$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153331.roa File: AS153331.roa (raw, json) Hash identifier: fFEdUP574YH+3O9KE7javHEuOB+XUsFiwFrJaw1WEaM= Subject key identifier: A4:4C:14:3A:A7:06:D2:51:4A:C9:34:DB:E9:EE:8B:1B:AB:93:2B:E6 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 6C72385E271935DC816274370F8A46A5637CA0F9 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153331.roa Signing time: Tue 21 Jul 2026 13:32:19 +0000 ROA not before: Tue 21 Jul 2026 13:27:19 +0000 ROA not after: Tue 20 Jul 2027 13:32:19 +0000 asID: 153331 IP address blocks: 2406:840:fca0::/44 maxlen: 48 2406:840:fea5::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:72:38:5e:27:19:35:dc:81:62:74:37:0f:8a:46:a5:63:7c:a0:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:19 2026 GMT Not After : Jul 20 13:32:19 2027 GMT Subject: CN=A44C143AA706D2514AC934DBE9EE8B1BAB932BE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:da:c7:f5:84:7d:71:cc:ed:e1:0f:ae:a5:b8: b7:39:81:54:76:fd:f9:8f:e2:eb:4d:b6:32:01:f1: b6:c1:28:b5:2d:e0:f4:d0:5c:a4:0c:57:0b:c8:e5: 0e:fd:a2:86:1c:fc:17:de:57:62:59:5e:c4:c7:10: d5:0d:d7:b4:cf:56:fd:c6:6a:ca:61:6a:b9:9d:97: cb:9e:19:c5:19:d2:2f:f4:76:c1:08:d0:b3:df:0c: 3e:84:83:7f:7e:d3:20:bd:0c:38:45:b4:24:34:d4: 7f:d2:40:52:9d:73:54:88:30:db:85:ac:57:7f:8f: 9a:96:fd:a9:e2:dd:6f:3d:44:85:1e:3c:70:59:e8: b2:0c:7a:8c:88:d0:fb:57:e9:33:37:a1:e0:d5:0c: 00:95:d7:58:8f:d2:30:55:e4:24:e0:bb:17:ce:68: 40:9d:c8:40:9d:0e:29:5c:a0:ac:99:4f:2e:f9:e6: 8d:2d:ee:57:db:9d:79:11:e4:16:82:10:be:3a:ea: 0c:42:ba:85:84:a4:c5:b3:24:82:d9:6a:b3:86:a5: b1:d9:de:66:73:4d:31:aa:4f:a0:c9:12:95:ea:df: 52:55:82:66:71:bf:8f:a7:e5:95:b5:04:21:33:89: 7f:ee:be:2f:fc:f5:3d:40:2d:fe:35:37:71:e5:23: 65:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4C:14:3A:A7:06:D2:51:4A:C9:34:DB:E9:EE:8B:1B:AB:93:2B:E6 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fca0::/44 2406:840:fea5::/48 Signature Algorithm: sha256WithRSAEncryption 59:1e:9a:4c:e9:90:d3:2d:f8:10:fd:c9:13:51:1f:7e:2e:86: 28:13:bf:ea:5e:60:4a:f3:3f:e2:3d:95:6a:11:49:0b:11:c6: b7:fd:34:88:6b:4c:c7:17:ab:ba:3e:8c:1d:75:05:35:ce:49: 7c:58:d0:85:0b:8c:ee:ed:c7:a1:c8:93:07:d2:2a:68:49:6a: 02:61:22:9c:fb:a4:b1:3b:7a:42:a5:47:23:9c:1a:8b:bf:01: 85:ba:8f:f3:a2:25:bf:f0:83:b1:78:38:f5:c1:a5:50:a7:4d: b7:11:b3:d3:53:35:4b:07:43:ef:06:25:c3:7c:bc:1b:64:6d: 90:f0:07:52:f9:73:e3:52:6f:53:b2:ac:0f:bf:8a:5c:61:46: fa:dd:cc:5b:78:da:0b:fb:ae:87:20:19:b9:a7:bf:46:56:72: 95:ff:1a:23:44:cd:40:94:d4:7e:a4:f8:08:18:27:ed:38:c4: 00:08:3a:93:52:e9:25:ad:84:93:b6:d8:91:c1:8a:f9:07:6f: 95:f3:38:69:b6:db:ca:12:df:35:1e:e9:7c:54:8b:22:fd:ce: cb:81:93:87:94:9e:87:e4:e2:5f:ec:85:70:77:96:ff:9f:3e: e0:f8:6f:de:ea:b3:6d:ee:ae:d7:0f:3b:d4:7b:a2:aa:d9:20: 15:9e:d4:59 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbHI4XicZNdyBYnQ3D4pGpWN8oPkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxOVoX DTI3MDcyMDEzMzIxOVowMzExMC8GA1UEAxMoQTQ0QzE0M0FBNzA2RDI1MTRBQzkz NERCRTlFRThCMUJBQjkzMkJFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIrax/WEfXHM7eEPrqW4tzmBVHb9+Y/i6022MgHxtsEotS3g9NBcpAxXC8jl Dv2ihhz8F95XYllexMcQ1Q3XtM9W/cZqymFquZ2Xy54ZxRnSL/R2wQjQs98MPoSD f37TIL0MOEW0JDTUf9JAUp1zVIgw24WsV3+Pmpb9qeLdbz1EhR48cFnosgx6jIjQ +1fpMzeh4NUMAJXXWI/SMFXkJOC7F85oQJ3IQJ0OKVygrJlPLvnmjS3uV9udeRHk FoIQvjrqDEK6hYSkxbMkgtlqs4alsdneZnNNMapPoMkSlerfUlWCZnG/j6fllbUE ITOJf+6+L/z1PUAt/jU3ceUjZRcCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBSkTBQ6 pwbSUUrJNNvp7osbq5Mr5jAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MzMzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CED8oAMHACQGCED+pTANBgkqhkiG9w0BAQsFAAOCAQEAWR6aTOmQ0y34EP3JE1Ef fi6GKBO/6l5gSvM/4j2VahFJCxHGt/00iGtMxxeruj6MHXUFNc5JfFjQhQuM7u3H ociTB9IqaElqAmEinPuksTt6QqVHI5wai78BhbqP86Ilv/CDsXg49cGlUKdNtxGz 01M1SwdD7wYlw3y8G2RtkPAHUvlz41JvU7KsD7+KXGFG+t3MW3jaC/uuhyAZuae/ RlZylf8aI0TNQJTUfqT4CBgn7TjEAAg6k1LpJa2Ek7bYkcGK+QdvlfM4abbbyhLf NR7pfFSLIv3Oy4GTh5Seh+TiX+yFcHeW/58+4Phv3uqzbe6u1w871HuiqtkgFZ7U WQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:57 2026 by rpki-client