$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139249.roa File: AS139249.roa (raw, json) Hash identifier: mtE2vFJOYhJ0DD8MftxxXHoWEaGN/31kNghPUPPheTg= Subject key identifier: 8B:6B:94:93:D6:8B:63:65:0F:4B:F6:38:CC:B5:A6:06:19:F4:ED:F6 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 2DE5EB034945971D7B3ECC3AFC1DBA9E9CE81400 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139249.roa Signing time: Sun 30 Aug 2026 14:11:35 +0000 ROA not before: Sun 30 Aug 2026 14:06:35 +0000 ROA not after: Sun 29 Aug 2027 14:11:35 +0000 asID: 139249 IP address blocks: 2406:840:feb2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 06:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e5:eb:03:49:45:97:1d:7b:3e:cc:3a:fc:1d:ba:9e:9c:e8:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Aug 30 14:06:35 2026 GMT Not After : Aug 29 14:11:35 2027 GMT Subject: CN=8B6B9493D68B63650F4BF638CCB5A60619F4EDF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5e:60:c4:e2:24:a9:65:b9:df:37:a2:28:e0: 3d:71:38:68:71:e8:b7:ab:ca:a4:a1:9d:82:5e:5c: 0e:08:eb:65:66:f0:5e:ef:d5:64:ec:64:27:bc:a2: ad:48:99:bf:72:42:d1:28:d9:bc:f9:50:5d:78:ce: 93:97:a7:80:bf:0e:e3:7a:2b:1f:a8:dc:d2:47:fa: 03:e9:32:1e:1e:a7:0f:e7:41:43:40:3c:ae:d4:80: 52:a9:f8:b3:a0:76:41:b0:cd:4c:e2:9f:86:65:59: 5c:44:05:38:98:24:e2:72:2c:4c:e4:bb:7e:95:e8: fb:a2:fc:c5:0d:75:7d:71:b3:fc:b4:cb:e0:d4:1e: 56:dd:e9:04:ed:03:43:6e:67:2b:65:f2:f0:ba:65: 12:16:50:ae:7e:c7:66:ef:8e:47:cc:d6:27:cf:70: e4:71:96:6e:04:80:33:68:2e:eb:c1:74:13:fd:08: 6d:cf:e8:32:64:ec:cd:e0:cc:01:70:52:a2:94:74: e1:df:97:00:0f:93:d3:a8:6c:45:25:53:44:5a:bf: 19:98:51:a6:5c:0b:23:23:75:58:fb:e5:45:71:39: 8b:18:c5:7f:f8:8e:4c:64:c7:b9:a7:68:bf:06:44: a4:b3:39:9c:01:90:b6:b6:1b:39:0e:de:dc:76:05: d7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6B:94:93:D6:8B:63:65:0F:4B:F6:38:CC:B5:A6:06:19:F4:ED:F6 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139249.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:feb2::/48 Signature Algorithm: sha256WithRSAEncryption 73:b3:db:8a:da:34:ce:5e:c5:b5:73:7c:ce:fa:5b:ab:53:12: 4e:2e:9a:43:57:cf:4e:c8:d7:8b:38:d1:44:d5:70:9d:db:e3: 52:c4:35:4c:8c:b6:bb:0b:77:08:ce:f9:64:af:b3:72:89:01: bc:23:22:df:38:e6:13:bd:b8:eb:7b:ac:7f:e1:a3:e7:1f:f6: bc:0e:3b:26:35:d1:3d:8b:51:1f:7f:16:29:5c:e7:e3:5c:bd: 00:21:28:15:48:99:0c:df:26:36:92:13:41:45:89:01:21:ea: 8f:18:de:d0:35:08:06:27:07:9b:43:35:01:b3:f2:91:a9:96: 5d:c0:9c:a5:7f:75:50:44:92:a8:10:01:60:09:13:99:f5:e5: eb:ba:2e:65:fc:fb:79:d4:fd:93:ec:cb:c2:b6:e2:77:ba:71: f8:8b:bb:f4:ca:18:9c:f3:5c:94:50:ba:f0:88:2f:0a:d0:f0: 9a:b8:0e:0d:ba:77:88:89:57:6d:12:e6:d4:0b:94:37:6e:f6: 58:2e:45:f9:a5:2d:8a:be:4d:0b:e1:2a:bd:97:18:88:42:be: c9:ab:f5:84:f5:73:f7:7f:c0:80:39:7b:43:b1:dc:55:58:88: 67:15:05:53:2a:71:8c:ee:b6:86:61:2f:93:44:71:62:0b:65: 7c:70:84:01 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIULeXrA0lFlx17Psw6/B26npzoFAAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDgzMDE0MDYzNVoX DTI3MDgyOTE0MTEzNVowMzExMC8GA1UEAxMoOEI2Qjk0OTNENjhCNjM2NTBGNEJG NjM4Q0NCNUE2MDYxOUY0RURGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5eYMTiJKllud83oijgPXE4aHHot6vKpKGdgl5cDgjrZWbwXu/VZOxkJ7yi rUiZv3JC0SjZvPlQXXjOk5engL8O43orH6jc0kf6A+kyHh6nD+dBQ0A8rtSAUqn4 s6B2QbDNTOKfhmVZXEQFOJgk4nIsTOS7fpXo+6L8xQ11fXGz/LTL4NQeVt3pBO0D Q25nK2Xy8LplEhZQrn7HZu+OR8zWJ89w5HGWbgSAM2gu68F0E/0Ibc/oMmTszeDM AXBSopR04d+XAA+T06hsRSVTRFq/GZhRplwLIyN1WPvlRXE5ixjFf/iOTGTHuado vwZEpLM5nAGQtrYbOQ7e3HYF11sCAwEAAaOCAicwggIjMB0GA1UdDgQWBBSLa5ST 1otjZQ9L9jjMtaYGGfTt9jAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzOTI0OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQG CED+sjANBgkqhkiG9w0BAQsFAAOCAQEAc7Pbito0zl7FtXN8zvpbq1MSTi6aQ1fP TsjXizjRRNVwndvjUsQ1TIy2uwt3CM75ZK+zcokBvCMi3zjmE72463usf+Gj5x/2 vA47JjXRPYtRH38WKVzn41y9ACEoFUiZDN8mNpITQUWJASHqjxje0DUIBicHm0M1 AbPykamWXcCcpX91UESSqBABYAkTmfXl67ouZfz7edT9k+zLwrbid7px+Iu79MoY nPNclFC68IgvCtDwmrgODbp3iIlXbRLm1AuUN272WC5F+aUtir5NC+EqvZcYiEK+ yav1hPVz93/AgDl7Q7HcVViIZxUFUypxjO62hmEvk0RxYgtlfHCEAQ== -----END CERTIFICATE-----Generated at Fri Sep 4 21:19:56 2026 by rpki-client