$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS209218.roa File: AS209218.roa (raw, json) Hash identifier: /QnY4B0PSYCo6evvbg3QNP0XRYLztL/cJ/O8119kFOk= Subject key identifier: 9F:10:9B:40:4E:AE:5C:2A:7F:68:60:C0:75:C4:D4:2A:6B:D8:53:49 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 74EF72E99B681E355CF496C1E561ECCD49B0077A Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS209218.roa Signing time: Tue 21 Jul 2026 13:32:16 +0000 ROA not before: Tue 21 Jul 2026 13:27:16 +0000 ROA not after: Tue 20 Jul 2027 13:32:16 +0000 asID: 209218 IP address blocks: 2406:840:f660::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ef:72:e9:9b:68:1e:35:5c:f4:96:c1:e5:61:ec:cd:49:b0:07:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:16 2026 GMT Not After : Jul 20 13:32:16 2027 GMT Subject: CN=9F109B404EAE5C2A7F6860C075C4D42A6BD85349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:81:d8:53:2c:8e:b0:fb:39:d2:2c:39:02: 70:c1:41:ec:97:d7:ed:23:0c:c2:ce:f3:1c:8c:64: 1c:18:ab:67:56:c7:bd:ac:6f:bd:a7:65:2e:b7:3f: ef:ec:16:4e:49:11:3e:83:d2:47:51:07:e8:bb:cc: a1:58:e5:46:92:96:45:c7:93:c2:b1:80:a5:fd:89: 56:7f:a1:68:7d:68:37:a6:5d:e1:63:37:b4:b3:31: e9:0c:e0:57:6f:7a:0b:6a:eb:3b:99:ef:d7:c1:d7: f1:17:96:ec:a2:0b:f7:4c:98:70:89:72:f5:e0:53: 9e:85:c5:e9:ff:90:fb:b6:62:44:e5:01:60:9a:3f: 62:df:48:39:9f:0d:82:1f:66:32:45:28:e2:14:8c: ca:74:ef:b9:b6:98:d1:9f:1d:6e:fa:6d:1c:6d:b5: 50:d2:4a:f4:e3:19:28:9d:6d:85:4f:9d:2e:ec:65: 5f:c5:a9:e4:90:3a:20:cd:17:0a:c4:d8:88:e0:c7: e9:3d:be:bb:fa:36:70:0a:3e:4f:17:ea:2a:f9:10: ea:5a:cf:bd:d0:c9:70:f5:c3:6b:38:56:18:38:0d: de:11:9a:4e:8d:97:99:47:32:3d:ad:cb:5e:54:a8: 14:f2:a4:8d:0c:14:07:ad:6a:79:73:d1:4f:0a:91: fe:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:10:9B:40:4E:AE:5C:2A:7F:68:60:C0:75:C4:D4:2A:6B:D8:53:49 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS209218.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:f660::/44 Signature Algorithm: sha256WithRSAEncryption 23:d1:9a:80:d4:31:e3:eb:8d:b0:6c:32:4f:ba:db:d1:dc:b1: e5:dc:ab:ba:26:58:e7:12:4b:52:a3:9a:30:62:ad:8f:cc:58: 6c:e9:ee:1d:39:8a:9c:62:61:8f:9f:e0:ee:32:33:21:6c:eb: 72:ec:ff:a8:7a:ba:32:01:ad:05:c9:d4:ba:d9:40:84:fe:6b: 6b:ab:3a:fc:fb:99:d7:50:27:30:46:4e:1c:ce:0c:ce:c8:e5: 53:7c:4b:e5:0c:ef:06:7d:a5:a8:f3:88:91:e8:aa:c3:5c:22: 48:ee:9f:07:ef:83:5c:76:a9:ca:54:1b:3b:da:20:65:d2:73: 26:22:b8:2b:22:94:52:20:19:8a:d3:a5:fc:06:56:9e:58:a3: 11:92:18:e0:1f:6c:3b:16:56:f5:d3:e0:a4:f0:d3:72:28:d1: be:6e:56:3a:8a:70:7b:d2:f9:5d:57:0a:8c:f8:3c:7d:0d:b4: 83:8d:24:35:96:eb:c8:b4:3c:2e:d4:db:05:8a:a4:fe:72:7f: c5:0a:7b:bf:9e:ab:f5:17:f0:6a:49:03:0d:72:17:50:66:a7: bf:c6:eb:c5:27:29:88:07:cb:e3:29:b1:69:05:a8:75:02:c0: dd:b7:33:82:ca:3b:dc:a8:2c:b4:e3:a5:c7:b5:28:80:33:f8: 11:6f:aa:64 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUdO9y6ZtoHjVc9JbB5WHszUmwB3owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxNloX DTI3MDcyMDEzMzIxNlowMzExMC8GA1UEAxMoOUYxMDlCNDA0RUFFNUMyQTdGNjg2 MEMwNzVDNEQ0MkE2QkQ4NTM0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL1YgdhTLI6w+znSLDkCcMFB7JfX7SMMws7zHIxkHBirZ1bHvaxvvadlLrc/ 7+wWTkkRPoPSR1EH6LvMoVjlRpKWRceTwrGApf2JVn+haH1oN6Zd4WM3tLMx6Qzg V296C2rrO5nv18HX8ReW7KIL90yYcIly9eBTnoXF6f+Q+7ZiROUBYJo/Yt9IOZ8N gh9mMkUo4hSMynTvubaY0Z8dbvptHG21UNJK9OMZKJ1thU+dLuxlX8Wp5JA6IM0X CsTYiODH6T2+u/o2cAo+TxfqKvkQ6lrPvdDJcPXDazhWGDgN3hGaTo2XmUcyPa3L XlSoFPKkjQwUB61qeXPRTwqR/jUCAwEAAaOCAicwggIjMB0GA1UdDgQWBBSfEJtA Tq5cKn9oYMB1xNQqa9hTSTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIwOTIxOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CED2YDANBgkqhkiG9w0BAQsFAAOCAQEAI9GagNQx4+uNsGwyT7rb0dyx5dyruiZY 5xJLUqOaMGKtj8xYbOnuHTmKnGJhj5/g7jIzIWzrcuz/qHq6MgGtBcnUutlAhP5r a6s6/PuZ11AnMEZOHM4MzsjlU3xL5QzvBn2lqPOIkeiqw1wiSO6fB++DXHapylQb O9ogZdJzJiK4KyKUUiAZitOl/AZWnlijEZIY4B9sOxZW9dPgpPDTcijRvm5WOopw e9L5XVcKjPg8fQ20g40kNZbryLQ8LtTbBYqk/nJ/xQp7v56r9RfwakkDDXIXUGan v8brxScpiAfL4ymxaQWodQLA3bczgso73KgstOOlx7UogDP4EW+qZA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:53 2026 by rpki-client