$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139249.roa File: AS139249.roa (raw, json) Hash identifier: QLasztJ0uEu881PQftiUdGgI3enABW6IYUQ+lOaqHNc= Subject key identifier: 44:07:47:94:4D:48:FC:D7:34:79:BD:96:AF:13:4B:A6:0D:8F:84:68 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 21BF2FD5CBF88CC853E83E01D55C3F7044F50404 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139249.roa Signing time: Tue 21 Jul 2026 13:32:29 +0000 ROA not before: Tue 21 Jul 2026 13:27:29 +0000 ROA not after: Tue 20 Jul 2027 13:32:29 +0000 asID: 139249 IP address blocks: 2406:840:fe72::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bf:2f:d5:cb:f8:8c:c8:53:e8:3e:01:d5:5c:3f:70:44:f5:04:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:29 2026 GMT Not After : Jul 20 13:32:29 2027 GMT Subject: CN=440747944D48FCD73479BD96AF134BA60D8F8468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9c:84:a1:86:35:75:46:a7:39:08:f8:0a:24: 6e:6b:93:45:ad:dd:e1:cf:a9:25:a6:a8:f3:9a:55: d2:ae:78:09:19:0a:54:34:c0:a2:71:c6:65:44:41: c6:20:50:8a:4b:89:b6:17:bf:03:a4:7e:de:45:24: 04:1e:03:4e:ee:2c:e0:e2:18:9e:c7:20:20:45:13: 5f:d4:a6:ad:a0:a7:98:93:2d:ca:a8:3f:2a:e5:f5: 18:d1:1e:14:d0:31:e3:db:13:59:8b:57:99:87:52: 14:73:bd:35:48:53:d3:f7:19:d7:cf:9b:f5:63:46: 18:d0:a7:8b:0a:8c:37:76:6f:f4:a7:99:42:9e:93: 79:72:15:f3:e9:75:7d:05:aa:b5:92:a0:69:43:ce: 94:a3:47:88:be:55:5e:88:fa:1e:45:ff:8f:9d:00: 99:d3:8a:24:2e:31:d7:78:ae:1a:0c:a6:b1:6d:a7: 42:e0:f6:cf:a1:d1:65:b9:41:84:91:eb:a4:e2:9f: b7:7f:88:f4:e0:b5:87:78:49:c1:21:e5:59:13:d5: b4:90:54:b3:5d:b2:4c:aa:e7:39:30:90:be:86:4b: df:a2:cf:23:18:ff:fc:bd:18:30:5d:54:48:6e:9a: 51:7d:e4:93:dc:b1:2d:f7:e6:0b:6b:da:7d:64:9d: ab:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:07:47:94:4D:48:FC:D7:34:79:BD:96:AF:13:4B:A6:0D:8F:84:68 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139249.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fe72::/48 Signature Algorithm: sha256WithRSAEncryption 3e:4b:11:1c:8e:54:36:b0:6d:99:31:0f:09:f0:df:b2:78:dc: b3:c7:0a:fa:a0:5d:a3:63:49:1e:b3:d8:cc:76:33:dc:f5:b1: 5c:0c:a3:4b:4a:70:6f:30:7d:f2:8e:76:98:9a:d9:b3:21:d4: af:56:1f:e3:82:cd:f4:ee:4c:45:19:bf:49:0a:88:4d:d3:90: 8c:d6:ea:bb:87:ff:65:0c:54:0a:e6:a7:df:f7:9f:00:98:8a: 3a:86:2a:b2:ff:f6:57:32:22:9c:77:33:c3:c6:f5:1d:d0:9a: f0:f7:6e:19:b5:d5:d5:9a:53:97:e2:d3:69:11:3d:84:b4:97: 11:c8:40:70:fe:87:d8:45:49:1a:88:76:ed:3a:46:54:9a:63: a3:e5:b0:81:4a:aa:ef:09:9c:9f:43:73:bc:1c:30:1f:c5:77: 6a:4b:4e:41:54:3b:ab:59:2b:e4:6b:33:60:0d:4f:c7:aa:7d: d0:30:27:3b:d4:1b:65:82:ee:76:fe:f4:e6:bd:a1:39:94:7a: 40:6d:0e:46:f9:0a:c7:22:2e:f8:90:16:8d:b2:48:55:21:5f: cd:67:3e:45:88:7a:64:ae:40:6e:09:75:54:88:ab:ba:f4:4d: c1:82:31:f0:02:32:37:98:64:a9:05:2f:5d:1f:fa:b4:36:2c: 1e:fe:60:8b -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUIb8v1cv4jMhT6D4B1Vw/cET1BAQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyOVoX DTI3MDcyMDEzMzIyOVowMzExMC8GA1UEAxMoNDQwNzQ3OTQ0RDQ4RkNENzM0NzlC RDk2QUYxMzRCQTYwRDhGODQ2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIichKGGNXVGpzkI+AokbmuTRa3d4c+pJaao85pV0q54CRkKVDTAonHGZURB xiBQikuJthe/A6R+3kUkBB4DTu4s4OIYnscgIEUTX9SmraCnmJMtyqg/KuX1GNEe FNAx49sTWYtXmYdSFHO9NUhT0/cZ18+b9WNGGNCniwqMN3Zv9KeZQp6TeXIV8+l1 fQWqtZKgaUPOlKNHiL5VXoj6HkX/j50AmdOKJC4x13iuGgymsW2nQuD2z6HRZblB hJHrpOKft3+I9OC1h3hJwSHlWRPVtJBUs12yTKrnOTCQvoZL36LPIxj//L0YMF1U SG6aUX3kk9yxLffmC2vafWSdq2ECAwEAAaOCAicwggIjMB0GA1UdDgQWBBREB0eU TUj81zR5vZavE0umDY+EaDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzOTI0OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQG CED+cjANBgkqhkiG9w0BAQsFAAOCAQEAPksRHI5UNrBtmTEPCfDfsnjcs8cK+qBd o2NJHrPYzHYz3PWxXAyjS0pwbzB98o52mJrZsyHUr1Yf44LN9O5MRRm/SQqITdOQ jNbqu4f/ZQxUCuan3/efAJiKOoYqsv/2VzIinHczw8b1HdCa8PduGbXV1ZpTl+LT aRE9hLSXEchAcP6H2EVJGoh27TpGVJpjo+WwgUqq7wmcn0NzvBwwH8V3aktOQVQ7 q1kr5GszYA1Px6p90DAnO9QbZYLudv705r2hOZR6QG0ORvkKxyIu+JAWjbJIVSFf zWc+RYh6ZK5Abgl1VIiruvRNwYIx8AIyN5hkqQUvXR/6tDYsHv5giw== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:51 2026 by rpki-client