$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152697.roa File: AS152697.roa (raw, json) Hash identifier: nZH/nppz+AaNBjbxMADE7vFX2EUscultJVxsJKHIJRA= Subject key identifier: 82:17:F2:DD:AD:85:82:2D:B5:0A:C0:F7:B0:EC:66:E6:C1:E5:E3:01 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 3EEC9FA590A1766C37FB63412A80A5B42E45D701 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152697.roa Signing time: Tue 21 Jul 2026 13:32:40 +0000 ROA not before: Tue 21 Jul 2026 13:27:40 +0000 ROA not after: Tue 20 Jul 2027 13:32:40 +0000 asID: 152697 IP address blocks: 2406:840:fecd::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ec:9f:a5:90:a1:76:6c:37:fb:63:41:2a:80:a5:b4:2e:45:d7:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:40 2026 GMT Not After : Jul 20 13:32:40 2027 GMT Subject: CN=8217F2DDAD85822DB50AC0F7B0EC66E6C1E5E301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b5:59:c1:a2:10:29:13:60:84:77:9b:9d:49: 2e:3d:a1:e6:3e:09:aa:b1:76:f4:53:6e:72:36:39: 39:4b:cc:d9:e0:78:c1:09:13:a5:48:4b:d7:d6:3f: 7d:b4:94:fe:c6:75:73:82:e2:3d:e6:9e:e5:66:50: b4:92:ce:c9:fa:3b:bb:55:83:de:26:44:d9:40:e6: 87:5e:a0:a4:6d:7a:f0:d0:da:e8:9a:38:25:ee:d6: 69:0c:04:64:b5:3a:0b:26:9a:e6:11:0b:fb:d3:47: 91:be:4d:5a:44:91:84:9f:72:b3:21:4e:52:8a:51: f6:93:71:30:31:6b:0a:ef:dc:21:34:8b:1d:25:03: 4c:c1:1d:37:7d:b5:e3:3b:6b:2a:97:77:cd:a3:0b: a0:49:63:5a:ae:a0:e0:74:9f:8a:23:69:8b:f3:bd: 24:1d:13:30:f4:02:2c:33:32:4b:c5:8d:b4:3d:a0: af:94:72:25:28:ba:24:b5:cc:e8:fb:46:94:56:e8: 97:68:f8:fb:98:67:53:9b:a1:dd:95:59:d2:f2:cc: 0b:46:69:6a:1e:de:7c:72:e0:5a:8c:d1:85:89:13: 2e:37:65:ad:ea:cf:b3:7e:52:43:23:d3:0b:1e:ec: 4a:05:c8:1a:e7:14:75:c9:89:dc:c5:f8:f4:f8:de: 9b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:17:F2:DD:AD:85:82:2D:B5:0A:C0:F7:B0:EC:66:E6:C1:E5:E3:01 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152697.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fecd::/48 Signature Algorithm: sha256WithRSAEncryption 3d:77:ce:70:d3:5d:1e:6c:fb:72:a9:79:fd:34:86:cf:0f:27: 4a:29:7b:b0:3b:40:48:75:b3:42:61:89:d7:2f:61:dc:a8:12: 32:69:c7:ec:ad:be:5c:74:2f:e2:1f:6e:bc:39:a5:94:0a:7e: f8:a0:c7:62:dc:53:ae:aa:e4:76:c3:80:cd:39:a9:41:8b:70: 2e:16:f6:9b:33:6a:75:35:37:94:0e:cb:b4:21:ac:84:77:76: 49:06:ca:74:c3:c3:9a:88:44:68:9c:18:cb:f1:d2:e7:fe:ba: c0:18:54:88:76:09:33:ce:6c:71:67:35:0a:00:89:2e:b9:47: 98:02:47:80:3b:f0:95:c2:90:54:79:eb:ae:3d:04:35:57:49: 4c:e3:4e:74:fb:2e:0b:c9:fc:9c:13:41:9c:75:a9:ce:82:f6: aa:8e:40:e2:a6:c0:c2:82:03:a6:9b:b5:ec:a4:a9:51:fa:12: 23:ef:75:3f:31:56:8e:51:90:1d:d1:68:25:eb:d2:f7:2b:fd: d9:a1:69:66:02:da:9c:ca:41:f8:b6:be:9d:78:5e:a0:2e:cb: a7:35:8c:f4:42:9a:47:15:e9:f7:57:2c:31:95:b4:2b:79:ba: 8d:02:fc:f2:6b:b8:0a:3a:f1:a9:74:16:7d:ab:e7:ec:a9:20: 82:3b:e1:79 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUPuyfpZChdmw3+2NBKoCltC5F1wEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjc0MFoX DTI3MDcyMDEzMzI0MFowMzExMC8GA1UEAxMoODIxN0YyRERBRDg1ODIyREI1MEFD MEY3QjBFQzY2RTZDMUU1RTMwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJe1WcGiECkTYIR3m51JLj2h5j4JqrF29FNucjY5OUvM2eB4wQkTpUhL19Y/ fbSU/sZ1c4LiPeae5WZQtJLOyfo7u1WD3iZE2UDmh16gpG168NDa6Jo4Je7WaQwE ZLU6Cyaa5hEL+9NHkb5NWkSRhJ9ysyFOUopR9pNxMDFrCu/cITSLHSUDTMEdN321 4ztrKpd3zaMLoEljWq6g4HSfiiNpi/O9JB0TMPQCLDMyS8WNtD2gr5RyJSi6JLXM 6PtGlFbol2j4+5hnU5uh3ZVZ0vLMC0Zpah7efHLgWozRhYkTLjdlrerPs35SQyPT Cx7sSgXIGucUdcmJ3MX49Pjem80CAwEAAaOCAicwggIjMB0GA1UdDgQWBBSCF/Ld rYWCLbUKwPew7GbmweXjATAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MjY5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQG CED+zTANBgkqhkiG9w0BAQsFAAOCAQEAPXfOcNNdHmz7cql5/TSGzw8nSil7sDtA SHWzQmGJ1y9h3KgSMmnH7K2+XHQv4h9uvDmllAp++KDHYtxTrqrkdsOAzTmpQYtw Lhb2mzNqdTU3lA7LtCGshHd2SQbKdMPDmohEaJwYy/HS5/66wBhUiHYJM85scWc1 CgCJLrlHmAJHgDvwlcKQVHnrrj0ENVdJTONOdPsuC8n8nBNBnHWpzoL2qo5A4qbA woIDppu17KSpUfoSI+91PzFWjlGQHdFoJevS9yv92aFpZgLanMpB+La+nXheoC7L pzWM9EKaRxXp91csMZW0K3m6jQL88mu4CjrxqXQWfavn7KkggjvheQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:57 2026 by rpki-client