$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153187.roa File: AS153187.roa (raw, json) Hash identifier: UDp/wd55SMOmkYp6xoMhen0OGd2luR4qXuiZue3Eozo= Subject key identifier: 1C:24:45:E5:8F:E6:43:FB:92:21:39:CA:31:7E:1A:18:CE:94:2E:EE Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 2D86BA7E5FAAB978FECD5BB786C8606D4E70C345 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153187.roa Signing time: Tue 21 Jul 2026 13:32:38 +0000 ROA not before: Tue 21 Jul 2026 13:27:38 +0000 ROA not after: Tue 20 Jul 2027 13:32:38 +0000 asID: 153187 IP address blocks: 2406:840:fc50::/44 maxlen: 48 2406:840:fef6::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:86:ba:7e:5f:aa:b9:78:fe:cd:5b:b7:86:c8:60:6d:4e:70:c3:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:38 2026 GMT Not After : Jul 20 13:32:38 2027 GMT Subject: CN=1C2445E58FE643FB922139CA317E1A18CE942EEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:53:50:10:2b:7e:34:c1:f6:66:de:f4:b1: fa:3a:9d:3e:3b:02:15:31:5c:8d:f4:97:be:a7:f9: 96:d7:bf:23:63:49:f8:98:f0:1a:da:e1:b9:55:d4: 3e:4e:43:f7:23:e3:bf:96:8c:41:5e:c7:ec:7e:c8: a7:33:b2:04:51:17:32:39:e3:65:b9:32:6b:8e:77: 85:35:3b:ee:5f:ad:7b:9a:c7:ef:eb:ec:7c:ab:1b: 2c:b8:27:60:d4:4a:32:e2:ac:e2:8e:0f:f9:e2:d2: 2d:28:f1:85:19:9d:e7:bc:e5:fb:fa:c2:2c:54:4f: d5:88:2b:0c:7b:c0:df:f5:2d:4c:ce:83:93:0e:6c: 5a:58:eb:60:ce:9a:ad:ec:64:a9:a9:bf:ee:a1:20: 27:3b:7d:1f:40:07:20:1a:d5:f6:19:3e:60:f3:b3: a6:3b:cb:6c:8f:f5:50:02:96:7b:39:52:47:89:f2: 53:a8:fd:7a:da:bd:c0:6c:03:9c:b6:50:f6:92:3f: df:cd:8f:6a:3a:98:28:8e:f4:f0:c0:97:42:cf:26: 46:14:56:3b:20:a2:f6:2e:1a:31:32:65:ce:a6:7b: 0d:ad:54:cc:4c:0a:5b:2d:5a:a3:d3:25:65:4c:34: 4d:5b:71:6c:b9:bc:96:d6:af:1d:3c:e6:c2:db:7f: 05:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:24:45:E5:8F:E6:43:FB:92:21:39:CA:31:7E:1A:18:CE:94:2E:EE X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153187.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fc50::/44 2406:840:fef6::/48 Signature Algorithm: sha256WithRSAEncryption 60:24:b9:02:c3:44:d9:28:51:09:80:4c:5e:f0:e2:11:72:53: d3:8e:eb:68:72:70:9d:11:84:d0:39:15:b1:29:b2:bc:d4:05: 64:46:59:81:51:1d:bb:9f:3c:6d:a4:61:e2:13:2a:27:b4:37: d8:ef:c5:ff:09:60:bb:ac:4c:cd:8d:cd:b0:a7:76:2c:05:d7: bc:96:6b:0b:4d:45:43:f7:bd:40:a3:8d:4a:a8:9f:5d:e3:0c: b3:76:a5:1e:49:3c:0e:1c:45:8e:15:57:c6:7b:b9:10:b4:a6: 73:65:15:d0:87:b7:79:76:82:de:13:99:1a:d2:cd:71:ae:3b: df:62:b6:39:d5:6a:33:c6:90:bd:25:11:36:a9:4c:c6:64:b2: 9f:88:af:a1:d5:2c:7d:f8:42:00:cc:83:03:d5:c5:53:c3:06: eb:ce:fb:7d:3f:1a:55:cf:a7:33:9a:1b:60:c7:a4:9e:d1:4b: 8d:41:45:5f:92:4a:b0:d9:89:8f:4a:6d:ef:99:79:f2:dd:c5: af:16:f0:b0:d8:7e:00:c4:d8:79:4c:90:b2:91:3c:34:60:d1: 4f:f6:da:f1:b2:5b:a8:06:b0:63:f0:7b:14:0c:a3:13:7f:51: 00:29:2a:5f:6b:94:d6:0a:5a:7c:52:13:44:00:f0:de:d4:a5: 32:c0:e4:05 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULYa6fl+quXj+zVu3hshgbU5ww0UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczOFoX DTI3MDcyMDEzMzIzOFowMzExMC8GA1UEAxMoMUMyNDQ1RTU4RkU2NDNGQjkyMjEz OUNBMzE3RTFBMThDRTk0MkVFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALw7U1AQK340wfZm3vSx+jqdPjsCFTFcjfSXvqf5lte/I2NJ+JjwGtrhuVXU Pk5D9yPjv5aMQV7H7H7IpzOyBFEXMjnjZbkya453hTU77l+te5rH7+vsfKsbLLgn YNRKMuKs4o4P+eLSLSjxhRmd57zl+/rCLFRP1YgrDHvA3/UtTM6Dkw5sWljrYM6a rexkqam/7qEgJzt9H0AHIBrV9hk+YPOzpjvLbI/1UAKWezlSR4nyU6j9etq9wGwD nLZQ9pI/382PajqYKI708MCXQs8mRhRWOyCi9i4aMTJlzqZ7Da1UzEwKWy1ao9Ml ZUw0TVtxbLm8ltavHTzmwtt/BW0CAwEAAaOCAjAwggIsMB0GA1UdDgQWBBQcJEXl j+ZD+5IhOcoxfhoYzpQu7jAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MzE4Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED8UAMHACQGCED+9jANBgkqhkiG9w0BAQsFAAOCAQEAYCS5AsNE2ShRCYBMXvDi EXJT047raHJwnRGE0DkVsSmyvNQFZEZZgVEdu588baRh4hMqJ7Q32O/F/wlgu6xM zY3NsKd2LAXXvJZrC01FQ/e9QKONSqifXeMMs3alHkk8DhxFjhVXxnu5ELSmc2UV 0Ie3eXaC3hOZGtLNca4732K2OdVqM8aQvSURNqlMxmSyn4ivodUsffhCAMyDA9XF U8MG6877fT8aVc+nM5obYMekntFLjUFFX5JKsNmJj0pt75l58t3FrxbwsNh+AMTY eUyQspE8NGDRT/ba8bJbqAawY/B7FAyjE39RACkqX2uU1gpafFITRADw3tSlMsDk BQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:56 2026 by rpki-client