$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152134.roa File: AS152134.roa (raw, json) Hash identifier: nV7cf666/VlkF4P2lAltH7qZ8b2SAop9urQHX5V/28A= Subject key identifier: 01:AC:C5:45:B8:A9:27:44:45:6A:F7:72:CB:A8:FD:56:C1:A4:D1:FC Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 131EEACF61E5C908FC1E5299ADBE87FD4FC089E8 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152134.roa Signing time: Tue 21 Jul 2026 13:32:13 +0000 ROA not before: Tue 21 Jul 2026 13:27:13 +0000 ROA not after: Tue 20 Jul 2027 13:32:13 +0000 asID: 152134 IP address blocks: 2406:840:fec3::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:1e:ea:cf:61:e5:c9:08:fc:1e:52:99:ad:be:87:fd:4f:c0:89:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:13 2026 GMT Not After : Jul 20 13:32:13 2027 GMT Subject: CN=01ACC545B8A92744456AF772CBA8FD56C1A4D1FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ab:6c:43:99:62:b3:c3:64:89:40:d9:e5:a8: 8d:22:19:86:76:5d:25:0d:ab:10:8f:7c:48:87:f5: 33:bb:35:8b:6c:39:2e:84:95:55:11:bc:0c:79:eb: 2d:03:af:be:39:23:da:1e:68:52:1a:3a:d9:c9:96: d3:70:70:76:b8:6c:83:d8:08:6f:6c:62:8e:96:66: 7f:a5:d6:30:0d:e7:ac:7e:4b:3d:8a:4b:bb:86:c0: ad:16:9f:b0:bd:ce:08:86:4c:53:28:97:49:d5:0f: f6:bf:fd:52:aa:1e:c5:89:bb:9d:7a:f4:70:54:fb: 4a:1c:7a:d0:b8:d3:54:d5:1b:b7:30:66:69:17:a3: 94:42:3e:28:4d:27:64:19:86:5f:47:f1:bb:f3:fb: af:61:27:1d:a7:85:ff:c1:9a:ec:a6:7d:99:e3:3d: 84:f4:a8:61:82:3e:9c:4e:f0:04:eb:34:dd:43:2b: 4c:39:72:1c:70:a9:cf:56:c6:64:26:83:5f:b8:ec: 7c:91:8b:1f:66:bb:b2:b1:66:70:40:78:91:89:13: f9:9e:22:14:1e:b0:ce:35:26:7d:f1:87:7c:ec:4a: cd:63:f5:69:ed:f6:34:09:92:f6:cc:45:a7:39:ca: 46:af:1f:14:2e:ea:b6:fd:be:8e:21:e9:eb:82:5a: a7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AC:C5:45:B8:A9:27:44:45:6A:F7:72:CB:A8:FD:56:C1:A4:D1:FC X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fec3::/48 Signature Algorithm: sha256WithRSAEncryption 7c:12:4f:f7:00:c9:07:8a:22:0f:ee:80:d0:b7:32:a9:67:82: 33:a0:d7:e0:35:a6:49:c8:c1:54:5f:b6:50:24:1d:d6:f7:79: 3b:93:d4:a3:ae:1c:3b:68:15:39:c8:5b:43:62:ca:43:9f:0b: c0:1b:33:70:78:fd:dd:9d:24:04:ef:a8:47:21:67:9e:64:be: ad:68:ac:91:6d:b8:ed:a4:19:0a:e9:f0:38:05:3a:2d:f6:7e: bc:c7:23:8a:28:5f:26:a9:27:f4:4d:e3:1f:49:a6:80:99:36: 61:a9:ee:2a:4b:0b:bf:9d:ce:a3:15:13:67:93:57:ef:1b:95: 53:82:a7:75:ec:5e:c8:15:93:c4:35:2d:58:9a:b5:9f:6e:c7: 22:70:25:ab:11:7c:33:48:48:d3:0e:55:df:b4:63:a8:68:8b: 77:14:14:ad:79:ee:dd:e7:97:72:c1:f7:4d:24:2a:be:e4:1b: be:3e:34:5d:1a:76:16:aa:ca:59:35:66:4f:b4:5d:27:f0:bf: f7:4c:83:6f:93:3d:c7:dc:4c:9f:14:5d:d9:1f:dd:d6:b3:5f: 79:34:4b:84:b9:76:30:4c:14:ce:2e:5f:fd:d5:77:8f:ff:ec: aa:e6:e2:06:87:f5:d9:db:c2:f7:58:ae:fb:d0:85:20:7f:58: 20:26:3e:34 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUEx7qz2HlyQj8HlKZrb6H/U/AiegwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxM1oX DTI3MDcyMDEzMzIxM1owMzExMC8GA1UEAxMoMDFBQ0M1NDVCOEE5Mjc0NDQ1NkFG NzcyQ0JBOEZENTZDMUE0RDFGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJurbEOZYrPDZIlA2eWojSIZhnZdJQ2rEI98SIf1M7s1i2w5LoSVVRG8DHnr LQOvvjkj2h5oUho62cmW03Bwdrhsg9gIb2xijpZmf6XWMA3nrH5LPYpLu4bArRaf sL3OCIZMUyiXSdUP9r/9UqoexYm7nXr0cFT7Shx60LjTVNUbtzBmaRejlEI+KE0n ZBmGX0fxu/P7r2EnHaeF/8Ga7KZ9meM9hPSoYYI+nE7wBOs03UMrTDlyHHCpz1bG ZCaDX7jsfJGLH2a7srFmcEB4kYkT+Z4iFB6wzjUmffGHfOxKzWP1ae32NAmS9sxF pznKRq8fFC7qtv2+jiHp64JapxMCAwEAAaOCAicwggIjMB0GA1UdDgQWBBQBrMVF uKknREVq93LLqP1WwaTR/DAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MjEzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQG CED+wzANBgkqhkiG9w0BAQsFAAOCAQEAfBJP9wDJB4oiD+6A0LcyqWeCM6DX4DWm ScjBVF+2UCQd1vd5O5PUo64cO2gVOchbQ2LKQ58LwBszcHj93Z0kBO+oRyFnnmS+ rWiskW247aQZCunwOAU6LfZ+vMcjiihfJqkn9E3jH0mmgJk2YanuKksLv53OoxUT Z5NX7xuVU4KndexeyBWTxDUtWJq1n27HInAlqxF8M0hI0w5V37RjqGiLdxQUrXnu 3eeXcsH3TSQqvuQbvj40XRp2FqrKWTVmT7RdJ/C/90yDb5M9x9xMnxRd2R/d1rNf eTRLhLl2MEwUzi5f/dV3j//squbiBof12dvC91iu+9CFIH9YICY+NA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:56 2026 by rpki-client