$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS136535.roa File: AS136535.roa (raw, json) Hash identifier: BpIakqwxXtLCuFqQ44Uen2zfnfXgZHGQOZ+8ybz2swo= Subject key identifier: 6E:1D:91:D5:C8:2E:FC:8C:5E:8F:95:CB:99:49:0F:4D:B3:88:7C:7D Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 73B6FA6B332762835633A09217C5EADECEEB259F Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS136535.roa Signing time: Tue 21 Jul 2026 13:32:36 +0000 ROA not before: Tue 21 Jul 2026 13:27:36 +0000 ROA not after: Tue 20 Jul 2027 13:32:36 +0000 asID: 136535 IP address blocks: 2406:840:fe27::/48 maxlen: 48 2406:840:fe74::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b6:fa:6b:33:27:62:83:56:33:a0:92:17:c5:ea:de:ce:eb:25:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:36 2026 GMT Not After : Jul 20 13:32:36 2027 GMT Subject: CN=6E1D91D5C82EFC8C5E8F95CB99490F4DB3887C7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5b:dd:19:49:0f:32:b4:03:9e:32:2e:89:1b: 09:70:57:5d:6f:8c:d7:87:34:3b:f6:57:b8:60:83: 77:b2:f4:57:e9:9c:6b:a3:0b:c6:f3:ff:b4:6e:63: ce:c7:6c:1f:f8:fa:d2:13:12:39:ea:9f:43:c3:2b: ee:d4:90:71:93:4a:0d:b1:93:b6:9a:fc:c4:71:3b: 9d:f3:5a:da:33:dd:9b:d8:cc:e7:02:0c:bd:b1:bc: 22:aa:ae:ca:5e:fd:04:28:19:39:0c:d0:20:3e:40: 46:17:01:e4:76:c6:0a:b2:dc:01:f9:cf:ed:60:19: 9b:49:49:da:49:3d:c6:3a:64:a1:a7:af:e0:dd:df: 2e:36:dc:d6:62:df:fa:63:90:36:77:7b:74:3c:c1: 36:9a:63:d4:a1:7d:5d:e0:0a:25:c8:a4:5e:50:b7: ce:11:3a:00:00:68:bb:ca:3b:96:41:a8:33:49:c8: 3e:aa:9b:21:1c:33:04:62:63:6c:57:24:09:41:a4: 26:dd:2f:c9:71:c4:ad:e6:e1:d0:75:c4:9e:d5:2e: 7e:fa:3c:41:b9:9d:b5:94:3e:4c:c9:ab:be:af:7b: ea:97:f1:66:79:41:e3:73:4b:b5:5b:dc:f9:75:40: ab:60:aa:49:a4:73:2e:34:94:8a:ee:8e:bf:fb:3b: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1D:91:D5:C8:2E:FC:8C:5E:8F:95:CB:99:49:0F:4D:B3:88:7C:7D X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS136535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fe27::/48 2406:840:fe74::/48 Signature Algorithm: sha256WithRSAEncryption 17:11:78:c1:a3:a0:5e:3b:66:6e:f3:ed:76:7d:b4:23:78:8d: 5f:ce:ed:1a:60:4d:74:a2:dc:aa:9f:13:b2:38:95:23:1b:7d: 58:ed:2e:16:87:62:e0:b3:56:61:c3:72:a7:8f:ae:2b:7f:ec: 3d:65:aa:f1:13:3d:15:ca:85:d6:a9:b2:ae:c2:63:4d:01:60: fd:b8:14:12:6d:d8:af:d1:4a:39:c6:8e:e1:e3:8d:bb:15:74: 6f:f8:57:38:4c:9c:b4:92:35:1e:16:9b:ed:52:4f:38:63:0a: f5:f3:d7:3e:fa:36:fb:f8:d2:f5:98:65:00:8e:44:ae:bb:d5: 0a:05:44:2c:1a:ba:b1:9b:c1:09:45:3b:65:81:35:ff:16:d8: 82:35:75:77:31:a5:5e:91:72:1d:be:f6:ec:95:04:2c:b0:bd: 40:d0:f9:92:10:32:16:78:be:da:1c:2f:0f:01:3d:02:f4:9f: 95:4c:de:75:fc:65:e8:da:76:b3:f8:03:8d:f6:19:6a:c3:c9: 20:36:92:60:f2:a0:f8:1d:a4:a2:e6:71:16:f0:7b:c1:47:46: 6e:9c:4f:53:fd:95:dd:4c:ad:57:7e:18:6a:2c:5d:06:cd:18: 4b:21:88:d9:4c:0e:77:88:45:d9:60:9d:5a:d6:ec:a1:31:10: d2:27:9b:30 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUc7b6azMnYoNWM6CSF8Xq3s7rJZ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczNloX DTI3MDcyMDEzMzIzNlowMzExMC8GA1UEAxMoNkUxRDkxRDVDODJFRkM4QzVFOEY5 NUNCOTk0OTBGNERCMzg4N0M3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIhb3RlJDzK0A54yLokbCXBXXW+M14c0O/ZXuGCDd7L0V+mca6MLxvP/tG5j zsdsH/j60hMSOeqfQ8Mr7tSQcZNKDbGTtpr8xHE7nfNa2jPdm9jM5wIMvbG8Iqqu yl79BCgZOQzQID5ARhcB5HbGCrLcAfnP7WAZm0lJ2kk9xjpkoaev4N3fLjbc1mLf +mOQNnd7dDzBNppj1KF9XeAKJcikXlC3zhE6AABou8o7lkGoM0nIPqqbIRwzBGJj bFckCUGkJt0vyXHErebh0HXEntUufvo8QbmdtZQ+TMmrvq976pfxZnlB43NLtVvc +XVAq2CqSaRzLjSUiu6Ov/s7WiUCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBRuHZHV yC78jF6PlcuZSQ9Ns4h8fTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzNjUzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACQG CED+JwMHACQGCED+dDANBgkqhkiG9w0BAQsFAAOCAQEAFxF4waOgXjtmbvPtdn20 I3iNX87tGmBNdKLcqp8TsjiVIxt9WO0uFodi4LNWYcNyp4+uK3/sPWWq8RM9FcqF 1qmyrsJjTQFg/bgUEm3Yr9FKOcaO4eONuxV0b/hXOEyctJI1Hhab7VJPOGMK9fPX Pvo2+/jS9ZhlAI5ErrvVCgVELBq6sZvBCUU7ZYE1/xbYgjV1dzGlXpFyHb727JUE LLC9QND5khAyFni+2hwvDwE9AvSflUzedfxl6Np2s/gDjfYZasPJIDaSYPKg+B2k ouZxFvB7wUdGbpxPU/2V3UytV34YaixdBs0YSyGI2UwOd4hF2WCdWtbsoTEQ0ieb MA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:55 2026 by rpki-client