$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS137835.roa File: AS137835.roa (raw, json) Hash identifier: j7doLzXaXbcYNgG6ld8Ui/I5bC0gBgUZa8cOSkgs0cE= Subject key identifier: 43:CF:B0:81:EE:68:32:B3:06:B7:81:65:CF:E8:B6:9D:49:0F:BA:96 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 7AFB986B132FD418C42F6B08BDF4CC8EAC8E3E0F Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS137835.roa Signing time: Tue 21 Jul 2026 13:32:29 +0000 ROA not before: Tue 21 Jul 2026 13:27:29 +0000 ROA not after: Tue 20 Jul 2027 13:32:29 +0000 asID: 137835 IP address blocks: 2406:840:f440::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:fb:98:6b:13:2f:d4:18:c4:2f:6b:08:bd:f4:cc:8e:ac:8e:3e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:29 2026 GMT Not After : Jul 20 13:32:29 2027 GMT Subject: CN=43CFB081EE6832B306B78165CFE8B69D490FBA96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7a:14:73:f2:16:9d:b3:27:c3:e8:18:6b:f7: 45:81:20:f5:30:2c:f6:6f:5a:0c:44:87:8c:c2:d4: 3a:1a:27:cd:75:71:6c:0c:ab:04:62:d3:13:9f:d6: c4:c1:c5:9c:01:15:ea:e7:32:66:71:8c:d1:58:40: 7f:d1:7a:ef:0b:31:de:f8:5e:c8:97:a4:62:17:4b: 48:6d:18:0b:2b:ac:77:3f:0d:0e:e4:45:14:45:1b: b0:f1:b6:61:74:13:75:bb:18:0f:85:8d:35:7c:85: 6d:0f:a9:61:3c:d2:d9:8e:61:f0:64:3c:5c:a2:70: e1:2a:43:75:54:5f:ad:f3:5e:59:a5:96:1d:49:55: 59:6d:3f:36:c5:4d:16:40:a9:83:28:b8:89:fa:e9: 8d:39:a3:0f:6e:cb:7d:78:7d:12:85:89:7b:51:17: ed:a4:34:f4:cd:d2:47:3c:eb:ac:44:58:dd:f0:90: 9a:88:03:7e:52:78:bf:24:ce:e4:26:1d:75:00:87: 57:e2:c3:5f:e2:a0:27:e0:98:6b:eb:c1:ab:20:33: c8:f3:72:60:99:89:0c:ef:54:62:d0:8e:14:e2:0b: 00:07:99:57:c2:0b:ab:36:43:df:9a:71:a5:59:43: 8f:ce:8c:fa:39:92:a8:65:9a:4e:0a:c0:12:06:5d: dc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CF:B0:81:EE:68:32:B3:06:B7:81:65:CF:E8:B6:9D:49:0F:BA:96 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS137835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:f440::/44 Signature Algorithm: sha256WithRSAEncryption 86:b6:ff:36:93:a2:74:46:3f:7b:93:9e:d2:a5:36:2c:b4:52: 84:fb:29:4f:d5:46:16:5a:82:f9:18:25:87:c4:87:5e:a3:1d: c3:50:4f:4b:48:57:18:94:aa:89:76:e9:7d:e4:5e:67:35:90: 3f:11:ef:d8:b6:4a:77:a2:d9:44:87:1b:08:c3:07:d5:08:da: f0:99:5e:9b:55:16:4b:be:92:db:f0:3e:c2:b5:84:39:db:2c: e2:e3:25:6d:e7:f7:47:2d:d5:cc:96:b6:3d:cf:9f:13:8b:be: f9:51:d5:93:3e:5d:b7:46:29:a6:ac:5e:9b:53:6b:f8:fd:3f: 6e:83:67:76:13:82:6a:2b:f0:07:92:98:bf:f2:c0:80:83:59: 4e:80:25:bf:7d:59:bf:5e:d2:20:6c:7a:8b:00:0a:e0:1b:a6: cd:d8:fb:6b:8f:50:cd:ad:06:a7:af:7f:e4:64:9a:bb:1a:e3: 7b:46:f2:61:9c:39:84:e7:2a:c8:35:c7:7f:a7:2f:87:73:57: 93:ba:68:e9:ab:01:50:a2:42:37:fb:76:cc:e6:ff:b0:c8:96: 39:cb:b7:31:55:37:7e:a0:b0:86:79:ac:bb:74:f8:ba:ae:fb: fa:08:0b:72:c3:e6:1f:12:71:08:13:a3:36:be:e3:ac:3a:61: 83:b6:59:9e -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUevuYaxMv1BjEL2sIvfTMjqyOPg8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyOVoX DTI3MDcyMDEzMzIyOVowMzExMC8GA1UEAxMoNDNDRkIwODFFRTY4MzJCMzA2Qjc4 MTY1Q0ZFOEI2OUQ0OTBGQkE5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKx6FHPyFp2zJ8PoGGv3RYEg9TAs9m9aDESHjMLUOhonzXVxbAyrBGLTE5/W xMHFnAEV6ucyZnGM0VhAf9F67wsx3vheyJekYhdLSG0YCyusdz8NDuRFFEUbsPG2 YXQTdbsYD4WNNXyFbQ+pYTzS2Y5h8GQ8XKJw4SpDdVRfrfNeWaWWHUlVWW0/NsVN FkCpgyi4ifrpjTmjD27LfXh9EoWJe1EX7aQ09M3SRzzrrERY3fCQmogDflJ4vyTO 5CYddQCHV+LDX+KgJ+CYa+vBqyAzyPNyYJmJDO9UYtCOFOILAAeZV8ILqzZD35px pVlDj86M+jmSqGWaTgrAEgZd3FUCAwEAAaOCAicwggIjMB0GA1UdDgQWBBRDz7CB 7mgyswa3gWXP6LadSQ+6ljAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzNzgzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CED0QDANBgkqhkiG9w0BAQsFAAOCAQEAhrb/NpOidEY/e5Oe0qU2LLRShPspT9VG FlqC+Rglh8SHXqMdw1BPS0hXGJSqiXbpfeReZzWQPxHv2LZKd6LZRIcbCMMH1Qja 8Jlem1UWS76S2/A+wrWEOdss4uMlbef3Ry3VzJa2Pc+fE4u++VHVkz5dt0Yppqxe m1Nr+P0/boNndhOCaivwB5KYv/LAgINZToAlv31Zv17SIGx6iwAK4Bumzdj7a49Q za0Gp69/5GSauxrje0byYZw5hOcqyDXHf6cvh3NXk7po6asBUKJCN/t2zOb/sMiW Ocu3MVU3fqCwhnmsu3T4uq77+ggLcsPmHxJxCBOjNr7jrDphg7ZZng== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:52 2026 by rpki-client