$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS137436.roa File: AS137436.roa (raw, json) Hash identifier: opSqiOd4bzfK3F5WH/CAdD1GvXkIZ1g3ZdCe5pDnOU4= Subject key identifier: ED:06:8B:B4:50:AE:FE:84:28:B0:B0:3E:74:F9:69:A9:FD:1A:75:51 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 13B4DAC748238EE77F2DED05D02A2503D5EE9AD3 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS137436.roa Signing time: Tue 21 Jul 2026 13:32:31 +0000 ROA not before: Tue 21 Jul 2026 13:27:31 +0000 ROA not after: Tue 20 Jul 2027 13:32:31 +0000 asID: 137436 IP address blocks: 2406:840:fc20::/44 maxlen: 48 2406:840:fea6::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b4:da:c7:48:23:8e:e7:7f:2d:ed:05:d0:2a:25:03:d5:ee:9a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:31 2026 GMT Not After : Jul 20 13:32:31 2027 GMT Subject: CN=ED068BB450AEFE8428B0B03E74F969A9FD1A7551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:79:70:43:af:dd:67:12:4e:a8:95:e5:23: a8:fc:ca:af:a2:00:c1:bd:d7:2d:36:2f:ca:3d:ab: 2b:b6:d4:7a:23:38:06:ee:36:34:9b:e9:4e:d0:6e: fa:d9:83:c6:f9:ed:83:b2:7a:8d:12:8f:88:e7:6c: 4b:b4:58:09:ff:48:e3:66:7c:80:44:8f:e6:f7:ae: ee:bc:db:b4:59:19:2a:65:e7:8e:8b:86:6d:aa:b6: 37:7b:35:a1:74:6e:49:4a:b6:09:74:c0:08:1e:d5: 48:f5:0f:aa:56:4d:a8:83:ba:67:29:a1:3e:be:6c: be:51:9d:d7:7e:b8:59:05:34:7d:f0:f0:e1:bc:de: 33:90:84:59:b4:90:fb:e8:b9:f8:b9:66:af:9d:7c: 5d:bb:72:07:7f:64:c2:28:03:8c:e1:e9:e2:54:d0: 3c:de:97:ee:2f:ae:6e:78:9e:67:3c:1b:f1:a1:95: 09:75:49:34:bc:d3:df:e2:62:38:b8:60:da:65:7b: d8:e8:03:9e:9f:df:16:38:85:04:26:68:c4:03:eb: 46:86:2b:77:4e:b0:8b:b0:76:c3:54:22:6d:2d:fb: 14:97:e6:a6:8d:72:3f:f4:e5:4e:51:5e:93:ac:3e: a7:77:4b:3c:21:73:3a:b1:e9:63:55:07:eb:bb:92: 0b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:06:8B:B4:50:AE:FE:84:28:B0:B0:3E:74:F9:69:A9:FD:1A:75:51 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS137436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fc20::/44 2406:840:fea6::/48 Signature Algorithm: sha256WithRSAEncryption 3d:f7:f9:08:c3:69:74:d4:32:52:10:66:66:97:74:00:e5:eb: 66:9b:96:c5:a5:6b:e3:10:19:d1:4f:e9:b3:78:16:d0:e8:30: 60:9a:58:c8:99:a0:74:f9:0f:9a:31:d7:9c:db:93:38:6b:fe: 2b:8f:ff:8e:73:2c:6a:b6:1f:f0:a4:20:6f:56:45:4b:d7:c7: e5:28:ef:d6:c9:45:a1:d8:42:ac:2a:4d:52:9d:99:5d:d2:0a: f2:43:f0:a8:df:61:e1:ae:d4:dc:9e:c5:3c:04:23:47:1e:8b: 5b:50:bf:ef:3a:9d:e7:af:1a:50:e9:92:2e:8b:77:d0:82:df: 93:48:62:ba:06:d8:e1:9e:82:fc:ca:d5:e3:76:b2:1a:b0:a5: af:ff:09:e6:ec:a7:07:58:7d:f7:83:2d:b1:5c:8c:a5:49:0a: eb:f7:6e:1d:0e:36:a0:cc:1f:77:a7:32:d4:bf:8b:d4:15:dc: 29:8b:69:0d:0e:cf:47:c0:0d:cb:3f:92:62:25:04:81:d4:0c: 15:b4:88:a5:dd:71:ad:de:aa:2c:8c:a7:60:a1:d9:2a:eb:1f: 64:20:a0:54:c1:76:81:36:8b:ab:be:a8:cf:1a:55:4a:29:a1: 3d:a3:ee:c8:e5:e5:d6:38:80:3c:96:08:4b:67:92:b6:8a:03: f3:27:ab:52 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUE7Tax0gjjud/Le0F0ColA9XumtMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczMVoX DTI3MDcyMDEzMzIzMVowMzExMC8GA1UEAxMoRUQwNjhCQjQ1MEFFRkU4NDI4QjBC MDNFNzRGOTY5QTlGRDFBNzU1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMpBeXBDr91nEk6oleUjqPzKr6IAwb3XLTYvyj2rK7bUeiM4Bu42NJvpTtBu +tmDxvntg7J6jRKPiOdsS7RYCf9I42Z8gESP5veu7rzbtFkZKmXnjouGbaq2N3s1 oXRuSUq2CXTACB7VSPUPqlZNqIO6ZymhPr5svlGd1364WQU0ffDw4bzeM5CEWbSQ ++i5+Llmr518XbtyB39kwigDjOHp4lTQPN6X7i+ubnieZzwb8aGVCXVJNLzT3+Ji OLhg2mV72OgDnp/fFjiFBCZoxAPrRoYrd06wi7B2w1QibS37FJfmpo1yP/TlTlFe k6w+p3dLPCFzOrHpY1UH67uSC0ECAwEAAaOCAjAwggIsMB0GA1UdDgQWBBTtBou0 UK7+hCiwsD50+Wmp/Rp1UTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzNzQzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED8IAMHACQGCED+pjANBgkqhkiG9w0BAQsFAAOCAQEAPff5CMNpdNQyUhBmZpd0 AOXrZpuWxaVr4xAZ0U/ps3gW0OgwYJpYyJmgdPkPmjHXnNuTOGv+K4//jnMsarYf 8KQgb1ZFS9fH5Sjv1slFodhCrCpNUp2ZXdIK8kPwqN9h4a7U3J7FPAQjRx6LW1C/ 7zqd568aUOmSLot30ILfk0hiugbY4Z6C/MrV43ayGrClr/8J5uynB1h994MtsVyM pUkK6/duHQ42oMwfd6cy1L+L1BXcKYtpDQ7PR8ANyz+SYiUEgdQMFbSIpd1xrd6q LIynYKHZKusfZCCgVMF2gTaLq76ozxpVSimhPaPuyOXl1jiAPJYIS2eStooD8yer Ug== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:53 2026 by rpki-client