$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS204463.roa File: AS204463.roa (raw, json) Hash identifier: mzlVHXFOpKpgG6rHsHXmfMIs5DyEOK35QYrcMRfai2o= Subject key identifier: 1F:66:34:5F:7A:D2:07:D0:FB:D2:68:0A:0C:59:04:34:54:97:DA:7E Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 7C334FE974F0AFEDFE2FD88F0B8BAA626396C14A Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS204463.roa Signing time: Tue 21 Jul 2026 13:37:42 +0000 ROA not before: Tue 21 Jul 2026 13:32:42 +0000 ROA not after: Tue 20 Jul 2027 13:37:42 +0000 asID: 204463 IP address blocks: 2406:840:e500::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:33:4f:e9:74:f0:af:ed:fe:2f:d8:8f:0b:8b:aa:62:63:96:c1:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:32:42 2026 GMT Not After : Jul 20 13:37:42 2027 GMT Subject: CN=1F66345F7AD207D0FBD2680A0C5904345497DA7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:40:1c:c1:7b:74:56:68:14:b3:71:58:2f:10: 32:5a:9b:d7:d5:1f:38:48:06:a2:88:75:7b:34:66: b4:f6:37:df:83:c5:a4:f6:cc:9a:26:4a:92:1d:83: a7:7c:66:4d:a0:1b:60:fa:79:19:c2:1d:1b:a2:ca: 30:05:8a:bb:c9:f4:22:d2:83:98:86:45:16:a5:4f: 4b:aa:85:6e:b2:5f:5d:7a:89:2a:a9:67:ab:24:09: 57:4e:ec:13:91:e7:5e:9f:41:06:9a:c6:43:51:3b: 7a:e7:66:5d:e4:82:ca:f5:54:f3:42:7a:30:13:97: 8a:e6:37:38:3c:c5:6f:33:7d:60:9a:8f:c1:b9:a2: 05:35:f8:57:8d:a3:2a:52:c6:a8:eb:8a:2c:00:72: e4:58:aa:bd:75:a7:44:00:5a:92:6e:90:8e:a2:c5: bf:23:1e:07:71:3f:d0:ca:f0:59:3b:b8:d1:15:1b: 11:b0:5a:c9:aa:c1:4f:80:74:61:24:dd:3d:73:b0: 4f:1a:0b:4a:b5:33:c4:44:c6:2c:21:6d:14:79:73: 93:89:77:0f:25:13:e1:4e:92:ef:31:6a:61:f5:56: 9f:5e:a4:6c:5d:84:b3:25:b9:f6:47:12:df:cc:23: a3:47:91:38:32:92:d6:fe:0d:01:04:6c:45:32:0e: 87:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:66:34:5F:7A:D2:07:D0:FB:D2:68:0A:0C:59:04:34:54:97:DA:7E X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS204463.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e500::/44 Signature Algorithm: sha256WithRSAEncryption 4d:33:d4:40:45:94:90:3f:53:04:fd:8f:27:db:bd:fa:a0:a4: 59:9f:91:94:16:96:0e:4a:aa:00:12:41:87:38:43:2a:bd:1f: b2:d6:51:56:09:32:fe:1b:58:28:2e:91:75:b1:6d:c5:0d:71: 4d:e9:7b:b7:93:92:54:53:32:08:31:a5:5e:0e:b6:47:d0:a8: ad:d4:07:7a:d6:d5:f5:71:2a:dc:6b:ca:9b:db:2b:86:4d:42: 6f:e8:d1:5a:af:d8:0b:3e:1f:43:98:a2:ee:10:e5:08:c6:a2: 3e:61:2c:7a:0e:ea:88:b7:b2:55:7a:e9:a0:82:cf:39:65:1f: c1:92:08:48:a8:bb:13:7e:f3:33:0c:96:cd:d2:53:74:05:fe: 4c:f1:cf:19:4b:2a:ae:8d:f5:a1:fb:a7:c4:a0:a3:e6:1e:59: 9f:f1:76:a9:81:a3:6b:8e:e1:e0:09:04:ad:71:09:8c:6e:81: ad:7f:45:5d:4d:b5:b9:ae:0d:2a:79:af:a8:bd:e9:63:bd:81: 6a:86:a0:95:d1:ab:ac:0c:bd:ad:1d:10:16:84:94:70:4c:58: a8:ea:ce:34:51:5c:69:53:a7:63:f7:f9:a6:08:af:04:f4:ff: 27:2d:ce:40:e1:ab:a0:17:34:1e:96:74:e5:da:a4:30:07:74: 53:dd:a7:a6 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUfDNP6XTwr+3+L9iPC4uqYmOWwUowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMzI0MloX DTI3MDcyMDEzMzc0MlowMzExMC8GA1UEAxMoMUY2NjM0NUY3QUQyMDdEMEZCRDI2 ODBBMEM1OTA0MzQ1NDk3REE3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO9AHMF7dFZoFLNxWC8QMlqb19UfOEgGooh1ezRmtPY334PFpPbMmiZKkh2D p3xmTaAbYPp5GcIdG6LKMAWKu8n0ItKDmIZFFqVPS6qFbrJfXXqJKqlnqyQJV07s E5HnXp9BBprGQ1E7eudmXeSCyvVU80J6MBOXiuY3ODzFbzN9YJqPwbmiBTX4V42j KlLGqOuKLABy5FiqvXWnRABakm6QjqLFvyMeB3E/0MrwWTu40RUbEbBayarBT4B0 YSTdPXOwTxoLSrUzxETGLCFtFHlzk4l3DyUT4U6S7zFqYfVWn16kbF2EsyW59kcS 38wjo0eRODKS1v4NAQRsRTIOh1cCAwEAAaOCAicwggIjMB0GA1UdDgQWBBQfZjRf etIH0PvSaAoMWQQ0VJfafjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIwNDQ2My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CEDlADANBgkqhkiG9w0BAQsFAAOCAQEATTPUQEWUkD9TBP2PJ9u9+qCkWZ+RlBaW DkqqABJBhzhDKr0fstZRVgky/htYKC6RdbFtxQ1xTel7t5OSVFMyCDGlXg62R9Co rdQHetbV9XEq3GvKm9srhk1Cb+jRWq/YCz4fQ5ii7hDlCMaiPmEseg7qiLeyVXrp oILPOWUfwZIISKi7E37zMwyWzdJTdAX+TPHPGUsqro31ofunxKCj5h5Zn/F2qYGj a47h4AkErXEJjG6BrX9FXU21ua4NKnmvqL3pY72BaoagldGrrAy9rR0QFoSUcExY qOrONFFcaVOnY/f5pgivBPT/Jy3OQOGroBc0HpZ05dqkMAd0U92npg== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:04 2026 by rpki-client