$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS141776.roa File: AS141776.roa (raw, json) Hash identifier: jYsYhDXBAe00FkVgks6rDJ9gUeWnEzKAXndA7JSVv2Q= Subject key identifier: 4E:F1:7A:98:DC:A9:2C:2A:80:75:EE:C2:92:15:81:47:7A:D7:AD:AE Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 7D23DF38F8F6EBA85D0B25395AA7D7084E866DB7 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS141776.roa Signing time: Tue 21 Jul 2026 13:32:33 +0000 ROA not before: Tue 21 Jul 2026 13:27:33 +0000 ROA not after: Tue 20 Jul 2027 13:32:33 +0000 asID: 141776 IP address blocks: 2406:840:e080::/44 maxlen: 48 2406:840:fef9::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:23:df:38:f8:f6:eb:a8:5d:0b:25:39:5a:a7:d7:08:4e:86:6d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:33 2026 GMT Not After : Jul 20 13:32:33 2027 GMT Subject: CN=4EF17A98DCA92C2A8075EEC2921581477AD7ADAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7e:6d:30:74:d3:90:d8:fe:fd:0d:b5:15:12: fb:e3:dc:a5:ed:27:68:38:2d:b8:69:b9:91:b8:54: e2:2b:52:e0:5d:21:b4:45:49:91:b0:f0:6b:28:dd: 32:93:1a:d9:f4:b2:f1:08:a3:ea:f3:31:4a:0b:13: f8:77:55:fe:e8:af:87:dc:2c:2d:a8:c4:b6:e0:63: 3b:43:09:84:74:65:e9:99:ab:ff:ae:5b:f6:bc:52: 43:76:60:da:5d:84:01:83:4a:48:38:f1:af:bd:37: 9f:55:0e:79:37:0b:15:d9:35:ca:47:0f:b4:a2:f7: f6:77:09:41:2c:cd:75:d0:b3:44:b4:88:31:20:ef: 90:04:35:40:f7:19:63:b3:fa:1a:38:ef:7a:c3:5d: 4f:e8:b9:7b:22:37:14:2b:47:a7:32:b4:c0:7c:86: 70:28:fd:40:5c:65:7c:64:6e:e5:b4:93:a5:1b:79: 71:76:25:85:ba:64:b1:60:be:f1:37:36:58:0d:8a: a4:d8:34:c8:76:d0:3e:a0:f1:3c:c8:19:4b:6a:f5: 8f:69:65:bc:65:7f:42:05:26:91:5e:76:74:23:ee: e3:05:ca:08:93:78:89:4c:0f:0a:21:32:4f:16:6b: d8:be:36:bb:2f:7f:88:eb:b8:98:20:0d:d9:de:6a: c7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F1:7A:98:DC:A9:2C:2A:80:75:EE:C2:92:15:81:47:7A:D7:AD:AE X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS141776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e080::/44 2406:840:fef9::/48 Signature Algorithm: sha256WithRSAEncryption 2e:51:59:a7:af:57:3f:aa:a7:87:be:83:2e:1b:63:0d:3f:bf: 2b:59:ab:19:98:17:aa:a5:c4:c5:1a:cb:9e:53:45:bd:ec:a9: 32:0c:f8:70:2f:8b:f4:ca:dd:13:4c:8f:9e:26:90:ee:42:3e: 06:e4:11:ba:07:f6:2b:a5:94:5d:e3:4f:7b:82:d3:80:e3:2e: fd:a0:a3:c3:5a:ca:9c:37:12:75:0a:fc:1a:9b:68:ae:6d:54: 78:82:32:0a:4a:d3:3a:6e:02:eb:01:63:98:82:8e:ba:b9:70: c1:42:c5:e5:c2:74:84:a9:36:13:c6:6c:cf:a6:2b:9e:7d:17: 9e:98:bb:3d:fe:05:e5:88:9b:a7:16:76:85:ee:eb:6a:56:62: 21:a0:6a:bb:99:77:a5:fc:48:d7:4a:f1:fd:40:0f:72:a4:62: e2:3b:24:21:dc:45:46:5f:f8:48:d5:aa:76:54:6c:56:26:fa: 34:8d:e9:fd:40:5a:ce:e3:be:f3:9f:05:55:39:f8:ae:57:b6: c2:c6:8c:12:bd:d7:fc:ce:c8:08:5a:61:17:85:1a:60:21:2f: e3:26:b8:65:4e:af:e8:c8:10:43:fd:28:67:0a:ff:e8:1f:29: 50:c0:b7:88:15:32:28:9e:76:2b:43:b8:25:05:b2:ac:0c:6e: 7e:f1:27:5f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfSPfOPj266hdCyU5WqfXCE6GbbcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczM1oX DTI3MDcyMDEzMzIzM1owMzExMC8GA1UEAxMoNEVGMTdBOThEQ0E5MkMyQTgwNzVF RUMyOTIxNTgxNDc3QUQ3QURBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANF+bTB005DY/v0NtRUS++Pcpe0naDgtuGm5kbhU4itS4F0htEVJkbDwayjd MpMa2fSy8Qij6vMxSgsT+HdV/uivh9wsLajEtuBjO0MJhHRl6Zmr/65b9rxSQ3Zg 2l2EAYNKSDjxr703n1UOeTcLFdk1ykcPtKL39ncJQSzNddCzRLSIMSDvkAQ1QPcZ Y7P6GjjvesNdT+i5eyI3FCtHpzK0wHyGcCj9QFxlfGRu5bSTpRt5cXYlhbpksWC+ 8Tc2WA2KpNg0yHbQPqDxPMgZS2r1j2llvGV/QgUmkV52dCPu4wXKCJN4iUwPCiEy TxZr2L42uy9/iOu4mCAN2d5qxxsCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBRO8XqY 3KksKoB17sKSFYFHetetrjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0MTc3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CEDggAMHACQGCED++TANBgkqhkiG9w0BAQsFAAOCAQEALlFZp69XP6qnh76DLhtj DT+/K1mrGZgXqqXExRrLnlNFveypMgz4cC+L9MrdE0yPniaQ7kI+BuQRugf2K6WU XeNPe4LTgOMu/aCjw1rKnDcSdQr8Gptorm1UeIIyCkrTOm4C6wFjmIKOurlwwULF 5cJ0hKk2E8Zsz6Yrnn0Xnpi7Pf4F5YibpxZ2he7ralZiIaBqu5l3pfxI10rx/UAP cqRi4jskIdxFRl/4SNWqdlRsVib6NI3p/UBazuO+858FVTn4rle2wsaMEr3X/M7I CFphF4UaYCEv4ya4ZU6v6MgQQ/0oZwr/6B8pUMC3iBUyKJ52K0O4JQWyrAxufvEn Xw== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:54 2026 by rpki-client