$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS210384.roa File: AS210384.roa (raw, json) Hash identifier: 259WJ2FPckypv2FmWrsKd71+Z64zKKbMY6jzzDaIApc= Subject key identifier: 2F:F4:E9:6B:CD:63:6C:22:E3:45:F1:3F:39:27:63:F8:D6:7C:5A:C2 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 2B34AE89C18BB6236C2F81BBF1C2468BC9F4F5B4 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS210384.roa Signing time: Tue 21 Jul 2026 13:32:30 +0000 ROA not before: Tue 21 Jul 2026 13:27:30 +0000 ROA not after: Tue 20 Jul 2027 13:32:30 +0000 asID: 210384 IP address blocks: 2406:840:9860::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:34:ae:89:c1:8b:b6:23:6c:2f:81:bb:f1:c2:46:8b:c9:f4:f5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:30 2026 GMT Not After : Jul 20 13:32:30 2027 GMT Subject: CN=2FF4E96BCD636C22E345F13F392763F8D67C5AC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:31:8c:7e:14:b9:1b:50:24:16:ee:d3:7e: a4:a9:13:a5:5e:d6:eb:85:30:93:22:ca:9f:bc:84: a5:57:6d:ec:2a:f6:80:f2:fa:fd:d7:13:df:de:ff: e3:53:73:20:4a:cc:cc:e8:36:45:2f:a7:be:16:55: be:26:9f:01:80:a8:e4:7b:6f:ab:b4:c3:d6:57:16: 66:1d:66:d4:69:8c:3b:67:bd:55:2e:7e:87:4a:12: e2:5f:4b:9d:15:41:35:32:05:80:1e:08:07:12:7c: f7:cc:35:1c:c0:fc:d7:10:12:00:4e:08:bb:7a:aa: ba:55:d4:2a:1c:ac:14:6b:45:6b:af:fd:d0:2f:00: da:a2:2d:8f:9a:f1:45:07:c6:c8:2c:19:69:88:ba: 22:ac:bc:e1:4e:12:10:15:6a:87:1b:1c:89:41:05: 6a:ac:10:bc:18:02:c1:92:3a:15:0a:ae:14:79:ba: f7:8d:2f:73:27:2b:09:89:b5:03:7a:e1:4a:9b:68: 63:ac:a1:87:ca:9a:b1:58:cc:3a:3c:34:28:26:5f: 83:db:28:6d:35:31:84:34:84:f7:ec:a4:df:81:02: 7a:8a:ee:9c:bc:02:c8:55:db:f5:ed:24:42:e5:b7: 44:6e:a4:63:7c:22:ca:a8:1d:8e:68:e1:29:6f:6d: 08:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F4:E9:6B:CD:63:6C:22:E3:45:F1:3F:39:27:63:F8:D6:7C:5A:C2 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS210384.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9860::/44 Signature Algorithm: sha256WithRSAEncryption 04:26:55:70:0b:38:b4:6d:94:16:68:87:36:0a:89:5d:c2:65: 7c:9b:b4:e7:90:92:58:0a:f9:0d:52:ab:23:a8:df:50:7e:9b: 9a:a9:02:ce:22:03:f5:f1:6a:00:aa:9e:c8:0a:3b:01:31:f4: a4:58:e9:94:61:30:50:04:e5:a1:6d:2a:07:4b:69:61:0c:b7: 32:1f:32:84:21:6c:cb:bb:07:01:29:cd:b1:05:70:4c:62:bc: 31:5b:48:12:d0:ab:f9:d2:e6:3f:1f:2c:2c:22:6c:c4:3f:18: df:48:83:fd:93:c9:68:2b:03:60:70:16:86:40:4e:e9:bf:2a: d3:20:7f:21:1c:07:98:8d:a1:c3:97:98:75:09:3c:59:50:3b: 85:2a:08:38:9f:0a:78:27:4f:a9:3e:e8:0b:e1:b7:ab:2d:23: 2c:1a:a6:ec:5a:8e:b1:73:cf:5f:b8:31:57:54:07:9d:3e:11: 35:63:70:e9:1a:47:bf:28:e1:5c:c7:d4:fc:b1:9d:71:27:57: ae:64:b8:3c:9a:5f:f7:c8:da:61:74:c7:7a:64:51:8f:8c:28: 8d:5f:80:41:1b:31:75:07:fe:c2:9c:2e:f5:03:2e:36:65:e0: d1:fa:f0:84:f6:71:5e:d6:d1:0d:b1:57:b6:8d:28:91:54:95: ac:ea:84:cb -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUKzSuicGLtiNsL4G78cJGi8n09bQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczMFoX DTI3MDcyMDEzMzIzMFowMzExMC8GA1UEAxMoMkZGNEU5NkJDRDYzNkMyMkUzNDVG MTNGMzkyNzYzRjhENjdDNUFDMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKkyMYx+FLkbUCQW7tN+pKkTpV7W64UwkyLKn7yEpVdt7Cr2gPL6/dcT397/ 41NzIErMzOg2RS+nvhZVviafAYCo5Htvq7TD1lcWZh1m1GmMO2e9VS5+h0oS4l9L nRVBNTIFgB4IBxJ898w1HMD81xASAE4Iu3qqulXUKhysFGtFa6/90C8A2qItj5rx RQfGyCwZaYi6Iqy84U4SEBVqhxsciUEFaqwQvBgCwZI6FQquFHm6940vcycrCYm1 A3rhSptoY6yhh8qasVjMOjw0KCZfg9sobTUxhDSE9+yk34ECeorunLwCyFXb9e0k QuW3RG6kY3wiyqgdjmjhKW9tCBMCAwEAAaOCAicwggIjMB0GA1UdDgQWBBQv9Olr zWNsIuNF8T85J2P41nxawjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIxMDM4NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CECYYDANBgkqhkiG9w0BAQsFAAOCAQEABCZVcAs4tG2UFmiHNgqJXcJlfJu055CS WAr5DVKrI6jfUH6bmqkCziID9fFqAKqeyAo7ATH0pFjplGEwUATloW0qB0tpYQy3 Mh8yhCFsy7sHASnNsQVwTGK8MVtIEtCr+dLmPx8sLCJsxD8Y30iD/ZPJaCsDYHAW hkBO6b8q0yB/IRwHmI2hw5eYdQk8WVA7hSoIOJ8KeCdPqT7oC+G3qy0jLBqm7FqO sXPPX7gxV1QHnT4RNWNw6RpHvyjhXMfU/LGdcSdXrmS4PJpf98jaYXTHemRRj4wo jV+AQRsxdQf+wpwu9QMuNmXg0frwhPZxXtbRDbFXto0okVSVrOqEyw== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:07 2026 by rpki-client