$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139888.roa File: AS139888.roa (raw, json) Hash identifier: ysylv7VES8RG9CuA1bVQHrjt/erOMInROt6wuBCN/3o= Subject key identifier: 05:67:8F:6F:F3:F1:A5:54:F3:02:45:2F:08:17:B7:EA:F7:7F:4A:4E Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 521534C9B3E74925923FD74D2DCB36061BAC43A7 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139888.roa Signing time: Tue 21 Jul 2026 13:32:24 +0000 ROA not before: Tue 21 Jul 2026 13:27:24 +0000 ROA not after: Tue 20 Jul 2027 13:32:24 +0000 asID: 139888 IP address blocks: 2406:840:fc80::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:15:34:c9:b3:e7:49:25:92:3f:d7:4d:2d:cb:36:06:1b:ac:43:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:24 2026 GMT Not After : Jul 20 13:32:24 2027 GMT Subject: CN=05678F6FF3F1A554F302452F0817B7EAF77F4A4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:09:ca:f6:76:42:8f:48:8d:02:33:ab:3a:04: c5:e0:da:da:29:e3:b9:4f:6d:f0:f8:7c:bb:3a:96: 8f:10:03:fc:20:d7:af:67:9c:9d:f9:62:10:72:96: 57:8c:00:0c:f1:f0:8c:8c:8b:a2:fb:fd:7c:21:fa: ae:c6:7c:6e:42:bb:b1:e2:9d:ae:1b:b6:4c:7b:00: c1:8c:01:f4:02:e9:1d:6f:5f:44:ec:fd:93:f3:41: 3b:78:7e:3d:c1:40:b4:78:7e:7f:1a:7f:b7:09:db: bc:41:66:fb:7e:57:e8:ce:2b:48:51:11:e7:d4:c8: 40:82:60:03:09:0c:a1:43:34:02:42:74:ac:f0:a8: bc:54:94:f4:a6:3d:97:0d:39:c2:91:50:86:62:b4: be:29:f8:2c:d8:d1:95:d0:8c:d9:4f:72:09:35:b8: ae:17:09:48:d4:09:6a:ad:4f:14:ca:36:d5:66:38: 7d:06:cc:ca:67:ce:f1:65:cd:e8:32:e3:d8:dc:f3: 35:63:d1:e9:e0:92:c9:e0:37:97:c6:9c:f1:33:72: c3:ad:d9:a1:bd:d2:87:3e:06:75:b4:c0:17:07:a0: c9:41:fe:8b:ba:7f:e3:83:2d:49:6a:b2:68:a2:45: 64:6a:bc:bd:63:b5:c4:0a:6b:b8:d3:dc:a1:31:23: 63:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:67:8F:6F:F3:F1:A5:54:F3:02:45:2F:08:17:B7:EA:F7:7F:4A:4E X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS139888.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fc80::/44 Signature Algorithm: sha256WithRSAEncryption 16:5d:c0:01:d0:0a:a5:d0:85:e0:5a:6d:2b:90:5f:bd:e5:83: 22:1a:ae:02:5f:34:f0:37:e9:8f:4a:ca:d1:1d:ba:9d:05:c6: b2:87:1a:f8:ac:3e:09:f1:c0:a1:d5:cb:b8:43:27:d8:d8:2b: 39:61:77:03:30:d2:97:a2:13:1a:4d:6f:e3:10:8a:71:1c:60: 44:28:a4:23:28:a3:9f:73:77:fe:a6:36:69:11:07:62:0f:65: f7:dd:28:4d:a1:12:9b:6a:06:d9:3d:67:72:bd:a3:25:9d:49: cd:55:2b:2c:70:bb:ab:7b:bd:e3:ef:11:8a:fa:01:92:8c:bf: bd:b3:1d:7d:3d:ea:04:99:b2:7e:2b:66:7b:e8:41:8c:07:9d: 14:69:c1:b6:ed:74:62:59:2c:8a:99:c5:8a:07:4e:c3:0d:6b: 75:74:13:ce:bc:d3:b8:e3:fd:26:33:1a:3e:3f:e9:96:e2:8c: 2e:c1:1d:07:b5:4c:c7:4b:20:2b:b1:34:dc:22:92:6d:d6:d8: 9c:ad:dc:7f:23:d8:47:c2:f8:bb:bd:ef:5a:f4:1a:39:0c:af: 50:6a:ef:e8:ea:1a:bc:07:2b:c8:00:29:11:65:f2:9a:53:85: 81:be:44:c6:13:cd:15:e7:8b:c4:ef:9b:48:be:72:44:6b:9c: 7d:2d:a8:c2 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUUhU0ybPnSSWSP9dNLcs2BhusQ6cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyNFoX DTI3MDcyMDEzMzIyNFowMzExMC8GA1UEAxMoMDU2NzhGNkZGM0YxQTU1NEYzMDI0 NTJGMDgxN0I3RUFGNzdGNEE0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ4JyvZ2Qo9IjQIzqzoExeDa2injuU9t8Ph8uzqWjxAD/CDXr2ecnfliEHKW V4wADPHwjIyLovv9fCH6rsZ8bkK7seKdrhu2THsAwYwB9ALpHW9fROz9k/NBO3h+ PcFAtHh+fxp/twnbvEFm+35X6M4rSFER59TIQIJgAwkMoUM0AkJ0rPCovFSU9KY9 lw05wpFQhmK0vin4LNjRldCM2U9yCTW4rhcJSNQJaq1PFMo21WY4fQbMymfO8WXN 6DLj2NzzNWPR6eCSyeA3l8ac8TNyw63Zob3Shz4GdbTAFwegyUH+i7p/44MtSWqy aKJFZGq8vWO1xApruNPcoTEjY7ECAwEAAaOCAicwggIjMB0GA1UdDgQWBBQFZ49v 8/GlVPMCRS8IF7fq939KTjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzEzOTg4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CED8gDANBgkqhkiG9w0BAQsFAAOCAQEAFl3AAdAKpdCF4FptK5BfveWDIhquAl80 8Dfpj0rK0R26nQXGsoca+Kw+CfHAodXLuEMn2NgrOWF3AzDSl6ITGk1v4xCKcRxg RCikIyijn3N3/qY2aREHYg9l990oTaESm2oG2T1ncr2jJZ1JzVUrLHC7q3u94+8R ivoBkoy/vbMdfT3qBJmyfitme+hBjAedFGnBtu10YlksipnFigdOww1rdXQTzrzT uOP9JjMaPj/pluKMLsEdB7VMx0sgK7E03CKSbdbYnK3cfyPYR8L4u73vWvQaOQyv UGrv6OoavAcryAApEWXymlOFgb5ExhPNFeeLxO+bSL5yRGucfS2owg== -----END CERTIFICATE-----Generated at Tue Jul 21 21:42:19 2026 by rpki-client