$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153034.roa File: AS153034.roa (raw, json) Hash identifier: cu+JbPDPI/XndAQl/ye5MrpbZXntOnhj/wphgak6808= Subject key identifier: C1:5A:62:B5:37:64:02:6A:57:E8:EF:11:CA:67:21:0D:0E:64:6C:30 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 4B61E6C453F1381721B2AB156157C752CF3AFB7F Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153034.roa Signing time: Tue 21 Jul 2026 13:32:14 +0000 ROA not before: Tue 21 Jul 2026 13:27:14 +0000 ROA not after: Tue 20 Jul 2027 13:32:14 +0000 asID: 153034 IP address blocks: 2406:840:fdc0::/44 maxlen: 48 2406:840:fe92::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:61:e6:c4:53:f1:38:17:21:b2:ab:15:61:57:c7:52:cf:3a:fb:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:14 2026 GMT Not After : Jul 20 13:32:14 2027 GMT Subject: CN=C15A62B53764026A57E8EF11CA67210D0E646C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dd:69:35:02:32:99:53:36:f7:25:48:96:89: b9:4b:dd:63:5c:db:4c:67:77:32:9d:b2:ca:e8:0c: 5d:c4:14:06:ef:4a:1b:55:43:80:b1:a8:30:3a:de: 39:a4:7d:9f:69:97:15:86:1a:77:d4:02:b5:31:31: 58:d4:2f:25:9e:c1:d0:55:0e:6f:1b:7c:b8:67:00: de:88:27:3a:c1:20:31:d2:7d:a7:b9:7d:90:4b:70: d6:21:cc:44:96:6c:5d:57:27:2e:63:69:46:7f:fc: 64:e9:c1:1e:10:89:15:6e:67:ba:fb:91:0c:5c:1f: 52:77:00:52:7e:7b:c6:98:02:c6:70:6f:31:9e:13: b5:a5:c6:4f:1b:e2:ce:ed:1f:70:72:97:cb:23:ee: 4f:d9:26:b0:ae:0a:30:e4:a9:b8:b0:cc:ea:c0:59: 82:63:a7:ee:1c:8e:df:2a:d1:f1:d5:7f:43:12:2f: 06:f6:1e:80:2b:c4:15:b9:c4:1c:4d:6b:ec:5d:2a: 39:d4:4c:91:05:15:c5:95:dd:b3:8b:67:f2:fd:76: 68:02:ff:33:89:65:9e:f3:45:b4:39:95:97:00:19: 24:24:a6:93:40:5c:ea:82:54:40:c9:f1:22:9f:b3: 44:a7:6c:b9:7f:48:27:5c:92:ad:fa:68:4f:6a:7b: 02:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5A:62:B5:37:64:02:6A:57:E8:EF:11:CA:67:21:0D:0E:64:6C:30 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fdc0::/44 2406:840:fe92::/48 Signature Algorithm: sha256WithRSAEncryption 45:ce:7b:84:3f:3d:cd:39:fd:81:09:69:cf:14:3a:e8:e8:53: 10:f6:93:e8:4b:35:8a:56:bb:6d:4a:79:a9:ce:9e:8f:89:13: a8:58:52:7b:36:bf:35:2b:ef:8e:a9:25:e5:79:21:a0:cd:a5: bf:17:63:f1:e5:88:ac:77:9f:05:44:9e:d0:8a:8f:0e:0d:bb: 6d:40:94:d0:e4:32:e1:a0:5c:f0:b3:c9:9b:7e:f9:51:8a:61: d2:69:fb:48:26:26:b6:2b:17:27:1b:fa:f6:31:2b:f8:86:33: bc:35:1e:e1:cd:46:37:fa:25:75:d0:d4:d6:a6:20:25:2e:8d: 0e:16:3b:d4:ed:d2:e8:c9:23:3d:1c:ae:99:5e:8a:25:19:ab: 41:42:8d:88:8e:88:89:f7:27:a8:c8:97:c2:74:fa:29:32:21: 78:f9:35:d6:88:14:b7:f0:39:c8:1d:4b:d8:19:eb:f0:b0:23: 4b:0a:11:55:5e:55:e9:5b:99:16:bc:00:15:dc:d8:e8:3a:a1: 18:0a:1a:a9:ed:2d:52:6b:20:aa:08:8a:31:21:f6:85:fd:2d: cb:bb:44:fc:b3:3d:64:8e:d6:8a:d9:4d:d9:1a:0f:65:82:d0: 2d:95:eb:fb:ec:3b:59:82:1f:6c:48:3b:6c:53:9b:79:bf:f2: cf:00:e0:a3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUS2HmxFPxOBchsqsVYVfHUs86+38wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxNFoX DTI3MDcyMDEzMzIxNFowMzExMC8GA1UEAxMoQzE1QTYyQjUzNzY0MDI2QTU3RThF RjExQ0E2NzIxMEQwRTY0NkMzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODdaTUCMplTNvclSJaJuUvdY1zbTGd3Mp2yyugMXcQUBu9KG1VDgLGoMDre OaR9n2mXFYYad9QCtTExWNQvJZ7B0FUObxt8uGcA3ognOsEgMdJ9p7l9kEtw1iHM RJZsXVcnLmNpRn/8ZOnBHhCJFW5nuvuRDFwfUncAUn57xpgCxnBvMZ4TtaXGTxvi zu0fcHKXyyPuT9kmsK4KMOSpuLDM6sBZgmOn7hyO3yrR8dV/QxIvBvYegCvEFbnE HE1r7F0qOdRMkQUVxZXds4tn8v12aAL/M4llnvNFtDmVlwAZJCSmk0Bc6oJUQMnx Ip+zRKdsuX9IJ1ySrfpoT2p7AhMCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBTBWmK1 N2QCalfo7xHKZyENDmRsMDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MzAzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED9wAMHACQGCED+kjANBgkqhkiG9w0BAQsFAAOCAQEARc57hD89zTn9gQlpzxQ6 6OhTEPaT6Es1ila7bUp5qc6ej4kTqFhSeza/NSvvjqkl5XkhoM2lvxdj8eWIrHef BUSe0IqPDg27bUCU0OQy4aBc8LPJm375UYph0mn7SCYmtisXJxv69jEr+IYzvDUe 4c1GN/olddDU1qYgJS6NDhY71O3S6MkjPRyumV6KJRmrQUKNiI6IifcnqMiXwnT6 KTIhePk11ogUt/A5yB1L2Bnr8LAjSwoRVV5V6VuZFrwAFdzY6DqhGAoaqe0tUmsg qgiKMSH2hf0ty7tE/LM9ZI7WitlN2RoPZYLQLZXr++w7WYIfbEg7bFObeb/yzwDg ow== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:57 2026 by rpki-client