$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS140682.roa File: AS140682.roa (raw, json) Hash identifier: C2lZIXylxeIOAWIpjl5ioAGWqyS3B93C+SqUKoSh28A= Subject key identifier: F6:C5:B6:DD:94:99:EF:BD:30:E4:F1:98:66:35:22:43:04:08:20:AE Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 0C6255F17EF9AF3F3590D59B2AF098E7AB9C058A Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS140682.roa Signing time: Tue 21 Jul 2026 13:32:21 +0000 ROA not before: Tue 21 Jul 2026 13:27:21 +0000 ROA not after: Tue 20 Jul 2027 13:32:21 +0000 asID: 140682 IP address blocks: 2406:840:9960::/44 maxlen: 48 2406:840:feae::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:62:55:f1:7e:f9:af:3f:35:90:d5:9b:2a:f0:98:e7:ab:9c:05:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:21 2026 GMT Not After : Jul 20 13:32:21 2027 GMT Subject: CN=F6C5B6DD9499EFBD30E4F19866352243040820AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:20:6e:bd:0b:71:90:d5:b2:81:b4:65:f8:7a: 10:29:de:99:d6:f0:2d:b3:7c:23:24:bb:01:21:d9: fe:d7:91:69:01:6f:ac:30:5c:06:ec:e2:39:6c:bd: 0c:60:98:a1:9e:71:43:c5:c0:ba:4b:38:a0:f4:3e: db:d7:f2:94:cb:12:a8:a9:cd:1d:33:c2:56:18:ab: 48:3e:d8:42:76:3e:4e:e7:ca:99:8b:40:53:67:ff: 15:a5:c3:42:1b:86:18:40:f7:d2:7d:49:ea:17:d2: 0e:d8:85:94:5d:9f:f7:77:01:46:af:ab:0c:11:f8: c8:13:ed:97:a8:c3:44:cc:4f:af:0c:f5:61:21:8f: 77:37:3e:92:a3:3b:43:e6:fe:45:8c:fb:19:8a:19: 18:d2:a9:70:89:fe:52:d3:4d:1a:22:64:4d:ad:69: 37:97:59:6b:3a:a4:68:57:5b:4e:58:f1:2a:7c:00: b4:2e:45:16:49:a8:59:76:62:e6:d9:27:35:fe:70: 64:c7:31:86:0d:e3:b3:17:ee:92:09:8a:83:a3:b9: 91:96:4a:c2:cc:6c:88:74:bd:33:f5:92:64:cf:01: f5:26:d8:83:fc:84:4d:04:2f:d4:c5:c8:59:db:a1: 85:5a:01:63:f9:0c:e8:f3:be:d8:9d:a3:aa:b4:9d: 82:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C5:B6:DD:94:99:EF:BD:30:E4:F1:98:66:35:22:43:04:08:20:AE X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS140682.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9960::/44 2406:840:feae::/48 Signature Algorithm: sha256WithRSAEncryption 16:51:65:ac:c9:72:cb:d4:2f:28:43:73:d1:7f:62:36:e5:75: 7b:ce:55:3d:2d:af:32:41:42:04:a6:d1:87:7c:d4:d4:f6:c7: 81:1f:dd:a1:5b:23:0f:d7:81:32:a9:86:fb:3d:fa:22:cf:e1: 3c:24:f9:67:ff:f2:6d:bc:eb:13:0d:4d:8b:11:6c:87:01:96: 4f:4b:b7:a4:37:6f:e6:7c:c2:07:52:c1:56:14:63:7e:a4:22: a7:20:18:cd:61:1b:88:df:52:41:fc:1a:cf:96:1f:7d:bd:0b: 58:ef:19:97:1d:3c:f2:7d:12:a9:c9:c8:2a:f1:53:d5:55:79: 3c:a2:54:7b:f2:0f:dd:f9:45:b4:22:09:f5:ef:cb:d7:0c:79: bc:11:af:23:c8:ba:34:13:fe:5a:26:41:dc:41:1d:a4:ac:e3: 87:78:81:6c:1d:77:3b:a2:e1:19:c0:ae:98:30:2c:04:c5:1e: d1:ff:c2:19:73:47:d8:2c:e6:c8:9b:2f:67:51:49:40:f6:a1: 08:89:2c:99:86:9c:55:e9:4c:e9:92:3a:f1:d2:13:5a:6f:29: 96:48:0e:86:e0:4b:8e:9e:e0:c7:c5:1d:67:be:45:cf:dc:dc: 5c:cc:a4:ab:21:12:3b:36:39:56:4f:c7:70:4e:76:ed:48:23: b9:92:0b:27 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDGJV8X75rz81kNWbKvCY56ucBYowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyMVoX DTI3MDcyMDEzMzIyMVowMzExMC8GA1UEAxMoRjZDNUI2REQ5NDk5RUZCRDMwRTRG MTk4NjYzNTIyNDMwNDA4MjBBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANggbr0LcZDVsoG0Zfh6ECnemdbwLbN8IyS7ASHZ/teRaQFvrDBcBuziOWy9 DGCYoZ5xQ8XAuks4oPQ+29fylMsSqKnNHTPCVhirSD7YQnY+TufKmYtAU2f/FaXD QhuGGED30n1J6hfSDtiFlF2f93cBRq+rDBH4yBPtl6jDRMxPrwz1YSGPdzc+kqM7 Q+b+RYz7GYoZGNKpcIn+UtNNGiJkTa1pN5dZazqkaFdbTljxKnwAtC5FFkmoWXZi 5tknNf5wZMcxhg3jsxfukgmKg6O5kZZKwsxsiHS9M/WSZM8B9SbYg/yETQQv1MXI WduhhVoBY/kM6PO+2J2jqrSdgtMCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBT2xbbd lJnvvTDk8ZhmNSJDBAggrjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0MDY4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CECZYAMHACQGCED+rjANBgkqhkiG9w0BAQsFAAOCAQEAFlFlrMlyy9QvKENz0X9i NuV1e85VPS2vMkFCBKbRh3zU1PbHgR/doVsjD9eBMqmG+z36Is/hPCT5Z//ybbzr Ew1NixFshwGWT0u3pDdv5nzCB1LBVhRjfqQipyAYzWEbiN9SQfwaz5Yffb0LWO8Z lx088n0SqcnIKvFT1VV5PKJUe/IP3flFtCIJ9e/L1wx5vBGvI8i6NBP+WiZB3EEd pKzjh3iBbB13O6LhGcCumDAsBMUe0f/CGXNH2CzmyJsvZ1FJQPahCIksmYacVelM 6ZI68dITWm8plkgOhuBLjp7gx8UdZ75Fz9zcXMykqyESOzY5Vk/HcE527UgjuZIL Jw== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:07 2026 by rpki-client