$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153033.roa File: AS153033.roa (raw, json) Hash identifier: C5f6SFGLVEB6wsuXwD0tgrKo8QffQe3L/4TOB2+bUyg= Subject key identifier: F1:61:93:1C:7F:FD:22:1E:EC:F3:50:32:45:AE:4E:1D:41:98:C0:C9 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 5080B7EE5F4B0CD2773BE882423FD72EC017956D Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153033.roa Signing time: Tue 21 Jul 2026 13:32:12 +0000 ROA not before: Tue 21 Jul 2026 13:27:12 +0000 ROA not after: Tue 20 Jul 2027 13:32:12 +0000 asID: 153033 IP address blocks: 2406:840:fdb0::/44 maxlen: 48 2406:840:fe93::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:80:b7:ee:5f:4b:0c:d2:77:3b:e8:82:42:3f:d7:2e:c0:17:95:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:12 2026 GMT Not After : Jul 20 13:32:12 2027 GMT Subject: CN=F161931C7FFD221EECF3503245AE4E1D4198C0C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:21:e1:f5:34:4c:d8:e2:82:41:79:b1:0e:67: a2:d0:a1:76:51:3d:d1:b8:9b:d8:06:e3:51:0c:ab: 76:2b:6c:67:b5:57:83:48:f3:69:85:7d:06:f5:8d: bd:b5:1f:ef:32:80:b8:1d:00:d2:d5:e5:2c:71:7e: 18:c1:48:42:25:61:ce:66:12:e7:41:80:c1:d7:1d: 34:0d:31:6a:75:ce:d4:d8:af:9f:f2:e4:8f:72:4e: df:06:c8:0b:24:bd:b9:b0:cf:4e:d9:1e:ba:0c:21: 6a:ee:7f:c1:80:69:06:29:b8:a0:f6:53:ac:2e:9e: 15:6e:b5:4b:1e:b4:e7:26:46:c6:31:39:1e:8b:dc: 3d:d9:9f:46:17:65:0e:fd:ff:0f:87:3f:ad:bb:13: 62:84:b5:da:e4:2f:f4:6b:60:38:7b:94:24:9e:e7: e6:23:f2:89:41:cb:12:c9:84:03:5c:3b:cb:9d:a6: e8:cc:17:80:3a:7d:a9:84:0e:84:a9:3a:e7:58:7c: 33:df:93:ee:7d:ef:08:1e:28:7a:f5:21:26:c6:8e: a8:ea:e1:3c:8b:06:74:19:18:a6:62:1f:ad:3d:5f: 1f:2c:43:f5:8f:8b:da:b4:fb:62:72:74:d6:7e:ef: 0a:c7:b8:2b:34:47:1c:0a:d3:74:72:08:f8:bb:d9: 6d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:61:93:1C:7F:FD:22:1E:EC:F3:50:32:45:AE:4E:1D:41:98:C0:C9 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fdb0::/44 2406:840:fe93::/48 Signature Algorithm: sha256WithRSAEncryption 51:7b:cf:f0:da:f0:90:ab:b3:da:27:1d:93:6a:62:55:c7:e8: e1:60:98:00:34:a3:26:18:a6:70:8f:ec:bd:9b:c9:40:90:61: a6:67:e9:c2:4c:d1:53:70:71:64:46:63:5b:e4:4c:f2:97:b3: 3d:d6:9c:93:31:88:2d:00:a5:46:48:1e:cf:a4:14:57:54:7e: 29:5c:47:72:e2:08:97:a1:f9:2b:1c:bf:ed:f8:8a:ae:b2:91: 65:fb:9d:c2:e9:6e:af:ff:f3:88:ad:78:10:b0:61:80:49:5a: 94:74:93:f6:23:73:25:ed:80:9f:1b:07:ef:16:48:a1:87:3b: 11:5a:30:a4:b3:d1:94:4a:8c:dc:4b:65:9a:bb:b5:47:ea:e9: 54:42:9d:40:bc:98:05:6d:d9:35:61:cc:fc:2c:93:96:dd:21: 0f:18:b4:62:79:02:ff:ad:0d:9b:84:53:1a:f1:5b:69:3b:79: 04:fa:ea:a1:14:24:d9:8b:05:fd:36:cb:e9:28:a7:c8:dd:93: ae:e0:ca:29:ea:f3:ba:43:20:96:66:3e:08:36:60:b1:7c:ca: f2:a0:d9:2c:0a:71:fa:64:c6:ee:7b:82:80:49:05:53:00:c0: 9f:0c:b4:36:f8:ae:19:fe:86:64:7f:d7:2f:f2:02:ea:95:d1: 69:5a:83:7d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUIC37l9LDNJ3O+iCQj/XLsAXlW0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxMloX DTI3MDcyMDEzMzIxMlowMzExMC8GA1UEAxMoRjE2MTkzMUM3RkZEMjIxRUVDRjM1 MDMyNDVBRTRFMUQ0MTk4QzBDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwh4fU0TNjigkF5sQ5notChdlE90bib2AbjUQyrditsZ7VXg0jzaYV9BvWN vbUf7zKAuB0A0tXlLHF+GMFIQiVhzmYS50GAwdcdNA0xanXO1Nivn/Lkj3JO3wbI CyS9ubDPTtkeugwhau5/wYBpBim4oPZTrC6eFW61Sx605yZGxjE5HovcPdmfRhdl Dv3/D4c/rbsTYoS12uQv9GtgOHuUJJ7n5iPyiUHLEsmEA1w7y52m6MwXgDp9qYQO hKk651h8M9+T7n3vCB4oevUhJsaOqOrhPIsGdBkYpmIfrT1fHyxD9Y+L2rT7YnJ0 1n7vCse4KzRHHArTdHII+LvZbRcCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBTxYZMc f/0iHuzzUDJFrk4dQZjAyTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MzAzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED9sAMHACQGCED+kzANBgkqhkiG9w0BAQsFAAOCAQEAUXvP8NrwkKuz2icdk2pi Vcfo4WCYADSjJhimcI/svZvJQJBhpmfpwkzRU3BxZEZjW+RM8pezPdackzGILQCl Rkgez6QUV1R+KVxHcuIIl6H5Kxy/7fiKrrKRZfudwulur//ziK14ELBhgElalHST 9iNzJe2AnxsH7xZIoYc7EVowpLPRlEqM3Etlmru1R+rpVEKdQLyYBW3ZNWHM/CyT lt0hDxi0YnkC/60Nm4RTGvFbaTt5BPrqoRQk2YsF/TbL6SinyN2TruDKKerzukMg lmY+CDZgsXzK8qDZLApx+mTG7nuCgEkFUwDAnwy0NviuGf6GZH/XL/IC6pXRaVqD fQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:57 2026 by rpki-client