$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152911.roa File: AS152911.roa (raw, json) Hash identifier: HgZtojKFr89KvBTOlvF5eVNI3IKBfo2nfQkI9XCHyMo= Subject key identifier: 1E:AA:5D:5E:34:09:E2:A7:B4:80:AD:7A:12:1D:61:AC:8C:77:58:3B Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 380D86999DB6F9EDF81C12799E66B4CDA80C0DA4 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152911.roa Signing time: Tue 21 Jul 2026 13:32:25 +0000 ROA not before: Tue 21 Jul 2026 13:27:25 +0000 ROA not after: Tue 20 Jul 2027 13:32:25 +0000 asID: 152911 IP address blocks: 2406:840:fa60::/44 maxlen: 48 2406:840:fe9e::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:0d:86:99:9d:b6:f9:ed:f8:1c:12:79:9e:66:b4:cd:a8:0c:0d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:25 2026 GMT Not After : Jul 20 13:32:25 2027 GMT Subject: CN=1EAA5D5E3409E2A7B480AD7A121D61AC8C77583B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d0:63:cc:e8:c4:db:c1:26:23:d6:3e:bc:2b: 69:ce:43:85:c3:e6:f9:48:fb:ec:df:0b:af:19:1f: 8b:18:47:9c:59:0d:8c:67:08:bb:0f:3c:a1:2d:f5: 4a:08:2a:2e:73:15:3b:bf:e0:2f:77:ec:35:ff:a4: b1:bb:f0:0d:75:20:4b:80:7b:c4:78:ee:04:8c:db: a8:31:2f:e3:99:d9:b4:c8:9f:6a:29:b0:25:ac:85: c4:1c:3b:62:06:00:29:2f:38:7a:24:30:1b:8c:b2: bf:ad:39:7c:48:af:99:a4:0b:24:e1:a2:44:c3:4f: 96:16:d1:da:7c:03:f6:6d:74:00:94:07:7f:b4:ae: ed:57:f5:ed:74:d6:fd:bb:f8:fa:07:9c:b7:b7:e3: 18:00:83:34:9f:69:76:6a:5d:3d:5e:9a:a1:50:84: 39:e7:2f:73:e4:ed:6a:bb:4b:24:a6:d8:a4:b6:80: c6:ea:b4:0b:cb:06:19:4d:fb:65:b1:28:5e:21:ec: 5f:2e:16:12:6f:78:8b:f3:ad:0b:e0:77:4a:7c:a7: 63:6b:03:27:e4:63:01:5f:dd:35:e0:6e:78:3a:cf: f5:d7:42:55:af:8e:eb:5c:11:9e:e7:3f:08:26:55: 30:32:b3:6e:9c:08:65:35:6d:75:b3:a5:c6:5f:55: 81:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AA:5D:5E:34:09:E2:A7:B4:80:AD:7A:12:1D:61:AC:8C:77:58:3B X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152911.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fa60::/44 2406:840:fe9e::/48 Signature Algorithm: sha256WithRSAEncryption 6d:66:08:19:df:62:c9:62:bc:49:db:92:30:5d:07:d8:a8:a9: 1e:44:97:ec:cc:62:1e:46:fc:bf:62:21:ab:1a:36:14:b5:4a: ec:5a:2e:e1:3f:57:e5:76:bb:2f:5b:80:7e:e3:2e:1e:de:c4: ae:bb:8c:d1:ea:cb:00:0a:7d:5c:b6:73:34:7d:da:2d:5f:22: a0:f0:55:a5:c1:41:77:de:21:2d:d8:e5:b8:e6:56:eb:e2:19: c0:00:70:5d:26:b7:c6:7e:72:72:58:46:4c:be:76:ee:83:0e: 5c:87:f8:32:c3:66:07:0b:a3:79:25:ba:9a:f3:92:58:5a:71: 81:88:60:11:9b:21:25:87:5d:97:33:de:9b:1a:e2:b0:79:7b: 3d:58:c0:60:db:e9:e4:92:3c:e4:39:c2:e7:0d:33:d6:ab:c5: 56:37:e6:21:71:54:c8:f2:88:ca:af:22:2a:0e:b0:28:e2:04: e3:d2:41:5a:58:22:2f:8a:70:9b:ba:f5:d2:d5:df:ae:77:d9: 6b:a9:80:3a:6a:dd:40:15:99:f9:08:34:9e:f2:fa:bf:23:ba: 64:55:a8:12:79:f8:a3:20:70:49:e0:71:a2:4f:ac:ae:85:95: 45:87:98:07:59:24:db:61:bf:2f:00:67:72:60:20:42:4e:b8: 39:a8:86:44 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOA2GmZ22+e34HBJ5nma0zagMDaQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyNVoX DTI3MDcyMDEzMzIyNVowMzExMC8GA1UEAxMoMUVBQTVENUUzNDA5RTJBN0I0ODBB RDdBMTIxRDYxQUM4Qzc3NTgzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPQY8zoxNvBJiPWPrwrac5DhcPm+Uj77N8LrxkfixhHnFkNjGcIuw88oS31 SggqLnMVO7/gL3fsNf+ksbvwDXUgS4B7xHjuBIzbqDEv45nZtMifaimwJayFxBw7 YgYAKS84eiQwG4yyv605fEivmaQLJOGiRMNPlhbR2nwD9m10AJQHf7Su7Vf17XTW /bv4+gect7fjGACDNJ9pdmpdPV6aoVCEOecvc+TtartLJKbYpLaAxuq0C8sGGU37 ZbEoXiHsXy4WEm94i/OtC+B3SnynY2sDJ+RjAV/dNeBueDrP9ddCVa+O61wRnuc/ CCZVMDKzbpwIZTVtdbOlxl9VgVcCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBQeql1e NAnip7SArXoSHWGsjHdYOzAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MjkxMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED6YAMHACQGCED+njANBgkqhkiG9w0BAQsFAAOCAQEAbWYIGd9iyWK8SduSMF0H 2KipHkSX7MxiHkb8v2Ihqxo2FLVK7Fou4T9X5Xa7L1uAfuMuHt7ErruM0erLAAp9 XLZzNH3aLV8ioPBVpcFBd94hLdjluOZW6+IZwABwXSa3xn5yclhGTL527oMOXIf4 MsNmBwujeSW6mvOSWFpxgYhgEZshJYddlzPemxrisHl7PVjAYNvp5JI85DnC5w0z 1qvFVjfmIXFUyPKIyq8iKg6wKOIE49JBWlgiL4pwm7r10tXfrnfZa6mAOmrdQBWZ +Qg0nvL6vyO6ZFWoEnn4oyBwSeBxok+sroWVRYeYB1kk22G/LwBncmAgQk64OaiG RA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:56 2026 by rpki-client