$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS150173.roa File: AS150173.roa (raw, json) Hash identifier: StLJLAqBExCkMvg4I2plh5RABmzQzm2M20z3GIoox5c= Subject key identifier: CE:04:88:25:11:AD:A5:9E:5B:FC:75:83:D8:4F:58:8A:E7:44:50:27 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 434A3B4F79DF26681198474A3824B923650E9BF0 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS150173.roa Signing time: Tue 21 Jul 2026 13:32:17 +0000 ROA not before: Tue 21 Jul 2026 13:27:17 +0000 ROA not after: Tue 20 Jul 2027 13:32:17 +0000 asID: 150173 IP address blocks: 2406:840:fa00::/44 maxlen: 48 2406:840:fed1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:4a:3b:4f:79:df:26:68:11:98:47:4a:38:24:b9:23:65:0e:9b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:17 2026 GMT Not After : Jul 20 13:32:17 2027 GMT Subject: CN=CE04882511ADA59E5BFC7583D84F588AE7445027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b3:31:ed:4b:21:dc:75:be:00:4e:2b:da:95: 0d:11:84:d3:68:a7:67:fb:40:af:36:cd:78:9c:54: 48:fb:17:2d:11:60:63:1a:2c:cb:2e:81:13:09:79: ad:1c:62:34:51:39:53:4e:71:bd:be:19:51:69:fb: 73:91:11:65:4d:c4:82:62:06:09:a4:d6:0b:f3:f5: de:4f:19:3a:99:01:8d:43:81:4c:55:21:8c:99:db: a6:58:8c:32:4f:c0:df:42:3a:b6:15:c8:16:e5:32: df:f9:a6:f5:d9:2c:b9:2f:6a:46:70:d8:2f:a5:72: 1b:85:3b:74:12:11:c9:fc:35:ba:27:ed:9b:94:b4: dc:4c:a7:a7:f8:12:51:98:29:9a:c5:63:95:d3:e0: 9d:aa:bc:bf:c7:6e:ff:5c:3f:df:5e:05:3d:2a:22: 68:6b:cd:5c:da:ac:e5:1a:a1:40:a7:95:74:78:af: a1:07:da:2c:cd:6d:ce:19:b0:c4:7f:28:41:4c:44: 67:b2:37:95:32:be:d0:5a:b1:17:21:b0:99:99:71: d8:61:5a:8f:12:29:b7:a4:ab:cf:f5:b5:06:6c:27: 41:34:5e:08:2b:04:ba:1b:6e:f0:a2:ae:b4:94:53: 47:4a:c9:92:07:77:b8:86:7b:40:28:b5:e2:a7:7d: bf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:04:88:25:11:AD:A5:9E:5B:FC:75:83:D8:4F:58:8A:E7:44:50:27 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS150173.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fa00::/44 2406:840:fed1::/48 Signature Algorithm: sha256WithRSAEncryption 1e:24:5a:b7:de:0d:2f:c6:fe:ce:11:14:ea:e7:e7:82:1a:7d: d5:6d:2b:e5:f7:fd:6a:62:ee:af:f0:6a:eb:f8:b6:03:a2:07: a8:ca:00:66:6c:3f:ed:6c:12:c6:0f:e8:34:a6:34:48:2d:27: 80:51:05:67:90:fc:a2:b1:fa:44:b0:10:d6:26:70:ba:3b:96: c2:92:d4:0e:c1:e7:b6:c5:9a:ce:37:2f:12:75:de:fc:39:df: a4:a0:36:77:eb:0b:21:fe:67:5b:15:9d:a8:59:43:db:c7:56: 84:99:00:94:89:d6:d9:64:32:04:82:76:6d:93:e6:63:b6:61: ac:a3:29:d7:e3:7a:8b:dd:26:d0:ea:bd:7a:02:02:f5:41:96: ae:41:23:0a:8a:3c:e0:80:ab:a0:d7:1a:d0:2c:97:03:cc:46: 69:43:ae:9d:80:c4:38:da:61:53:e7:c3:d2:1f:7b:da:80:41: 33:55:41:b5:e0:8d:9c:60:9d:b5:26:e0:bf:b2:60:7e:4c:fc: f2:76:63:1f:f2:2c:d8:a0:13:ff:06:90:2d:29:47:f3:d3:21: d8:92:30:b4:3d:15:0b:79:76:0c:16:6c:58:fe:87:29:17:b8: 47:76:58:40:6f:fd:15:a5:7a:ac:99:89:97:23:75:50:a1:8f: 7b:72:32:99 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQ0o7T3nfJmgRmEdKOCS5I2UOm/AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxN1oX DTI3MDcyMDEzMzIxN1owMzExMC8GA1UEAxMoQ0UwNDg4MjUxMUFEQTU5RTVCRkM3 NTgzRDg0RjU4OEFFNzQ0NTAyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANuzMe1LIdx1vgBOK9qVDRGE02inZ/tArzbNeJxUSPsXLRFgYxosyy6BEwl5 rRxiNFE5U05xvb4ZUWn7c5ERZU3EgmIGCaTWC/P13k8ZOpkBjUOBTFUhjJnbpliM Mk/A30I6thXIFuUy3/mm9dksuS9qRnDYL6VyG4U7dBIRyfw1uiftm5S03Eynp/gS UZgpmsVjldPgnaq8v8du/1w/314FPSoiaGvNXNqs5RqhQKeVdHivoQfaLM1tzhmw xH8oQUxEZ7I3lTK+0FqxFyGwmZlx2GFajxIpt6Srz/W1BmwnQTReCCsEuhtu8KKu tJRTR0rJkgd3uIZ7QCi14qd9v6ECAwEAAaOCAjAwggIsMB0GA1UdDgQWBBTOBIgl Ea2lnlv8dYPYT1iK50RQJzAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MDE3My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED6AAMHACQGCED+0TANBgkqhkiG9w0BAQsFAAOCAQEAHiRat94NL8b+zhEU6ufn ghp91W0r5ff9amLur/Bq6/i2A6IHqMoAZmw/7WwSxg/oNKY0SC0ngFEFZ5D8orH6 RLAQ1iZwujuWwpLUDsHntsWazjcvEnXe/DnfpKA2d+sLIf5nWxWdqFlD28dWhJkA lInW2WQyBIJ2bZPmY7ZhrKMp1+N6i90m0Oq9egIC9UGWrkEjCoo84ICroNca0CyX A8xGaUOunYDEONphU+fD0h972oBBM1VBteCNnGCdtSbgv7Jgfkz88nZjH/Is2KAT /waQLSlH89Mh2JIwtD0VC3l2DBZsWP6HKRe4R3ZYQG/9FaV6rJmJlyN1UKGPe3Iy mQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:50 2026 by rpki-client