$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS137908.roa File: AS137908.roa (raw, json) Hash identifier: 6T8uhDoegsKxPocsrx9hMCapzWpNGMDolnsNg5I8l2w= Subject key identifier: D1:60:4C:EB:83:0B:A0:D4:07:E0:EB:BE:4F:21:29:38:7D:01:ED:9E Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 5FC7FCBB488D9F8CA8AD0A535AAFB5FF41B84910 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS137908.roa Signing time: Tue 21 Jul 2026 13:32:32 +0000 ROA not before: Tue 21 Jul 2026 13:27:32 +0000 ROA not after: Tue 20 Jul 2027 13:32:32 +0000 asID: 137908 IP address blocks: 2406:840:ee40::/44 maxlen: 48 2406:840:feaf::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c7:fc:bb:48:8d:9f:8c:a8:ad:0a:53:5a:af:b5:ff:41:b8:49:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:32 2026 GMT Not After : Jul 20 13:32:32 2027 GMT Subject: CN=D1604CEB830BA0D407E0EBBE4F2129387D01ED9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2a:f8:f2:13:75:f0:91:91:e5:42:7b:32:b7: fa:f5:1b:13:7d:c3:c5:83:ea:cd:cf:3b:aa:a3:aa: 9d:90:9e:36:06:42:c9:a5:39:69:76:00:1d:aa:25: 93:99:d2:dd:da:f5:6c:91:d8:40:e3:78:c0:dc:9f: 51:3c:69:55:ff:35:57:c9:72:85:e5:e8:15:b7:7f: a9:68:2c:79:c6:b3:33:a7:64:a0:7f:1d:a3:aa:f9: 20:81:fa:84:66:65:69:11:b2:46:d7:b3:76:f0:8f: dd:57:ac:53:05:49:ed:3c:f7:fb:dc:06:5a:a5:95: 09:ee:6e:1c:ad:d1:cf:c7:31:b5:b3:f2:45:67:8b: f4:34:e4:4e:3e:7b:c4:3a:a9:1e:d0:87:40:50:cd: 18:e8:c1:6e:0f:5e:b6:f9:b0:24:a0:4b:17:25:17: 71:d1:3f:ff:5a:5e:11:ad:1a:66:75:23:7f:5d:8e: fe:79:a0:37:bc:4a:12:23:39:fd:95:76:6d:db:20: 0d:59:82:00:9a:86:9b:96:4e:5a:ac:51:d9:84:1f: b2:b5:01:a4:f6:37:82:e0:42:1b:2c:54:75:10:9c: 8a:dd:47:f0:bf:4e:37:8d:3b:ad:1e:b9:48:dd:7c: 22:3d:a6:a6:ba:88:c4:10:2b:6d:3a:19:91:f6:3b: 71:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:60:4C:EB:83:0B:A0:D4:07:E0:EB:BE:4F:21:29:38:7D:01:ED:9E X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS137908.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:ee40::/44 2406:840:feaf::/48 Signature Algorithm: sha256WithRSAEncryption 90:c2:99:07:89:1d:72:8a:d6:02:38:3f:bb:ab:83:dd:8b:47: 4f:2a:81:4b:f8:c1:f3:31:bd:55:ce:ce:2f:a9:be:f6:47:f3: 89:30:38:e4:59:af:19:8b:34:c2:d4:c4:6b:bb:b2:92:2e:ca: dc:a2:dc:62:93:9e:92:71:3d:00:e6:0c:58:7f:58:b9:c6:33: 18:71:0a:4a:15:41:49:75:7f:b8:fe:a2:7a:5f:e9:40:35:7c: df:f2:b1:cd:57:0d:89:6b:4f:21:70:37:71:9f:6f:c0:cd:0a: 69:c3:01:ff:94:ef:b5:35:e2:1c:d6:1f:fd:71:53:c0:66:61: 3e:2a:7c:7e:63:fd:9e:2f:bb:d2:0d:85:09:ee:01:b1:ff:20: 4f:1b:b2:74:b7:20:aa:8b:67:1c:48:c7:29:49:f1:d8:ae:09: aa:8c:02:53:7c:e5:3f:00:a5:83:0c:4d:6a:12:ec:cb:d4:85: 59:b7:aa:49:d9:77:77:c9:50:b3:8e:76:3c:55:19:75:5a:05: dd:d5:3b:23:c8:43:da:9e:24:9d:1e:16:32:9a:99:6a:da:7d: 27:5c:95:6b:a9:d0:a2:a1:1d:67:74:bd:fc:ea:b3:80:d0:d9: dc:1e:fa:73:0a:8a:e0:44:b0:fc:25:31:f7:4d:62:26:b5:f8: 90:4e:94:7b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUX8f8u0iNn4yorQpTWq+1/0G4SRAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczMloX DTI3MDcyMDEzMzIzMlowMzExMC8GA1UEAxMoRDE2MDRDRUI4MzBCQTBENDA3RTBF QkJFNEYyMTI5Mzg3RDAxRUQ5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOYq+PITdfCRkeVCezK3+vUbE33DxYPqzc87qqOqnZCeNgZCyaU5aXYAHaol k5nS3dr1bJHYQON4wNyfUTxpVf81V8lyheXoFbd/qWgsecazM6dkoH8do6r5IIH6 hGZlaRGyRtezdvCP3VesUwVJ7Tz3+9wGWqWVCe5uHK3Rz8cxtbPyRWeL9DTkTj57 xDqpHtCHQFDNGOjBbg9etvmwJKBLFyUXcdE//1peEa0aZnUjf12O/nmgN7xKEiM5 /ZV2bdsgDVmCAJqGm5ZOWqxR2YQfsrUBpPY3guBCGyxUdRCcit1H8L9ON407rR65 SN18Ij2mprqIxBArbToZkfY7cfkCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBTRYEzr gwug1Afg675PISk4fQHtnjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzNzkwOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CEDuQAMHACQGCED+rzANBgkqhkiG9w0BAQsFAAOCAQEAkMKZB4kdcorWAjg/u6uD 3YtHTyqBS/jB8zG9Vc7OL6m+9kfziTA45FmvGYs0wtTEa7uyki7K3KLcYpOeknE9 AOYMWH9YucYzGHEKShVBSXV/uP6iel/pQDV83/KxzVcNiWtPIXA3cZ9vwM0KacMB /5TvtTXiHNYf/XFTwGZhPip8fmP9ni+70g2FCe4Bsf8gTxuydLcgqotnHEjHKUnx 2K4JqowCU3zlPwClgwxNahLsy9SFWbeqSdl3d8lQs452PFUZdVoF3dU7I8hD2p4k nR4WMpqZatp9J1yVa6nQoqEdZ3S9/OqzgNDZ3B76cwqK4ESw/CUx901iJrX4kE6U ew== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:06 2026 by rpki-client