$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS207529.roa File: AS207529.roa (raw, json) Hash identifier: rj8vnftJ+4KnoqEHEfB1oD5kESQpJ9PBgb7v15bOOso= Subject key identifier: 47:3E:E8:81:C9:B7:B0:D5:A1:55:16:21:D5:7A:BB:B5:E2:4F:71:1A Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 3600F399A3B636AEDC6A4D325950B3CDAA18F73B Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS207529.roa Signing time: Tue 21 Jul 2026 13:32:17 +0000 ROA not before: Tue 21 Jul 2026 13:27:17 +0000 ROA not after: Tue 20 Jul 2027 13:32:17 +0000 asID: 207529 IP address blocks: 2406:840:f720::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:00:f3:99:a3:b6:36:ae:dc:6a:4d:32:59:50:b3:cd:aa:18:f7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:17 2026 GMT Not After : Jul 20 13:32:17 2027 GMT Subject: CN=473EE881C9B7B0D5A1551621D57ABBB5E24F711A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:c1:3e:98:d8:ce:39:3c:8c:61:2f:79:66: 62:06:6f:9e:84:96:66:ca:44:dd:18:53:7f:5e:bb: e0:f5:a8:2d:05:4a:27:c4:f6:18:41:58:7d:24:3c: ed:8f:94:4d:e8:39:26:b1:9c:6e:52:c2:74:9f:41: 6d:bf:66:f1:dc:69:61:a0:b0:4c:25:18:e8:0b:3a: c2:29:f7:53:94:cb:73:13:84:6f:3e:5d:f6:6e:7f: b9:19:9b:20:27:0e:2b:94:30:82:ff:91:36:1c:48: d3:c4:30:07:95:4f:91:95:fc:9f:15:2b:66:25:fd: 61:b3:28:a9:88:36:c5:4d:8c:16:14:74:d8:a1:03: f8:37:99:58:b2:61:28:fe:9a:21:67:85:93:2b:86: 1c:e3:1a:1c:64:2e:a7:83:5b:e2:68:7e:a6:f5:c0: e2:2d:a6:c4:5e:fe:b0:b6:e2:62:3b:c5:d6:49:e4: 86:67:68:0e:a4:58:07:0c:d2:63:56:24:b1:af:28: 1f:aa:ec:62:d4:75:ca:7e:e2:01:fd:4d:9a:22:47: e8:b9:52:d5:0a:55:c8:7b:04:78:23:0c:83:e4:eb: ec:47:17:b6:84:0e:b2:7f:be:ad:c9:b4:3d:29:2b: ae:0a:c1:d8:ab:7e:d3:2f:ef:b3:86:d4:c1:e2:8a: be:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3E:E8:81:C9:B7:B0:D5:A1:55:16:21:D5:7A:BB:B5:E2:4F:71:1A X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS207529.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:f720::/44 Signature Algorithm: sha256WithRSAEncryption 71:5a:cd:66:37:68:b3:88:0a:32:ec:27:c1:2e:c7:11:fd:6c: 3e:f3:be:74:9f:3d:f0:f6:89:56:c8:7f:48:a2:41:69:44:45: 37:3d:6a:5c:10:47:42:6a:aa:22:12:a7:50:b6:57:24:1a:ac: c4:77:08:f8:87:bb:9f:00:7b:d4:77:a1:5a:65:e4:87:d4:d3: 05:b1:73:62:ca:5d:c5:53:15:e7:95:c2:89:ce:f1:cf:df:ab: 99:c5:ad:41:e6:9e:56:01:e7:40:65:e5:05:a9:45:fe:35:e0: 81:53:4d:80:84:eb:64:73:a7:e3:07:8d:32:b7:19:41:13:19: d7:c0:1b:6a:33:cd:6f:80:14:01:a0:3b:60:d8:6b:31:a4:63: fb:6a:d8:19:86:a2:e9:de:65:e4:c2:53:8c:f8:7f:78:57:25: a1:d2:a2:16:c4:a9:5c:81:05:d8:83:05:c5:14:68:90:f8:cc: ea:61:f6:a8:4b:02:94:36:b9:7d:f4:78:b0:91:a9:50:52:de: ce:b5:cf:c6:25:72:9d:3a:1b:e4:6f:f3:56:72:05:75:cd:54: 96:8c:83:8f:dc:e8:41:95:ea:7c:87:ae:32:69:08:9d:9a:67: 0f:81:50:46:1d:5b:79:a0:be:dd:37:a8:77:84:fa:59:87:cb: e7:4b:41:0e -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUNgDzmaO2Nq7cak0yWVCzzaoY9zswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxN1oX DTI3MDcyMDEzMzIxN1owMzExMC8GA1UEAxMoNDczRUU4ODFDOUI3QjBENUExNTUx NjIxRDU3QUJCQjVFMjRGNzExQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALCDwT6Y2M45PIxhL3lmYgZvnoSWZspE3RhTf1674PWoLQVKJ8T2GEFYfSQ8 7Y+UTeg5JrGcblLCdJ9Bbb9m8dxpYaCwTCUY6As6win3U5TLcxOEbz5d9m5/uRmb ICcOK5Qwgv+RNhxI08QwB5VPkZX8nxUrZiX9YbMoqYg2xU2MFhR02KED+DeZWLJh KP6aIWeFkyuGHOMaHGQup4Nb4mh+pvXA4i2mxF7+sLbiYjvF1knkhmdoDqRYBwzS Y1Yksa8oH6rsYtR1yn7iAf1NmiJH6LlS1QpVyHsEeCMMg+Tr7EcXtoQOsn++rcm0 PSkrrgrB2Kt+0y/vs4bUweKKvgkCAwEAAaOCAicwggIjMB0GA1UdDgQWBBRHPuiB ybew1aFVFiHVeru14k9xGjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIwNzUyOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CED3IDANBgkqhkiG9w0BAQsFAAOCAQEAcVrNZjdos4gKMuwnwS7HEf1sPvO+dJ89 8PaJVsh/SKJBaURFNz1qXBBHQmqqIhKnULZXJBqsxHcI+Ie7nwB71HehWmXkh9TT BbFzYspdxVMV55XCic7xz9+rmcWtQeaeVgHnQGXlBalF/jXggVNNgITrZHOn4weN MrcZQRMZ18AbajPNb4AUAaA7YNhrMaRj+2rYGYai6d5l5MJTjPh/eFclodKiFsSp XIEF2IMFxRRokPjM6mH2qEsClDa5ffR4sJGpUFLezrXPxiVynTob5G/zVnIFdc1U loyDj9zoQZXqfIeuMmkInZpnD4FQRh1beaC+3Teod4T6WYfL50tBDg== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:06 2026 by rpki-client