$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153185.roa File: AS153185.roa (raw, json) Hash identifier: pOxYsQbqoCPEiNrENR1LNu69WuIzUSM0TUO4VePGqCs= Subject key identifier: D4:5D:F4:F0:8B:F4:81:65:BE:2C:9E:DE:A7:CC:C4:18:F1:08:DA:4B Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 6336D927C28C95BB9C30B68DCCE600C7510D66BB Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153185.roa Signing time: Tue 21 Jul 2026 13:32:13 +0000 ROA not before: Tue 21 Jul 2026 13:27:13 +0000 ROA not after: Tue 20 Jul 2027 13:32:13 +0000 asID: 153185 IP address blocks: 2406:840:fc30::/44 maxlen: 48 2406:840:fec2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:36:d9:27:c2:8c:95:bb:9c:30:b6:8d:cc:e6:00:c7:51:0d:66:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:13 2026 GMT Not After : Jul 20 13:32:13 2027 GMT Subject: CN=D45DF4F08BF48165BE2C9EDEA7CCC418F108DA4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:13:c9:d7:26:df:23:54:f2:0a:ab:c3:91:8c: 39:b0:ae:b8:4e:f0:79:20:36:b5:93:85:82:0d:13: 96:d0:49:a5:b5:e9:85:eb:87:08:0f:92:ff:82:6d: c1:f3:8b:1a:37:8f:b1:27:6a:78:12:5a:ac:52:10: 0e:14:c6:d3:f0:b3:e8:e7:5d:10:c1:06:9e:c9:65: d3:de:d4:ae:8d:85:86:0e:f3:d4:39:14:cc:60:6b: e4:2c:da:1e:24:7b:b2:8a:22:2f:e3:87:40:7a:8e: 21:bb:ec:a4:65:df:f5:0c:3f:2d:6b:c3:ac:4c:ef: f0:14:30:a2:09:9b:2f:fc:a5:1c:f2:9a:5c:0d:08: d7:e1:5f:75:f7:c5:46:f8:c3:a8:91:3a:e4:96:3d: 86:27:ea:0b:b6:3e:17:84:fc:dd:65:60:49:ad:59: 9b:2e:0c:95:1b:37:9a:15:e1:f6:92:37:6b:a7:40: a4:40:d3:59:f6:8c:5a:b2:ed:e5:34:7a:17:c2:8c: 99:e5:d2:35:29:c1:fd:d0:58:0a:42:7c:f6:96:7b: fe:71:6a:97:03:8e:d5:70:67:2e:d6:6c:fa:8f:c1: 52:02:74:55:eb:17:a5:d4:51:c5:df:6c:e0:0f:f8: 90:7f:52:f1:71:da:dd:e9:e5:36:31:f8:37:4b:91: c4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5D:F4:F0:8B:F4:81:65:BE:2C:9E:DE:A7:CC:C4:18:F1:08:DA:4B X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153185.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fc30::/44 2406:840:fec2::/48 Signature Algorithm: sha256WithRSAEncryption 5c:1f:9c:97:02:43:e6:ab:ed:f1:c4:34:17:79:c1:68:5d:7c: 42:3b:61:e3:42:81:8d:b4:6a:1a:1b:13:6e:b7:69:61:45:aa: 4f:87:8c:26:66:ca:24:09:0a:d5:ae:34:f8:71:b9:2c:52:6f: 27:93:72:45:a0:08:c1:9e:e0:f7:bd:51:e6:71:19:f9:c7:bd: 69:21:a3:4d:d5:9a:a4:e0:84:c4:39:da:95:18:ea:a8:83:e0: 70:0d:0c:b3:aa:ac:a7:69:37:88:fb:e4:3a:fe:51:d9:de:2e: 45:aa:14:49:9d:d4:69:15:ae:19:eb:bd:4c:42:72:fe:99:9e: 78:bf:c4:01:1a:77:ba:bf:a6:03:48:64:82:a4:e3:5e:90:a2: 8b:02:e5:3f:58:2c:d8:e3:72:c8:a2:2e:f5:1f:7b:7b:5b:b3: d5:79:a8:e8:1a:0d:eb:83:6d:1b:88:f1:6e:cd:31:53:30:cc: 03:14:dc:f2:b5:e0:0c:e7:41:b6:98:fd:92:45:9f:a3:5d:6d: c7:07:1d:ce:10:41:7a:28:07:c0:7e:f6:35:90:a0:15:97:1e: b3:31:2f:8b:18:fa:5b:58:8e:53:60:d8:fe:f4:fe:3a:78:dc: 8e:cb:be:c5:f5:94:45:57:09:47:29:73:b5:aa:0d:a2:e0:9f: ef:d3:c4:df -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYzbZJ8KMlbucMLaNzOYAx1ENZrswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxM1oX DTI3MDcyMDEzMzIxM1owMzExMC8GA1UEAxMoRDQ1REY0RjA4QkY0ODE2NUJFMkM5 RURFQTdDQ0M0MThGMTA4REE0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKATydcm3yNU8gqrw5GMObCuuE7weSA2tZOFgg0TltBJpbXpheuHCA+S/4Jt wfOLGjePsSdqeBJarFIQDhTG0/Cz6OddEMEGnsll097Uro2Fhg7z1DkUzGBr5Cza HiR7sooiL+OHQHqOIbvspGXf9Qw/LWvDrEzv8BQwogmbL/ylHPKaXA0I1+FfdffF RvjDqJE65JY9hifqC7Y+F4T83WVgSa1Zmy4MlRs3mhXh9pI3a6dApEDTWfaMWrLt 5TR6F8KMmeXSNSnB/dBYCkJ89pZ7/nFqlwOO1XBnLtZs+o/BUgJ0VesXpdRRxd9s 4A/4kH9S8XHa3enlNjH4N0uRxHcCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBTUXfTw i/SBZb4snt6nzMQY8QjaSzAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MzE4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED8MAMHACQGCED+wjANBgkqhkiG9w0BAQsFAAOCAQEAXB+clwJD5qvt8cQ0F3nB aF18Qjth40KBjbRqGhsTbrdpYUWqT4eMJmbKJAkK1a40+HG5LFJvJ5NyRaAIwZ7g 971R5nEZ+ce9aSGjTdWapOCExDnalRjqqIPgcA0Ms6qsp2k3iPvkOv5R2d4uRaoU SZ3UaRWuGeu9TEJy/pmeeL/EARp3ur+mA0hkgqTjXpCiiwLlP1gs2ONyyKIu9R97 e1uz1Xmo6BoN64NtG4jxbs0xUzDMAxTc8rXgDOdBtpj9kkWfo11txwcdzhBBeigH wH72NZCgFZceszEvixj6W1iOU2DY/vT+Onjcjsu+xfWURVcJRylztaoNouCf79PE 3w== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:54 2026 by rpki-client