$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152598.roa File: AS152598.roa (raw, json) Hash identifier: lMq3GanC7Mmmn5UeAgxAJ47WN3n0RMBueSsW2JtB1kA= Subject key identifier: E0:64:8E:49:BE:88:D4:FB:18:26:A7:00:26:7E:20:2F:4B:49:98:3A Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 13E7B818C9E4DE39C51B74DF076506AAEE3B51DD Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152598.roa Signing time: Tue 21 Jul 2026 13:32:41 +0000 ROA not before: Tue 21 Jul 2026 13:27:41 +0000 ROA not after: Tue 20 Jul 2027 13:32:41 +0000 asID: 152598 IP address blocks: 2406:840:fecc::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e7:b8:18:c9:e4:de:39:c5:1b:74:df:07:65:06:aa:ee:3b:51:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:41 2026 GMT Not After : Jul 20 13:32:41 2027 GMT Subject: CN=E0648E49BE88D4FB1826A700267E202F4B49983A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:80:5b:2f:49:88:ca:86:8a:d5:e1:fe:97: a0:81:50:38:91:84:07:e8:42:cc:31:cd:8f:bc:c4: 41:37:38:17:b6:3d:1a:0b:d9:48:8f:13:f5:43:12: 73:b9:55:be:07:f1:6b:5e:03:9e:21:6f:64:15:e0: b3:5a:c1:03:db:c6:1f:d9:b0:83:38:ee:e4:af:40: 9f:ee:ed:53:4d:76:52:31:c8:f3:64:90:53:6b:56: 4e:6e:50:39:e2:65:af:df:b4:75:9a:61:95:24:de: fb:7e:67:c9:44:af:87:8a:c0:e4:9f:7b:c9:87:2e: b1:ec:71:19:55:9f:44:81:12:c5:2b:be:99:f6:5f: 13:3f:fd:e2:1b:12:d6:61:b1:4a:8e:6e:f5:12:0c: ed:66:75:99:59:92:ad:74:23:b3:ff:3f:72:71:da: 4e:d2:13:f0:b0:69:49:ad:f9:e6:dd:5e:81:98:62: 9c:2d:2e:3e:d2:2e:7f:ef:ae:6b:b9:5a:4c:73:8f: 7a:d5:f9:af:55:fc:42:8a:3c:c6:f2:79:f0:55:b9: e6:ba:40:23:6e:f9:dc:77:1c:f4:82:cb:17:b9:c0: 4c:df:1f:2c:3d:a5:55:ee:b8:ef:7e:37:fd:25:96: 38:f3:62:31:19:05:e1:41:e4:9d:9e:87:08:0d:f8: 37:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:64:8E:49:BE:88:D4:FB:18:26:A7:00:26:7E:20:2F:4B:49:98:3A X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152598.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fecc::/48 Signature Algorithm: sha256WithRSAEncryption 0a:07:91:ce:4a:c4:be:47:27:c4:43:0c:1b:3e:36:24:8c:39: 99:2a:2d:52:d8:b1:34:9d:c5:28:ac:cb:32:25:11:d1:6d:b9: de:e6:f4:21:fb:22:93:44:49:9f:fc:9c:7c:ee:c1:48:28:f7: 85:40:5c:3e:31:9f:70:1c:2b:5e:a2:30:a7:24:34:ac:76:01: d7:5a:1a:b0:bf:09:04:08:09:be:13:95:90:53:ed:b7:88:6d: 13:50:94:70:28:dd:d3:71:10:5e:3c:2c:e3:5b:d7:c0:b6:4d: 69:9a:36:e8:d4:cb:24:67:68:f5:60:d6:ab:3f:78:8e:36:1a: bf:a9:6b:4a:82:f5:96:1b:2a:31:be:b7:24:ff:cc:9a:54:05: 57:a8:8f:31:11:68:06:63:ff:46:53:25:62:08:af:3e:58:07: cd:21:22:fa:fa:7d:eb:a2:65:d7:ff:72:ab:16:b1:90:94:20: 1f:a3:c4:0c:6a:09:ae:3f:9a:fb:b8:bd:fd:34:df:66:40:3d: dd:66:d1:b6:09:ff:de:c3:f6:78:f9:2a:6c:43:e0:b6:1d:37: 85:21:b0:3d:90:d9:ca:d5:d3:00:76:85:eb:e6:76:d5:62:64: c5:2b:c3:4d:6f:b2:e3:7d:77:0e:f2:e7:52:33:d8:dd:3d:cc: 31:fb:4a:4c -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUE+e4GMnk3jnFG3TfB2UGqu47Ud0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjc0MVoX DTI3MDcyMDEzMzI0MVowMzExMC8GA1UEAxMoRTA2NDhFNDlCRTg4RDRGQjE4MjZB NzAwMjY3RTIwMkY0QjQ5OTgzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKyZgFsvSYjKhorV4f6XoIFQOJGEB+hCzDHNj7zEQTc4F7Y9GgvZSI8T9UMS c7lVvgfxa14DniFvZBXgs1rBA9vGH9mwgzju5K9An+7tU012UjHI82SQU2tWTm5Q OeJlr9+0dZphlSTe+35nyUSvh4rA5J97yYcusexxGVWfRIESxSu+mfZfEz/94hsS 1mGxSo5u9RIM7WZ1mVmSrXQjs/8/cnHaTtIT8LBpSa355t1egZhinC0uPtIuf++u a7laTHOPetX5r1X8Qoo8xvJ58FW55rpAI2753Hcc9ILLF7nATN8fLD2lVe647343 /SWWOPNiMRkF4UHknZ6HCA34N2kCAwEAAaOCAicwggIjMB0GA1UdDgQWBBTgZI5J vojU+xgmpwAmfiAvS0mYOjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MjU5OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQG CED+zDANBgkqhkiG9w0BAQsFAAOCAQEACgeRzkrEvkcnxEMMGz42JIw5mSotUtix NJ3FKKzLMiUR0W253ub0Ifsik0RJn/ycfO7BSCj3hUBcPjGfcBwrXqIwpyQ0rHYB 11oasL8JBAgJvhOVkFPtt4htE1CUcCjd03EQXjws41vXwLZNaZo26NTLJGdo9WDW qz94jjYav6lrSoL1lhsqMb63JP/MmlQFV6iPMRFoBmP/RlMlYgivPlgHzSEi+vp9 66Jl1/9yqxaxkJQgH6PEDGoJrj+a+7i9/TTfZkA93WbRtgn/3sP2ePkqbEPgth03 hSGwPZDZytXTAHaF6+Z21WJkxSvDTW+y4313DvLnUjPY3T3MMftKTA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:07 2026 by rpki-client