$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS138632.roa File: AS138632.roa (raw, json) Hash identifier: LgXHM2Lx9yc+e0EeMr0cfmd18oyiXZr9uQ7esvRq31A= Subject key identifier: A8:8E:5C:1D:87:6B:CB:7B:28:06:D9:40:11:EA:DE:B0:DE:C2:BB:7F Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 536D35D5EB4BB1646934B0D0057B63FD29093A0E Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS138632.roa Signing time: Tue 21 Jul 2026 13:32:21 +0000 ROA not before: Tue 21 Jul 2026 13:27:21 +0000 ROA not after: Tue 20 Jul 2027 13:32:21 +0000 asID: 138632 IP address blocks: 2406:840:fe71::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:6d:35:d5:eb:4b:b1:64:69:34:b0:d0:05:7b:63:fd:29:09:3a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:21 2026 GMT Not After : Jul 20 13:32:21 2027 GMT Subject: CN=A88E5C1D876BCB7B2806D94011EADEB0DEC2BB7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9a:b3:3d:6b:66:f0:45:de:3b:b0:c1:5d:a5: 2d:6f:e4:ba:b3:c9:23:61:f7:43:79:58:75:c8:7a: bf:bb:50:17:0b:8b:19:72:b9:a6:a8:1c:a0:2c:4e: a9:ea:5b:bf:9d:a7:c7:f9:88:8f:b5:f6:78:1c:09: 49:11:64:58:ca:4f:08:43:14:e3:d7:60:3c:b1:1e: 9c:f9:58:dc:37:a4:f5:12:48:70:6e:79:13:72:9b: 67:d3:81:c9:d4:8d:06:6b:4c:6e:d9:e7:98:41:71: 62:34:7a:90:73:f2:6c:b7:b9:cf:d9:b3:00:e7:6d: 74:ba:f5:9e:07:a4:21:21:0b:0f:cf:2d:c0:70:f4: c4:47:05:7a:fa:45:78:6f:01:0c:e4:fe:ec:78:7a: c1:c3:0a:cf:5c:04:0c:71:82:c3:33:21:8f:69:81: bc:66:cc:fe:cf:5b:ed:0f:69:35:2c:46:27:b0:6b: 7d:14:50:47:bf:61:01:9c:94:8f:6d:64:ee:73:b8: c3:55:43:b3:da:1b:1e:b8:69:9b:0a:9f:3f:9c:10: d3:88:1e:a9:89:f4:f8:10:4c:ab:e5:71:e1:34:5d: cf:4c:7e:90:27:bb:91:c1:06:8c:75:29:08:87:99: 87:2d:39:09:70:69:9c:cc:2a:a2:21:fc:c1:de:6a: c1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8E:5C:1D:87:6B:CB:7B:28:06:D9:40:11:EA:DE:B0:DE:C2:BB:7F X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS138632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fe71::/48 Signature Algorithm: sha256WithRSAEncryption 29:15:9e:e8:b8:29:6f:bc:b3:11:b2:e8:b1:a5:b1:58:a0:2f: ee:8c:fd:f1:b6:3c:59:93:cb:90:5e:47:2e:f8:67:b7:65:58: fd:46:25:54:b4:d9:43:57:67:75:ec:89:fa:a5:a3:2e:e3:05: 3c:7d:fb:5f:0e:1e:17:6a:fb:99:8e:03:99:0e:a3:09:16:4d: ba:56:ef:2d:05:d4:58:af:1c:f1:74:23:1c:f9:c0:c4:12:9e: a6:43:ab:8f:e0:64:83:c6:9c:34:8d:52:cb:32:8a:de:85:42: a9:03:a7:b2:96:59:ad:1b:6f:84:6c:c4:d4:b2:42:54:de:af: 7f:91:37:9c:b5:f6:9b:19:da:7f:4f:68:a9:fb:da:72:8c:78: 62:2e:6e:33:c8:ef:75:80:21:68:ec:8f:76:74:6d:a9:2a:b3: d3:45:34:6a:a3:d2:97:f9:72:04:7a:42:60:88:d3:e0:74:ff: 3d:a2:f4:d5:10:5d:ee:98:06:1c:20:49:74:87:35:36:df:06: 31:a4:e8:26:bc:99:59:4d:3e:14:30:7c:26:01:86:4a:2f:9e: f6:31:9f:cd:a3:fb:34:36:23:35:fc:76:4a:0a:62:e5:70:a5: 4f:a9:78:f7:5e:f1:ea:f4:6b:03:48:17:a2:6e:e2:59:0e:7c: 8e:e9:b7:db -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUU2011etLsWRpNLDQBXtj/SkJOg4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyMVoX DTI3MDcyMDEzMzIyMVowMzExMC8GA1UEAxMoQTg4RTVDMUQ4NzZCQ0I3QjI4MDZE OTQwMTFFQURFQjBERUMyQkI3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOasz1rZvBF3juwwV2lLW/kurPJI2H3Q3lYdch6v7tQFwuLGXK5pqgcoCxO qepbv52nx/mIj7X2eBwJSRFkWMpPCEMU49dgPLEenPlY3Dek9RJIcG55E3KbZ9OB ydSNBmtMbtnnmEFxYjR6kHPybLe5z9mzAOdtdLr1ngekISELD88twHD0xEcFevpF eG8BDOT+7Hh6wcMKz1wEDHGCwzMhj2mBvGbM/s9b7Q9pNSxGJ7BrfRRQR79hAZyU j21k7nO4w1VDs9obHrhpmwqfP5wQ04geqYn0+BBMq+Vx4TRdz0x+kCe7kcEGjHUp CIeZhy05CXBpnMwqoiH8wd5qwckCAwEAAaOCAicwggIjMB0GA1UdDgQWBBSojlwd h2vLeygG2UAR6t6w3sK7fzAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzODYzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQG CED+cTANBgkqhkiG9w0BAQsFAAOCAQEAKRWe6Lgpb7yzEbLosaWxWKAv7oz98bY8 WZPLkF5HLvhnt2VY/UYlVLTZQ1dndeyJ+qWjLuMFPH37Xw4eF2r7mY4DmQ6jCRZN ulbvLQXUWK8c8XQjHPnAxBKepkOrj+Bkg8acNI1SyzKK3oVCqQOnspZZrRtvhGzE 1LJCVN6vf5E3nLX2mxnaf09oqfvacox4Yi5uM8jvdYAhaOyPdnRtqSqz00U0aqPS l/lyBHpCYIjT4HT/PaL01RBd7pgGHCBJdIc1Nt8GMaToJryZWU0+FDB8JgGGSi+e 9jGfzaP7NDYjNfx2Sgpi5XClT6l4917x6vRrA0gXom7iWQ58jum32w== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:07 2026 by rpki-client