$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS208698.roa File: AS208698.roa (raw, json) Hash identifier: Uu5sWTnleTVCMXz0szMEa3IAbf3H6/kXvKIje0ovk9g= Subject key identifier: 81:63:2B:94:3A:3D:ED:5D:B2:4B:DA:11:0D:33:23:89:7D:2B:FE:CE Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 76C7A52EB149FBE849BDABBA86C286B57809ED68 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS208698.roa Signing time: Tue 21 Jul 2026 13:32:31 +0000 ROA not before: Tue 21 Jul 2026 13:27:31 +0000 ROA not after: Tue 20 Jul 2027 13:32:31 +0000 asID: 208698 IP address blocks: 2406:840:e0e0::/44 maxlen: 48 2406:840:eee0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c7:a5:2e:b1:49:fb:e8:49:bd:ab:ba:86:c2:86:b5:78:09:ed:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:31 2026 GMT Not After : Jul 20 13:32:31 2027 GMT Subject: CN=81632B943A3DED5DB24BDA110D3323897D2BFECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:09:55:17:4e:9f:88:36:0e:bc:cf:ca:8a:60: 7f:56:cf:d8:fe:7d:0b:f0:3e:db:2a:aa:80:95:8a: 63:be:d2:7c:48:4a:49:53:3d:4a:5b:d3:d7:e4:f6: 2b:73:9d:f0:e7:e6:ac:5c:91:d1:e0:55:49:29:70: c8:2b:90:94:22:07:67:f6:6a:2a:22:35:c7:ae:f1: ed:03:52:f8:a2:67:12:4a:5a:0c:78:cb:3e:ce:0c: db:2d:ff:51:38:e7:e3:a1:0a:82:2a:9d:82:a0:de: bd:fb:52:b4:99:bd:89:24:b6:f4:61:38:a8:06:93: 97:78:7d:a6:18:88:ab:7a:bd:e2:d0:2d:ff:fa:3e: c0:c2:d8:e5:37:d2:ca:f1:40:c4:3c:7f:3e:1c:1d: b9:36:12:46:62:09:30:5a:3c:18:ab:6c:86:36:5b: 94:b3:48:47:e6:cf:bb:5f:ef:16:ab:be:86:31:61: c5:81:c5:9e:16:ea:2b:ce:3d:31:ab:a3:cf:60:b8: 0f:2d:a7:a2:b3:fc:18:4c:9d:f7:f9:a0:56:7c:c3: fc:fb:60:73:a4:90:4a:ff:db:7a:f0:bc:44:35:f1: 79:09:16:b2:1c:03:07:3c:47:1d:38:f8:df:40:37: 43:55:14:c2:29:58:33:0a:19:02:ed:de:d2:9f:20: 80:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:63:2B:94:3A:3D:ED:5D:B2:4B:DA:11:0D:33:23:89:7D:2B:FE:CE X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS208698.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e0e0::/44 2406:840:eee0::/44 Signature Algorithm: sha256WithRSAEncryption 73:1b:5c:cc:21:29:47:44:fa:ab:93:a7:6d:09:9c:ce:f7:a0: bd:d5:f6:5e:8f:4e:17:5b:e9:12:e2:ee:f8:b9:c6:f7:05:69: b5:1c:d7:52:70:3f:2f:e4:d4:ea:7e:85:66:21:78:a5:dd:3a: 23:ae:18:4d:28:d7:76:5b:47:31:32:52:f1:eb:d5:8b:12:03: 7c:a3:85:1f:5b:6f:b2:63:ae:17:57:d1:c0:de:88:57:94:75: 21:58:4d:01:e4:08:10:4f:76:34:60:85:dc:af:ff:ca:8d:90: e5:83:cb:ad:da:11:2f:d7:c5:ac:69:41:6d:c2:44:a7:19:ae: 47:1e:e4:42:1b:d2:4b:b5:79:e3:96:3e:39:e5:f4:cb:34:5b: 7b:b6:93:d9:7e:5c:bd:19:e9:5b:ca:d7:39:bc:00:a6:3d:11: d2:45:14:30:b1:8d:88:66:f9:5e:2a:a6:4f:c4:1e:b0:d7:00: d8:7d:5c:5c:1f:53:de:5d:43:af:bd:3c:84:1e:00:8a:35:b7: 92:06:85:85:ad:6b:b3:e9:70:50:14:4e:41:3d:ba:95:71:cb: ea:7a:f6:4a:26:1b:7e:5c:92:dc:91:b9:c9:f9:f9:03:68:be: eb:23:5b:9c:9c:88:43:94:8e:ec:de:24:f6:95:53:d7:43:38: 13:0e:a6:fb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdselLrFJ++hJvau6hsKGtXgJ7WgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczMVoX DTI3MDcyMDEzMzIzMVowMzExMC8GA1UEAxMoODE2MzJCOTQzQTNERUQ1REIyNEJE QTExMEQzMzIzODk3RDJCRkVDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIcJVRdOn4g2DrzPyopgf1bP2P59C/A+2yqqgJWKY77SfEhKSVM9SlvT1+T2 K3Od8OfmrFyR0eBVSSlwyCuQlCIHZ/ZqKiI1x67x7QNS+KJnEkpaDHjLPs4M2y3/ UTjn46EKgiqdgqDevftStJm9iSS29GE4qAaTl3h9phiIq3q94tAt//o+wMLY5TfS yvFAxDx/PhwduTYSRmIJMFo8GKtshjZblLNIR+bPu1/vFqu+hjFhxYHFnhbqK849 Maujz2C4Dy2norP8GEyd9/mgVnzD/Ptgc6SQSv/bevC8RDXxeQkWshwDBzxHHTj4 30A3Q1UUwilYMwoZAu3e0p8ggDcCAwEAAaOCAjAwggIsMB0GA1UdDgQWBBSBYyuU Oj3tXbJL2hENMyOJfSv+zjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIwODY5OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCQG CEDg4AMHBCQGCEDu4DANBgkqhkiG9w0BAQsFAAOCAQEAcxtczCEpR0T6q5OnbQmc zvegvdX2Xo9OF1vpEuLu+LnG9wVptRzXUnA/L+TU6n6FZiF4pd06I64YTSjXdltH MTJS8evVixIDfKOFH1tvsmOuF1fRwN6IV5R1IVhNAeQIEE92NGCF3K//yo2Q5YPL rdoRL9fFrGlBbcJEpxmuRx7kQhvSS7V545Y+OeX0yzRbe7aT2X5cvRnpW8rXObwA pj0R0kUUMLGNiGb5XiqmT8QesNcA2H1cXB9T3l1Dr708hB4AijW3kgaFha1rs+lw UBROQT26lXHL6nr2SiYbflyS3JG5yfn5A2i+6yNbnJyIQ5SO7N4k9pVT10M4Ew6m +w== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:57 2026 by rpki-client