$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS141429.roa File: AS141429.roa (raw, json) Hash identifier: m3ySzX9h6rDHYWEHehaVDPrRm/avULN//QRuTRhJfDQ= Subject key identifier: 20:E1:0E:C4:6B:21:5A:CF:3A:C4:CC:F5:12:3B:AF:B4:47:E1:12:19 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 1C88FE5E7ECC8D7D7E571F0D176D3B2DF194D3C7 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS141429.roa Signing time: Tue 21 Jul 2026 13:32:35 +0000 ROA not before: Tue 21 Jul 2026 13:27:35 +0000 ROA not after: Tue 20 Jul 2027 13:32:35 +0000 asID: 141429 IP address blocks: 2406:840:e0c0::/44 maxlen: 48 2406:840:e0d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:88:fe:5e:7e:cc:8d:7d:7e:57:1f:0d:17:6d:3b:2d:f1:94:d3:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:35 2026 GMT Not After : Jul 20 13:32:35 2027 GMT Subject: CN=20E10EC46B215ACF3AC4CCF5123BAFB447E11219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fe:ae:c6:65:85:de:21:29:6c:ab:e7:7f:57: 64:ad:3a:5b:68:7b:2e:e4:41:ab:a7:7d:bf:60:ae: 48:e0:99:98:01:cf:96:e2:6d:b1:25:a2:18:4e:ee: f4:c9:f3:69:99:51:4b:e1:52:27:e0:de:11:8a:68: 6c:58:c8:b6:cf:b9:b8:08:8a:41:b3:ee:9e:aa:ba: d4:89:a8:1b:1a:8b:59:01:6f:9f:90:06:e2:3e:b0: bb:79:5c:d9:14:18:f6:91:6c:e2:7c:9f:05:52:7e: 1f:4e:3c:c3:ef:ca:43:cd:3a:a2:6b:ed:43:b6:45: c9:2c:4f:18:26:7b:58:fd:1f:e6:58:3d:d8:98:c3: d3:d2:66:8e:74:66:07:55:a4:28:98:d4:47:ca:8e: 68:b4:90:76:21:08:df:68:e9:52:9a:d9:b5:c6:a0: a3:bc:1a:16:84:96:cb:5f:56:30:ef:57:d2:89:f7: 79:04:08:51:80:76:ad:bc:af:de:1c:07:64:a1:3c: 25:6e:c8:5f:00:39:33:c5:79:c1:c0:e9:fb:44:51: f0:48:1c:3a:52:4c:b2:49:0b:cf:03:be:5c:b9:86: 79:5d:a2:67:7b:6a:94:8d:25:44:cc:27:04:82:81: cf:25:c4:75:06:91:d6:0c:f8:0d:85:4d:e9:1e:37: fa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E1:0E:C4:6B:21:5A:CF:3A:C4:CC:F5:12:3B:AF:B4:47:E1:12:19 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS141429.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e0c0::/43 Signature Algorithm: sha256WithRSAEncryption 57:96:b2:72:db:6b:bb:b9:2b:d3:31:d7:33:82:33:05:dc:0c: 61:7b:d2:79:f0:8f:fe:57:b9:21:bc:f9:4d:90:a6:19:bd:f2: d1:c6:34:43:fa:6d:68:c7:2f:42:e6:72:f9:37:3c:d6:af:42: 72:12:2d:f2:1d:a0:15:ec:e1:d3:7d:84:bc:44:54:db:35:76: 17:96:3a:f9:74:ce:4e:6f:8a:61:98:10:23:41:96:9f:96:92: e8:1b:c1:6a:66:23:2b:dd:07:1f:21:84:4b:9b:11:96:c2:29: ac:d9:fb:2b:ea:cd:cb:6c:1a:17:df:60:1a:e2:27:c0:6d:dc: 7e:ea:19:3b:40:5f:03:87:a5:cc:b7:3e:c7:fb:36:c0:b2:7e: 32:bc:da:2a:72:be:a3:3c:8e:0b:d4:27:8d:78:db:37:d0:07: 82:bd:ff:bf:22:38:80:ad:a0:32:fd:3f:4f:4a:9e:3c:4d:f1: d1:a8:80:3f:8a:6d:8b:33:01:33:54:4c:c5:ae:55:c0:45:95: f7:aa:e4:d0:03:62:4c:e9:5c:98:d6:f3:34:a6:9f:0b:fa:be: 05:c6:df:f8:86:48:7b:ef:b4:47:50:85:c3:55:18:58:66:73: 59:96:09:88:bd:65:04:f2:b8:cb:c3:ac:db:75:4c:89:68:c3: 9a:7d:79:44 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUHIj+Xn7MjX1+Vx8NF207LfGU08cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczNVoX DTI3MDcyMDEzMzIzNVowMzExMC8GA1UEAxMoMjBFMTBFQzQ2QjIxNUFDRjNBQzRD Q0Y1MTIzQkFGQjQ0N0UxMTIxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMr+rsZlhd4hKWyr539XZK06W2h7LuRBq6d9v2CuSOCZmAHPluJtsSWiGE7u 9MnzaZlRS+FSJ+DeEYpobFjIts+5uAiKQbPunqq61ImoGxqLWQFvn5AG4j6wu3lc 2RQY9pFs4nyfBVJ+H048w+/KQ806omvtQ7ZFySxPGCZ7WP0f5lg92JjD09JmjnRm B1WkKJjUR8qOaLSQdiEI32jpUprZtcago7waFoSWy19WMO9X0on3eQQIUYB2rbyv 3hwHZKE8JW7IXwA5M8V5wcDp+0RR8EgcOlJMskkLzwO+XLmGeV2iZ3tqlI0lRMwn BIKBzyXEdQaR1gz4DYVN6R43+tsCAwEAAaOCAicwggIjMB0GA1UdDgQWBBQg4Q7E ayFazzrEzPUSO6+0R+ESGTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0MTQyOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBSQG CEDgwDANBgkqhkiG9w0BAQsFAAOCAQEAV5aycttru7kr0zHXM4IzBdwMYXvSefCP /le5Ibz5TZCmGb3y0cY0Q/ptaMcvQuZy+Tc81q9CchIt8h2gFezh032EvERU2zV2 F5Y6+XTOTm+KYZgQI0GWn5aS6BvBamYjK90HHyGES5sRlsIprNn7K+rNy2waF99g GuInwG3cfuoZO0BfA4elzLc+x/s2wLJ+MrzaKnK+ozyOC9QnjXjbN9AHgr3/vyI4 gK2gMv0/T0qePE3x0aiAP4ptizMBM1RMxa5VwEWV96rk0ANiTOlcmNbzNKafC/q+ Bcbf+IZIe++0R1CFw1UYWGZzWZYJiL1lBPK4y8Os23VMiWjDmn15RA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:52 2026 by rpki-client