$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142553.roa File: AS142553.roa (raw, json) Hash identifier: gVAQ3cXyKNlqJAjeehvCjHZDoJyE4Q9he0JCVcCBgEM= Subject key identifier: FD:FD:6C:CC:08:FF:8A:7B:5D:D8:09:6E:39:03:97:A2:9E:A1:B3:7B Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 3C4B0C2DA6EFF0321C0A498BA4F6F6E328B613ED Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142553.roa Signing time: Tue 21 Jul 2026 13:32:22 +0000 ROA not before: Tue 21 Jul 2026 13:27:22 +0000 ROA not after: Tue 20 Jul 2027 13:32:22 +0000 asID: 142553 IP address blocks: 2406:840:eb00::/44 maxlen: 48 2406:840:fef3::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4b:0c:2d:a6:ef:f0:32:1c:0a:49:8b:a4:f6:f6:e3:28:b6:13:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:22 2026 GMT Not After : Jul 20 13:32:22 2027 GMT Subject: CN=FDFD6CCC08FF8A7B5DD8096E390397A29EA1B37B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1b:f1:5c:2f:92:50:2c:5d:0f:5d:db:34:93: 30:fd:35:c4:f8:bb:e3:0c:e6:08:71:42:0f:a9:b9: 5e:56:c0:78:c2:aa:d5:04:1a:22:99:06:fd:29:f9: 14:84:f6:26:f4:5b:87:ce:76:98:e9:6f:e4:25:a5: e0:04:f0:6a:58:e7:5f:65:2d:86:39:cd:59:bf:d7: f8:c4:30:7d:c9:e4:8e:3b:ed:80:ce:ce:6a:6d:cd: 8c:35:84:d0:b9:6b:37:fc:9f:e4:01:6b:10:58:66: 90:bc:23:70:8a:d3:64:df:31:a5:22:12:0d:02:4e: 70:e4:ef:0b:4f:3f:de:f0:a8:71:77:e6:e9:b2:6f: 26:88:66:bc:c0:90:bc:e3:68:ee:65:68:f0:e1:d6: 83:c9:e9:f2:06:04:ea:21:83:2f:48:b5:95:d9:52: ea:6c:66:67:60:58:59:5d:1f:34:01:a4:11:7b:ec: cc:0b:6c:08:36:83:f5:88:16:aa:f9:94:aa:a5:50: 66:70:2f:67:71:af:5f:57:8c:97:4a:4a:25:49:b6: f9:dd:e7:36:e1:75:74:bf:08:c2:83:07:eb:92:aa: 8e:56:f3:df:a5:00:34:61:fb:28:7e:92:b9:d3:1d: 71:85:aa:88:6d:4b:9b:95:ba:9b:d7:d6:8b:cd:6c: e1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FD:6C:CC:08:FF:8A:7B:5D:D8:09:6E:39:03:97:A2:9E:A1:B3:7B X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142553.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:eb00::/44 2406:840:fef3::/48 Signature Algorithm: sha256WithRSAEncryption 45:40:ee:a8:78:a0:d2:d6:f5:e3:54:0c:9c:2b:2d:ae:9d:e7: de:ac:24:53:0c:af:d2:5e:a3:83:d2:92:d9:0f:81:f0:42:11: 0b:5f:c5:86:48:00:fc:1c:a0:f2:c6:d8:d8:c3:24:52:97:6d: 15:ea:77:c1:a2:24:44:77:12:19:f9:dd:29:4d:40:b5:13:7b: 6d:c5:b5:8f:cc:d5:13:d1:f6:a4:44:d4:b5:5d:63:f3:ee:55: 13:28:b4:a7:4a:28:e2:4e:86:09:71:84:25:4c:8b:c9:93:c1: 52:89:e4:f4:85:74:75:9d:36:73:f3:2c:a4:0d:3f:b7:30:a3: ee:a4:c2:62:15:70:51:a1:7f:c8:c6:a8:b2:49:5c:1c:38:ba: 80:b1:75:55:64:15:d1:df:cf:2f:d6:ee:a8:be:47:c6:87:43: 72:a9:ae:c4:05:23:2e:7c:bd:a7:f8:b8:0f:82:2d:10:25:f8: 3e:c4:51:e1:05:07:56:e1:36:7f:01:f4:97:bf:c3:a5:a3:ec: 50:b9:55:fb:e3:87:59:8d:dd:3d:a3:2a:7a:64:7c:02:31:da: 42:c7:b6:69:2e:e1:08:df:88:c0:5f:78:be:6a:e3:3d:ac:75: ee:61:f0:9e:a1:b0:25:36:74:c5:a4:f5:db:f3:51:1d:33:69: 1c:6e:b5:68 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPEsMLabv8DIcCkmLpPb24yi2E+0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyMloX DTI3MDcyMDEzMzIyMlowMzExMC8GA1UEAxMoRkRGRDZDQ0MwOEZGOEE3QjVERDgw OTZFMzkwMzk3QTI5RUExQjM3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALAb8VwvklAsXQ9d2zSTMP01xPi74wzmCHFCD6m5XlbAeMKq1QQaIpkG/Sn5 FIT2JvRbh852mOlv5CWl4ATwaljnX2UthjnNWb/X+MQwfcnkjjvtgM7Oam3NjDWE 0LlrN/yf5AFrEFhmkLwjcIrTZN8xpSISDQJOcOTvC08/3vCocXfm6bJvJohmvMCQ vONo7mVo8OHWg8np8gYE6iGDL0i1ldlS6mxmZ2BYWV0fNAGkEXvszAtsCDaD9YgW qvmUqqVQZnAvZ3GvX1eMl0pKJUm2+d3nNuF1dL8IwoMH65Kqjlbz36UANGH7KH6S udMdcYWqiG1Lm5W6m9fWi81s4b8CAwEAAaOCAjAwggIsMB0GA1UdDgQWBBT9/WzM CP+Ke13YCW45A5einqGzezAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0MjU1My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CEDrAAMHACQGCED+8zANBgkqhkiG9w0BAQsFAAOCAQEARUDuqHig0tb141QMnCst rp3n3qwkUwyv0l6jg9KS2Q+B8EIRC1/FhkgA/Byg8sbY2MMkUpdtFep3waIkRHcS GfndKU1AtRN7bcW1j8zVE9H2pETUtV1j8+5VEyi0p0oo4k6GCXGEJUyLyZPBUonk 9IV0dZ02c/MspA0/tzCj7qTCYhVwUaF/yMaosklcHDi6gLF1VWQV0d/PL9buqL5H xodDcqmuxAUjLny9p/i4D4ItECX4PsRR4QUHVuE2fwH0l7/DpaPsULlV++OHWY3d PaMqemR8AjHaQse2aS7hCN+IwF94vmrjPax17mHwnqGwJTZ0xaT12/NRHTNpHG61 aA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:52 2026 by rpki-client