$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153168.roa File: AS153168.roa (raw, json) Hash identifier: 36iXUsKpafJlKevvECffwHws++apRQZHg9ikcQ6bcGM= Subject key identifier: 97:70:1B:5D:F9:AF:56:87:F0:2F:A0:26:7B:B4:C5:0D:9D:F1:F1:C6 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 7D7C213E37253011EF7ECB8D19076C41B47AFF76 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153168.roa Signing time: Tue 21 Jul 2026 13:32:11 +0000 ROA not before: Tue 21 Jul 2026 13:27:11 +0000 ROA not after: Tue 20 Jul 2027 13:32:11 +0000 asID: 153168 IP address blocks: 2406:840:fd50::/44 maxlen: 48 2406:840:fe9a::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:7c:21:3e:37:25:30:11:ef:7e:cb:8d:19:07:6c:41:b4:7a:ff:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:11 2026 GMT Not After : Jul 20 13:32:11 2027 GMT Subject: CN=97701B5DF9AF5687F02FA0267BB4C50D9DF1F1C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0f:95:55:dc:1d:f5:2b:74:90:70:dc:76:1e: bb:e7:d7:a4:ad:be:dd:5a:c3:6f:b6:4b:30:c1:e6: ed:69:31:b5:0d:85:b6:cb:d3:e4:d4:2a:df:7f:41: a5:95:a2:47:7c:66:9f:bb:45:6a:35:dd:7c:91:95: 8a:57:94:48:70:e9:bd:1f:cc:79:b2:46:4c:a6:06: 5e:76:d3:e5:e8:53:75:97:2c:3a:26:a8:bb:60:03: b2:34:de:1a:d4:c9:9c:36:95:0d:15:05:c2:84:2d: 2e:e5:e6:08:69:a4:e8:d3:58:36:d7:22:e4:ec:0d: a9:be:b9:60:e5:5a:9f:e0:7c:7c:52:e8:da:b3:08: ed:fc:50:84:05:b1:16:6b:22:c5:3c:e9:fb:0d:d2: 55:2e:29:e4:2e:60:61:21:e3:00:13:fe:aa:39:5a: fe:97:68:a0:78:29:04:89:e0:90:06:3b:2a:a8:7e: 13:2d:80:00:26:c9:4d:c8:a6:6e:bf:32:33:7e:1b: cb:a7:a3:da:fa:b2:4a:e1:89:7e:5b:0c:95:3c:84: 09:7e:c8:c2:cc:3d:5c:5e:25:96:f8:b1:d8:e1:b1: aa:6b:f0:eb:a5:96:f5:6d:3a:fe:a0:bd:8c:79:d1: c6:d7:3e:61:60:a0:1f:8c:eb:c7:90:c0:5b:db:bd: ef:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:70:1B:5D:F9:AF:56:87:F0:2F:A0:26:7B:B4:C5:0D:9D:F1:F1:C6 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153168.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fd50::/44 2406:840:fe9a::/48 Signature Algorithm: sha256WithRSAEncryption 22:2a:05:46:03:f3:7a:ab:aa:f0:3a:78:ac:6c:84:33:e1:be: a8:14:52:71:ce:5b:ae:7a:80:58:51:14:f6:79:b6:80:c2:ab: bd:a9:c7:84:e7:be:3c:59:d6:c3:ec:24:4c:80:62:d0:a4:83: fa:6b:a0:24:3a:d6:1e:0c:f3:54:f6:bb:bb:8c:ce:83:3c:e4: 5e:70:a6:7c:d8:b2:ee:72:a1:58:0d:a5:31:fb:38:fe:66:bb: 88:a5:e2:74:1e:b9:22:2b:06:4f:89:bb:da:90:a2:d4:e5:d0: c5:8b:5c:05:dc:d0:e9:e6:13:f4:25:bc:92:f9:b5:73:f7:71: 89:81:4a:76:00:ac:c3:7f:6a:5e:9a:79:05:ac:10:ff:b4:46: 26:bd:e8:43:75:ef:d2:97:89:29:68:c1:5b:6f:5a:82:17:22: 3c:c6:5a:dd:a0:ce:08:31:97:fb:16:b0:d3:07:68:eb:54:46: ec:29:5f:7b:15:84:95:30:21:33:59:b9:bb:33:b4:36:b6:aa: 32:a4:44:d6:d1:69:84:c0:22:7f:46:b3:5d:5b:a4:ca:77:c2: ca:36:e3:2e:9d:c3:fd:07:a6:92:11:3e:83:b5:45:8f:e6:30: f1:a0:32:00:0e:e1:3f:58:db:a6:b7:a1:d6:f8:71:ab:84:72: 4a:16:5a:d4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfXwhPjclMBHvfsuNGQdsQbR6/3YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxMVoX DTI3MDcyMDEzMzIxMVowMzExMC8GA1UEAxMoOTc3MDFCNURGOUFGNTY4N0YwMkZB MDI2N0JCNEM1MEQ5REYxRjFDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQPlVXcHfUrdJBw3HYeu+fXpK2+3VrDb7ZLMMHm7WkxtQ2FtsvT5NQq339B pZWiR3xmn7tFajXdfJGVileUSHDpvR/MebJGTKYGXnbT5ehTdZcsOiaou2ADsjTe GtTJnDaVDRUFwoQtLuXmCGmk6NNYNtci5OwNqb65YOVan+B8fFLo2rMI7fxQhAWx FmsixTzp+w3SVS4p5C5gYSHjABP+qjla/pdooHgpBIngkAY7Kqh+Ey2AACbJTcim br8yM34by6ej2vqySuGJflsMlTyECX7Iwsw9XF4llvix2OGxqmvw66WW9W06/qC9 jHnRxtc+YWCgH4zrx5DAW9u972UCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBSXcBtd +a9Wh/AvoCZ7tMUNnfHxxjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MzE2OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED9UAMHACQGCED+mjANBgkqhkiG9w0BAQsFAAOCAQEAIioFRgPzequq8Dp4rGyE M+G+qBRScc5brnqAWFEU9nm2gMKrvanHhOe+PFnWw+wkTIBi0KSD+mugJDrWHgzz VPa7u4zOgzzkXnCmfNiy7nKhWA2lMfs4/ma7iKXidB65IisGT4m72pCi1OXQxYtc BdzQ6eYT9CW8kvm1c/dxiYFKdgCsw39qXpp5BawQ/7RGJr3oQ3Xv0peJKWjBW29a ghciPMZa3aDOCDGX+xaw0wdo61RG7ClfexWElTAhM1m5uzO0NraqMqRE1tFphMAi f0azXVukynfCyjbjLp3D/QemkhE+g7VFj+Yw8aAyAA7hP1jbpreh1vhxq4RyShZa 1A== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:51 2026 by rpki-client