$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152920.roa File: AS152920.roa (raw, json) Hash identifier: vbiwiK2P//xwPMA5z33r7JE9qRKSNJaHDqQuiTdhBqA= Subject key identifier: 06:FE:B9:E5:C1:36:F2:E4:0A:BD:F8:A3:C7:C1:6C:AD:F6:0F:EE:06 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 0B12BEBD15D6365EC6605FED0C7806BBACE3DA9E Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152920.roa Signing time: Tue 21 Jul 2026 13:32:21 +0000 ROA not before: Tue 21 Jul 2026 13:27:21 +0000 ROA not after: Tue 20 Jul 2027 13:32:21 +0000 asID: 152920 IP address blocks: 2406:840:fcd0::/44 maxlen: 48 2406:840:fe96::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:12:be:bd:15:d6:36:5e:c6:60:5f:ed:0c:78:06:bb:ac:e3:da:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:21 2026 GMT Not After : Jul 20 13:32:21 2027 GMT Subject: CN=06FEB9E5C136F2E40ABDF8A3C7C16CADF60FEE06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a4:89:71:5a:06:0c:ac:f6:55:8f:b3:ef:d2: a1:09:75:45:22:af:00:c6:56:d4:0b:3b:d3:85:e5: b6:84:b8:eb:d3:06:d9:b1:0b:db:75:13:f2:d4:0b: dd:72:ca:dc:30:74:57:e6:c0:0c:fc:cd:42:85:6a: 98:35:5f:3c:3f:b5:f7:e8:92:e7:18:f1:1e:6d:d6: 18:bc:8b:3b:80:81:10:1f:59:19:f4:d5:53:7a:e0: 15:24:d4:3c:7d:b2:b4:08:41:e3:70:9f:8d:ff:5b: c1:6c:8e:6c:e1:b4:10:c0:67:d6:7a:c2:3f:31:4c: 2f:8f:17:c8:44:cc:84:69:5b:fd:f9:7a:c5:64:8b: 7a:35:80:62:0f:4f:15:42:19:7e:78:9f:0c:4e:b9: 7d:84:c0:6e:6b:54:d7:b6:90:80:de:d4:16:9f:54: 07:f8:f1:59:e4:ab:5b:a3:5d:90:1d:3a:0a:b7:16: 54:0e:9c:91:2b:a6:78:2e:65:dc:95:da:19:2b:eb: 6b:1f:92:05:71:70:49:2a:4b:00:06:10:7c:d7:10: 2b:2c:04:95:46:47:be:ce:cb:e5:0e:40:9c:4b:cd: 61:8b:6d:d1:d3:2e:ce:8d:ee:41:79:eb:87:03:60: 34:0f:81:3b:6a:0c:eb:ae:1f:cc:b4:08:4d:39:2d: f3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FE:B9:E5:C1:36:F2:E4:0A:BD:F8:A3:C7:C1:6C:AD:F6:0F:EE:06 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS152920.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fcd0::/44 2406:840:fe96::/48 Signature Algorithm: sha256WithRSAEncryption 30:6d:96:79:6e:37:c4:c5:91:d8:c9:45:f6:18:1a:cc:57:e8: 22:cc:ec:34:8d:97:b8:36:33:00:87:54:c2:51:2f:81:21:ee: 71:de:54:2b:da:f1:89:9b:02:08:79:6d:f1:49:96:3a:a2:97: 07:38:94:26:79:e3:4c:68:cd:a2:04:fe:c2:f1:02:7c:f4:64: c9:02:f8:0f:2c:ea:75:f3:54:e3:1a:46:1a:3b:44:95:42:2b: c9:40:b5:bf:93:e6:ab:db:45:db:0c:f0:10:c5:96:7e:9a:61: f0:55:73:21:61:80:68:92:35:0f:af:6c:ff:aa:09:dd:3d:63: 85:eb:99:da:f0:9f:47:b2:53:1b:b6:aa:13:ce:07:ba:14:88: b0:d7:9f:f4:42:34:6e:12:70:6c:67:f2:26:67:47:0f:95:66: 71:2b:cb:5d:a0:8f:f7:b5:8a:26:c3:a8:cc:7a:99:5b:a2:56: f7:12:99:d6:14:c6:5c:46:3c:9e:d1:af:61:b5:11:70:8e:96: b3:9c:a9:11:65:6c:99:38:06:07:bd:dc:90:b5:07:50:9c:43: f4:dd:56:e0:c2:3e:c9:11:9d:0b:59:7b:de:c7:33:a1:87:f0: 04:58:87:f5:82:74:58:78:94:db:53:6e:99:15:d7:25:5b:4d: 62:01:a9:45 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCxK+vRXWNl7GYF/tDHgGu6zj2p4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyMVoX DTI3MDcyMDEzMzIyMVowMzExMC8GA1UEAxMoMDZGRUI5RTVDMTM2RjJFNDBBQkRG OEEzQzdDMTZDQURGNjBGRUUwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOikiXFaBgys9lWPs+/SoQl1RSKvAMZW1As704XltoS469MG2bEL23UT8tQL 3XLK3DB0V+bADPzNQoVqmDVfPD+19+iS5xjxHm3WGLyLO4CBEB9ZGfTVU3rgFSTU PH2ytAhB43Cfjf9bwWyObOG0EMBn1nrCPzFML48XyETMhGlb/fl6xWSLejWAYg9P FUIZfnifDE65fYTAbmtU17aQgN7UFp9UB/jxWeSrW6NdkB06CrcWVA6ckSumeC5l 3JXaGSvrax+SBXFwSSpLAAYQfNcQKywElUZHvs7L5Q5AnEvNYYtt0dMuzo3uQXnr hwNgNA+BO2oM664fzLQITTkt848CAwEAAaOCAjAwggIsMB0GA1UdDgQWBBQG/rnl wTby5Aq9+KPHwWyt9g/uBjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MjkyMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED80AMHACQGCED+ljANBgkqhkiG9w0BAQsFAAOCAQEAMG2WeW43xMWR2MlF9hga zFfoIszsNI2XuDYzAIdUwlEvgSHucd5UK9rxiZsCCHlt8UmWOqKXBziUJnnjTGjN ogT+wvECfPRkyQL4DyzqdfNU4xpGGjtElUIryUC1v5Pmq9tF2wzwEMWWfpph8FVz IWGAaJI1D69s/6oJ3T1jheuZ2vCfR7JTG7aqE84HuhSIsNef9EI0bhJwbGfyJmdH D5VmcSvLXaCP97WKJsOozHqZW6JW9xKZ1hTGXEY8ntGvYbURcI6Ws5ypEWVsmTgG B73ckLUHUJxD9N1W4MI+yRGdC1l73sczoYfwBFiH9YJ0WHiU21NumRXXJVtNYgGp RQ== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:08 2026 by rpki-client