$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142433.roa File: AS142433.roa (raw, json) Hash identifier: /S8p8LHOTTf9Ai3yoWeroa+1RWOzjH8tJda1daw4gWc= Subject key identifier: 3C:98:75:44:1B:D9:5B:DD:6E:4C:C7:57:B8:F5:62:51:07:AF:48:BC Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 1443E8742D9D928D0CEF53A3AF92B11F448F1F15 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142433.roa Signing time: Tue 21 Jul 2026 13:32:23 +0000 ROA not before: Tue 21 Jul 2026 13:27:23 +0000 ROA not after: Tue 20 Jul 2027 13:32:23 +0000 asID: 142433 IP address blocks: 2406:840:feaa::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:43:e8:74:2d:9d:92:8d:0c:ef:53:a3:af:92:b1:1f:44:8f:1f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:23 2026 GMT Not After : Jul 20 13:32:23 2027 GMT Subject: CN=3C9875441BD95BDD6E4CC757B8F5625107AF48BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bf:c6:6e:fd:a8:9a:3a:85:eb:ba:ae:da:37: 82:69:f4:64:9a:40:cb:a1:52:f5:1f:16:df:2f:d7: a8:cd:69:2b:87:97:0f:ee:c2:b0:75:bb:c8:67:d6: 35:3b:a0:89:09:40:27:61:f4:61:0b:e3:23:1d:3b: 80:52:78:da:df:ee:6e:26:f0:99:55:a6:dc:9b:ed: 13:3a:ca:be:17:6b:29:d8:2e:f1:d8:54:1e:38:6f: 25:d9:b2:c2:66:47:b5:27:eb:89:81:c6:98:63:98: 72:e9:67:0d:25:d8:d8:30:83:3c:00:e5:d4:7c:94: 24:33:73:c4:01:e2:09:39:fe:c4:81:9c:e2:ea:75: fa:22:08:40:89:22:9e:95:1f:96:c5:91:a7:06:02: 62:dd:59:b1:e6:fc:bb:81:ca:d9:aa:f8:bc:da:fe: d5:2c:2b:33:b8:2a:7a:d8:25:e4:f6:86:d1:05:a0: 27:0a:e2:b2:6f:fc:81:f3:43:06:75:af:9f:00:d7: 98:8c:ed:f5:ba:1a:23:54:a4:96:08:72:54:b3:23: 61:94:62:56:2f:f8:53:8a:4b:19:c3:f9:eb:5c:96: 7c:4a:0c:4d:a9:da:04:4e:1d:d8:0e:46:05:96:41: 1f:96:a7:16:3a:24:0b:e6:5a:71:e4:21:7b:a8:f2: 04:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:98:75:44:1B:D9:5B:DD:6E:4C:C7:57:B8:F5:62:51:07:AF:48:BC X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:feaa::/48 Signature Algorithm: sha256WithRSAEncryption 44:4d:da:87:f5:b1:de:10:15:ce:8f:e6:e5:9f:dc:93:83:a4: 14:e0:e9:ba:3a:85:05:d6:af:2c:c8:e5:22:e8:f0:07:18:cf: a8:8c:12:82:9f:b0:a9:af:8e:e5:24:46:51:18:c6:19:4d:a7: 13:7d:44:0d:16:c0:aa:41:47:0f:ba:6d:66:4c:2d:14:a2:71: bc:9e:a0:8c:2d:73:f2:9c:e6:15:8b:d6:a8:05:37:75:f0:6c: 8b:c8:a6:14:14:dd:51:be:77:ce:1f:5c:7a:b4:85:df:58:b1: 63:11:6c:88:50:0d:aa:fc:89:1e:cc:8c:dd:a4:f4:fa:75:62: a2:e1:5a:85:63:9b:55:89:e3:37:7e:1d:63:b4:02:ab:28:70: 23:54:6a:e0:f2:ee:0e:4f:b4:c4:62:5a:f6:79:f8:6c:78:f1: e7:13:a6:33:96:4b:d3:6d:54:c6:b9:ec:3f:8b:cb:b8:4e:03: 6e:a1:57:43:2d:9e:79:4d:86:78:12:99:2b:95:ac:39:2d:eb: 38:9a:95:92:7e:bf:8e:2c:69:72:26:ee:11:1e:ed:4e:9c:5f: ac:40:0c:23:cf:8a:b0:86:56:3e:31:67:e1:1f:a5:c0:78:11: ba:73:8b:56:48:45:7e:6d:3c:7a:70:7d:04:f5:64:f4:15:b5: a0:54:1d:f8 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUFEPodC2dko0M71Ojr5KxH0SPHxUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyM1oX DTI3MDcyMDEzMzIyM1owMzExMC8GA1UEAxMoM0M5ODc1NDQxQkQ5NUJERDZFNEND NzU3QjhGNTYyNTEwN0FGNDhCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALK/xm79qJo6heu6rto3gmn0ZJpAy6FS9R8W3y/XqM1pK4eXD+7CsHW7yGfW NTugiQlAJ2H0YQvjIx07gFJ42t/ubibwmVWm3JvtEzrKvhdrKdgu8dhUHjhvJdmy wmZHtSfriYHGmGOYculnDSXY2DCDPADl1HyUJDNzxAHiCTn+xIGc4up1+iIIQIki npUflsWRpwYCYt1Zseb8u4HK2ar4vNr+1SwrM7gqetgl5PaG0QWgJwrism/8gfND BnWvnwDXmIzt9boaI1SklghyVLMjYZRiVi/4U4pLGcP561yWfEoMTanaBE4d2A5G BZZBH5anFjokC+ZaceQhe6jyBMkCAwEAAaOCAicwggIjMB0GA1UdDgQWBBQ8mHVE G9lb3W5Mx1e49WJRB69IvDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0MjQzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQG CED+qjANBgkqhkiG9w0BAQsFAAOCAQEARE3ah/Wx3hAVzo/m5Z/ck4OkFODpujqF BdavLMjlIujwBxjPqIwSgp+wqa+O5SRGURjGGU2nE31EDRbAqkFHD7ptZkwtFKJx vJ6gjC1z8pzmFYvWqAU3dfBsi8imFBTdUb53zh9cerSF31ixYxFsiFANqvyJHsyM 3aT0+nViouFahWObVYnjN34dY7QCqyhwI1Rq4PLuDk+0xGJa9nn4bHjx5xOmM5ZL 021UxrnsP4vLuE4DbqFXQy2eeU2GeBKZK5WsOS3rOJqVkn6/jixpcibuER7tTpxf rEAMI8+KsIZWPjFn4R+lwHgRunOLVkhFfm08enB9BPVk9BW1oFQd+A== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:05 2026 by rpki-client