$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153170.roa File: AS153170.roa (raw, json) Hash identifier: fU+iFpGRoM6P4mkiIdBtVkcSGJ4m1xKfaK5FR+1mxW0= Subject key identifier: 76:AD:35:A0:B6:8E:23:3C:85:D9:D1:39:C2:10:BA:6B:C1:0E:DE:3C Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 132F48FB7912AD911E655DFD9FBC100243FBF2A0 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153170.roa Signing time: Tue 21 Jul 2026 13:32:20 +0000 ROA not before: Tue 21 Jul 2026 13:27:20 +0000 ROA not after: Tue 20 Jul 2027 13:32:20 +0000 asID: 153170 IP address blocks: 2406:840:fd60::/44 maxlen: 48 2406:840:fe98::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2f:48:fb:79:12:ad:91:1e:65:5d:fd:9f:bc:10:02:43:fb:f2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:20 2026 GMT Not After : Jul 20 13:32:20 2027 GMT Subject: CN=76AD35A0B68E233C85D9D139C210BA6BC10EDE3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:19:55:dd:bc:50:60:8c:cf:89:52:d1:06:3b: 8e:88:dd:fb:68:99:33:65:56:1b:73:05:eb:e4:9d: 05:bf:bb:b6:43:3b:37:ec:cd:5c:00:02:b4:2e:e7: b0:44:50:31:fc:94:ca:6b:0b:4c:b1:3b:f4:92:49: 4d:22:58:87:0c:78:53:c1:42:7d:c3:08:62:0b:55: a3:a7:63:18:6a:db:03:87:b8:63:8a:4a:3c:18:97: d8:fa:0a:76:bc:e5:a2:18:48:5a:a1:96:af:0b:14: 02:93:80:d6:4b:18:6d:60:52:d9:9b:34:a3:a5:e1: 7d:a6:28:62:23:6c:54:9f:5f:ba:ef:c1:be:14:ac: db:5b:08:aa:6d:10:1b:cb:6c:3d:de:ce:84:2a:ef: 86:28:a8:82:ea:63:2c:60:37:b7:ad:14:e5:bc:7f: e0:d6:b8:79:ea:0c:74:4e:4a:b7:f9:31:8b:e2:8a: 70:66:ef:7f:ab:b9:a1:44:59:17:39:87:bc:cc:46: bc:60:94:cd:8b:80:cf:5b:c5:85:48:d6:f8:9b:2d: ac:60:59:b6:a2:8f:13:98:32:01:b7:8f:47:91:f3: f0:6b:b4:08:d8:0c:04:49:61:e5:d2:15:7f:29:cb: f1:01:ac:b6:ff:cd:b0:1d:3a:c2:74:db:a7:f6:5b: 76:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AD:35:A0:B6:8E:23:3C:85:D9:D1:39:C2:10:BA:6B:C1:0E:DE:3C X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153170.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fd60::/44 2406:840:fe98::/48 Signature Algorithm: sha256WithRSAEncryption 7a:3e:39:de:17:37:11:b5:27:f5:c0:11:20:f8:cf:9f:e3:0a: 17:5a:95:30:7b:e9:88:82:74:b4:6c:d9:bb:44:de:34:10:48: 96:04:8e:58:2a:06:c1:ef:b6:60:bb:73:67:ee:e3:09:32:61: 18:23:a7:7c:65:1b:23:ee:e1:5f:e3:a1:37:8b:bd:97:fd:a4: 11:02:69:84:5e:fc:82:9b:b3:12:0a:2b:d6:e9:2f:50:f3:df: c6:b1:04:54:70:ef:27:2d:58:ab:26:ef:ee:72:28:83:82:02: 92:84:7b:d7:12:33:53:d5:63:d5:31:27:01:88:97:43:b5:ce: f6:48:61:ee:49:ff:98:59:cc:f1:ed:d2:bb:0c:16:c4:a0:5d: e0:2d:2e:47:9e:d0:56:a7:88:07:62:de:19:8d:49:2c:b0:46: 83:1c:6d:9f:8c:cd:46:34:1b:3b:52:58:1e:a1:5f:c8:1b:fc: dd:52:30:c1:43:a1:c4:ce:e8:12:93:b6:e9:07:10:cf:21:3c: 7f:95:3d:99:09:a9:53:8c:31:ca:10:c0:54:b9:02:b6:e6:38: 01:fd:2b:51:11:76:42:ca:2c:39:b8:c1:c4:ac:fe:51:72:d7: 0e:14:90:b0:fc:39:7c:d0:88:3c:43:57:d5:90:c0:13:a1:12: 54:d2:fd:2c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEy9I+3kSrZEeZV39n7wQAkP78qAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyMFoX DTI3MDcyMDEzMzIyMFowMzExMC8GA1UEAxMoNzZBRDM1QTBCNjhFMjMzQzg1RDlE MTM5QzIxMEJBNkJDMTBFREUzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPIZVd28UGCMz4lS0QY7jojd+2iZM2VWG3MF6+SdBb+7tkM7N+zNXAACtC7n sERQMfyUymsLTLE79JJJTSJYhwx4U8FCfcMIYgtVo6djGGrbA4e4Y4pKPBiX2PoK drzlohhIWqGWrwsUApOA1ksYbWBS2Zs0o6XhfaYoYiNsVJ9fuu/BvhSs21sIqm0Q G8tsPd7OhCrvhiiogupjLGA3t60U5bx/4Na4eeoMdE5Kt/kxi+KKcGbvf6u5oURZ FzmHvMxGvGCUzYuAz1vFhUjW+JstrGBZtqKPE5gyAbePR5Hz8Gu0CNgMBElh5dIV fynL8QGstv/NsB06wnTbp/ZbdpECAwEAAaOCAjAwggIsMB0GA1UdDgQWBBR2rTWg to4jPIXZ0TnCELprwQ7ePDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MzE3MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED9YAMHACQGCED+mDANBgkqhkiG9w0BAQsFAAOCAQEAej453hc3EbUn9cARIPjP n+MKF1qVMHvpiIJ0tGzZu0TeNBBIlgSOWCoGwe+2YLtzZ+7jCTJhGCOnfGUbI+7h X+OhN4u9l/2kEQJphF78gpuzEgor1ukvUPPfxrEEVHDvJy1Yqybv7nIog4ICkoR7 1xIzU9Vj1TEnAYiXQ7XO9khh7kn/mFnM8e3SuwwWxKBd4C0uR57QVqeIB2LeGY1J LLBGgxxtn4zNRjQbO1JYHqFfyBv83VIwwUOhxM7oEpO26QcQzyE8f5U9mQmpU4wx yhDAVLkCtuY4Af0rURF2QsosObjBxKz+UXLXDhSQsPw5fNCIPENX1ZDAE6ESVNL9 LA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:52 2026 by rpki-client