$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: LK5ZXWW/TDmwiTTzdy5yoSuq1CdltiRdx3oytpaKIrQ= Subject key identifier: 35:0A:4E:F9:FA:7D:18:43:44:04:98:28:1D:F5:49:D2:DF:BF:89:61 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 2363FC345F529D20FEC0F3AC07083910AF6233E4 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS14618.roa Signing time: Tue 21 Jul 2026 13:32:18 +0000 ROA not before: Tue 21 Jul 2026 13:27:18 +0000 ROA not after: Tue 20 Jul 2027 13:32:18 +0000 asID: 14618 IP address blocks: 2406:840:e0e0::/44 maxlen: 48 2406:840:e666::/47 maxlen: 48 2406:840:fcf0::/44 maxlen: 48 2406:840:fd9f::/48 maxlen: 48 2406:840:fdd0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:63:fc:34:5f:52:9d:20:fe:c0:f3:ac:07:08:39:10:af:62:33:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:18 2026 GMT Not After : Jul 20 13:32:18 2027 GMT Subject: CN=350A4EF9FA7D1843440498281DF549D2DFBF8961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:ec:4a:50:7c:ae:4e:1e:63:dc:de:76:d2: 92:b3:6b:73:34:3e:86:8d:5f:01:a1:04:97:b5:e7: 62:1c:f1:2a:2b:28:89:f4:ad:a3:4a:bb:6c:9e:0a: 9e:57:06:aa:a4:a9:98:a7:e1:28:30:bf:f4:4b:ce: 2b:2c:9f:b8:f1:30:45:52:bc:86:32:2a:cc:89:48: 72:36:33:af:16:70:f5:f7:64:51:a8:43:74:aa:5a: f3:d6:e9:8b:3c:4f:2b:b3:91:5f:03:61:aa:cc:7f: 85:b1:17:0b:7f:0b:af:5e:14:85:4b:cf:fd:7a:88: c4:fe:9b:08:58:bd:ba:37:24:96:51:85:d5:78:b9: cf:4c:fd:06:3a:65:ec:ce:ad:0e:90:52:7c:df:2e: ba:f0:6a:4b:66:25:fc:aa:30:2a:3f:dc:13:a5:17: 2e:3e:8e:a4:ab:53:5a:77:cc:fc:3e:9f:ff:a5:4d: 23:69:ff:96:29:60:9a:a4:f0:b2:4d:59:dc:f7:cd: 33:85:c0:e3:47:96:ad:4e:2c:5e:d8:a7:d4:70:c3: af:94:c9:cb:a9:5d:c3:eb:71:38:0f:6f:96:5f:46: 65:3f:87:ba:d3:55:bc:f5:b8:ac:da:a9:ed:0f:9e: 7a:67:09:d8:c7:cf:32:cc:1d:26:9e:09:38:09:aa: 27:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0A:4E:F9:FA:7D:18:43:44:04:98:28:1D:F5:49:D2:DF:BF:89:61 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e0e0::/44 2406:840:e666::/47 2406:840:fcf0::/44 2406:840:fd9f::/48 2406:840:fdd0::/44 Signature Algorithm: sha256WithRSAEncryption 74:d8:67:2d:23:45:84:6f:9e:82:78:8b:97:8e:92:5d:52:15: 47:83:62:51:82:ce:c3:75:9c:c5:7e:b5:09:e2:5c:15:67:a8: 6b:7d:9b:08:74:80:17:82:90:25:f2:00:bd:dc:a7:e3:e8:bc: 19:2f:17:99:74:5b:f8:a2:8b:e9:0f:d4:c5:9d:6e:b7:f3:a8: f4:39:13:57:c0:05:87:37:41:d2:3e:3c:d9:7d:e8:ca:d4:fa: 30:da:64:67:20:f8:b7:24:da:b2:b4:26:16:bf:21:cd:60:64: 53:08:e4:2c:28:bd:0d:0c:01:0c:62:d6:cb:ed:46:8c:ae:2e: f5:37:d2:89:4d:21:61:fa:8c:0f:c8:52:75:e3:85:65:d4:84: 1c:da:f0:08:60:3d:fc:4d:8a:0c:d1:00:ed:6a:f8:fb:0f:41: 56:70:e1:fe:22:cd:36:14:95:8a:cc:a7:25:24:da:ba:8e:c7: b4:6a:fc:18:b9:74:bb:2f:12:d0:3d:af:3c:07:47:8c:23:c1: df:95:d0:1a:28:b5:68:04:07:b1:ce:2d:c2:ad:09:89:99:6b: d7:72:af:7e:bf:36:d6:9f:87:a9:d4:f9:99:fa:03:6e:57:5a: 27:5c:c9:27:38:ef:1b:f4:e8:9b:9b:f4:14:df:08:23:0c:6d: a9:09:0f:7f -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUI2P8NF9SnSD+wPOsBwg5EK9iM+QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxOFoX DTI3MDcyMDEzMzIxOFowMzExMC8GA1UEAxMoMzUwQTRFRjlGQTdEMTg0MzQ0MDQ5 ODI4MURGNTQ5RDJERkJGODk2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlp7EpQfK5OHmPc3nbSkrNrczQ+ho1fAaEEl7XnYhzxKisoifSto0q7bJ4K nlcGqqSpmKfhKDC/9EvOKyyfuPEwRVK8hjIqzIlIcjYzrxZw9fdkUahDdKpa89bp izxPK7ORXwNhqsx/hbEXC38Lr14UhUvP/XqIxP6bCFi9ujckllGF1Xi5z0z9Bjpl 7M6tDpBSfN8uuvBqS2Yl/KowKj/cE6UXLj6OpKtTWnfM/D6f/6VNI2n/lilgmqTw sk1Z3PfNM4XA40eWrU4sXtin1HDDr5TJy6ldw+txOA9vll9GZT+HutNVvPW4rNqp 7Q+eemcJ2MfPMswdJp4JOAmqJz0CAwEAAaOCAkowggJGMB0GA1UdDgQWBBQ1Ck75 +n0YQ0QEmCgd9UnS37+JYTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE0NjE4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcEJAYI QODgAwcBJAYIQOZmAwcEJAYIQPzwAwcAJAYIQP2fAwcEJAYIQP3QMA0GCSqGSIb3 DQEBCwUAA4IBAQB02GctI0WEb56CeIuXjpJdUhVHg2JRgs7DdZzFfrUJ4lwVZ6hr fZsIdIAXgpAl8gC93Kfj6LwZLxeZdFv4oovpD9TFnW6386j0ORNXwAWHN0HSPjzZ fejK1Pow2mRnIPi3JNqytCYWvyHNYGRTCOQsKL0NDAEMYtbL7UaMri71N9KJTSFh +owPyFJ144Vl1IQc2vAIYD38TYoM0QDtavj7D0FWcOH+Is02FJWKzKclJNq6jse0 avwYuXS7LxLQPa88B0eMI8HfldAaKLVoBAexzi3CrQmJmWvXcq9+vzbWn4ep1PmZ +gNuV1onXMknOO8b9Oibm/QU3wgjDG2pCQ9/ -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:06 2026 by rpki-client