$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139317.roa File: AS139317.roa (raw, json) Hash identifier: bYwP/71u3pEG8b3usRA42sWnCVxkJCgA8Ak5B0PS9+o= Subject key identifier: C1:96:37:CF:3B:92:8D:9D:A5:D3:6F:1C:63:55:7E:73:65:7C:B8:C6 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 311E4701208151C48CF59E14F214DD4F35072462 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139317.roa Signing time: Tue 21 Jul 2026 13:32:36 +0000 ROA not before: Tue 21 Jul 2026 13:27:36 +0000 ROA not after: Tue 20 Jul 2027 13:32:36 +0000 asID: 139317 IP address blocks: 2406:840::/33 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:1e:47:01:20:81:51:c4:8c:f5:9e:14:f2:14:dd:4f:35:07:24:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:36 2026 GMT Not After : Jul 20 13:32:36 2027 GMT Subject: CN=C19637CF3B928D9DA5D36F1C63557E73657CB8C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c3:68:3b:6d:bf:f7:4a:fb:bc:d4:bc:68:11: 8a:da:bf:cd:10:c3:28:bd:f4:a1:d1:9f:40:9a:de: f9:7e:89:07:a2:ca:36:6f:23:61:6e:57:a8:8f:05: 8e:f9:a6:1e:d9:cb:2d:d3:00:8d:cb:d5:8b:93:55: 5f:fc:74:99:0b:4c:a2:2a:27:d3:75:fa:78:d6:67: 41:d2:b5:0d:01:83:df:9d:a3:a8:cd:72:6a:25:9f: 6a:67:df:5a:18:db:ef:b4:24:65:76:5f:16:a0:1c: e7:f8:05:3a:54:0f:79:83:07:c2:7b:39:bc:c4:41: 2a:d1:ee:5e:f1:80:11:72:b5:48:10:01:68:c8:be: a4:90:a3:97:db:40:1b:08:46:64:6b:02:df:ca:0d: f8:87:e0:4a:d3:73:eb:5e:a4:e8:56:d4:45:96:04: d2:ec:ee:01:95:f4:14:5f:6b:96:20:fe:5f:54:ca: f8:92:46:5b:21:f4:14:19:8c:1f:82:3a:65:3d:d2: 3f:fb:13:80:ec:25:5d:34:0e:78:97:0d:6a:39:54: ea:3f:58:4a:93:0d:99:3c:62:45:ac:d0:09:a7:44: 3f:dd:db:f3:bd:ed:93:ac:82:56:02:ce:a1:38:05: a3:0e:4e:78:78:19:a2:d6:9f:6e:11:b8:25:3c:b0: 9d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:96:37:CF:3B:92:8D:9D:A5:D3:6F:1C:63:55:7E:73:65:7C:B8:C6 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139317.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840::/33 Signature Algorithm: sha256WithRSAEncryption 6d:3c:45:35:49:02:7d:da:6e:88:34:e9:f8:14:94:5b:99:a4: 86:9f:0a:64:41:1b:a5:53:e1:b6:ea:9e:3e:13:f8:25:11:74: 64:90:5a:1c:3a:4e:7e:66:fb:94:ca:3a:cf:ac:0c:a9:84:a9: b1:ad:ab:5a:44:c8:5c:4d:b0:43:96:64:09:e2:69:d7:0f:44: 6b:b2:86:f3:f0:51:e7:97:7d:20:a8:b6:9d:80:6a:73:f5:fc: 1f:9a:7e:3d:c6:e0:94:a9:8d:08:07:e7:fa:0c:99:75:e3:5b: 5e:d2:32:50:61:fd:f9:7c:0d:83:d7:27:62:13:16:6a:c4:d9: ca:03:1f:0f:88:12:c3:b5:9b:31:f2:7e:b5:ed:04:ee:f6:77: f7:7f:a8:62:26:32:3d:fd:71:7d:bd:4f:e3:90:9d:e1:76:e3: 38:40:bb:07:03:56:a3:7d:01:c5:47:0a:53:6a:ea:1e:65:ac: d9:4b:a8:33:a6:d5:a2:e7:42:08:26:e2:0b:b2:4c:25:dd:24: ad:16:37:da:97:90:cd:15:ff:78:41:9c:f3:04:10:7a:9a:b7: fa:97:4d:61:c7:24:83:46:f8:08:87:00:e6:4e:22:77:5f:b6: 1a:e9:36:6f:4a:9a:47:54:21:b5:9a:c0:77:14:13:58:60:11: 66:ad:7f:22 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUMR5HASCBUcSM9Z4U8hTdTzUHJGIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczNloX DTI3MDcyMDEzMzIzNlowMzExMC8GA1UEAxMoQzE5NjM3Q0YzQjkyOEQ5REE1RDM2 RjFDNjM1NTdFNzM2NTdDQjhDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJHDaDttv/dK+7zUvGgRitq/zRDDKL30odGfQJre+X6JB6LKNm8jYW5XqI8F jvmmHtnLLdMAjcvVi5NVX/x0mQtMoion03X6eNZnQdK1DQGD352jqM1yaiWfamff Whjb77QkZXZfFqAc5/gFOlQPeYMHwns5vMRBKtHuXvGAEXK1SBABaMi+pJCjl9tA GwhGZGsC38oN+IfgStNz616k6FbURZYE0uzuAZX0FF9rliD+X1TK+JJGWyH0FBmM H4I6ZT3SP/sTgOwlXTQOeJcNajlU6j9YSpMNmTxiRazQCadEP93b873tk6yCVgLO oTgFow5OeHgZotafbhG4JTywnf0CAwEAAaOCAiYwggIiMB0GA1UdDgQWBBTBljfP O5KNnaXTbxxjVX5zZXy4xjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzOTMxNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGByQG CEAAMA0GCSqGSIb3DQEBCwUAA4IBAQBtPEU1SQJ92m6INOn4FJRbmaSGnwpkQRul U+G26p4+E/glEXRkkFocOk5+ZvuUyjrPrAyphKmxrataRMhcTbBDlmQJ4mnXD0Rr sobz8FHnl30gqLadgGpz9fwfmn49xuCUqY0IB+f6DJl141te0jJQYf35fA2D1ydi ExZqxNnKAx8PiBLDtZsx8n617QTu9nf3f6hiJjI9/XF9vU/jkJ3hduM4QLsHA1aj fQHFRwpTauoeZazZS6gzptWi50IIJuILskwl3SStFjfal5DNFf94QZzzBBB6mrf6 l01hxySDRvgIhwDmTiJ3X7Ya6TZvSppHVCG1msB3FBNYYBFmrX8i -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:04 2026 by rpki-client