$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139589.roa File: AS139589.roa (raw, json) Hash identifier: Bmuld2g9fv9wUxgt5Jk0kTUTK6gTQxlFRt0OIl+BBZo= Subject key identifier: E3:B9:37:F6:64:A9:92:2A:13:B3:B1:98:D2:87:9B:7C:F2:00:22:1F Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 693B7B425680B3BFB4F57215A8F0DEBD591D6A8D Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139589.roa Signing time: Tue 21 Jul 2026 13:32:20 +0000 ROA not before: Tue 21 Jul 2026 13:27:20 +0000 ROA not after: Tue 20 Jul 2027 13:32:20 +0000 asID: 139589 IP address blocks: 2406:840:f200::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:3b:7b:42:56:80:b3:bf:b4:f5:72:15:a8:f0:de:bd:59:1d:6a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:20 2026 GMT Not After : Jul 20 13:32:20 2027 GMT Subject: CN=E3B937F664A9922A13B3B198D2879B7CF200221F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:de:ac:02:c1:3a:52:43:46:aa:ac:5c:30:8c: 92:df:d1:6a:c6:ab:9e:e1:96:14:ee:5c:5e:6a:96: 37:c7:3a:c3:43:4e:3e:fa:40:36:70:99:23:f5:f1: bb:b1:4b:48:9e:29:f7:2a:90:6d:b0:8c:07:04:e3: 86:94:9a:33:c6:7d:31:02:da:dc:8e:81:ff:e0:7b: a1:2c:85:c7:61:89:82:38:19:7d:3f:71:8e:e8:ff: 16:61:56:a4:65:96:fc:c6:69:de:29:d7:2b:e0:e3: d7:fd:f4:8d:b6:8a:95:c3:57:2e:b8:c9:40:37:cc: a3:3a:a8:15:29:6a:59:46:2e:e1:f9:e5:bf:1c:4d: a2:05:0c:21:a1:b3:c3:ec:f7:58:0a:e5:11:cb:12: 94:d9:74:f6:7f:1c:68:26:5d:9a:3a:49:2f:5e:17: 77:f2:07:e3:6a:99:84:41:41:84:21:e2:80:0e:e2: c8:d6:d0:25:74:9d:20:a0:21:a1:8b:a2:8c:b7:e5: e0:7a:71:43:42:42:45:ed:64:31:27:13:40:39:3a: ea:04:44:ee:88:74:e8:7f:60:10:16:05:c1:08:ae: f8:06:3c:ff:73:b0:1f:bc:f8:b7:42:b1:5f:d0:d2: 66:32:83:ac:58:d0:81:55:65:35:de:a8:81:17:f7: 18:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B9:37:F6:64:A9:92:2A:13:B3:B1:98:D2:87:9B:7C:F2:00:22:1F X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139589.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:f200::/44 Signature Algorithm: sha256WithRSAEncryption 69:2f:b2:92:c9:1b:f8:2b:62:d1:a8:e2:ed:e0:d4:81:fc:8d: 5a:01:5a:91:3b:0d:49:34:fa:ad:e1:13:d6:ff:c2:2d:25:bc: 46:31:e2:3c:a9:2b:63:e5:a6:4b:8a:56:f4:fc:df:1e:9f:27: 2a:9c:e5:43:be:13:00:ce:88:8e:67:6d:87:48:4d:cd:81:34: 17:3d:f0:df:bd:5f:6d:13:f1:9e:55:7d:fb:9b:01:5b:e0:58: 09:fc:29:5b:3f:b9:ca:72:b6:c3:52:90:80:10:36:8d:14:44: 78:46:35:cc:fa:fb:13:73:9a:eb:51:de:14:f0:b4:f0:26:1b: 17:4e:be:aa:4d:67:22:55:66:04:40:a1:5c:ef:bf:0c:86:ea: a5:d5:88:38:f1:2c:b9:b3:74:36:8a:1b:32:0a:f4:a5:38:28: fc:f1:53:78:c4:29:bd:36:94:d7:61:d1:93:7a:b5:d0:8a:d4: da:3a:b1:f9:e2:e2:22:99:c0:fd:3d:29:86:74:4f:cb:0c:47: fb:74:5e:fb:da:e5:9a:99:2d:95:d6:b2:e8:ea:6f:ba:82:5b: 3a:d1:8d:88:a4:36:b8:74:e6:d4:0c:34:12:19:59:96:9e:5b: 0f:ed:4e:47:71:d8:de:c5:fc:c8:88:f7:35:9f:57:f7:49:7c: 09:14:31:eb -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUaTt7QlaAs7+09XIVqPDevVkdao0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyMFoX DTI3MDcyMDEzMzIyMFowMzExMC8GA1UEAxMoRTNCOTM3RjY2NEE5OTIyQTEzQjNC MTk4RDI4NzlCN0NGMjAwMjIxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJXerALBOlJDRqqsXDCMkt/RasarnuGWFO5cXmqWN8c6w0NOPvpANnCZI/Xx u7FLSJ4p9yqQbbCMBwTjhpSaM8Z9MQLa3I6B/+B7oSyFx2GJgjgZfT9xjuj/FmFW pGWW/MZp3inXK+Dj1/30jbaKlcNXLrjJQDfMozqoFSlqWUYu4fnlvxxNogUMIaGz w+z3WArlEcsSlNl09n8caCZdmjpJL14Xd/IH42qZhEFBhCHigA7iyNbQJXSdIKAh oYuijLfl4HpxQ0JCRe1kMScTQDk66gRE7oh06H9gEBYFwQiu+AY8/3OwH7z4t0Kx X9DSZjKDrFjQgVVlNd6ogRf3GK8CAwEAAaOCAicwggIjMB0GA1UdDgQWBBTjuTf2 ZKmSKhOzsZjSh5t88gAiHzAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzOTU4OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CEDyADANBgkqhkiG9w0BAQsFAAOCAQEAaS+ykskb+Cti0aji7eDUgfyNWgFakTsN STT6reET1v/CLSW8RjHiPKkrY+WmS4pW9PzfHp8nKpzlQ74TAM6Ijmdth0hNzYE0 Fz3w371fbRPxnlV9+5sBW+BYCfwpWz+5ynK2w1KQgBA2jRREeEY1zPr7E3Oa61He FPC08CYbF06+qk1nIlVmBEChXO+/DIbqpdWIOPEsubN0NoobMgr0pTgo/PFTeMQp vTaU12HRk3q10IrU2jqx+eLiIpnA/T0phnRPywxH+3Re+9rlmpktlday6OpvuoJb OtGNiKQ2uHTm1Aw0EhlZlp5bD+1OR3HY3sX8yIj3NZ9X90l8CRQx6w== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:51 2026 by rpki-client