$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS137990.roa File: AS137990.roa (raw, json) Hash identifier: V2FGEDMDzLs5krylYH1T9ovn/xejKmAVunPNZ9nV5CI= Subject key identifier: 6E:1D:7A:8C:8C:F5:3C:E2:D0:2B:73:CB:4F:C4:E9:30:FF:CB:44:BC Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 16BA680212D41A252C4DDDD9F741DDFEF572B299 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS137990.roa Signing time: Tue 21 Jul 2026 13:32:28 +0000 ROA not before: Tue 21 Jul 2026 13:27:28 +0000 ROA not after: Tue 20 Jul 2027 13:32:28 +0000 asID: 137990 IP address blocks: 2406:840:eb83::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ba:68:02:12:d4:1a:25:2c:4d:dd:d9:f7:41:dd:fe:f5:72:b2:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:28 2026 GMT Not After : Jul 20 13:32:28 2027 GMT Subject: CN=6E1D7A8C8CF53CE2D02B73CB4FC4E930FFCB44BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:77:3e:15:ea:71:92:c1:c1:d5:62:a6:cb:2c: 16:af:e1:a1:12:96:69:2f:47:4d:cd:b5:11:f5:b7: 69:c3:a8:33:9a:88:de:44:18:e8:a5:39:a3:1d:b9: cc:e1:61:19:36:c9:08:79:0e:4e:1a:2f:fe:0b:bc: 01:93:3c:fb:39:3f:2c:d9:bc:58:14:a4:53:e4:ac: 7b:16:f6:c4:4a:80:d9:b2:a1:dc:25:06:22:c5:b1: 16:bf:8f:42:0c:cf:34:25:19:6d:79:62:89:78:62: bc:81:b4:3e:15:91:4b:20:ff:7b:b7:b6:3d:12:85: a1:2a:76:51:ed:b5:72:44:4d:df:a9:77:87:7f:d5: 2f:1b:14:df:0d:17:70:7c:75:b2:75:79:25:61:c3: 40:ff:1e:95:ef:de:d1:74:84:c3:bf:33:16:6f:a9: d9:9c:cc:6b:fd:81:a2:0e:13:18:ad:93:93:3f:98: f3:00:83:db:99:23:17:7c:12:03:17:c7:5d:a3:53: 74:92:8e:54:99:3b:2e:a4:62:59:65:7f:ab:bd:f7: 51:1d:f5:7e:d4:fc:45:80:0c:14:5c:27:e3:62:a8: 06:ba:aa:92:bd:e7:57:1d:ce:3a:f1:cb:fa:eb:f5: 21:a1:e5:59:96:91:42:96:b6:20:e7:fc:dd:66:96: 2c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1D:7A:8C:8C:F5:3C:E2:D0:2B:73:CB:4F:C4:E9:30:FF:CB:44:BC X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS137990.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:eb83::/48 Signature Algorithm: sha256WithRSAEncryption 4e:7b:27:5b:b6:58:80:01:60:3c:3c:9f:39:22:5a:95:06:8d: 7f:12:2d:5f:97:71:ec:f6:7c:f7:d1:f4:46:d6:c2:cc:bf:d6: 11:f9:8a:75:68:9a:13:5a:fe:e5:f8:66:51:5d:6f:4b:01:1b: 60:f1:9a:ea:7b:53:d8:17:dd:7e:62:62:04:0c:e1:5d:77:6f: fc:79:21:62:4b:ef:35:48:9e:f3:2a:95:c3:79:f0:a3:6c:b2: 76:9d:f9:5b:e1:31:d9:92:6a:12:d8:f4:ca:a7:36:63:90:83: cf:b4:7d:a2:6e:68:fb:a1:fc:04:12:7a:03:61:5a:fe:76:78: 48:4a:9a:f4:40:69:39:55:ea:f0:f0:d2:ae:ea:ee:a3:c2:96: 83:73:0a:5c:e2:f6:9d:e0:b7:29:8e:45:7a:7b:8a:de:b1:56: 9d:c9:77:b2:b0:df:11:b6:e5:9c:c1:39:5b:7e:0d:e1:fd:2b: b2:b4:eb:8a:35:a0:2d:ca:b1:8d:79:ea:3e:89:bc:5b:81:43: 92:13:34:3d:ac:de:68:40:fd:dd:6c:bc:8e:fd:8b:3c:bb:66: 68:0a:82:0f:4f:2e:44:14:4a:fd:ca:0c:ec:4c:0c:2b:61:ab: 60:54:86:30:bd:48:73:f4:fc:bf:d6:0f:af:64:28:3e:3a:45: 59:0d:ca:c6 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUFrpoAhLUGiUsTd3Z90Hd/vVyspkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyOFoX DTI3MDcyMDEzMzIyOFowMzExMC8GA1UEAxMoNkUxRDdBOEM4Q0Y1M0NFMkQwMkI3 M0NCNEZDNEU5MzBGRkNCNDRCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKx3PhXqcZLBwdVipsssFq/hoRKWaS9HTc21EfW3acOoM5qI3kQY6KU5ox25 zOFhGTbJCHkOThov/gu8AZM8+zk/LNm8WBSkU+Ssexb2xEqA2bKh3CUGIsWxFr+P QgzPNCUZbXliiXhivIG0PhWRSyD/e7e2PRKFoSp2Ue21ckRN36l3h3/VLxsU3w0X cHx1snV5JWHDQP8ele/e0XSEw78zFm+p2ZzMa/2Bog4TGK2Tkz+Y8wCD25kjF3wS AxfHXaNTdJKOVJk7LqRiWWV/q733UR31ftT8RYAMFFwn42KoBrqqkr3nVx3OOvHL +uv1IaHlWZaRQpa2IOf83WaWLDECAwEAAaOCAicwggIjMB0GA1UdDgQWBBRuHXqM jPU84tArc8tPxOkw/8tEvDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzNzk5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQG CEDrgzANBgkqhkiG9w0BAQsFAAOCAQEATnsnW7ZYgAFgPDyfOSJalQaNfxItX5dx 7PZ899H0RtbCzL/WEfmKdWiaE1r+5fhmUV1vSwEbYPGa6ntT2BfdfmJiBAzhXXdv /HkhYkvvNUie8yqVw3nwo2yydp35W+Ex2ZJqEtj0yqc2Y5CDz7R9om5o+6H8BBJ6 A2Fa/nZ4SEqa9EBpOVXq8PDSruruo8KWg3MKXOL2neC3KY5FenuK3rFWncl3srDf EbblnME5W34N4f0rsrTrijWgLcqxjXnqPom8W4FDkhM0PazeaED93Wy8jv2LPLtm aAqCD08uRBRK/coM7EwMK2GrYFSGML1Ic/T8v9YPr2QoPjpFWQ3Kxg== -----END CERTIFICATE-----Generated at Tue Jul 21 21:42:20 2026 by rpki-client