$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142438.roa File: AS142438.roa (raw, json) Hash identifier: VMuzXUEXIUlCTvNJnt8AtIf4QMx3j3NeCQYxAoWhou8= Subject key identifier: D0:93:47:05:FE:F1:71:01:0F:45:B4:85:98:63:00:77:73:E0:23:1F Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 455B80D271A44B25A3B3349D3AA45652411ECAA3 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142438.roa Signing time: Tue 21 Jul 2026 13:32:37 +0000 ROA not before: Tue 21 Jul 2026 13:27:37 +0000 ROA not after: Tue 20 Jul 2027 13:32:37 +0000 asID: 142438 IP address blocks: 2406:840:8000::/36 maxlen: 48 2406:840:fef8::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:5b:80:d2:71:a4:4b:25:a3:b3:34:9d:3a:a4:56:52:41:1e:ca:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:37 2026 GMT Not After : Jul 20 13:32:37 2027 GMT Subject: CN=D0934705FEF171010F45B4859863007773E0231F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:31:36:ca:7b:36:ed:42:24:dd:5c:cd:bd: 99:4a:2c:e9:83:56:6c:b4:e7:03:c9:c5:1b:9c:a4: 01:59:14:9f:16:98:2e:66:89:bc:bb:8f:bb:ff:2b: 84:e0:65:ad:92:31:16:7a:d8:6f:ab:43:ce:e5:09: 0b:18:74:e2:14:54:c9:90:97:9e:da:6a:23:0d:81: 51:f2:8a:dc:64:e7:b3:e0:bf:1b:0b:09:62:c4:e3: d9:63:fb:b8:4a:db:c3:63:e5:e3:df:69:ea:97:71: e7:da:76:f9:6c:cc:a6:86:70:2c:a2:c2:26:60:3c: e8:ea:a8:6b:89:ca:f0:58:11:9c:7c:5f:dd:1d:b8: bc:51:23:a7:0e:31:59:d0:67:9b:9b:ee:ab:ea:31: b4:3f:1d:39:34:25:2a:dd:7e:18:b8:35:7c:56:b6: 98:aa:07:79:f3:db:bf:b6:0f:c7:99:12:98:ba:f7: 07:fa:63:57:88:90:4a:29:7d:f1:6b:48:01:d3:ad: 87:c5:29:2f:10:7c:c0:e1:c8:43:c7:af:2d:2f:1f: cd:94:10:ec:19:8b:09:b5:57:cd:bf:e9:5a:c2:37: 23:60:6b:e1:b8:1b:e9:7d:50:8c:b8:92:2f:d0:df: e1:70:54:9c:34:23:c4:d8:8e:25:14:0a:a4:e7:38: a8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:93:47:05:FE:F1:71:01:0F:45:B4:85:98:63:00:77:73:E0:23:1F X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:8000::/36 2406:840:fef8::/48 Signature Algorithm: sha256WithRSAEncryption 6f:b6:ed:46:38:a7:54:a0:c1:b0:39:f9:fb:c1:df:dc:55:84: 2e:cb:a8:cb:2a:85:3a:19:31:1b:99:7f:61:35:16:d2:a2:04: ea:91:a0:ca:57:e5:2d:30:56:94:4f:19:38:04:26:42:43:5a: 1d:78:02:9d:e8:81:aa:47:77:2e:d6:6b:74:5c:6d:c7:45:eb: dc:ca:24:0e:1d:d0:ea:47:d9:18:a7:2c:aa:76:9e:51:81:4a: 91:02:92:74:3f:2b:c1:e0:a8:12:34:42:3f:bb:02:04:8d:68: bf:69:91:bd:ae:86:1d:75:98:60:90:cf:65:e7:4d:01:c2:f3: 92:be:b4:e4:3b:0c:84:4a:c7:5b:20:22:2e:8c:df:62:e1:81: cd:2c:77:c8:c4:77:f9:df:14:d2:b3:40:d1:44:78:7a:cd:4a: 8d:a1:49:a4:66:e3:6f:18:41:2e:85:17:80:23:be:d4:7b:a6: b8:ad:fe:5b:c9:66:42:38:46:9c:8c:64:6c:c7:c1:c8:6a:9e: c3:c5:db:07:25:40:cc:74:51:cf:18:53:f2:2e:c2:9c:e9:e1: b5:f4:b9:64:c0:18:ab:7c:92:0e:60:5e:47:29:46:46:c9:76: c4:0a:dd:7a:53:e7:fc:d6:07:a2:6e:b6:7c:40:e8:e3:b4:b6: 58:0f:fa:39 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIURVuA0nGkSyWjszSdOqRWUkEeyqMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczN1oX DTI3MDcyMDEzMzIzN1owMzExMC8GA1UEAxMoRDA5MzQ3MDVGRUYxNzEwMTBGNDVC NDg1OTg2MzAwNzc3M0UwMjMxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLGMTbKezbtQiTdXM29mUos6YNWbLTnA8nFG5ykAVkUnxaYLmaJvLuPu/8r hOBlrZIxFnrYb6tDzuUJCxh04hRUyZCXntpqIw2BUfKK3GTns+C/GwsJYsTj2WP7 uErbw2Pl499p6pdx59p2+WzMpoZwLKLCJmA86Oqoa4nK8FgRnHxf3R24vFEjpw4x WdBnm5vuq+oxtD8dOTQlKt1+GLg1fFa2mKoHefPbv7YPx5kSmLr3B/pjV4iQSil9 8WtIAdOth8UpLxB8wOHIQ8evLS8fzZQQ7BmLCbVXzb/pWsI3I2Br4bgb6X1QjLiS L9Df4XBUnDQjxNiOJRQKpOc4qD0CAwEAAaOCAi8wggIrMB0GA1UdDgQWBBTQk0cF /vFxAQ9FtIWYYwB3c+AjHzAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0MjQzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAqBggrBgEFBQcBBwEB/wQbMBkwFwQCAAIwEQMGBCQG CECAAwcAJAYIQP74MA0GCSqGSIb3DQEBCwUAA4IBAQBvtu1GOKdUoMGwOfn7wd/c VYQuy6jLKoU6GTEbmX9hNRbSogTqkaDKV+UtMFaUTxk4BCZCQ1odeAKd6IGqR3cu 1mt0XG3HRevcyiQOHdDqR9kYpyyqdp5RgUqRApJ0PyvB4KgSNEI/uwIEjWi/aZG9 roYddZhgkM9l500BwvOSvrTkOwyESsdbICIujN9i4YHNLHfIxHf53xTSs0DRRHh6 zUqNoUmkZuNvGEEuhReAI77Ue6a4rf5byWZCOEacjGRsx8HIap7DxdsHJUDMdFHP GFPyLsKc6eG19LlkwBirfJIOYF5HKUZGyXbECt16U+f81geibrZ8QOjjtLZYD/o5 -----END CERTIFICATE-----Generated at Tue Jul 21 21:42:20 2026 by rpki-client