$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS18041.roa File: AS18041.roa (raw, json) Hash identifier: d5/l/hCsMwQbgL4FztHanGDKHHAqx9LyL03wpLv7Epg= Subject key identifier: E1:DE:85:9A:7E:30:B2:DF:76:D8:1E:CF:6B:1E:80:7D:B8:72:D5:91 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 41581D73C1403259FBD397465B7C22C1EDBA8551 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS18041.roa Signing time: Tue 21 Jul 2026 13:32:21 +0000 ROA not before: Tue 21 Jul 2026 13:27:21 +0000 ROA not after: Tue 20 Jul 2027 13:32:21 +0000 asID: 18041 IP address blocks: 2406:840:f337::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:58:1d:73:c1:40:32:59:fb:d3:97:46:5b:7c:22:c1:ed:ba:85:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:21 2026 GMT Not After : Jul 20 13:32:21 2027 GMT Subject: CN=E1DE859A7E30B2DF76D81ECF6B1E807DB872D591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:96:e2:f2:a5:05:28:9c:01:57:7b:2a:13: 01:50:4b:1b:d2:9a:e7:8c:61:ba:39:94:90:13:4b: 61:fd:95:1f:f5:b2:f8:45:6b:88:f3:63:0d:8b:01: a1:89:44:be:d5:a7:17:20:c6:2a:35:5c:74:a7:88: 0d:aa:95:b4:52:a1:df:fe:0a:12:4a:27:bd:84:ed: d7:a9:87:0e:2a:87:5a:44:cb:f7:9b:62:9d:f6:37: 96:53:9e:1e:74:f2:1e:3c:e4:e7:84:81:56:1f:51: 6d:39:fc:99:81:36:14:f2:f3:c9:07:bb:22:1c:fb: 4c:7b:98:cc:34:6b:bd:87:0f:69:5e:fe:96:ee:b5: b8:19:50:67:8d:b0:27:09:0c:de:90:27:39:11:42: 68:30:43:7e:28:8f:2f:92:c3:49:65:f5:19:e5:47: 9a:65:01:64:ca:a8:61:60:cb:ef:42:cb:db:be:bc: 98:8a:4b:59:a0:54:c9:84:c1:41:8e:a0:bd:c5:1e: 2e:91:02:67:97:91:8f:f1:d6:2a:7c:cc:75:c6:34: 63:5a:10:bd:bc:1b:18:e3:ab:06:13:a1:2f:a3:78: 4f:6c:78:78:0a:ca:c0:57:a0:8e:a1:1b:36:50:f2: 46:84:d1:74:88:69:83:03:04:f2:40:a0:2b:73:5c: 89:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DE:85:9A:7E:30:B2:DF:76:D8:1E:CF:6B:1E:80:7D:B8:72:D5:91 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS18041.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:f337::/48 Signature Algorithm: sha256WithRSAEncryption 04:68:0b:3a:6f:20:8c:6d:1b:71:bb:76:2e:17:6e:ea:cf:76: 07:45:fd:d7:e5:74:37:6a:6a:c9:c3:c5:1b:af:87:94:ee:8a: 4a:8c:ee:b5:86:bc:a1:f0:11:f3:1b:f8:c5:2b:54:02:16:aa: d0:90:41:30:da:22:5e:10:31:16:8d:6e:7b:08:4c:90:70:37: b7:0a:69:4b:ec:4c:34:86:e6:78:fa:94:de:8a:6f:b5:ee:76: 17:29:13:50:76:17:2a:38:d3:1e:ae:e4:72:3d:b0:b7:9d:22: 42:be:97:72:6b:13:77:7a:c9:c7:a3:e8:0e:3e:5c:a7:22:5e: 30:dc:ba:40:04:e6:29:19:38:9d:f0:f1:f1:12:77:62:65:fd: ec:99:42:95:27:9a:70:12:28:7c:75:7e:4f:84:3d:c4:7c:8f: 1c:89:70:ef:27:27:4c:5a:1b:d4:43:3f:50:b8:33:a4:5e:09: d1:c7:e3:32:1f:32:bf:84:48:2e:0e:02:63:f3:6a:68:7a:2b: 01:46:4e:2b:c4:0e:83:3e:d7:85:c7:0c:07:80:76:bd:07:18: a7:14:5e:d3:be:49:ec:55:a3:44:47:5e:c9:50:ce:47:9e:09: 78:50:ef:7a:cf:4b:82:36:2e:89:63:10:cc:e3:55:80:71:91: a2:be:bc:7e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQVgdc8FAMln705dGW3wiwe26hVEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyMVoX DTI3MDcyMDEzMzIyMVowMzExMC8GA1UEAxMoRTFERTg1OUE3RTMwQjJERjc2RDgx RUNGNkIxRTgwN0RCODcyRDU5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALtaluLypQUonAFXeyoTAVBLG9Ka54xhujmUkBNLYf2VH/Wy+EVriPNjDYsB oYlEvtWnFyDGKjVcdKeIDaqVtFKh3/4KEkonvYTt16mHDiqHWkTL95tinfY3llOe HnTyHjzk54SBVh9RbTn8mYE2FPLzyQe7Ihz7THuYzDRrvYcPaV7+lu61uBlQZ42w JwkM3pAnORFCaDBDfiiPL5LDSWX1GeVHmmUBZMqoYWDL70LL2768mIpLWaBUyYTB QY6gvcUeLpECZ5eRj/HWKnzMdcY0Y1oQvbwbGOOrBhOhL6N4T2x4eArKwFegjqEb NlDyRoTRdIhpgwME8kCgK3NciakCAwEAAaOCAiYwggIiMB0GA1UdDgQWBBTh3oWa fjCy33bYHs9rHoB9uHLVkTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzE4MDQxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAYI QPM3MA0GCSqGSIb3DQEBCwUAA4IBAQAEaAs6byCMbRtxu3YuF27qz3YHRf3X5XQ3 amrJw8Ubr4eU7opKjO61hryh8BHzG/jFK1QCFqrQkEEw2iJeEDEWjW57CEyQcDe3 CmlL7Ew0huZ4+pTeim+17nYXKRNQdhcqONMeruRyPbC3nSJCvpdyaxN3esnHo+gO PlynIl4w3LpABOYpGTid8PHxEndiZf3smUKVJ5pwEih8dX5PhD3EfI8ciXDvJydM WhvUQz9QuDOkXgnRx+MyHzK/hEguDgJj82poeisBRk4rxA6DPteFxwwHgHa9Bxin FF7TvknsVaNER17JUM5Hngl4UO96z0uCNi6JYxDM41WAcZGivrx+ -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:05 2026 by rpki-client