$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS210041.roa File: AS210041.roa (raw, json) Hash identifier: /pzSovN3yyvqfssmgZEoUbctpIbOgiEJ8Xqw6TfiqRc= Subject key identifier: 0A:32:8C:1E:45:50:96:F9:07:98:55:7E:BF:3E:18:A2:4F:EA:55:F4 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 6564317ED3F77BC19B229D89A6FDAC81DA713041 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS210041.roa Signing time: Tue 21 Jul 2026 13:32:27 +0000 ROA not before: Tue 21 Jul 2026 13:27:27 +0000 ROA not after: Tue 20 Jul 2027 13:32:27 +0000 asID: 210041 IP address blocks: 2406:840:9000::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:64:31:7e:d3:f7:7b:c1:9b:22:9d:89:a6:fd:ac:81:da:71:30:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:27 2026 GMT Not After : Jul 20 13:32:27 2027 GMT Subject: CN=0A328C1E455096F90798557EBF3E18A24FEA55F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c3:78:1d:8e:22:2e:d5:90:d1:24:3d:df:1c: f5:f4:6c:ce:92:99:85:e1:ad:a2:8b:2f:b7:a0:49: de:a8:91:7d:f7:1e:3b:66:ae:9e:62:3c:7f:26:99: eb:ce:d6:7d:f7:77:9a:72:67:75:37:01:5f:4d:f8: 03:fb:32:af:f6:95:fb:da:6f:e4:3b:ae:f9:61:01: 83:7a:7a:92:22:07:7b:cc:ad:12:73:a4:fe:75:e2: dd:a2:81:9e:0c:d2:22:2c:80:f5:b0:d0:28:9d:d1: 89:9b:bd:09:0d:95:8c:3d:cb:ab:0f:7d:af:b7:a0: b0:49:fd:74:bf:9c:52:28:4c:f2:e3:a0:2c:8c:07: d9:00:1e:51:92:db:bb:5a:12:f2:43:85:c8:61:29: be:d9:da:39:f3:78:77:93:65:2d:e7:d7:95:e7:d1: da:03:ab:d1:87:cb:31:7b:2a:7a:7b:c0:e1:f9:6d: 5f:20:22:0e:0e:32:da:d2:fa:29:c3:09:f6:29:11: dc:e0:c8:a2:51:73:26:55:bb:7a:cf:14:c7:a3:8f: 6b:34:66:7d:64:2b:ec:cb:44:aa:73:cc:fd:80:38: 40:44:89:91:d4:8b:1e:54:cf:41:9b:25:be:3c:a5: fc:e6:27:27:02:10:c7:b4:2f:5d:f2:f4:fe:8c:93: fa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:32:8C:1E:45:50:96:F9:07:98:55:7E:BF:3E:18:A2:4F:EA:55:F4 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS210041.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9000::/44 Signature Algorithm: sha256WithRSAEncryption 58:5e:4f:4b:ff:af:f7:dc:43:06:a3:9d:47:b7:81:ea:57:5c: 31:fc:a5:5d:c7:72:5f:5d:b4:a9:72:2a:6d:1c:9d:a5:b2:74: 3a:64:79:45:e7:32:69:ba:73:1b:95:a9:7d:40:f4:4a:d4:2f: 87:e2:fa:14:b7:e6:e8:77:0a:82:52:9b:58:73:36:b8:b7:3a: 23:32:56:3d:25:9d:f7:85:3e:68:52:a1:2f:4c:9b:f3:18:c7: e7:e5:13:c1:6c:43:d1:ed:f8:37:61:1c:70:b5:7c:fa:f3:96: 1c:40:ab:2f:cc:c6:9b:f4:dc:03:af:2b:07:21:de:9a:8b:4c: 62:d7:cd:0e:d2:e5:f9:b5:49:71:14:a3:d3:f3:79:e6:cd:c4: c6:1e:2d:f7:42:ec:ea:34:d1:9d:2a:84:0c:94:f4:44:e9:04: b2:c7:9c:f0:f2:4c:06:a8:73:c5:dd:6a:69:40:bf:f0:37:3b: ff:db:07:bd:7c:b6:1f:30:2a:45:43:e1:03:b6:b8:2e:74:25: 2d:e6:7e:ba:8e:5a:e2:e1:58:c6:69:36:c0:e2:38:c7:23:f1: d6:11:a2:4c:79:66:f3:ef:ae:b5:dd:07:78:ea:f5:7d:9b:a5: 58:aa:e1:e6:8d:3c:a5:76:ba:76:e4:e6:d8:cf:78:55:94:c7: 2e:f4:45:21 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUZWQxftP3e8GbIp2Jpv2sgdpxMEEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyN1oX DTI3MDcyMDEzMzIyN1owMzExMC8GA1UEAxMoMEEzMjhDMUU0NTUwOTZGOTA3OTg1 NTdFQkYzRTE4QTI0RkVBNTVGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKrDeB2OIi7VkNEkPd8c9fRszpKZheGtoosvt6BJ3qiRffceO2aunmI8fyaZ 687Wffd3mnJndTcBX034A/syr/aV+9pv5Duu+WEBg3p6kiIHe8ytEnOk/nXi3aKB ngzSIiyA9bDQKJ3RiZu9CQ2VjD3Lqw99r7egsEn9dL+cUihM8uOgLIwH2QAeUZLb u1oS8kOFyGEpvtnaOfN4d5NlLefXlefR2gOr0YfLMXsqenvA4fltXyAiDg4y2tL6 KcMJ9ikR3ODIolFzJlW7es8Ux6OPazRmfWQr7MtEqnPM/YA4QESJkdSLHlTPQZsl vjyl/OYnJwIQx7QvXfL0/oyT+isCAwEAAaOCAicwggIjMB0GA1UdDgQWBBQKMowe RVCW+QeYVX6/PhiiT+pV9DAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIxMDA0MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CECQADANBgkqhkiG9w0BAQsFAAOCAQEAWF5PS/+v99xDBqOdR7eB6ldcMfylXcdy X120qXIqbRydpbJ0OmR5RecyabpzG5WpfUD0StQvh+L6FLfm6HcKglKbWHM2uLc6 IzJWPSWd94U+aFKhL0yb8xjH5+UTwWxD0e34N2EccLV8+vOWHECrL8zGm/TcA68r ByHemotMYtfNDtLl+bVJcRSj0/N55s3Exh4t90Ls6jTRnSqEDJT0ROkEssec8PJM Bqhzxd1qaUC/8Dc7/9sHvXy2HzAqRUPhA7a4LnQlLeZ+uo5a4uFYxmk2wOI4xyPx 1hGiTHlm8++utd0HeOr1fZulWKrh5o08pXa6duTm2M94VZTHLvRFIQ== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:04 2026 by rpki-client