ZzTkE4Jaleu1Zf1cmPA0koArtPoRizqnHaVOhjtbnO4C9HbkYNKhUporZ3Sxf mmXrP2Btlbum8V2uAsk6VJwf5BHaKWEaFFPD9sjqkgdyWDIoD5Ee0GaEsu2ULKjp +1AT2O7zvf2kQYynUVk2A0Cnhiik84Bj67FC2HrRj4dI2WQEOx+jWCjgd5btOMs7 E/Dty1PuqkIx+ZyT0EeRMQVcGGcCAwEAAaOCAicwggIjMB0GA1UdDgQWBBS4BIDj CbpAc0eEmiI3sNuYrwxgvDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzNDQxMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQG CED+8jANBgkqhkiG9w0BAQsFAAOCAQEAezt3Rlbdu9XgLnzN4vRGsZAv9UNBJrGv r3j2KPA9qkTYc3Y3HbOUaycj0OEBftUCIUoqI6iCrjM523e6UXczI7DIBcyO1Ui8 R+QoGUM8GyhaIDmKzVN3Qeg00+tx3Vi8wyi4+nrdzHM2/SmZ+1uIRIhXiORhqBVW zHtHFzHSdHecCSquSTAekam433gGKbUEuO6Onf1WWsNRQKOKWKYvejgXOtP4Cpbn t9JPH+zqIo9IRucm72M/SR8rEsi13NvQQBrbedxAyvkWRsJFi5he2OMa9FD3FfJI ONzPLYJ0s7cy22bBx+lSJMzdJIxj04QpqGvBXVK3aHH9wnbeKAGx3Q== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:53 2026 by rpki-client