$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153332.roa File: AS153332.roa (raw, json) Hash identifier: j3Uib1HAQkY5VGiNcxbhJbQJlPREr68obHUowEx7piE= Subject key identifier: 05:F9:4C:56:4D:F0:66:69:8D:F0:0F:64:52:46:91:D7:81:49:99:BC Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 15C863C1FFB8DCFB2CB9650475B7084406A853AF Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153332.roa Signing time: Tue 21 Jul 2026 13:32:37 +0000 ROA not before: Tue 21 Jul 2026 13:27:37 +0000 ROA not after: Tue 20 Jul 2027 13:32:37 +0000 asID: 153332 IP address blocks: 2406:840:fea3::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c8:63:c1:ff:b8:dc:fb:2c:b9:65:04:75:b7:08:44:06:a8:53:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:37 2026 GMT Not After : Jul 20 13:32:37 2027 GMT Subject: CN=05F94C564DF066698DF00F64524691D7814999BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9e:4f:38:44:e2:20:00:2a:4b:0f:6e:a7:fc: 66:9b:e5:ee:97:4f:f1:80:2a:d9:00:c8:04:76:7e: 1c:40:67:47:11:89:8a:04:1a:26:09:9a:23:ab:0c: cd:97:a3:8f:b6:63:7f:ec:29:33:55:e6:50:3e:a0: d0:d2:2d:0d:58:81:e5:f7:ea:11:ae:b0:8c:a5:79: a6:e0:ef:b5:8e:85:d0:0d:ff:93:fe:74:e9:07:9b: 90:a9:f1:a4:3b:40:0e:65:8b:6b:2a:79:f0:c5:1a: 27:71:55:83:bb:57:9a:f7:71:21:fa:4c:ee:63:7e: b4:8d:6d:f9:38:50:7d:c7:f3:43:ec:66:6f:57:a3: cd:58:94:58:a8:c7:fc:9b:60:7e:0b:45:bb:84:4f: da:76:17:0c:9f:f6:4b:fa:46:db:55:47:f7:41:7c: fb:35:dc:f3:e3:e0:8a:c7:ac:d8:f0:3b:1b:f3:a1: 7e:81:ca:69:d4:06:c1:16:9c:75:7e:50:3a:aa:d8: 78:f4:79:74:d4:24:79:2e:e8:51:b3:2b:84:fe:d7: c7:65:bc:96:3a:52:ec:c9:ef:fd:3e:88:2d:64:03: 82:ad:ae:d8:b2:48:87:97:81:c4:1f:b4:fa:fe:d3: 59:8f:e7:f3:34:3d:79:56:da:76:2c:e9:e8:ab:21: 44:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F9:4C:56:4D:F0:66:69:8D:F0:0F:64:52:46:91:D7:81:49:99:BC X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS153332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fea3::/48 Signature Algorithm: sha256WithRSAEncryption 1e:70:34:6d:1b:ec:0c:72:dd:6e:e3:4a:66:f3:d0:76:b9:07: b6:0b:bf:40:0e:6b:13:8d:cb:69:27:80:4d:a3:b5:b6:3e:12: e9:43:07:dd:4d:d8:73:19:80:63:d4:f5:f7:ea:41:8d:12:bd: f8:f5:76:0a:f2:fb:a3:e3:62:4f:10:98:e5:fb:8f:8b:97:51: 23:62:ce:0b:0b:f8:a9:8e:72:ea:ee:0b:f0:a3:dc:ec:0c:fc: 59:ff:42:7b:2b:f0:24:58:20:ff:af:d6:7d:b2:92:e0:95:20: b1:f6:64:be:68:a0:e5:cc:c9:2e:bc:43:44:9e:b5:17:b4:a0: 35:98:70:2d:90:68:f2:5c:93:01:0d:f5:ba:a9:8c:95:be:ee: 1a:32:c9:09:1a:fa:f2:50:0e:14:70:58:a2:5d:ae:2f:93:9f: 68:93:15:ab:69:b0:4b:3c:70:85:8c:11:43:2d:31:5b:45:f0: a6:72:01:83:57:02:68:34:3c:95:71:a7:e2:e0:fd:0b:15:d4: d5:90:e4:39:22:3f:e2:df:e6:ca:37:83:3b:48:0b:81:91:0b: 13:a7:e3:ac:c8:6f:84:57:a5:01:5d:96:61:e6:53:3f:6c:b2: ee:f1:d7:1a:2a:29:d0:a2:8e:50:dd:83:ed:1b:08:67:3d:c4: 23:39:ad:26 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUFchjwf+43PssuWUEdbcIRAaoU68wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczN1oX DTI3MDcyMDEzMzIzN1owMzExMC8GA1UEAxMoMDVGOTRDNTY0REYwNjY2OThERjAw RjY0NTI0NjkxRDc4MTQ5OTlCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANGeTzhE4iAAKksPbqf8Zpvl7pdP8YAq2QDIBHZ+HEBnRxGJigQaJgmaI6sM zZejj7Zjf+wpM1XmUD6g0NItDViB5ffqEa6wjKV5puDvtY6F0A3/k/506QebkKnx pDtADmWLayp58MUaJ3FVg7tXmvdxIfpM7mN+tI1t+ThQfcfzQ+xmb1ejzViUWKjH /JtgfgtFu4RP2nYXDJ/2S/pG21VH90F8+zXc8+Pgises2PA7G/OhfoHKadQGwRac dX5QOqrYePR5dNQkeS7oUbMrhP7Xx2W8ljpS7Mnv/T6ILWQDgq2u2LJIh5eBxB+0 +v7TWY/n8zQ9eVbadizp6KshRHcCAwEAAaOCAicwggIjMB0GA1UdDgQWBBQF+UxW TfBmaY3wD2RSRpHXgUmZvDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE1MzMzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQG CED+ozANBgkqhkiG9w0BAQsFAAOCAQEAHnA0bRvsDHLdbuNKZvPQdrkHtgu/QA5r E43LaSeATaO1tj4S6UMH3U3YcxmAY9T19+pBjRK9+PV2CvL7o+NiTxCY5fuPi5dR I2LOCwv4qY5y6u4L8KPc7Az8Wf9CeyvwJFgg/6/WfbKS4JUgsfZkvmig5czJLrxD RJ61F7SgNZhwLZBo8lyTAQ31uqmMlb7uGjLJCRr68lAOFHBYol2uL5OfaJMVq2mw SzxwhYwRQy0xW0XwpnIBg1cCaDQ8lXGn4uD9CxXU1ZDkOSI/4t/myjeDO0gLgZEL E6fjrMhvhFelAV2WYeZTP2yy7vHXGiop0KKOUN2D7RsIZz3EIzmtJg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:50 2026 by rpki-client