$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS211575.roa File: AS211575.roa (raw, json) Hash identifier: uOId61Bsal0zj0L/IFMDHUQwIj8DTPaf+mT2pGcHr+s= Subject key identifier: 78:A1:6C:91:6B:B9:3C:DA:66:32:C8:10:2F:06:04:5B:55:4E:C3:59 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 540F741BF6AA40457C1ED86C97605AC4C4C50ED1 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS211575.roa Signing time: Tue 21 Jul 2026 13:32:39 +0000 ROA not before: Tue 21 Jul 2026 13:27:39 +0000 ROA not after: Tue 20 Jul 2027 13:32:39 +0000 asID: 211575 IP address blocks: 2406:840:e260::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:0f:74:1b:f6:aa:40:45:7c:1e:d8:6c:97:60:5a:c4:c4:c5:0e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:39 2026 GMT Not After : Jul 20 13:32:39 2027 GMT Subject: CN=78A16C916BB93CDA6632C8102F06045B554EC359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ae:67:02:52:49:53:87:04:fc:1d:5b:72:ff: dd:ba:38:6f:9f:4b:38:52:dc:2f:14:6f:dc:87:03: 1e:cc:8c:96:e7:8b:d8:28:09:8f:88:89:25:65:12: c2:f7:d1:4d:59:73:42:fc:ae:f1:6e:3c:0f:33:dd: 68:5c:9a:fa:51:7d:1b:09:d1:48:92:90:4a:ae:76: 11:43:ff:49:85:46:e6:2c:6b:30:82:0f:da:14:79: 0b:6b:13:86:e9:41:3c:ec:07:fd:f9:b7:9e:95:0d: d3:4c:72:36:01:8f:90:c7:03:12:c7:b7:cb:5f:30: 45:54:45:a4:12:58:bb:21:4f:85:ba:50:c8:cd:ed: 82:54:c2:62:0f:89:17:f7:ea:33:16:9e:48:49:b0: 4d:5b:ec:72:53:58:ad:e2:3f:2c:6b:0f:d5:98:31: 73:8e:17:fd:5f:4c:d3:a1:7b:8e:2f:2a:8e:ac:09: 4e:1b:1c:a2:d3:af:c8:56:24:5b:9b:6e:7b:07:77: d3:60:c3:d7:19:a3:a8:07:52:aa:e9:52:6b:0d:b6: 76:58:5b:9b:6d:66:6b:06:45:5a:2d:98:a8:84:9b: 81:1f:37:c1:17:0e:c7:2f:2e:dd:96:7f:bb:d6:e9: 9f:96:d4:53:76:3c:9d:91:b3:e6:e9:c4:3e:17:c8: b1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A1:6C:91:6B:B9:3C:DA:66:32:C8:10:2F:06:04:5B:55:4E:C3:59 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS211575.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e260::/44 Signature Algorithm: sha256WithRSAEncryption 63:02:dc:06:c7:d7:7f:16:ed:85:32:23:72:49:94:45:79:2b: f3:4e:81:5c:04:16:90:1b:a4:fb:dc:87:d9:64:57:0d:e9:25: 52:db:be:89:fa:79:02:fd:58:43:fc:43:84:5f:48:4a:5b:b8: 68:05:58:c1:a1:8e:1b:f5:79:dc:f9:c9:90:ee:54:ea:4b:bc: 8c:02:3b:e0:b3:3b:5a:c7:ed:8a:5a:b9:2d:d5:81:1b:41:e5: 3d:17:fc:83:9b:3c:d9:ed:ed:70:84:59:dc:19:34:21:2c:f6: 98:a7:a4:15:a4:08:a0:85:bd:25:08:1b:44:e4:03:50:e8:0a: 0b:cc:fc:35:ac:38:8d:b4:d2:2e:22:17:37:ed:b0:77:be:c3: 98:e2:d2:f2:70:6c:b0:49:0a:d9:94:ce:82:fa:8b:e9:6f:a5: c1:d6:c0:2a:ba:d8:74:68:6f:53:c9:f5:51:ef:30:ec:df:39: 5c:f5:22:6c:59:b1:91:58:44:9b:27:fc:8f:73:5c:73:c0:01: d7:4e:f6:5e:a7:d2:04:3f:45:3b:86:44:eb:d2:2f:e5:10:e2: 25:a6:dc:ff:1a:e0:70:41:d9:f9:3a:6b:42:34:ad:24:1a:d8: f5:29:a3:e1:10:62:89:00:dd:13:bb:c8:66:03:ed:53:3a:35: 51:ba:bf:14 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUVA90G/aqQEV8Hthsl2BaxMTFDtEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczOVoX DTI3MDcyMDEzMzIzOVowMzExMC8GA1UEAxMoNzhBMTZDOTE2QkI5M0NEQTY2MzJD ODEwMkYwNjA0NUI1NTRFQzM1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKquZwJSSVOHBPwdW3L/3bo4b59LOFLcLxRv3IcDHsyMlueL2CgJj4iJJWUS wvfRTVlzQvyu8W48DzPdaFya+lF9GwnRSJKQSq52EUP/SYVG5ixrMIIP2hR5C2sT hulBPOwH/fm3npUN00xyNgGPkMcDEse3y18wRVRFpBJYuyFPhbpQyM3tglTCYg+J F/fqMxaeSEmwTVvsclNYreI/LGsP1Zgxc44X/V9M06F7ji8qjqwJThscotOvyFYk W5tuewd302DD1xmjqAdSqulSaw22dlhbm21mawZFWi2YqISbgR83wRcOxy8u3ZZ/ u9bpn5bUU3Y8nZGz5unEPhfIsaUCAwEAAaOCAicwggIjMB0GA1UdDgQWBBR4oWyR a7k82mYyyBAvBgRbVU7DWTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIxMTU3NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CEDiYDANBgkqhkiG9w0BAQsFAAOCAQEAYwLcBsfXfxbthTIjckmURXkr806BXAQW kBuk+9yH2WRXDeklUtu+ifp5Av1YQ/xDhF9ISlu4aAVYwaGOG/V53PnJkO5U6ku8 jAI74LM7Wsftilq5LdWBG0HlPRf8g5s82e3tcIRZ3Bk0ISz2mKekFaQIoIW9JQgb ROQDUOgKC8z8Naw4jbTSLiIXN+2wd77DmOLS8nBssEkK2ZTOgvqL6W+lwdbAKrrY dGhvU8n1Ue8w7N85XPUibFmxkVhEmyf8j3Ncc8AB1072XqfSBD9FO4ZE69Iv5RDi Jabc/xrgcEHZ+TprQjStJBrY9Smj4RBiiQDdE7vIZgPtUzo1Ubq/FA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:08 2026 by rpki-client