$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152631.roa File: AS152631.roa (raw, json) Hash identifier: Dob5j14emrX7ijQ9kIfMqq+PHtlrkkc7dDXgFvpwKLA= Subject key identifier: 17:71:FD:D7:A6:BB:31:35:D2:D0:3C:39:42:62:ED:28:D3:41:52:7D Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 1A7D674E7616A41E28E483A75D0A48CBA4B3D0D2 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152631.roa Signing time: Tue 21 Jul 2026 13:32:19 +0000 ROA not before: Tue 21 Jul 2026 13:27:19 +0000 ROA not after: Tue 20 Jul 2027 13:32:19 +0000 asID: 152631 IP address blocks: 2406:840:fecb::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:7d:67:4e:76:16:a4:1e:28:e4:83:a7:5d:0a:48:cb:a4:b3:d0:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:19 2026 GMT Not After : Jul 20 13:32:19 2027 GMT Subject: CN=1771FDD7A6BB3135D2D03C394262ED28D341527D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:55:0d:46:bc:88:96:aa:e0:47:25:e2:04:43: 00:2c:b9:9a:44:74:69:d8:77:c4:86:37:17:c5:0b: d8:dd:bd:7e:15:84:3a:5b:2b:23:e3:19:ee:88:0a: cb:08:7a:da:58:3e:2a:2c:fc:8e:14:d0:d8:5f:1e: 72:34:05:f1:0e:1b:78:08:d8:7a:1e:85:09:f5:26: 85:58:32:3e:f5:51:64:09:5f:4c:93:25:ca:e5:f7: 1d:be:a0:e3:88:89:d3:67:50:25:8c:4a:95:a9:66: 2f:19:48:87:7c:85:e7:4a:74:c6:81:95:bf:4e:d0: da:e1:6d:e5:f9:4b:80:d4:8e:2d:a8:ad:3e:c1:ea: c9:14:b7:a4:60:a7:48:92:84:79:d5:af:55:dc:3b: 86:39:62:3e:a0:f3:0e:1d:fc:ff:b9:11:c6:d0:c6: 82:87:dd:9e:45:8f:6b:19:74:5d:84:7f:ec:d7:e1: 6e:9f:18:c1:6e:61:33:4d:ac:1f:05:d6:92:ba:1e: d1:91:c1:c0:be:a0:0f:35:94:ed:69:c7:68:10:b4: 75:c3:1d:12:ac:21:e5:14:2e:28:da:9c:07:0b:a2: a3:77:75:ce:0b:59:3f:e6:2f:c1:67:24:22:dc:63: 79:34:b6:97:f9:fe:5e:ee:96:f0:85:e9:6c:7d:6d: bc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:71:FD:D7:A6:BB:31:35:D2:D0:3C:39:42:62:ED:28:D3:41:52:7D X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fecb::/48 Signature Algorithm: sha256WithRSAEncryption 76:6c:93:17:0f:bc:79:3b:21:f1:3e:82:65:fe:a7:81:bc:31: 76:a8:a0:67:ae:db:a7:4c:0a:29:9a:e4:a2:5e:10:0e:b3:17: e1:06:5a:f2:70:c6:3f:60:da:ef:b8:e7:e3:9b:77:49:4b:fd: 24:55:7b:1c:23:b4:84:20:70:e7:c2:13:31:87:db:52:4c:0f: 16:5d:eb:29:f7:97:3e:35:85:e2:5f:e3:7d:4a:e4:b9:cf:ae: 03:56:af:80:44:b7:59:1f:6a:68:cc:c3:88:71:ad:f8:91:d7: 7c:91:fe:af:f6:9f:2e:68:bc:12:03:3f:7e:9b:35:89:0f:77: 70:2a:cb:8d:52:a2:44:2d:06:0e:6e:70:56:5c:75:45:02:5d: e5:de:1d:9a:ed:78:27:50:9b:2a:bf:8b:bc:8b:de:7d:ce:49: ff:94:5a:4e:12:ec:3c:3a:7a:af:c0:45:41:a7:2a:1f:86:d1: 3b:98:39:75:8e:bc:ba:53:f1:fb:91:33:b0:8a:0b:25:29:f7: ef:c7:a3:f0:de:67:d7:0c:88:63:cd:b9:33:7a:c4:a1:82:7a: 56:5a:58:57:2e:d7:d6:a8:41:1c:77:44:7c:73:b3:c1:d9:09: 5f:d6:83:34:aa:58:ff:1f:a0:58:c0:75:cb:ee:5c:35:06:72: 7d:9d:ba:4b -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUGn1nTnYWpB4o5IOnXQpIy6Sz0NIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxOVoX DTI3MDcyMDEzMzIxOVowMzExMC8GA1UEAxMoMTc3MUZERDdBNkJCMzEzNUQyRDAz QzM5NDI2MkVEMjhEMzQxNTI3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJtVDUa8iJaq4Ecl4gRDACy5mkR0adh3xIY3F8UL2N29fhWEOlsrI+MZ7ogK ywh62lg+Kiz8jhTQ2F8ecjQF8Q4beAjYeh6FCfUmhVgyPvVRZAlfTJMlyuX3Hb6g 44iJ02dQJYxKlalmLxlIh3yF50p0xoGVv07Q2uFt5flLgNSOLaitPsHqyRS3pGCn SJKEedWvVdw7hjliPqDzDh38/7kRxtDGgofdnkWPaxl0XYR/7Nfhbp8YwW5hM02s HwXWkroe0ZHBwL6gDzWU7WnHaBC0dcMdEqwh5RQuKNqcBwuio3d1zgtZP+YvwWck ItxjeTS2l/n+Xu6W8IXpbH1tvGECAwEAAaOCAicwggIjMB0GA1UdDgQWBBQXcf3X prsxNdLQPDlCYu0o00FSfTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MjYzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQG CED+yzANBgkqhkiG9w0BAQsFAAOCAQEAdmyTFw+8eTsh8T6CZf6ngbwxdqigZ67b p0wKKZrkol4QDrMX4QZa8nDGP2Da77jn45t3SUv9JFV7HCO0hCBw58ITMYfbUkwP Fl3rKfeXPjWF4l/jfUrkuc+uA1avgES3WR9qaMzDiHGt+JHXfJH+r/afLmi8EgM/ fps1iQ93cCrLjVKiRC0GDm5wVlx1RQJd5d4dmu14J1CbKr+LvIvefc5J/5RaThLs PDp6r8BFQacqH4bRO5g5dY68ulPx+5EzsIoLJSn378ej8N5n1wyIY825M3rEoYJ6 VlpYVy7X1qhBHHdEfHOzwdkJX9aDNKpY/x+gWMB1y+5cNQZyfZ26Sw== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:56 2026 by rpki-client