$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS200078.roa File: AS200078.roa (raw, json) Hash identifier: npRzW9+j9nhjsFNlVckEZHtZADNb9VKk2198JzpxKnQ= Subject key identifier: F1:AA:B0:4C:4E:FE:DB:BC:A3:36:39:D3:55:6C:FE:19:1B:03:DF:DA Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 1BB1A05B8C4BF9CC923E22F77D770CE361AB8395 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS200078.roa Signing time: Tue 21 Jul 2026 13:32:17 +0000 ROA not before: Tue 21 Jul 2026 13:27:17 +0000 ROA not after: Tue 20 Jul 2027 13:32:17 +0000 asID: 200078 IP address blocks: 2406:840:9980::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b1:a0:5b:8c:4b:f9:cc:92:3e:22:f7:7d:77:0c:e3:61:ab:83:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:17 2026 GMT Not After : Jul 20 13:32:17 2027 GMT Subject: CN=F1AAB04C4EFEDBBCA33639D3556CFE191B03DFDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4a:c4:dc:ae:24:61:ef:79:c9:57:fc:4f:40: c8:c8:de:22:d5:64:18:12:1c:76:77:10:ba:e0:f1: 74:29:35:0a:c5:87:7b:41:16:38:a9:62:40:79:2e: 36:a0:35:53:b9:94:ab:6e:f1:82:7c:be:19:28:59: 49:14:9b:2d:6c:05:23:ac:53:01:e7:d0:16:d2:05: 6b:8e:85:67:a8:ab:bb:64:b0:9b:ad:bd:40:88:3b: d2:51:cc:cb:69:7a:1d:45:93:04:b5:1e:93:c1:86: 11:18:66:42:fd:cc:0b:ed:74:da:c9:19:e4:26:6f: 27:25:f2:f3:a3:52:90:a4:5d:b6:bc:41:18:ad:6e: dc:f1:e1:56:6b:ca:08:47:b8:ff:99:d5:c6:31:a6: f4:26:8c:b9:31:aa:56:9e:b9:45:79:ea:5e:74:91: 27:45:2d:e4:f1:e9:f1:b4:13:2c:32:31:9b:30:40: b0:8f:76:4f:c8:0c:51:f2:f2:0b:ce:06:48:df:67: 1d:8d:df:02:4a:03:0e:17:c6:36:f9:45:f5:e6:40: d0:bb:1e:be:a9:73:0d:ef:67:13:7b:a9:8a:1d:95: c1:82:39:f7:65:45:09:22:94:df:a7:26:88:d1:7e: ec:b0:da:43:b4:ac:60:cf:97:05:58:df:26:8d:da: e7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AA:B0:4C:4E:FE:DB:BC:A3:36:39:D3:55:6C:FE:19:1B:03:DF:DA X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS200078.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9980::/44 Signature Algorithm: sha256WithRSAEncryption 53:92:26:a7:76:74:a5:97:ba:43:ef:3e:60:c9:b3:0c:8a:bf: 72:10:81:51:fd:50:2a:fc:be:99:da:f2:5e:9d:40:bd:8a:ad: b2:f5:60:2c:69:36:7d:f1:05:85:ef:ea:65:5b:b2:b1:dc:9c: 8d:5e:82:1b:f3:6b:7c:c7:5e:79:a3:b7:73:2c:ee:bd:0d:c8: 4c:43:67:71:7e:d2:4a:19:9e:07:8a:1b:bd:48:6d:cd:c9:c3: 75:4d:8f:72:f3:92:72:d7:2e:56:4d:1a:76:43:59:0a:03:8f: 8c:6a:08:7a:67:f6:57:a3:5a:38:c6:f5:8c:c7:69:52:f0:2d: cd:de:e1:f9:59:a0:28:02:8c:a4:7d:af:f8:66:7e:ae:b9:4b: 4c:dd:1d:4d:08:b4:01:ce:0d:12:61:86:2d:7a:a7:70:74:cb: 91:54:5b:d5:fd:88:ea:4e:e9:81:a4:b2:3a:33:73:ad:84:1a: 5b:d4:b2:42:57:d7:30:e0:98:eb:3c:d7:a8:2b:15:2e:53:9e: e9:57:64:79:34:c7:0e:4a:50:ab:c6:d1:a8:54:ea:8b:00:17: 65:75:12:d1:18:f5:e4:fa:ea:02:34:6f:25:f6:70:3b:ac:6b: 0b:b6:1b:b8:9c:28:1c:46:a9:4e:0e:2e:b1:da:04:72:70:a2: 9b:c5:9c:e7 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUG7GgW4xL+cySPiL3fXcM42Grg5UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxN1oX DTI3MDcyMDEzMzIxN1owMzExMC8GA1UEAxMoRjFBQUIwNEM0RUZFREJCQ0EzMzYz OUQzNTU2Q0ZFMTkxQjAzREZEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI9KxNyuJGHveclX/E9AyMjeItVkGBIcdncQuuDxdCk1CsWHe0EWOKliQHku NqA1U7mUq27xgny+GShZSRSbLWwFI6xTAefQFtIFa46FZ6iru2Swm629QIg70lHM y2l6HUWTBLUek8GGERhmQv3MC+102skZ5CZvJyXy86NSkKRdtrxBGK1u3PHhVmvK CEe4/5nVxjGm9CaMuTGqVp65RXnqXnSRJ0Ut5PHp8bQTLDIxmzBAsI92T8gMUfLy C84GSN9nHY3fAkoDDhfGNvlF9eZA0LsevqlzDe9nE3upih2VwYI592VFCSKU36cm iNF+7LDaQ7SsYM+XBVjfJo3a51MCAwEAAaOCAicwggIjMB0GA1UdDgQWBBTxqrBM Tv7bvKM2OdNVbP4ZGwPf2jAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIwMDA3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CECZgDANBgkqhkiG9w0BAQsFAAOCAQEAU5Imp3Z0pZe6Q+8+YMmzDIq/chCBUf1Q Kvy+mdryXp1AvYqtsvVgLGk2ffEFhe/qZVuysdycjV6CG/NrfMdeeaO3cyzuvQ3I TENncX7SShmeB4obvUhtzcnDdU2PcvOSctcuVk0adkNZCgOPjGoIemf2V6NaOMb1 jMdpUvAtzd7h+VmgKAKMpH2v+GZ+rrlLTN0dTQi0Ac4NEmGGLXqncHTLkVRb1f2I 6k7pgaSyOjNzrYQaW9SyQlfXMOCY6zzXqCsVLlOe6VdkeTTHDkpQq8bRqFTqiwAX ZXUS0Rj15PrqAjRvJfZwO6xrC7YbuJwoHEapTg4usdoEcnCim8Wc5w== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:09 2026 by rpki-client