$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS141237.roa File: AS141237.roa (raw, json) Hash identifier: 8kMZEq5rXd15gh9yEUJ5zGv/jRhgDsqHeL2vq1ohd78= Subject key identifier: B1:AE:B8:FD:E4:39:FC:51:FD:13:5E:D9:AF:4F:9F:9E:B5:2C:76:08 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 7E98F3F6162494F0855E7C1CCF5435B8DA6F5A23 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS141237.roa Signing time: Tue 21 Jul 2026 13:32:40 +0000 ROA not before: Tue 21 Jul 2026 13:27:40 +0000 ROA not after: Tue 20 Jul 2027 13:32:40 +0000 asID: 141237 IP address blocks: 2406:840:e1e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:98:f3:f6:16:24:94:f0:85:5e:7c:1c:cf:54:35:b8:da:6f:5a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:40 2026 GMT Not After : Jul 20 13:32:40 2027 GMT Subject: CN=B1AEB8FDE439FC51FD135ED9AF4F9F9EB52C7608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:be:d8:5b:93:2e:fd:07:07:de:47:16:de:f5: 0e:2c:e9:67:4d:cb:09:ac:7c:d1:25:e8:a7:4d:f4: 91:7d:3e:eb:55:ea:f9:8f:d7:02:67:9f:28:45:eb: f2:9d:f9:2a:b1:6c:d2:8c:50:7d:91:60:51:cd:94: 78:6c:ef:2b:56:47:aa:a2:df:4c:f2:81:5b:be:b6: 0d:e5:4a:34:3d:91:26:6c:e3:24:fa:fd:93:53:87: ba:35:c6:de:9d:df:b2:a2:7a:c4:aa:03:05:4d:51: 3b:4f:a0:bc:4e:db:28:6e:5a:1e:44:3a:80:cd:2d: 65:e6:61:ba:00:73:6b:e7:4f:d8:84:25:97:ab:38: d7:f4:98:48:1b:77:5a:80:c1:c6:68:c8:c9:5a:8c: 96:6e:5a:ce:7e:ec:1e:2a:8e:47:87:c8:44:7c:44: 74:54:83:cc:71:a1:c1:f0:1f:9d:bd:6c:32:10:ea: 48:76:b2:61:d4:ce:0e:cb:98:bc:3d:0d:ff:7b:44: d1:5a:37:12:63:6d:90:dc:67:18:6d:f4:ee:12:aa: 39:3f:81:ae:e5:4f:32:8c:91:2b:32:31:02:4b:77: d4:9e:f0:4e:85:ac:8a:3a:cd:69:69:f2:c9:47:93: 10:11:79:38:3e:c6:85:31:4c:76:78:36:d2:88:0e: 0f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AE:B8:FD:E4:39:FC:51:FD:13:5E:D9:AF:4F:9F:9E:B5:2C:76:08 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS141237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e1e0::/44 Signature Algorithm: sha256WithRSAEncryption 27:24:4d:94:2c:cc:ba:bd:b9:2d:57:63:c7:69:4c:f1:c0:e5: ea:d2:a2:29:6b:64:00:d3:31:82:f4:4e:37:23:0d:9c:6a:ed: f5:96:22:ae:ac:05:df:b2:7d:78:dd:48:e2:cb:6b:04:81:25: 2e:31:e9:68:32:b4:12:06:56:5d:14:44:60:d9:ed:42:a2:11: a1:0a:f3:40:95:43:6c:05:48:4a:6c:21:56:92:e8:29:ab:63: 11:6e:5f:99:64:c6:91:84:7d:47:4a:59:72:35:a0:79:21:7d: 7a:d5:80:1d:ae:fb:69:a5:65:29:2c:d6:69:c1:87:e1:e3:3f: 40:ef:20:60:e8:9e:b4:44:21:3e:ae:60:fa:94:28:d4:39:61: 8d:ab:96:44:a6:9b:4b:a4:83:e3:f4:e4:0b:5a:70:28:43:fb: aa:7f:34:61:84:86:2f:de:2c:da:e9:bf:d8:6a:6f:45:dd:42: f2:74:74:c4:4f:9a:47:01:8d:48:c5:16:3c:e6:10:ba:dd:10: 49:2f:4a:7f:58:c6:42:d4:2b:79:a1:32:b6:82:5d:83:ac:de: d1:ca:33:1e:53:2b:39:7a:a6:48:11:c3:59:3c:78:0e:ae:6f: 06:32:dc:c6:67:93:30:c7:cb:29:27:c4:70:59:9b:7a:8a:e9: 1a:29:d2:c4 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUfpjz9hYklPCFXnwcz1Q1uNpvWiMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjc0MFoX DTI3MDcyMDEzMzI0MFowMzExMC8GA1UEAxMoQjFBRUI4RkRFNDM5RkM1MUZEMTM1 RUQ5QUY0RjlGOUVCNTJDNzYwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKO+2FuTLv0HB95HFt71DizpZ03LCax80SXop030kX0+61Xq+Y/XAmefKEXr 8p35KrFs0oxQfZFgUc2UeGzvK1ZHqqLfTPKBW762DeVKND2RJmzjJPr9k1OHujXG 3p3fsqJ6xKoDBU1RO0+gvE7bKG5aHkQ6gM0tZeZhugBza+dP2IQll6s41/SYSBt3 WoDBxmjIyVqMlm5azn7sHiqOR4fIRHxEdFSDzHGhwfAfnb1sMhDqSHayYdTODsuY vD0N/3tE0Vo3EmNtkNxnGG307hKqOT+BruVPMoyRKzIxAkt31J7wToWsijrNaWny yUeTEBF5OD7GhTFMdng20ogOD8UCAwEAAaOCAicwggIjMB0GA1UdDgQWBBSxrrj9 5Dn8Uf0TXtmvT5+etSx2CDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0MTIzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CEDh4DANBgkqhkiG9w0BAQsFAAOCAQEAJyRNlCzMur25LVdjx2lM8cDl6tKiKWtk ANMxgvRONyMNnGrt9ZYirqwF37J9eN1I4strBIElLjHpaDK0EgZWXRREYNntQqIR oQrzQJVDbAVISmwhVpLoKatjEW5fmWTGkYR9R0pZcjWgeSF9etWAHa77aaVlKSzW acGH4eM/QO8gYOietEQhPq5g+pQo1DlhjauWRKabS6SD4/TkC1pwKEP7qn80YYSG L94s2um/2GpvRd1C8nR0xE+aRwGNSMUWPOYQut0QSS9Kf1jGQtQreaEytoJdg6ze 0cozHlMrOXqmSBHDWTx4Dq5vBjLcxmeTMMfLKSfEcFmbeorpGinSxA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:10 2026 by rpki-client