$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142586.roa File: AS142586.roa (raw, json) Hash identifier: iDIBYwedST34bmWMr1QDuQavFYwM2tEBy5PqGqSdPrY= Subject key identifier: 79:80:01:A4:71:6F:A9:0F:D6:54:19:B3:30:37:93:4E:26:FC:B1:EC Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 0A3DD7C9A798418B33427420AF8AD420AC4EA8A7 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142586.roa Signing time: Tue 21 Jul 2026 13:32:17 +0000 ROA not before: Tue 21 Jul 2026 13:27:17 +0000 ROA not after: Tue 20 Jul 2027 13:32:17 +0000 asID: 142586 IP address blocks: 2406:840:ed00::/40 maxlen: 48 2406:840:fde0::/48 maxlen: 48 2406:840:fece::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3d:d7:c9:a7:98:41:8b:33:42:74:20:af:8a:d4:20:ac:4e:a8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:17 2026 GMT Not After : Jul 20 13:32:17 2027 GMT Subject: CN=798001A4716FA90FD65419B33037934E26FCB1EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:40:6c:87:ce:7b:4a:32:44:82:82:7d:90:e3: 06:72:c5:a4:30:7e:b2:0c:1d:38:dc:4c:25:71:86: 33:ba:92:d7:76:1e:6e:67:ca:af:f6:1d:ae:38:8b: 1f:4a:e8:1f:2c:d4:f8:d9:d5:83:b6:4e:e0:c2:63: c7:f5:68:75:42:48:82:01:0b:d9:1a:5a:8c:8e:7d: dd:bf:87:71:74:7d:38:ff:4a:53:2c:3a:70:9a:b1: 14:3e:40:b5:dc:27:cc:5a:06:1e:93:eb:d9:ea:ab: 65:e4:99:4c:9a:91:70:7e:a8:ed:ff:2e:f6:32:ac: 40:e5:22:7f:8f:93:a1:34:07:57:60:ca:7c:f7:7d: 45:a5:86:7c:71:d1:4a:cc:a2:11:4c:dc:c2:26:cb: 52:f5:d8:f2:de:a2:b9:9c:0b:bf:07:30:4f:2a:dd: de:e7:b7:bc:bf:63:39:e5:e1:db:3e:f7:a3:de:de: 74:61:3a:5e:6d:bc:c4:35:2b:3b:60:ca:ff:90:a6: f7:7e:22:b6:f1:d4:7c:e9:d9:08:4f:74:b7:28:3c: 2a:33:b8:7f:47:21:84:31:73:1e:c5:c7:e7:1b:36: 12:57:d1:26:6d:b7:3b:c5:17:19:ef:b8:b7:9a:63: c5:31:70:e2:cf:42:d2:43:34:9c:b5:64:e3:e6:b0: d4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:80:01:A4:71:6F:A9:0F:D6:54:19:B3:30:37:93:4E:26:FC:B1:EC X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142586.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:ed00::/40 2406:840:fde0::/48 2406:840:fece::/48 Signature Algorithm: sha256WithRSAEncryption 02:70:76:72:fc:6e:0f:a2:04:42:ee:26:1d:83:75:91:a8:3f: 4a:42:72:30:14:94:f2:46:41:f3:12:2d:76:03:03:7a:e3:fa: d9:1e:d7:eb:a7:2e:9b:42:1b:80:5c:bf:00:f9:bd:41:d0:49: c3:f3:8e:b1:4b:88:04:ed:45:67:d1:40:1f:3b:d0:6f:8e:29: 67:b2:cc:ed:7f:1c:e0:ee:f6:81:ac:83:0c:49:55:90:f9:8a: 19:58:4f:55:e5:24:fa:13:fb:27:60:e1:9c:9d:53:d7:38:12: d7:09:ad:59:5b:41:23:38:71:8d:41:70:b9:ba:ac:20:2f:a9: 80:b0:29:c0:aa:bb:2e:dc:d5:89:71:47:bb:fc:17:6d:1a:eb: 3c:2b:1a:dc:9c:43:fe:eb:b3:c1:6a:b0:ec:36:7c:32:55:dd: b6:9b:ab:ce:8e:72:62:0d:eb:bd:3e:59:b4:0b:89:e2:74:b1: 32:c9:75:5e:d0:ec:f4:27:a9:45:6e:45:33:1b:3b:72:54:ff: 84:20:8d:a4:fe:be:77:a2:3b:c8:d9:b0:fa:b3:57:02:38:8e: 5e:82:8f:41:34:b1:21:0f:ab:02:1f:a0:d6:61:9c:3d:b0:0e: 54:9e:17:06:3a:1f:41:fa:7f:8e:2e:cf:dc:ad:5d:57:59:80: 6e:0b:9d:2b -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUCj3XyaeYQYszQnQgr4rUIKxOqKcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxN1oX DTI3MDcyMDEzMzIxN1owMzExMC8GA1UEAxMoNzk4MDAxQTQ3MTZGQTkwRkQ2NTQx OUIzMzAzNzkzNEUyNkZDQjFFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANlAbIfOe0oyRIKCfZDjBnLFpDB+sgwdONxMJXGGM7qS13YebmfKr/YdrjiL H0roHyzU+NnVg7ZO4MJjx/VodUJIggEL2RpajI593b+HcXR9OP9KUyw6cJqxFD5A tdwnzFoGHpPr2eqrZeSZTJqRcH6o7f8u9jKsQOUif4+ToTQHV2DKfPd9RaWGfHHR SsyiEUzcwibLUvXY8t6iuZwLvwcwTyrd3ue3vL9jOeXh2z73o97edGE6Xm28xDUr O2DK/5Cm934itvHUfOnZCE90tyg8KjO4f0chhDFzHsXH5xs2ElfRJm23O8UXGe+4 t5pjxTFw4s9C0kM0nLVk4+aw1NsCAwEAAaOCAjgwggI0MB0GA1UdDgQWBBR5gAGk cW+pD9ZUGbMwN5NOJvyx7DAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0MjU4Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwIAQCAAIwGgMGACQG CEDtAwcAJAYIQP3gAwcAJAYIQP7OMA0GCSqGSIb3DQEBCwUAA4IBAQACcHZy/G4P ogRC7iYdg3WRqD9KQnIwFJTyRkHzEi12AwN64/rZHtfrpy6bQhuAXL8A+b1B0EnD 846xS4gE7UVn0UAfO9Bvjilnssztfxzg7vaBrIMMSVWQ+YoZWE9V5ST6E/snYOGc nVPXOBLXCa1ZW0EjOHGNQXC5uqwgL6mAsCnAqrsu3NWJcUe7/BdtGus8KxrcnEP+ 67PBarDsNnwyVd22m6vOjnJiDeu9Plm0C4nidLEyyXVe0Oz0J6lFbkUzGztyVP+E II2k/r53ojvI2bD6s1cCOI5ego9BNLEhD6sCH6DWYZw9sA5UnhcGOh9B+n+OLs/c rV1XWYBuC50r -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:52 2026 by rpki-client