$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS209306.roa File: AS209306.roa (raw, json) Hash identifier: GyFC1B4dWLg46tsKoUZ8wlTaKS/hmjvzaeDUN4f/KYU= Subject key identifier: 2E:2B:4A:ED:F6:A7:98:F3:3A:07:B3:41:B2:24:84:7E:8C:9A:0A:B2 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 1F0AEA501819B3883815478BDD76AF607754E681 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS209306.roa Signing time: Tue 21 Jul 2026 13:32:39 +0000 ROA not before: Tue 21 Jul 2026 13:27:39 +0000 ROA not after: Tue 20 Jul 2027 13:32:39 +0000 asID: 209306 IP address blocks: 2406:840:fee0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:0a:ea:50:18:19:b3:88:38:15:47:8b:dd:76:af:60:77:54:e6:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:39 2026 GMT Not After : Jul 20 13:32:39 2027 GMT Subject: CN=2E2B4AEDF6A798F33A07B341B224847E8C9A0AB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:e0:5f:b9:72:71:ca:aa:2a:5c:62:c1:89: 4b:fa:02:c6:a9:28:b9:c1:29:b7:a9:44:d7:02:27: a8:b3:1c:e7:09:1c:81:f4:5e:3b:bd:40:5a:e3:07: 7e:e5:69:2e:68:7b:c7:ed:0d:ef:ed:fc:37:90:3d: 34:45:99:12:38:f4:81:98:84:cd:0a:eb:c0:76:33: a4:73:6b:16:11:f6:5d:4c:e2:4b:2e:5e:3b:68:fe: 8c:de:4f:fa:52:c7:7a:10:59:96:2a:ad:02:6f:29: 35:c0:4d:77:78:70:85:9f:e6:4a:62:22:fb:02:e0: 66:be:3e:bc:e9:d6:60:55:67:e2:44:52:2a:af:11: 5c:12:54:26:4d:7f:d3:1e:38:eb:a8:d1:4d:dd:e6: 12:4e:e7:24:de:72:fb:6a:97:3c:6b:e5:d2:0f:5d: 8e:27:2c:80:64:e2:eb:72:fd:10:72:53:24:b3:0c: 73:3e:b1:cc:62:88:bd:78:2f:f7:7b:55:02:b8:92: 82:a3:f6:35:57:eb:55:4f:c3:46:50:e9:a4:7a:c9: ef:39:34:db:dc:b0:36:33:6c:98:62:aa:78:e4:ad: 4b:89:69:23:ae:bf:a9:9e:51:6b:8c:7f:75:c4:57: c5:e6:ee:05:33:2a:ff:d8:6b:8b:0a:28:ba:b8:2d: 5e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2B:4A:ED:F6:A7:98:F3:3A:07:B3:41:B2:24:84:7E:8C:9A:0A:B2 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS209306.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fee0::/44 Signature Algorithm: sha256WithRSAEncryption 90:24:c6:6f:1a:63:9c:9d:5c:5b:a4:df:e4:89:78:92:62:59: 1a:f7:7c:0f:99:56:52:87:34:5d:4f:3d:63:49:f7:0a:24:39: fc:24:8d:8d:42:e7:54:d5:b3:47:e4:55:a1:83:21:3b:fe:b3: b3:05:e4:b2:2e:f3:fe:59:29:2b:f3:6c:3a:92:d8:60:7b:ee: 78:0d:b8:d5:ae:50:cc:3a:c5:40:3b:14:3b:be:4c:15:cd:02: 81:b4:b9:59:48:bd:f5:25:11:97:cf:b4:46:bd:5a:25:ac:11: 5b:80:55:ee:08:cb:96:e7:ca:3e:a1:8e:3e:7e:cf:ce:51:a1: 1a:4d:7e:cd:7d:4a:23:8b:d3:48:b8:fb:a4:d2:1d:0d:08:a9: 61:89:a0:f5:df:d3:3f:a5:b5:04:93:8f:94:3a:ec:c3:93:16: f5:91:2a:79:c9:d2:24:ee:d1:04:a1:4f:83:bc:68:23:60:de: 4b:2c:20:0b:ed:42:a2:42:56:85:9a:55:8e:db:3d:4f:6b:16: 52:57:a5:c3:5b:c1:e6:93:73:14:73:45:31:d1:6a:61:d7:a3: a2:5c:61:ea:13:90:d8:2b:78:26:de:76:33:6d:87:d9:56:a3: b1:ed:b4:7d:2a:9f:9c:61:e1:d2:79:c0:0d:2e:3c:50:b9:1d: cc:10:85:b9 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUHwrqUBgZs4g4FUeL3XavYHdU5oEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczOVoX DTI3MDcyMDEzMzIzOVowMzExMC8GA1UEAxMoMkUyQjRBRURGNkE3OThGMzNBMDdC MzQxQjIyNDg0N0U4QzlBMEFCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxm4F+5cnHKqipcYsGJS/oCxqkoucEpt6lE1wInqLMc5wkcgfReO71AWuMH fuVpLmh7x+0N7+38N5A9NEWZEjj0gZiEzQrrwHYzpHNrFhH2XUziSy5eO2j+jN5P +lLHehBZliqtAm8pNcBNd3hwhZ/mSmIi+wLgZr4+vOnWYFVn4kRSKq8RXBJUJk1/ 0x4466jRTd3mEk7nJN5y+2qXPGvl0g9djicsgGTi63L9EHJTJLMMcz6xzGKIvXgv 93tVAriSgqP2NVfrVU/DRlDppHrJ7zk029ywNjNsmGKqeOStS4lpI66/qZ5Ra4x/ dcRXxebuBTMq/9hriwoourgtXhECAwEAAaOCAicwggIjMB0GA1UdDgQWBBQuK0rt 9qeY8zoHs0GyJIR+jJoKsjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIwOTMwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CED+4DANBgkqhkiG9w0BAQsFAAOCAQEAkCTGbxpjnJ1cW6Tf5Il4kmJZGvd8D5lW Uoc0XU89Y0n3CiQ5/CSNjULnVNWzR+RVoYMhO/6zswXksi7z/lkpK/NsOpLYYHvu eA241a5QzDrFQDsUO75MFc0CgbS5WUi99SURl8+0Rr1aJawRW4BV7gjLlufKPqGO Pn7PzlGhGk1+zX1KI4vTSLj7pNIdDQipYYmg9d/TP6W1BJOPlDrsw5MW9ZEqecnS JO7RBKFPg7xoI2DeSywgC+1CokJWhZpVjts9T2sWUlelw1vB5pNzFHNFMdFqYdej olxh6hOQ2Ct4Jt52M22H2Vajse20fSqfnGHh0nnADS48ULkdzBCFuQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:56 2026 by rpki-client