$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS209294.roa File: AS209294.roa (raw, json) Hash identifier: EKMSy2RcPilgo4r7sbPG3F+L7q1tnpnPiorIJOzJd3w= Subject key identifier: 59:D9:22:9A:E3:91:EC:FA:36:8D:AD:D4:2E:61:3F:F3:D0:75:9A:15 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 0AC462A83BAD8C421DDE6DDAB5ED38861C1226F9 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS209294.roa Signing time: Tue 21 Jul 2026 13:32:30 +0000 ROA not before: Tue 21 Jul 2026 13:27:30 +0000 ROA not after: Tue 20 Jul 2027 13:32:30 +0000 asID: 209294 IP address blocks: 2406:840:e840::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c4:62:a8:3b:ad:8c:42:1d:de:6d:da:b5:ed:38:86:1c:12:26:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:30 2026 GMT Not After : Jul 20 13:32:30 2027 GMT Subject: CN=59D9229AE391ECFA368DADD42E613FF3D0759A15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e5:fd:82:18:1a:88:64:67:ce:71:71:01:0d: 50:6b:2b:f9:35:7c:f2:67:f3:9b:b4:cf:cf:b5:15: f3:04:32:6f:b4:dc:02:86:b3:17:f4:52:68:41:1d: b2:4d:de:23:b5:9b:92:dc:9b:e5:83:fe:69:fa:84: 64:f8:be:64:35:78:94:76:96:39:1d:7e:f0:f8:04: 67:19:bb:df:51:76:c9:be:81:36:60:8c:2e:d2:35: ef:27:50:19:3b:51:22:aa:48:7e:da:23:89:94:fa: 95:2d:b7:47:20:6d:bd:7e:3f:bb:80:87:f5:3e:50: 51:19:c0:06:46:96:5e:fd:bf:0d:d1:ba:9b:13:ca: 01:d1:04:c4:52:a4:0f:ea:c8:5f:7d:00:ea:ce:55: 42:df:ab:a0:20:26:4b:ad:12:73:38:06:17:e0:dc: 53:4f:c2:c7:61:59:03:0f:c6:f0:50:30:9f:10:a5: b8:1a:d9:08:a5:0e:d0:cb:0d:a1:7d:a9:03:96:48: 7d:02:04:c3:9e:59:16:80:84:ba:61:be:fd:05:b2: c3:ee:d5:bd:e2:45:90:cc:b8:67:7e:ec:05:ff:ee: 9e:b2:fb:c9:7d:02:9f:0b:fc:a7:27:8c:6c:b9:2e: 10:bf:e3:eb:92:50:08:da:4d:8b:74:67:85:66:6e: c7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D9:22:9A:E3:91:EC:FA:36:8D:AD:D4:2E:61:3F:F3:D0:75:9A:15 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS209294.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e840::/44 Signature Algorithm: sha256WithRSAEncryption 65:d5:6a:57:af:6f:fd:6e:be:b7:95:0c:61:cf:f2:1a:a4:62: 74:e4:f4:6f:ec:45:07:4e:b6:4b:0f:b6:1a:8b:1b:e2:40:f3: 0c:39:fa:06:e6:6e:4d:7c:9d:9b:d9:16:7a:04:68:c4:32:b1: 23:02:76:9a:a3:1f:66:c1:bf:5e:4b:9e:25:33:5c:33:32:3f: a8:9c:16:6a:ae:f6:df:87:f4:37:31:31:81:e5:8c:ec:5f:a1: 88:1a:f1:bd:61:47:78:9f:20:82:87:fc:c9:6f:da:c9:ab:f2: f5:be:7f:37:b7:7a:bc:b7:63:08:52:cf:5a:1d:18:d6:8a:48: 8f:20:2d:43:c9:41:a4:75:4d:25:c8:8d:d5:12:b8:1d:3a:fa: 69:ba:19:57:94:c7:53:f6:05:f4:d0:c9:51:2e:2e:22:f9:ce: 44:c3:cf:a4:7d:88:a6:f3:55:ae:e4:97:37:65:29:7e:fe:9d: 8e:26:85:72:81:95:32:16:b0:cb:01:25:d3:bc:90:60:a4:2f: f6:e2:43:89:6f:c3:1a:d6:dc:8e:78:bc:f2:58:b2:7d:63:ae: 99:53:5a:ef:b1:f4:28:13:c8:6e:d2:01:f9:64:a4:a7:bd:f2: 55:53:97:0f:df:62:e2:f2:79:a1:db:a1:ed:cc:71:bd:cd:7e: 81:2c:11:7b -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUCsRiqDutjEId3m3ate04hhwSJvkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczMFoX DTI3MDcyMDEzMzIzMFowMzExMC8GA1UEAxMoNTlEOTIyOUFFMzkxRUNGQTM2OERB REQ0MkU2MTNGRjNEMDc1OUExNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJLl/YIYGohkZ85xcQENUGsr+TV88mfzm7TPz7UV8wQyb7TcAoazF/RSaEEd sk3eI7Wbktyb5YP+afqEZPi+ZDV4lHaWOR1+8PgEZxm731F2yb6BNmCMLtI17ydQ GTtRIqpIftojiZT6lS23RyBtvX4/u4CH9T5QURnABkaWXv2/DdG6mxPKAdEExFKk D+rIX30A6s5VQt+roCAmS60SczgGF+DcU0/Cx2FZAw/G8FAwnxCluBrZCKUO0MsN oX2pA5ZIfQIEw55ZFoCEumG+/QWyw+7VveJFkMy4Z37sBf/unrL7yX0Cnwv8pyeM bLkuEL/j65JQCNpNi3RnhWZux80CAwEAAaOCAicwggIjMB0GA1UdDgQWBBRZ2SKa 45Hs+jaNrdQuYT/z0HWaFTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIwOTI5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CEDoQDANBgkqhkiG9w0BAQsFAAOCAQEAZdVqV69v/W6+t5UMYc/yGqRidOT0b+xF B062Sw+2Gosb4kDzDDn6BuZuTXydm9kWegRoxDKxIwJ2mqMfZsG/XkueJTNcMzI/ qJwWaq7234f0NzExgeWM7F+hiBrxvWFHeJ8ggof8yW/ayavy9b5/N7d6vLdjCFLP Wh0Y1opIjyAtQ8lBpHVNJciN1RK4HTr6aboZV5THU/YF9NDJUS4uIvnORMPPpH2I pvNVruSXN2Upfv6djiaFcoGVMhawywEl07yQYKQv9uJDiW/DGtbcjni88liyfWOu mVNa77H0KBPIbtIB+WSkp73yVVOXD99i4vJ5oduh7cxxvc1+gSwRew== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:09 2026 by rpki-client