$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS204244.roa File: AS204244.roa (raw, json) Hash identifier: 1QyIzfeIQD47HlLw0uKvDlEvFJb70DkG0T3gbMwOA/U= Subject key identifier: F7:B8:61:39:97:87:80:0C:3B:37:19:A9:2B:61:0B:34:F1:59:BF:4A Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 09B9820F2A9E87D6CEB9DCF41C188575A199B89F Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS204244.roa Signing time: Tue 21 Jul 2026 13:32:22 +0000 ROA not before: Tue 21 Jul 2026 13:27:22 +0000 ROA not after: Tue 20 Jul 2027 13:32:22 +0000 asID: 204244 IP address blocks: 2406:840:e230::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b9:82:0f:2a:9e:87:d6:ce:b9:dc:f4:1c:18:85:75:a1:99:b8:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:22 2026 GMT Not After : Jul 20 13:32:22 2027 GMT Subject: CN=F7B861399787800C3B3719A92B610B34F159BF4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7b:02:15:c2:8f:ad:89:e8:15:ad:87:b5:e7: d4:42:20:75:94:d4:0e:fc:66:49:2b:23:3d:ae:8f: 79:9f:7f:67:13:16:a4:9c:03:ed:f7:a3:fc:5a:7e: 77:d2:bb:0e:cc:69:17:52:54:0d:b8:09:62:eb:7c: 5a:51:b6:0f:93:57:3f:b6:09:8c:b7:97:ae:b9:b2: f0:bd:d3:47:b6:b1:54:23:8e:0d:ae:d1:ed:18:1a: 13:28:c5:da:10:8b:5d:47:b8:a1:66:2f:f0:85:76: d9:0d:e0:4b:b9:67:6d:84:7c:82:57:eb:9a:f9:6f: 38:fc:d9:04:1c:9a:8a:64:7e:ee:fc:ce:fd:19:39: 12:1e:d8:7c:0b:6d:dd:92:dc:4b:0e:c1:0d:73:c0: 42:09:c0:43:3f:05:1c:2a:b5:53:2e:2f:83:eb:cf: 51:5e:9e:83:cf:14:8c:5b:ab:88:61:c6:0e:d8:2b: c5:cc:a4:e8:dc:f0:7c:14:15:ae:48:3a:e6:0e:1b: e7:b5:1a:51:bf:56:82:dc:67:ff:50:41:b2:4e:75: ec:41:cb:12:57:1b:62:78:c4:13:6a:fc:dd:9f:50: 79:92:f5:dc:a2:bf:f5:7d:cc:27:ca:4b:37:19:34: 05:1b:b3:3e:89:d6:8f:c0:f8:be:18:c8:9c:98:18: a9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B8:61:39:97:87:80:0C:3B:37:19:A9:2B:61:0B:34:F1:59:BF:4A X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS204244.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e230::/44 Signature Algorithm: sha256WithRSAEncryption 74:cc:a6:a2:3c:02:46:0e:4d:9f:76:a9:51:45:1a:26:b7:dc: 73:1c:d7:ed:9e:ba:50:a0:07:55:61:41:1f:83:be:9d:4a:0b: 20:a2:b9:2e:44:69:95:1d:06:ae:02:a6:3c:da:3c:34:70:13: b3:ad:be:a9:99:9a:6b:51:bb:0c:dc:f1:02:35:eb:81:d4:7b: 8c:cf:90:c1:0d:da:4a:3c:c9:45:41:24:2f:b7:85:cf:3d:8d: 68:2b:ea:d3:91:20:c9:f9:b4:83:0c:a0:cb:59:99:3c:89:d8: 5b:5a:1e:8a:5e:58:4c:8c:dd:56:e4:91:c9:85:db:89:82:8e: 15:e9:9d:53:67:06:ce:f2:ba:76:b1:87:bc:60:7e:5a:bf:f5: 86:f1:83:66:f4:f7:56:b9:4b:ae:02:d2:63:f1:e2:58:1c:e4: d5:5a:cb:48:e7:04:f9:64:08:fe:60:f3:83:5c:cd:05:92:61: 58:81:57:a7:67:bc:1d:67:80:85:38:0d:84:27:58:4d:df:bf: d0:f4:35:ba:5e:65:07:f4:e0:27:38:53:98:46:17:c7:4b:a8: 05:c6:92:5b:08:32:26:fd:16:1b:f4:0d:af:eb:b0:12:3f:48: 44:80:ad:17:5b:1f:a5:e6:3f:74:1c:be:5e:74:66:39:51:95: fa:df:86:44 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUCbmCDyqeh9bOudz0HBiFdaGZuJ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyMloX DTI3MDcyMDEzMzIyMlowMzExMC8GA1UEAxMoRjdCODYxMzk5Nzg3ODAwQzNCMzcx OUE5MkI2MTBCMzRGMTU5QkY0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOV7AhXCj62J6BWth7Xn1EIgdZTUDvxmSSsjPa6PeZ9/ZxMWpJwD7fej/Fp+ d9K7DsxpF1JUDbgJYut8WlG2D5NXP7YJjLeXrrmy8L3TR7axVCOODa7R7RgaEyjF 2hCLXUe4oWYv8IV22Q3gS7lnbYR8glfrmvlvOPzZBByaimR+7vzO/Rk5Eh7YfAtt 3ZLcSw7BDXPAQgnAQz8FHCq1Uy4vg+vPUV6eg88UjFuriGHGDtgrxcyk6NzwfBQV rkg65g4b57UaUb9Wgtxn/1BBsk517EHLElcbYnjEE2r83Z9QeZL13KK/9X3MJ8pL Nxk0BRuzPonWj8D4vhjInJgYqVkCAwEAAaOCAicwggIjMB0GA1UdDgQWBBT3uGE5 l4eADDs3GakrYQs08Vm/SjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIwNDI0NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CEDiMDANBgkqhkiG9w0BAQsFAAOCAQEAdMymojwCRg5Nn3apUUUaJrfccxzX7Z66 UKAHVWFBH4O+nUoLIKK5LkRplR0GrgKmPNo8NHATs62+qZmaa1G7DNzxAjXrgdR7 jM+QwQ3aSjzJRUEkL7eFzz2NaCvq05Egyfm0gwygy1mZPInYW1oeil5YTIzdVuSR yYXbiYKOFemdU2cGzvK6drGHvGB+Wr/1hvGDZvT3VrlLrgLSY/HiWBzk1VrLSOcE +WQI/mDzg1zNBZJhWIFXp2e8HWeAhTgNhCdYTd+/0PQ1ul5lB/TgJzhTmEYXx0uo BcaSWwgyJv0WG/QNr+uwEj9IRICtF1sfpeY/dBy+XnRmOVGV+t+GRA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:52 2026 by rpki-client