$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS137264.roa File: AS137264.roa (raw, json) Hash identifier: myBWwJG6YTdHUfysxrdjYFvmIypJfdcvvz1zrHO8+NM= Subject key identifier: 13:62:F2:F3:4E:7E:90:05:7B:9B:CE:3D:DE:9A:1B:0D:38:4B:7B:EB Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 4E4E61BCEA976D2F3DB6E66ECA55B376A064E596 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS137264.roa Signing time: Tue 21 Jul 2026 13:32:32 +0000 ROA not before: Tue 21 Jul 2026 13:27:32 +0000 ROA not after: Tue 20 Jul 2027 13:32:32 +0000 asID: 137264 IP address blocks: 2406:840:fcf0::/44 maxlen: 48 2406:840:fedd::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4e:61:bc:ea:97:6d:2f:3d:b6:e6:6e:ca:55:b3:76:a0:64:e5:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:32 2026 GMT Not After : Jul 20 13:32:32 2027 GMT Subject: CN=1362F2F34E7E90057B9BCE3DDE9A1B0D384B7BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7c:ad:8f:42:3c:61:d7:ad:04:3f:5f:08:4d: fe:3c:d3:cc:42:21:87:ec:24:b1:14:31:98:8d:57: 65:a5:2c:c6:18:73:74:2f:74:15:21:5f:cc:54:ac: 52:c3:15:df:c9:33:b7:6d:f1:cc:c9:5f:ae:2d:43: 7f:cf:86:5e:8a:74:98:72:94:81:56:ea:1a:4e:88: 6c:67:2d:79:05:49:1a:00:39:8a:ad:4b:29:d7:7c: 39:5e:42:a2:3b:10:03:a0:e7:9b:96:5e:0f:18:62: 37:3d:44:48:93:06:c9:32:5e:d3:b8:2d:9c:10:36: 05:4f:b3:f2:c1:23:5c:00:d2:65:e6:55:4c:bc:39: f0:87:f5:06:99:a6:4b:6f:98:04:d7:a9:b5:2b:46: da:46:28:6f:eb:bd:04:b8:cb:a2:0a:9d:3f:c2:bc: 40:42:eb:2a:2b:73:af:58:73:50:79:97:e8:9d:1a: 75:05:c5:51:00:af:2f:f7:d7:26:6b:10:bf:28:70: 4c:f5:ee:b8:ba:6d:8e:af:da:77:bd:ff:33:21:4c: ef:ac:91:d4:dc:1c:9a:e9:16:5c:f1:29:03:2d:a8: 1e:04:7c:14:b5:66:48:ab:08:5d:6e:3f:6c:11:c3: dd:91:d7:96:c5:71:b6:0a:3a:e9:46:d4:03:64:61: cd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:62:F2:F3:4E:7E:90:05:7B:9B:CE:3D:DE:9A:1B:0D:38:4B:7B:EB X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS137264.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fcf0::/44 2406:840:fedd::/48 Signature Algorithm: sha256WithRSAEncryption 37:bf:7e:e9:ef:2a:92:f7:ba:60:d9:34:b3:01:e6:90:4e:45: 37:86:9e:ed:5c:55:9a:30:76:19:25:4e:5e:1d:44:23:7a:36: dc:b2:fb:0f:01:30:c6:3a:a8:ed:f2:df:22:b9:d0:76:a5:f8: c2:35:34:08:41:98:cb:02:46:3b:f0:05:cd:15:19:cb:59:33: cc:25:49:ca:45:02:59:fd:de:3c:db:f0:42:52:a4:61:8a:06: 7b:fc:6a:55:01:e9:27:b9:cd:f7:92:41:bf:2b:b1:bb:b0:93: b4:0a:e1:f9:8d:ff:3c:2a:c9:23:94:c0:76:97:a2:6d:fa:90: 37:81:7e:fe:73:eb:3d:11:e4:ba:08:17:45:44:35:1f:19:eb: 22:b9:96:45:e5:6e:50:93:e2:51:5c:d8:f9:4d:26:56:ea:b5: c0:eb:58:ea:11:f8:03:5e:34:d9:54:d0:db:91:9b:0e:a3:23: 2d:07:4a:b0:8c:f3:8b:79:75:9e:29:98:93:1f:fe:14:65:6c: ba:e5:89:f1:4d:d7:ff:13:57:6c:3b:9b:5c:4b:2f:60:57:97: 39:64:10:2c:9a:53:3e:bb:f9:dd:4f:fb:b5:02:f8:b9:cc:3c: 5d:9d:a4:bd:9a:be:e1:a3:6f:3d:b1:79:30:f4:77:e2:67:04: d0:24:71:27 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTk5hvOqXbS89tuZuylWzdqBk5ZYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczMloX DTI3MDcyMDEzMzIzMlowMzExMC8GA1UEAxMoMTM2MkYyRjM0RTdFOTAwNTdCOUJD RTNEREU5QTFCMEQzODRCN0JFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANV8rY9CPGHXrQQ/XwhN/jzTzEIhh+wksRQxmI1XZaUsxhhzdC90FSFfzFSs UsMV38kzt23xzMlfri1Df8+GXop0mHKUgVbqGk6IbGcteQVJGgA5iq1LKdd8OV5C ojsQA6Dnm5ZeDxhiNz1ESJMGyTJe07gtnBA2BU+z8sEjXADSZeZVTLw58If1Bpmm S2+YBNeptStG2kYob+u9BLjLogqdP8K8QELrKitzr1hzUHmX6J0adQXFUQCvL/fX JmsQvyhwTPXuuLptjq/ad73/MyFM76yR1NwcmukWXPEpAy2oHgR8FLVmSKsIXW4/ bBHD3ZHXlsVxtgo66UbUA2RhzU0CAwEAAaOCAjAwggIsMB0GA1UdDgQWBBQTYvLz Tn6QBXubzj3emhsNOEt76zAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzNzI2NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED88AMHACQGCED+3TANBgkqhkiG9w0BAQsFAAOCAQEAN79+6e8qkve6YNk0swHm kE5FN4ae7VxVmjB2GSVOXh1EI3o23LL7DwEwxjqo7fLfIrnQdqX4wjU0CEGYywJG O/AFzRUZy1kzzCVJykUCWf3ePNvwQlKkYYoGe/xqVQHpJ7nN95JBvyuxu7CTtArh +Y3/PCrJI5TAdpeibfqQN4F+/nPrPRHkuggXRUQ1HxnrIrmWReVuUJPiUVzY+U0m Vuq1wOtY6hH4A1402VTQ25GbDqMjLQdKsIzzi3l1nimYkx/+FGVsuuWJ8U3X/xNX bDubXEsvYFeXOWQQLJpTPrv53U/7tQL4ucw8XZ2kvZq+4aNvPbF5MPR34mcE0CRx Jw== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:05 2026 by rpki-client