$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152118.roa File: AS152118.roa (raw, json) Hash identifier: TeSe5SsibMFkONjEEmopoJDEUnAKwZng6j32a1TqonA= Subject key identifier: D3:E3:18:A6:2B:A2:82:01:0F:40:3F:2B:56:FB:4F:55:AE:EC:88:D2 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 54821252B6E03CBDFCFD953751644CAF8122D48B Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152118.roa Signing time: Tue 21 Jul 2026 13:32:14 +0000 ROA not before: Tue 21 Jul 2026 13:27:14 +0000 ROA not after: Tue 20 Jul 2027 13:32:14 +0000 asID: 152118 IP address blocks: 2406:840:e880::/44 maxlen: 48 2406:840:fec4::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:82:12:52:b6:e0:3c:bd:fc:fd:95:37:51:64:4c:af:81:22:d4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:14 2026 GMT Not After : Jul 20 13:32:14 2027 GMT Subject: CN=D3E318A62BA282010F403F2B56FB4F55AEEC88D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:df:e9:72:00:42:c0:c5:4b:c7:5e:fb:b7: f2:9e:8b:0e:cd:64:d1:d3:77:7f:a8:53:e9:57:03: 7e:f1:a5:68:75:32:70:9d:07:9b:9d:af:2c:1a:90: 3f:70:7c:9f:d3:0e:27:82:38:1d:01:88:0b:d6:48: 98:7b:13:53:02:5f:3e:01:bd:e9:73:71:93:b5:54: ef:aa:2d:1f:c6:b8:b5:00:a2:8d:51:4f:26:cc:02: 14:a8:6b:62:40:f2:f9:09:45:e8:5c:b0:44:5b:05: ae:84:f5:33:7e:58:cb:f0:55:65:45:91:ea:9b:d0: f3:81:82:0b:80:6a:85:07:8d:8a:cc:28:93:21:0d: c0:29:ae:9a:0c:fb:96:a6:a5:0e:18:b3:3e:00:1c: bb:96:52:3e:33:3a:55:c9:33:8e:e5:ee:e5:88:0e: 33:af:cc:df:e5:ab:2f:23:8d:6d:4e:08:f3:d2:98: 02:c4:a0:9e:51:9e:31:2e:58:8a:e2:2c:4a:26:20: 40:87:2f:75:be:68:69:0a:6c:01:d1:ac:a3:e5:c8: 82:9c:a8:7d:5b:5f:89:91:5c:f5:86:cf:6a:04:4e: 30:07:07:a7:81:0c:65:e1:09:25:98:17:03:25:32: 7d:8d:c0:28:87:21:be:e9:be:50:3d:89:ff:3b:df: 77:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E3:18:A6:2B:A2:82:01:0F:40:3F:2B:56:FB:4F:55:AE:EC:88:D2 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152118.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e880::/44 2406:840:fec4::/48 Signature Algorithm: sha256WithRSAEncryption 3b:9c:58:95:74:2b:cc:50:83:86:6d:bc:ce:e9:f1:91:1a:d1: d2:ff:8c:2e:38:a8:60:28:e8:c9:e6:85:1b:61:b2:7b:b1:a8: 66:19:cb:cb:35:f5:75:03:84:6f:e7:b5:42:e5:90:dc:c9:d0: b6:8b:52:1f:72:da:ca:ba:20:4b:f3:9a:77:72:a5:8f:a2:fc: 8f:d1:38:66:8f:f5:6a:ea:04:cf:1e:0a:84:fd:21:50:1c:a4: a2:90:62:88:af:ca:f7:f1:4b:28:5d:9b:0d:73:f8:1a:cc:d1: 72:fa:05:19:19:91:bf:e1:d6:70:71:8a:b6:ae:2c:17:79:03: c6:33:a9:2d:5f:8f:00:fb:a3:0f:23:b1:b7:aa:ad:90:18:d0: 3e:7a:e2:b2:ce:52:6f:3f:3d:4a:40:4f:4f:2a:19:cf:29:cc: 3a:3c:d3:2e:d8:3f:9b:0e:51:3b:06:11:86:55:2c:a2:2c:53: 99:e3:e8:5d:4b:f4:b6:5b:23:01:a7:98:71:19:5f:b9:1a:da: c7:8d:ec:fd:24:9d:50:e2:3a:b7:b8:97:7a:6c:21:c3:5c:78: ed:df:5b:49:a0:4e:39:e7:84:43:c4:8a:5f:c2:92:99:9d:89: 59:74:64:2b:42:e9:5d:85:cb:6c:03:bd:b0:0b:a0:15:55:db: cc:56:51:fb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVIISUrbgPL38/ZU3UWRMr4Ei1IswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxNFoX DTI3MDcyMDEzMzIxNFowMzExMC8GA1UEAxMoRDNFMzE4QTYyQkEyODIwMTBGNDAz RjJCNTZGQjRGNTVBRUVDODhEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFK3+lyAELAxUvHXvu38p6LDs1k0dN3f6hT6VcDfvGlaHUycJ0Hm52vLBqQ P3B8n9MOJ4I4HQGIC9ZImHsTUwJfPgG96XNxk7VU76otH8a4tQCijVFPJswCFKhr YkDy+QlF6FywRFsFroT1M35Yy/BVZUWR6pvQ84GCC4BqhQeNiswokyENwCmumgz7 lqalDhizPgAcu5ZSPjM6VckzjuXu5YgOM6/M3+WrLyONbU4I89KYAsSgnlGeMS5Y iuIsSiYgQIcvdb5oaQpsAdGso+XIgpyofVtfiZFc9YbPagROMAcHp4EMZeEJJZgX AyUyfY3AKIchvum+UD2J/zvfd50CAwEAAaOCAjAwggIsMB0GA1UdDgQWBBTT4xim K6KCAQ9APytW+09VruyI0jAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MjExOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CEDogAMHACQGCED+xDANBgkqhkiG9w0BAQsFAAOCAQEAO5xYlXQrzFCDhm28zunx kRrR0v+MLjioYCjoyeaFG2Gye7GoZhnLyzX1dQOEb+e1QuWQ3MnQtotSH3Layrog S/Oad3Klj6L8j9E4Zo/1auoEzx4KhP0hUBykopBiiK/K9/FLKF2bDXP4GszRcvoF GRmRv+HWcHGKtq4sF3kDxjOpLV+PAPujDyOxt6qtkBjQPnriss5Sbz89SkBPTyoZ zynMOjzTLtg/mw5ROwYRhlUsoixTmePoXUv0tlsjAaeYcRlfuRrax43s/SSdUOI6 t7iXemwhw1x47d9bSaBOOeeEQ8SKX8KSmZ2JWXRkK0LpXYXLbAO9sAugFVXbzFZR +w== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:53 2026 by rpki-client