$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: cu8ZHuaCJH/wrudnXZKSrmAPZQqo8vlZ019A2arH3T8= Subject key identifier: 10:0A:B6:A2:2B:90:DA:C1:9E:2D:55:86:E2:12:EA:5E:50:35:31:9B Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 02749D8FBD7CB315D7A51F253AD887B718A41F9E Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS16509.roa Signing time: Tue 21 Jul 2026 13:32:30 +0000 ROA not before: Tue 21 Jul 2026 13:27:30 +0000 ROA not after: Tue 20 Jul 2027 13:32:30 +0000 asID: 16509 IP address blocks: 2406:840:e0e0::/44 maxlen: 48 2406:840:e666::/47 maxlen: 48 2406:840:fcf0::/44 maxlen: 48 2406:840:fd9f::/48 maxlen: 48 2406:840:fdd0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:74:9d:8f:bd:7c:b3:15:d7:a5:1f:25:3a:d8:87:b7:18:a4:1f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:30 2026 GMT Not After : Jul 20 13:32:30 2027 GMT Subject: CN=100AB6A22B90DAC19E2D5586E212EA5E5035319B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ed:22:a7:83:11:ad:02:45:78:a6:8e:c6:12: ba:0b:88:ee:a6:31:86:bb:5a:8d:42:e1:a0:6e:72: c0:10:c4:76:94:d8:b0:29:f3:58:86:8e:78:ed:fb: 8c:75:a1:79:15:8f:a0:fd:ff:e5:32:17:ba:10:31: be:f8:2d:f7:54:af:97:3f:01:96:19:49:a1:66:6d: b2:91:a2:df:bc:54:03:be:24:46:3b:46:6d:ef:40: ee:3c:94:23:5f:a8:c7:56:d6:14:77:e5:b8:72:0d: 99:4a:ec:4b:fa:0a:8a:ec:d3:69:8a:4d:14:e0:3e: 3e:e4:f0:f3:51:97:83:67:67:fc:88:da:0f:ce:0e: 28:9a:a2:92:c7:07:2f:2d:6b:00:34:a6:11:8c:7a: ad:94:cd:44:02:f4:e7:d1:64:04:a4:b3:e4:dc:b2: 01:46:b2:c9:0f:33:1c:53:e4:72:e9:b4:59:99:9d: 1c:78:27:fc:f2:78:74:2e:87:12:f6:37:e1:02:8d: 66:c5:82:5c:80:3b:56:cb:94:d8:c0:4c:a4:ff:7c: f0:4d:95:09:6b:46:87:be:4a:b9:7c:d5:dd:8c:13: 08:5f:36:f9:15:89:fa:10:72:db:5e:a4:39:04:8b: 07:b9:d2:c4:cf:a1:2e:4c:e2:c6:48:e8:4a:f6:b9: 19:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0A:B6:A2:2B:90:DA:C1:9E:2D:55:86:E2:12:EA:5E:50:35:31:9B X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e0e0::/44 2406:840:e666::/47 2406:840:fcf0::/44 2406:840:fd9f::/48 2406:840:fdd0::/44 Signature Algorithm: sha256WithRSAEncryption 6d:be:73:f2:f2:91:d7:ed:a6:32:61:a7:d8:ce:9b:e3:fe:e5: c6:ee:56:18:f2:d3:4d:6d:70:f0:00:41:e1:6f:5c:f1:3a:e2: 34:93:0a:0a:06:86:34:14:d4:82:b8:38:ac:94:c1:bb:dc:ca: 4b:55:66:60:d0:97:ce:5d:52:62:ef:49:c6:e8:e8:b7:62:d6: 92:93:c9:fd:47:03:c1:4c:52:28:b2:ab:e3:28:47:39:c5:03: 41:1f:55:21:8a:7f:69:c4:ad:70:63:a3:43:c8:21:f6:62:83: bb:31:5e:fe:d6:69:b4:5c:de:f4:5f:bb:7d:45:21:e5:e0:2f: 9d:22:3c:50:18:46:32:cd:75:fc:8c:56:69:1e:d3:72:9c:d2: fb:64:59:64:af:e4:4e:52:b5:a2:ed:d2:53:3a:3e:6b:18:dc: 22:98:7e:68:a7:48:51:1b:6e:21:c8:de:5d:f2:1a:c4:d6:be: ae:e1:e3:fa:75:38:2a:e3:d3:6d:a0:ba:84:54:3c:03:47:c2: 64:ab:7b:de:8a:71:e1:8c:d6:ac:17:5c:5f:66:82:62:5c:48: 19:f3:00:5b:6c:94:76:0e:33:fe:51:ca:e9:bd:b5:dd:67:d2: 2f:fa:47:77:ca:02:bb:ff:25:24:a6:1c:fe:f0:c2:57:98:54: 01:44:be:53 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUAnSdj718sxXXpR8lOtiHtxikH54wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczMFoX DTI3MDcyMDEzMzIzMFowMzExMC8GA1UEAxMoMTAwQUI2QTIyQjkwREFDMTlFMkQ1 NTg2RTIxMkVBNUU1MDM1MzE5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXtIqeDEa0CRXimjsYSuguI7qYxhrtajULhoG5ywBDEdpTYsCnzWIaOeO37 jHWheRWPoP3/5TIXuhAxvvgt91Svlz8BlhlJoWZtspGi37xUA74kRjtGbe9A7jyU I1+ox1bWFHfluHINmUrsS/oKiuzTaYpNFOA+PuTw81GXg2dn/IjaD84OKJqikscH Ly1rADSmEYx6rZTNRAL059FkBKSz5NyyAUayyQ8zHFPkcum0WZmdHHgn/PJ4dC6H EvY34QKNZsWCXIA7VsuU2MBMpP988E2VCWtGh75KuXzV3YwTCF82+RWJ+hBy216k OQSLB7nSxM+hLkzixkjoSva5GUkCAwEAAaOCAkowggJGMB0GA1UdDgQWBBQQCrai K5DawZ4tVYbiEupeUDUxmzAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE2NTA5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcEJAYI QODgAwcBJAYIQOZmAwcEJAYIQPzwAwcAJAYIQP2fAwcEJAYIQP3QMA0GCSqGSIb3 DQEBCwUAA4IBAQBtvnPy8pHX7aYyYafYzpvj/uXG7lYY8tNNbXDwAEHhb1zxOuI0 kwoKBoY0FNSCuDislMG73MpLVWZg0JfOXVJi70nG6Oi3YtaSk8n9RwPBTFIosqvj KEc5xQNBH1Uhin9pxK1wY6NDyCH2YoO7MV7+1mm0XN70X7t9RSHl4C+dIjxQGEYy zXX8jFZpHtNynNL7ZFlkr+ROUrWi7dJTOj5rGNwimH5op0hRG24hyN5d8hrE1r6u 4eP6dTgq49NtoLqEVDwDR8Jkq3veinHhjNasF1xfZoJiXEgZ8wBbbJR2DjP+Ucrp vbXdZ9Iv+kd3ygK7/yUkphz+8MJXmFQBRL5T -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:06 2026 by rpki-client