$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152186.roa File: AS152186.roa (raw, json) Hash identifier: XYAzy1jm04f/GhG7nxYPx5FRUmanbpcE9THM6Negv4U= Subject key identifier: 5D:26:CE:77:27:18:FF:B5:7E:3C:BE:FF:2F:41:CF:C5:EA:3A:01:EB Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 4799383A0B4A5723329D71ED439E528E6A8D80DD Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152186.roa Signing time: Tue 21 Jul 2026 13:32:34 +0000 ROA not before: Tue 21 Jul 2026 13:27:34 +0000 ROA not after: Tue 20 Jul 2027 13:32:34 +0000 asID: 152186 IP address blocks: 2406:840:fec5::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:99:38:3a:0b:4a:57:23:32:9d:71:ed:43:9e:52:8e:6a:8d:80:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:34 2026 GMT Not After : Jul 20 13:32:34 2027 GMT Subject: CN=5D26CE772718FFB57E3CBEFF2F41CFC5EA3A01EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:be:04:61:04:78:6d:30:fb:a7:d8:9e:19: 46:5b:bf:ad:be:a6:f3:54:f0:34:ab:d0:12:b1:c0: cd:8c:59:40:08:e8:f8:de:27:08:18:b2:b7:fa:b7: 10:f2:9a:15:e0:6c:03:77:5a:4f:e6:0d:79:fd:16: 30:ea:37:38:57:ab:73:55:cd:7c:de:66:51:0e:e9: d2:10:09:12:bf:14:5b:39:f9:01:bb:1c:9b:76:2e: 5f:de:9c:eb:2c:c3:3b:41:43:0a:0a:31:61:c4:52: ef:26:2a:d9:56:4e:d8:04:70:3e:d0:51:26:87:0e: 75:43:38:13:a3:6a:7c:1f:36:e1:69:e3:f2:e0:f9: 45:23:65:93:13:0d:6d:f0:e3:d2:69:67:7b:59:7b: 09:08:aa:49:ce:1a:8a:2c:31:76:52:e7:77:4d:48: 02:5e:bf:1a:68:a0:26:a7:78:32:a1:9c:35:86:3b: b6:0d:65:5d:4e:6e:a8:d9:93:58:2b:61:c4:7d:80: d9:b4:72:f8:78:f3:02:95:3e:8d:7a:7a:7a:09:18: ad:88:30:f4:03:97:5d:5b:c4:d4:c3:08:5c:42:75: bf:4f:eb:97:3a:20:75:43:9a:3d:0e:44:6e:ce:d1: 54:01:73:25:c4:72:e1:29:97:81:fa:fd:59:ff:9c: 05:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:26:CE:77:27:18:FF:B5:7E:3C:BE:FF:2F:41:CF:C5:EA:3A:01:EB X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152186.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fec5::/48 Signature Algorithm: sha256WithRSAEncryption 28:24:53:f0:33:30:bc:b4:19:6f:db:24:58:cc:d3:e8:b3:ef: 64:48:99:d8:b0:19:64:7c:01:44:ec:a2:47:6d:11:27:51:cf: 65:10:da:0c:26:f2:1c:23:55:1b:1d:1f:f0:d3:3a:cf:96:7f: dc:0f:a5:8c:ae:7e:a5:f1:d8:ec:10:fc:e2:a4:47:23:79:ad: a4:3c:90:c2:a1:8f:aa:cb:7f:40:10:91:1e:0e:f0:d7:a0:a2: 08:a0:2c:83:77:d5:30:a5:ae:52:e4:1d:2c:77:77:d4:8d:ac: 12:77:b9:ff:11:90:83:31:0e:f5:4d:0e:0e:20:4f:de:25:c8: 69:f1:ba:46:91:a2:aa:b2:29:3a:ef:84:b7:2d:ac:2b:f7:54: a0:26:c4:b0:c8:a7:ba:33:7f:6b:a4:a6:1c:b9:cc:b6:df:4e: 9a:87:0e:a2:df:8d:0d:57:ed:7e:0a:52:e7:fe:e0:84:b7:a5: 25:22:7c:49:58:25:63:6d:40:51:55:e8:f0:5b:5c:41:0e:98: cd:9b:50:8f:16:83:ea:b2:93:c0:e3:ed:a5:f8:af:65:05:a0: 02:7e:87:4a:cf:0c:8c:dd:ef:8b:42:28:28:4a:bf:19:58:c6: 7f:71:4b:bf:d3:4f:e1:0d:b3:e1:25:95:b7:81:24:f1:cd:46: fb:4e:b1:64 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUR5k4OgtKVyMynXHtQ55SjmqNgN0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczNFoX DTI3MDcyMDEzMzIzNFowMzExMC8GA1UEAxMoNUQyNkNFNzcyNzE4RkZCNTdFM0NC RUZGMkY0MUNGQzVFQTNBMDFFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMT+vgRhBHhtMPun2J4ZRlu/rb6m81TwNKvQErHAzYxZQAjo+N4nCBiyt/q3 EPKaFeBsA3daT+YNef0WMOo3OFerc1XNfN5mUQ7p0hAJEr8UWzn5Abscm3YuX96c 6yzDO0FDCgoxYcRS7yYq2VZO2ARwPtBRJocOdUM4E6NqfB824Wnj8uD5RSNlkxMN bfDj0mlne1l7CQiqSc4aiiwxdlLnd01IAl6/GmigJqd4MqGcNYY7tg1lXU5uqNmT WCthxH2A2bRy+HjzApU+jXp6egkYrYgw9AOXXVvE1MMIXEJ1v0/rlzogdUOaPQ5E bs7RVAFzJcRy4SmXgfr9Wf+cBX0CAwEAAaOCAicwggIjMB0GA1UdDgQWBBRdJs53 Jxj/tX48vv8vQc/F6joB6zAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MjE4Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQG CED+xTANBgkqhkiG9w0BAQsFAAOCAQEAKCRT8DMwvLQZb9skWMzT6LPvZEiZ2LAZ ZHwBROyiR20RJ1HPZRDaDCbyHCNVGx0f8NM6z5Z/3A+ljK5+pfHY7BD84qRHI3mt pDyQwqGPqst/QBCRHg7w16CiCKAsg3fVMKWuUuQdLHd31I2sEne5/xGQgzEO9U0O DiBP3iXIafG6RpGiqrIpOu+Ety2sK/dUoCbEsMinujN/a6SmHLnMtt9OmocOot+N DVftfgpS5/7ghLelJSJ8SVglY21AUVXo8FtcQQ6YzZtQjxaD6rKTwOPtpfivZQWg An6HSs8MjN3vi0IoKEq/GVjGf3FLv9NP4Q2z4SWVt4Ek8c1G+06xZA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:55 2026 by rpki-client