$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139231.roa File: AS139231.roa (raw, json) Hash identifier: ins5k8kxSj4LlRtmdMHaRjF2qSZY/lRo+0VBNjECAiw= Subject key identifier: EF:67:2B:C2:9B:41:F6:A0:A3:01:10:91:55:BA:4B:F4:C3:A8:0C:14 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 6FF135B842B5068391BCA84288E1E6014C3E0072 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139231.roa Signing time: Tue 21 Jul 2026 13:32:19 +0000 ROA not before: Tue 21 Jul 2026 13:27:19 +0000 ROA not after: Tue 20 Jul 2027 13:32:19 +0000 asID: 139231 IP address blocks: 2406:840:fe00::/44 maxlen: 48 2406:840:fefb::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f1:35:b8:42:b5:06:83:91:bc:a8:42:88:e1:e6:01:4c:3e:00:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:19 2026 GMT Not After : Jul 20 13:32:19 2027 GMT Subject: CN=EF672BC29B41F6A0A301109155BA4BF4C3A80C14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dd:1a:17:d9:20:34:86:f8:dd:8d:ab:c3:53: 3d:6d:64:15:1d:9c:c9:85:39:2a:f1:4c:bc:27:16: bc:39:07:80:97:fe:62:66:0a:f5:29:4a:f8:1f:76: c4:22:8f:a5:eb:81:97:da:5e:35:75:d4:62:8e:8d: 65:cc:8d:82:95:b4:90:ad:8a:a7:05:c8:b4:66:3d: a9:51:90:4a:65:8d:8b:0b:e8:5b:1e:18:92:54:b5: 05:30:d2:77:c3:f5:96:f2:6e:bf:fb:39:cc:c4:f2: 2c:7c:36:f3:5c:2a:56:a6:e8:44:83:63:b4:aa:c3: 6b:63:6f:f4:00:46:aa:81:e2:05:a7:f4:ab:96:7a: 48:41:85:a5:7e:16:27:4c:27:96:5d:26:0b:1c:5f: a8:fc:03:32:72:c3:01:c9:ee:c8:f0:4f:c7:0f:7e: 82:10:d2:0f:91:81:50:ac:84:d0:5c:cf:53:ff:a0: eb:ae:2b:21:ae:77:3f:a8:12:48:6e:73:8d:d8:69: b8:41:88:9d:ba:65:bc:8b:9a:fa:c0:93:1a:05:cb: 24:22:89:a3:32:3a:a5:ed:34:d7:7a:b4:56:0e:84: 0a:d1:4a:01:0a:62:78:fe:3a:26:25:b6:e5:97:e5: 35:4e:dd:78:25:8f:eb:a1:41:6c:58:8e:dd:cc:48: ba:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:67:2B:C2:9B:41:F6:A0:A3:01:10:91:55:BA:4B:F4:C3:A8:0C:14 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fe00::/44 2406:840:fefb::/48 Signature Algorithm: sha256WithRSAEncryption 83:09:d9:75:e9:b1:ae:08:f1:57:84:83:fe:f4:7a:16:11:25: 33:10:9a:ce:58:9e:f5:c3:a5:6f:2f:5f:06:63:1a:e9:d8:d1: ba:66:06:c9:32:39:5e:84:cc:d1:be:1f:43:be:62:6c:b0:f2: 3e:26:f4:8a:ea:e8:98:d9:07:9d:64:2e:bd:0c:19:34:ee:80: 81:64:b0:07:86:56:4c:5f:c9:15:be:b8:23:21:87:df:7e:ed: 59:83:1c:49:21:cb:58:c7:92:02:9e:4b:fc:fb:e0:2d:b2:ef: 76:23:09:c5:ec:7d:04:bb:14:65:34:aa:22:ef:b0:72:90:52: 5a:28:70:ec:8f:55:e6:d2:a9:1e:c8:42:8a:c4:db:73:a5:12: a6:d0:19:ba:b3:4e:7f:b6:fb:d4:89:1d:61:b3:c2:49:22:18: 77:b1:d0:64:90:06:50:bb:8d:52:35:a5:6c:48:e2:25:ed:d2: d1:1d:0b:96:05:8c:2e:3f:e2:5f:18:07:22:9d:26:40:5f:f7: 25:e6:29:6e:18:09:d5:ce:8b:04:27:6b:f4:0c:05:92:4c:58: 7e:ff:05:fe:21:3e:95:88:fb:c7:20:0c:68:6e:5f:4f:15:c2: 86:e0:50:c0:57:aa:48:c7:24:a6:c6:08:66:cc:3c:74:a1:d9: c4:5e:ca:74 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUb/E1uEK1BoORvKhCiOHmAUw+AHIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxOVoX DTI3MDcyMDEzMzIxOVowMzExMC8GA1UEAxMoRUY2NzJCQzI5QjQxRjZBMEEzMDEx MDkxNTVCQTRCRjRDM0E4MEMxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvdGhfZIDSG+N2Nq8NTPW1kFR2cyYU5KvFMvCcWvDkHgJf+YmYK9SlK+B92 xCKPpeuBl9peNXXUYo6NZcyNgpW0kK2KpwXItGY9qVGQSmWNiwvoWx4YklS1BTDS d8P1lvJuv/s5zMTyLHw281wqVqboRINjtKrDa2Nv9ABGqoHiBaf0q5Z6SEGFpX4W J0wnll0mCxxfqPwDMnLDAcnuyPBPxw9+ghDSD5GBUKyE0FzPU/+g664rIa53P6gS SG5zjdhpuEGInbplvIua+sCTGgXLJCKJozI6pe0013q0Vg6ECtFKAQpieP46JiW2 5ZflNU7deCWP66FBbFiO3cxIuisCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBTvZyvC m0H2oKMBEJFVukv0w6gMFDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzOTIzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED+AAMHACQGCED++zANBgkqhkiG9w0BAQsFAAOCAQEAgwnZdemxrgjxV4SD/vR6 FhElMxCazlie9cOlby9fBmMa6djRumYGyTI5XoTM0b4fQ75ibLDyPib0iuromNkH nWQuvQwZNO6AgWSwB4ZWTF/JFb64IyGH337tWYMcSSHLWMeSAp5L/PvgLbLvdiMJ xex9BLsUZTSqIu+wcpBSWihw7I9V5tKpHshCisTbc6USptAZurNOf7b71IkdYbPC SSIYd7HQZJAGULuNUjWlbEjiJe3S0R0LlgWMLj/iXxgHIp0mQF/3JeYpbhgJ1c6L BCdr9AwFkkxYfv8F/iE+lYj7xyAMaG5fTxXChuBQwFeqSMckpsYIZsw8dKHZxF7K dA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:54 2026 by rpki-client