$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142642.roa File: AS142642.roa (raw, json) Hash identifier: 7leKLLcDTyfHODr6pVYJT1/E1bkgeaYYs7ogMo/5rjY= Subject key identifier: 54:89:88:9C:15:CC:BE:7B:B7:88:ED:75:AE:8D:17:93:54:29:F9:5C Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 125EDFE40BF1AA0DEB6B1A07E0F09FF90FA40236 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142642.roa Signing time: Tue 21 Jul 2026 13:32:15 +0000 ROA not before: Tue 21 Jul 2026 13:27:15 +0000 ROA not after: Tue 20 Jul 2027 13:32:15 +0000 asID: 142642 IP address blocks: 2406:840:eab0::/44 maxlen: 48 2406:840:fed8::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5e:df:e4:0b:f1:aa:0d:eb:6b:1a:07:e0:f0:9f:f9:0f:a4:02:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:15 2026 GMT Not After : Jul 20 13:32:15 2027 GMT Subject: CN=5489889C15CCBE7BB788ED75AE8D17935429F95C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:b4:66:ff:ce:97:44:5f:d0:70:5b:57:1e: ca:05:b6:5f:e7:39:72:aa:ba:4e:5f:79:6e:4b:54: 60:31:ad:17:7f:7a:0b:55:c8:63:e7:84:81:90:f3: 0c:43:d1:7c:c4:ee:69:61:bc:77:87:51:2e:c9:8c: 43:7f:28:59:84:9a:70:65:29:1b:39:e9:44:2e:77: 55:cc:2f:02:ec:4f:38:bc:2b:ba:cf:e3:eb:24:45: bf:1d:23:09:ed:b9:6a:b5:3d:69:76:cb:46:0a:94: 31:c3:a3:3a:ba:7c:31:61:4a:c0:af:74:44:06:b4: d1:18:8f:1a:91:c6:f3:b0:c2:2c:1f:29:5e:55:33: 44:f6:8e:3d:6b:0a:6e:ce:38:83:c6:ae:6a:80:9b: 93:c0:7f:f3:81:66:56:a8:23:3a:18:41:f6:c3:b1: f7:06:c5:c5:40:cf:9c:fe:17:88:a8:cc:47:cc:23: 30:ac:57:e4:a2:f9:15:ee:e1:85:aa:e3:5d:a6:b8: 2c:99:05:fa:15:59:79:58:25:9c:24:33:9d:3e:23: 83:ec:22:60:4f:28:a6:2a:2b:df:dc:83:ab:f7:36: 4e:52:63:54:05:39:ed:cd:65:dc:23:71:96:c6:af: fa:ce:68:eb:6b:60:b2:bc:7d:c7:b3:71:3f:d8:26: ca:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:89:88:9C:15:CC:BE:7B:B7:88:ED:75:AE:8D:17:93:54:29:F9:5C X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS142642.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:eab0::/44 2406:840:fed8::/48 Signature Algorithm: sha256WithRSAEncryption 2b:e0:f4:5c:c6:32:03:4c:be:9a:8c:b6:10:c4:62:26:84:ab: cd:ed:eb:14:28:c7:54:a1:60:12:a8:17:40:9f:ab:1a:9e:a7: 28:56:d6:83:4a:7c:21:18:4f:74:30:5f:3d:b6:27:b7:74:71: 5b:0c:d1:46:ad:d8:cb:97:07:bf:b9:7b:d8:8b:6f:1e:fa:c7: 1c:16:c9:fc:86:db:3a:20:16:62:b4:ef:21:2e:84:79:19:34: 13:96:c3:45:d4:62:41:62:f9:81:6f:51:06:6e:82:ac:07:26: 6a:38:6c:fc:b1:4d:bb:25:31:ca:cd:a9:3f:0f:14:69:01:de: bc:aa:b7:97:d6:76:15:b0:f5:16:13:51:50:ab:1e:a9:bf:95: 26:51:89:7c:8d:22:00:fd:99:81:d3:e3:44:99:8e:36:da:67: 96:bf:ab:6a:28:0b:07:fd:63:88:0c:2b:ce:ed:eb:87:03:b2: 0b:83:a7:91:c7:b0:2b:94:10:09:e1:63:76:ba:77:22:78:04: db:df:45:4b:70:da:f9:2d:e1:a3:f9:45:cf:8e:04:ed:3e:2d: 29:57:39:5c:e0:19:cd:d9:94:13:59:31:e3:d5:6f:6a:d8:46: 1c:16:a1:67:20:cd:15:17:15:df:c9:32:41:2c:2f:cd:f3:8b: 0e:a9:c7:80 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEl7f5Avxqg3raxoH4PCf+Q+kAjYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxNVoX DTI3MDcyMDEzMzIxNVowMzExMC8GA1UEAxMoNTQ4OTg4OUMxNUNDQkU3QkI3ODhF RDc1QUU4RDE3OTM1NDI5Rjk1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlntGb/zpdEX9BwW1ceygW2X+c5cqq6Tl95bktUYDGtF396C1XIY+eEgZDz DEPRfMTuaWG8d4dRLsmMQ38oWYSacGUpGznpRC53VcwvAuxPOLwrus/j6yRFvx0j Ce25arU9aXbLRgqUMcOjOrp8MWFKwK90RAa00RiPGpHG87DCLB8pXlUzRPaOPWsK bs44g8auaoCbk8B/84FmVqgjOhhB9sOx9wbFxUDPnP4XiKjMR8wjMKxX5KL5Fe7h harjXaa4LJkF+hVZeVglnCQznT4jg+wiYE8opior39yDq/c2TlJjVAU57c1l3CNx lsav+s5o62tgsrx9x7NxP9gmyrsCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBRUiYic Fcy+e7eI7XWujReTVCn5XDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0MjY0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CEDqsAMHACQGCED+2DANBgkqhkiG9w0BAQsFAAOCAQEAK+D0XMYyA0y+moy2EMRi JoSrze3rFCjHVKFgEqgXQJ+rGp6nKFbWg0p8IRhPdDBfPbYnt3RxWwzRRq3Yy5cH v7l72ItvHvrHHBbJ/IbbOiAWYrTvIS6EeRk0E5bDRdRiQWL5gW9RBm6CrAcmajhs /LFNuyUxys2pPw8UaQHevKq3l9Z2FbD1FhNRUKseqb+VJlGJfI0iAP2ZgdPjRJmO Ntpnlr+raigLB/1jiAwrzu3rhwOyC4OnkcewK5QQCeFjdrp3IngE299FS3Da+S3h o/lFz44E7T4tKVc5XOAZzdmUE1kx49VvathGHBahZyDNFRcV38kyQSwvzfOLDqnH gA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:51 2026 by rpki-client