$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS208753.roa File: AS208753.roa (raw, json) Hash identifier: o8a9bbliSx/tpkCUndnF5hf+TjePMHQJa5UYDrRm2/M= Subject key identifier: 9A:D3:2B:21:99:72:25:63:BA:58:02:7A:74:1D:D1:3D:A6:16:0D:C0 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 3A2FB4832E607B0A2AD21F1B40BD889035F9DE73 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS208753.roa Signing time: Tue 21 Jul 2026 13:32:35 +0000 ROA not before: Tue 21 Jul 2026 13:27:35 +0000 ROA not after: Tue 20 Jul 2027 13:32:35 +0000 asID: 208753 IP address blocks: 2406:840:eeb0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:2f:b4:83:2e:60:7b:0a:2a:d2:1f:1b:40:bd:88:90:35:f9:de:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:35 2026 GMT Not After : Jul 20 13:32:35 2027 GMT Subject: CN=9AD32B2199722563BA58027A741DD13DA6160DC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:78:3a:ef:a7:1b:3e:97:6b:50:6d:1a:ec:8c: 55:6b:2e:15:76:fb:fb:9d:9d:d1:2a:5d:63:d9:41: ba:2f:28:f5:e8:90:a4:17:fb:c8:9f:9b:03:d3:b5: e0:8e:bd:93:3c:93:65:68:1d:82:64:65:fd:27:ee: 16:4d:6d:3d:4a:8f:74:ae:10:db:bc:ad:24:dc:fc: bd:f9:3f:a9:a7:15:59:69:84:fc:31:2f:b3:e1:ec: 56:f6:db:e0:2f:89:84:b4:bc:89:ff:18:be:16:27: b0:7d:ef:6e:00:06:a0:1d:b6:2d:ee:ab:d6:25:f8: c5:0f:c4:7b:06:49:ba:ef:aa:e6:47:cd:ed:87:62: 59:ba:c4:9e:47:ce:a5:99:7e:9b:9b:e8:9f:62:7b: 93:1d:97:ab:d4:35:1b:3d:56:ba:bf:42:52:cc:3f: be:0e:be:01:6d:4b:d1:27:38:a3:a9:83:2e:b9:42: 41:c6:8d:2c:45:a1:c7:ab:6f:e4:b1:68:81:7b:e7: 41:bb:a0:31:b7:46:d9:ba:3a:66:6b:61:b9:02:d9: c0:41:fd:66:db:17:9d:a4:aa:21:a4:01:1c:93:c7: 72:28:aa:c1:99:b2:72:2c:64:ea:a5:4b:e0:fd:6a: d1:8a:d5:09:45:3e:e3:ac:07:bd:af:ed:ac:90:7a: 9f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D3:2B:21:99:72:25:63:BA:58:02:7A:74:1D:D1:3D:A6:16:0D:C0 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS208753.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:eeb0::/44 Signature Algorithm: sha256WithRSAEncryption 56:6f:15:40:dc:81:b4:9d:8d:8d:1c:fb:ac:37:8c:e3:b4:31: 49:b9:3a:74:09:54:f5:db:82:37:28:5c:83:1e:7c:57:3b:29: 95:0c:20:8c:41:74:37:51:46:16:e8:4f:9a:b2:f1:15:a0:90: 7e:48:16:75:d2:e0:41:97:d4:cb:69:e3:08:29:89:3d:e4:0d: bf:fe:8e:b9:47:88:f1:f0:0d:41:d8:27:7e:ec:86:d6:1d:0c: e3:3e:99:5b:a8:46:55:5c:83:fc:07:43:b7:5b:4b:dc:9c:ca: 7a:e3:55:f8:86:3d:a4:d7:fd:51:e2:45:6d:ae:6f:1a:7b:d9: 7b:ff:5d:55:29:89:f9:62:ea:d6:1e:07:00:b5:5e:37:e4:1a: 6a:8e:ec:f1:92:73:00:f1:f3:d1:b6:ab:c8:5d:84:92:97:3a: c0:b0:9f:f9:5b:21:44:5c:9b:e2:44:5f:b3:56:b2:ac:75:d0: 4a:82:43:1c:22:cb:e3:7f:ef:51:ee:22:36:22:e3:3b:5d:0f: 35:9e:8d:5b:2e:55:46:98:a8:9c:85:36:c3:51:ff:51:09:29: be:49:80:a0:41:43:fa:35:56:4d:09:b6:00:86:46:40:c3:7b: 3f:e6:1b:1d:d1:c2:4e:67:cb:f8:81:c6:6b:b3:ca:09:e8:1c: 2e:5b:80:3c -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUOi+0gy5gewoq0h8bQL2IkDX53nMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczNVoX DTI3MDcyMDEzMzIzNVowMzExMC8GA1UEAxMoOUFEMzJCMjE5OTcyMjU2M0JBNTgw MjdBNzQxREQxM0RBNjE2MERDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKp4Ou+nGz6Xa1BtGuyMVWsuFXb7+52d0SpdY9lBui8o9eiQpBf7yJ+bA9O1 4I69kzyTZWgdgmRl/SfuFk1tPUqPdK4Q27ytJNz8vfk/qacVWWmE/DEvs+HsVvbb 4C+JhLS8if8YvhYnsH3vbgAGoB22Le6r1iX4xQ/EewZJuu+q5kfN7YdiWbrEnkfO pZl+m5von2J7kx2Xq9Q1Gz1Wur9CUsw/vg6+AW1L0Sc4o6mDLrlCQcaNLEWhx6tv 5LFogXvnQbugMbdG2bo6ZmthuQLZwEH9ZtsXnaSqIaQBHJPHciiqwZmycixk6qVL 4P1q0YrVCUU+46wHva/trJB6n68CAwEAAaOCAicwggIjMB0GA1UdDgQWBBSa0ysh mXIlY7pYAnp0HdE9phYNwDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIwODc1My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CEDusDANBgkqhkiG9w0BAQsFAAOCAQEAVm8VQNyBtJ2NjRz7rDeM47QxSbk6dAlU 9duCNyhcgx58VzsplQwgjEF0N1FGFuhPmrLxFaCQfkgWddLgQZfUy2njCCmJPeQN v/6OuUeI8fANQdgnfuyG1h0M4z6ZW6hGVVyD/AdDt1tL3JzKeuNV+IY9pNf9UeJF ba5vGnvZe/9dVSmJ+WLq1h4HALVeN+Qaao7s8ZJzAPHz0baryF2Ekpc6wLCf+Vsh RFyb4kRfs1ayrHXQSoJDHCLL43/vUe4iNiLjO10PNZ6NWy5VRpionIU2w1H/UQkp vkmAoEFD+jVWTQm2AIZGQMN7P+YbHdHCTmfL+IHGa7PKCegcLluAPA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:03 2026 by rpki-client