$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151187.roa File: AS151187.roa (raw, json) Hash identifier: 4msq5EdAk/pquL6RlNJp99uWsG3nwEvuYKXi5f6zWSU= Subject key identifier: 3A:16:FF:79:0F:1E:CF:2E:BD:10:57:09:3D:EB:1B:C9:5D:03:29:50 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 3385C4D221B55EEA3DBC19718C8D5F38933C15D0 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151187.roa Signing time: Tue 21 Jul 2026 13:32:12 +0000 ROA not before: Tue 21 Jul 2026 13:27:12 +0000 ROA not after: Tue 20 Jul 2027 13:32:12 +0000 asID: 151187 IP address blocks: 2406:840:9800::/43 maxlen: 48 2406:840:fed3::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:85:c4:d2:21:b5:5e:ea:3d:bc:19:71:8c:8d:5f:38:93:3c:15:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:12 2026 GMT Not After : Jul 20 13:32:12 2027 GMT Subject: CN=3A16FF790F1ECF2EBD1057093DEB1BC95D032950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:5c:10:14:8f:76:f6:8c:96:38:35:ba:a4: 1c:48:2e:82:4c:bf:ac:45:b6:39:c4:d9:26:69:f0: 30:c4:c6:5e:71:73:0c:bb:3b:43:42:14:81:fa:24: a6:36:32:54:c2:71:aa:2d:ca:ca:e2:ff:be:bf:d6: f8:61:0f:47:cc:5c:46:d0:4d:66:82:15:ed:2e:c8: d5:f8:70:ff:be:e5:08:3c:51:20:24:03:ba:fe:44: b0:cc:c4:dd:7d:41:c1:5d:5e:62:f0:e4:22:54:4c: 3d:ae:9b:55:d8:4a:21:d9:7c:cb:07:36:dc:64:47: 84:03:1a:23:b1:01:cd:4c:7f:64:ed:0f:25:43:da: f9:2d:9c:eb:88:0f:c6:a3:38:08:a5:9b:63:f4:ff: b8:1b:c8:ad:61:bb:52:25:79:f4:74:7f:f7:fe:b6: f6:3d:11:d7:f0:1d:36:e5:a0:71:f4:19:af:3c:cf: b8:85:1f:c3:1a:b8:93:09:39:94:5d:b1:a7:fd:4a: 2f:03:92:6b:f6:2c:cb:be:c4:33:3f:6a:7a:2d:5c: b4:95:97:f5:c3:ca:95:4c:ec:56:33:12:2e:5e:50: 26:67:9b:e4:16:74:89:f2:f9:a5:da:d0:7a:de:59: 9c:16:71:42:9b:62:c0:42:24:76:b5:df:6b:58:85: 1b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:16:FF:79:0F:1E:CF:2E:BD:10:57:09:3D:EB:1B:C9:5D:03:29:50 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS151187.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9800::/43 2406:840:fed3::/48 Signature Algorithm: sha256WithRSAEncryption 96:42:1a:d4:7c:a7:1e:98:36:e6:4a:d5:b8:2d:a7:a6:0b:65: e2:68:81:10:24:34:15:fe:52:d0:29:1e:98:2a:7a:ac:70:f8: ef:09:1a:63:ad:cc:eb:f4:f1:f2:45:dd:b5:fb:df:0f:2e:71: be:5b:80:d7:3f:5a:dd:42:b0:1e:4b:05:c7:78:6c:be:ed:e4: 23:f3:76:93:2a:d7:a6:08:af:e0:8e:e4:4c:1d:79:33:a4:0e: aa:b1:fb:a4:91:f5:32:51:d9:d5:5a:f6:f4:94:eb:21:65:b5: b9:cd:84:10:cc:c3:d2:32:df:a7:d0:e7:f1:a3:c8:cf:01:fd: ef:fb:71:3d:b9:da:89:e5:12:5f:84:85:f5:98:f7:63:90:59: ce:b1:3c:70:ef:51:e9:8a:ae:b3:8f:26:8f:06:8f:94:04:7f: e2:19:cc:5d:21:8c:84:bb:3a:7a:94:43:e2:95:f0:7a:a4:6d: 4f:ee:d6:03:de:78:71:f7:7f:c6:5b:c7:8b:a6:ae:ba:2f:38: 6e:3b:86:01:cf:9f:a1:85:1e:1f:96:4f:cd:93:a3:ec:14:4c: 0a:70:20:99:20:63:9c:fe:c8:f3:1b:9f:31:b9:70:47:1d:bf: 60:28:7c:1a:15:bb:b9:29:55:65:f1:08:f0:1d:6f:16:43:3c: 2c:bd:e8:2a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUM4XE0iG1Xuo9vBlxjI1fOJM8FdAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxMloX DTI3MDcyMDEzMzIxMlowMzExMC8GA1UEAxMoM0ExNkZGNzkwRjFFQ0YyRUJEMTA1 NzA5M0RFQjFCQzk1RDAzMjk1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMm5XBAUj3b2jJY4NbqkHEgugky/rEW2OcTZJmnwMMTGXnFzDLs7Q0IUgfok pjYyVMJxqi3KyuL/vr/W+GEPR8xcRtBNZoIV7S7I1fhw/77lCDxRICQDuv5EsMzE 3X1BwV1eYvDkIlRMPa6bVdhKIdl8ywc23GRHhAMaI7EBzUx/ZO0PJUPa+S2c64gP xqM4CKWbY/T/uBvIrWG7UiV59HR/9/629j0R1/AdNuWgcfQZrzzPuIUfwxq4kwk5 lF2xp/1KLwOSa/Ysy77EMz9qei1ctJWX9cPKlUzsVjMSLl5QJmeb5BZ0ifL5pdrQ et5ZnBZxQptiwEIkdrXfa1iFG5sCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBQ6Fv95 Dx7PLr0QVwk96xvJXQMpUDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MTE4Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBSQG CECYAAMHACQGCED+0zANBgkqhkiG9w0BAQsFAAOCAQEAlkIa1HynHpg25krVuC2n pgtl4miBECQ0Ff5S0CkemCp6rHD47wkaY63M6/Tx8kXdtfvfDy5xvluA1z9a3UKw HksFx3hsvu3kI/N2kyrXpgiv4I7kTB15M6QOqrH7pJH1MlHZ1Vr29JTrIWW1uc2E EMzD0jLfp9Dn8aPIzwH97/txPbnaieUSX4SF9Zj3Y5BZzrE8cO9R6Yqus48mjwaP lAR/4hnMXSGMhLs6epRD4pXweqRtT+7WA954cfd/xlvHi6auui84bjuGAc+foYUe H5ZPzZOj7BRMCnAgmSBjnP7I8xufMblwRx2/YCh8GhW7uSlVZfEI8B1vFkM8LL3o Kg== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:07 2026 by rpki-client