$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS206540.roa File: AS206540.roa (raw, json) Hash identifier: BjLnUG1R7+sA9wOdx9bH5lsTraXzR/Xjt4fluPnZxp0= Subject key identifier: 17:C1:A4:C0:35:01:0B:28:80:F1:AD:77:55:BC:FE:B3:54:9A:4C:A0 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 6397723EDC0086B89BC2B55D986A1CF4BDE61958 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS206540.roa Signing time: Tue 21 Jul 2026 13:32:28 +0000 ROA not before: Tue 21 Jul 2026 13:27:28 +0000 ROA not after: Tue 20 Jul 2027 13:32:28 +0000 asID: 206540 IP address blocks: 2406:840:ec00::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:97:72:3e:dc:00:86:b8:9b:c2:b5:5d:98:6a:1c:f4:bd:e6:19:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:28 2026 GMT Not After : Jul 20 13:32:28 2027 GMT Subject: CN=17C1A4C035010B2880F1AD7755BCFEB3549A4CA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:0b:c7:24:ce:7c:63:84:7b:d1:ea:68:19: fe:1d:0d:a4:59:ef:b7:e7:fb:fd:7a:15:3c:81:5f: f0:21:16:70:f6:c1:99:d4:a4:10:42:df:d4:ed:03: 39:99:38:80:70:12:9f:8e:5a:b6:7f:a2:47:63:4c: 85:8a:07:75:25:d5:6a:a0:93:b3:64:6e:0a:29:14: 36:e1:f1:52:29:a1:8b:86:41:f8:d7:93:5f:64:8d: 4c:10:d6:6f:e6:b8:7b:27:7a:41:1c:5f:d5:52:17: 36:ba:41:68:78:e7:4e:75:d7:ec:d1:aa:32:2d:d1: 9f:6a:fa:a7:59:e9:47:68:a0:a3:a9:5a:3f:9d:5e: 47:11:39:4a:e1:bc:4f:e4:f5:a0:da:e8:40:7d:c7: 44:c0:bf:75:0c:63:6d:d0:6f:62:6c:46:59:6d:dc: f9:f0:51:33:aa:48:32:fc:dd:f6:49:9e:07:3d:32: d0:a4:13:49:8b:a3:c5:48:cd:5a:86:10:b3:8b:fd: 61:25:d0:84:fb:49:90:84:a2:7c:70:7f:b1:8c:78: c2:7e:5d:e4:a3:de:25:cc:de:7b:42:f5:20:3d:60: 4d:5e:53:ba:58:42:54:5a:16:5b:a8:59:cd:ca:e3: a1:8d:87:0d:18:27:f8:dd:8b:fa:72:72:98:68:5f: 73:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C1:A4:C0:35:01:0B:28:80:F1:AD:77:55:BC:FE:B3:54:9A:4C:A0 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS206540.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:ec00::/44 Signature Algorithm: sha256WithRSAEncryption 50:0e:24:9d:24:c7:86:f5:c8:95:93:bf:d6:18:ec:c7:1c:13: ad:09:ac:69:11:da:a0:57:a5:b1:6b:8a:d2:ba:cf:d2:1d:bd: 06:5b:e4:01:f9:a0:ff:96:94:45:bf:90:57:93:66:52:b3:36: c6:ac:00:b1:74:56:cf:58:95:07:4f:59:a4:2e:05:52:fb:88: 28:65:11:e8:6b:ae:4e:84:a5:2d:c4:58:59:9f:47:e3:e8:d9: 8d:ea:97:81:58:82:fc:89:10:d1:cb:ff:16:0b:43:f9:15:23: 68:62:fd:68:9c:98:4b:6d:df:33:5d:a3:03:09:7e:ca:a4:ae: 84:b2:2d:24:bf:e4:6b:3f:d0:ef:63:c8:3a:27:d7:ae:b8:ec: ef:90:82:d8:4a:39:5a:49:57:46:70:36:f8:ae:f2:cd:15:83: d8:99:92:0a:3d:5d:38:0b:56:1b:1f:df:b3:2c:d5:41:bf:f1: 9d:07:51:75:c0:2b:29:6a:b1:71:0f:35:e0:71:86:28:15:68: 52:5d:c3:e0:9d:4b:5c:79:4a:6a:9a:cf:54:73:ab:60:5d:29: 93:a9:fd:44:8a:46:a9:a8:43:06:4e:74:9e:09:08:0b:bf:23: 7e:10:a9:02:df:ef:cf:cf:5f:e3:9f:32:7b:87:e7:e4:ad:c0: 0d:b2:48:f5 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUY5dyPtwAhribwrVdmGoc9L3mGVgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyOFoX DTI3MDcyMDEzMzIyOFowMzExMC8GA1UEAxMoMTdDMUE0QzAzNTAxMEIyODgwRjFB RDc3NTVCQ0ZFQjM1NDlBNENBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7bC8ckznxjhHvR6mgZ/h0NpFnvt+f7/XoVPIFf8CEWcPbBmdSkEELf1O0D OZk4gHASn45atn+iR2NMhYoHdSXVaqCTs2RuCikUNuHxUimhi4ZB+NeTX2SNTBDW b+a4eyd6QRxf1VIXNrpBaHjnTnXX7NGqMi3Rn2r6p1npR2igo6laP51eRxE5SuG8 T+T1oNroQH3HRMC/dQxjbdBvYmxGWW3c+fBRM6pIMvzd9kmeBz0y0KQTSYujxUjN WoYQs4v9YSXQhPtJkISifHB/sYx4wn5d5KPeJczee0L1ID1gTV5TulhCVFoWW6hZ zcrjoY2HDRgn+N2L+nJymGhfc7sCAwEAAaOCAicwggIjMB0GA1UdDgQWBBQXwaTA NQELKIDxrXdVvP6zVJpMoDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIwNjU0MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CEDsADANBgkqhkiG9w0BAQsFAAOCAQEAUA4knSTHhvXIlZO/1hjsxxwTrQmsaRHa oFelsWuK0rrP0h29BlvkAfmg/5aURb+QV5NmUrM2xqwAsXRWz1iVB09ZpC4FUvuI KGUR6GuuToSlLcRYWZ9H4+jZjeqXgViC/IkQ0cv/FgtD+RUjaGL9aJyYS23fM12j Awl+yqSuhLItJL/kaz/Q72PIOifXrrjs75CC2Eo5WklXRnA2+K7yzRWD2JmSCj1d OAtWGx/fsyzVQb/xnQdRdcArKWqxcQ814HGGKBVoUl3D4J1LXHlKaprPVHOrYF0p k6n9RIpGqahDBk50ngkIC78jfhCpAt/vz89f458ye4fn5K3ADbJI9Q== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:08 2026 by rpki-client