$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153172.roa File: AS153172.roa (raw, json) Hash identifier: Mrc6GNLUAySJdx4FQQfuTNYtoDzL+IJgXDlrO49ZSD0= Subject key identifier: 08:9C:F8:10:C9:96:99:56:0A:4B:18:C3:59:F6:5D:23:65:B9:0C:5D Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 765E277921C94E1CF308E52C4E588172C4BFC97C Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153172.roa Signing time: Tue 21 Jul 2026 13:32:13 +0000 ROA not before: Tue 21 Jul 2026 13:27:13 +0000 ROA not after: Tue 20 Jul 2027 13:32:13 +0000 asID: 153172 IP address blocks: 2406:840:fd80::/44 maxlen: 48 2406:840:fe9b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:5e:27:79:21:c9:4e:1c:f3:08:e5:2c:4e:58:81:72:c4:bf:c9:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:13 2026 GMT Not After : Jul 20 13:32:13 2027 GMT Subject: CN=089CF810C99699560A4B18C359F65D2365B90C5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c9:ba:85:af:12:47:db:13:81:fe:e9:b7:c5: a6:92:5f:fa:ff:4c:68:63:4b:3f:1c:3c:f6:2c:fb: 09:02:3a:17:4e:8c:2b:0b:5c:eb:62:2d:60:c6:89: cb:b4:89:e8:ed:f3:5b:88:bb:79:e4:ff:d0:ea:4d: 2f:52:ce:f5:3c:41:c7:a2:9a:c6:47:86:62:0b:c5: 9c:96:cc:d1:74:1e:3a:83:16:e5:b4:43:70:db:55: d1:21:94:f8:fd:6b:b3:5c:8b:a7:42:86:f1:07:b4: a7:36:42:a1:4f:a8:4d:a4:fb:50:01:fc:7a:80:d3: b7:ec:11:31:fd:12:af:d7:6a:15:21:80:2f:51:a6: e2:55:c7:cd:fa:7c:e4:ca:c4:d1:3d:ae:e2:25:f0: 3b:4a:ae:d7:d4:2e:77:02:5c:22:84:7d:38:71:b7: 97:f2:a2:74:88:7f:48:8c:43:df:56:60:2f:d6:25: b6:88:af:81:f4:29:a3:42:b1:d5:ef:f0:1c:0d:d4: 3e:ba:06:e8:92:0c:c6:9e:ae:f6:f2:32:81:9c:b2: fd:78:b6:7b:1e:5d:f4:44:b5:de:d0:16:75:35:51: 5e:89:d3:b5:40:ea:5c:82:c9:73:03:ab:c7:be:72: e2:1f:44:4a:2a:38:ac:6c:80:cb:9e:a3:2f:9d:2f: 64:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9C:F8:10:C9:96:99:56:0A:4B:18:C3:59:F6:5D:23:65:B9:0C:5D X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153172.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fd80::/44 2406:840:fe9b::/48 Signature Algorithm: sha256WithRSAEncryption 03:90:b3:a9:16:6e:e4:e4:b2:aa:eb:e8:74:e7:ea:d6:8b:42: 2c:34:71:1a:65:01:4a:98:46:0c:f0:0c:25:a9:71:71:fe:af: 27:e2:45:3d:00:2c:b1:86:17:eb:fe:b4:12:9c:34:d5:9a:db: 3e:87:b5:f0:bd:3c:e3:fe:c9:29:e1:88:d5:d0:9c:aa:1a:c4: 43:5e:67:f2:39:59:f0:ab:0e:29:ba:89:b9:58:9d:90:8a:c3: 57:a5:5c:cc:26:de:c1:05:22:3b:34:c2:17:a2:7c:84:f8:9e: f6:5e:3c:c1:dc:cc:df:d7:e3:4e:4d:c7:2d:4f:03:e5:5b:96: 9d:53:6c:28:ad:ac:b6:fa:51:34:5d:81:5a:0d:c1:ac:96:f2: e4:1c:bb:c1:e7:49:06:10:5b:5b:af:1f:1f:2d:48:75:e4:e6: d6:1c:5f:9f:92:da:a8:af:ee:98:9b:b4:61:ab:03:3c:9c:8d: 4f:0c:99:19:ee:f2:8a:0e:9a:4f:e3:61:66:17:b0:c6:89:d4: 8b:f4:3c:29:12:3c:77:46:b4:1d:7e:07:96:5c:f8:6c:a4:f4: 80:c1:5b:a0:f9:59:5a:98:99:0b:a4:8b:00:13:b6:84:6a:93: ee:69:9a:47:2f:2e:71:92:f6:7a:a1:2c:b2:29:eb:d9:3c:3f: 24:3f:92:e0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdl4neSHJThzzCOUsTliBcsS/yXwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxM1oX DTI3MDcyMDEzMzIxM1owMzExMC8GA1UEAxMoMDg5Q0Y4MTBDOTk2OTk1NjBBNEIx OEMzNTlGNjVEMjM2NUI5MEM1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfJuoWvEkfbE4H+6bfFppJf+v9MaGNLPxw89iz7CQI6F06MKwtc62ItYMaJ y7SJ6O3zW4i7eeT/0OpNL1LO9TxBx6KaxkeGYgvFnJbM0XQeOoMW5bRDcNtV0SGU +P1rs1yLp0KG8Qe0pzZCoU+oTaT7UAH8eoDTt+wRMf0Sr9dqFSGAL1Gm4lXHzfp8 5MrE0T2u4iXwO0qu19QudwJcIoR9OHG3l/KidIh/SIxD31ZgL9YltoivgfQpo0Kx 1e/wHA3UProG6JIMxp6u9vIygZyy/Xi2ex5d9ES13tAWdTVRXonTtUDqXILJcwOr x75y4h9ESio4rGyAy56jL50vZOsCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBQInPgQ yZaZVgpLGMNZ9l0jZbkMXTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MzE3Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED9gAMHACQGCED+mzANBgkqhkiG9w0BAQsFAAOCAQEAA5CzqRZu5OSyquvodOfq 1otCLDRxGmUBSphGDPAMJalxcf6vJ+JFPQAssYYX6/60Epw01ZrbPoe18L084/7J KeGI1dCcqhrEQ15n8jlZ8KsOKbqJuVidkIrDV6VczCbewQUiOzTCF6J8hPie9l48 wdzM39fjTk3HLU8D5VuWnVNsKK2stvpRNF2BWg3BrJby5By7wedJBhBbW68fHy1I deTm1hxfn5LaqK/umJu0YasDPJyNTwyZGe7yig6aT+NhZhewxonUi/Q8KRI8d0a0 HX4Hllz4bKT0gMFboPlZWpiZC6SLABO2hGqT7mmaRy8ucZL2eqEssinr2Tw/JD+S 4A== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:53 2026 by rpki-client