$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS211843.roa File: AS211843.roa (raw, json) Hash identifier: TnPi39wvlnbKlXNMqR+M9PAIQTMoDdXuAFQM5nWg/MI= Subject key identifier: 09:07:8A:62:00:94:80:C1:74:BD:63:C3:BD:8E:54:DA:A7:D0:8F:CA Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 7174E3DECC7AD980B52D8926FA26326EE8DB3673 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS211843.roa Signing time: Tue 21 Jul 2026 13:32:39 +0000 ROA not before: Tue 21 Jul 2026 13:27:39 +0000 ROA not after: Tue 20 Jul 2027 13:32:39 +0000 asID: 211843 IP address blocks: 2406:840:e666::/47 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:74:e3:de:cc:7a:d9:80:b5:2d:89:26:fa:26:32:6e:e8:db:36:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:39 2026 GMT Not After : Jul 20 13:32:39 2027 GMT Subject: CN=09078A62009480C174BD63C3BD8E54DAA7D08FCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:39:47:1f:25:f3:b6:fd:dd:4c:5c:8a:43:8b: 97:9d:e0:6d:75:61:84:d2:41:16:6c:fd:91:2a:cf: 8f:a2:90:54:4e:2f:7d:59:9c:00:35:ce:2e:3d:4d: 7f:ad:87:1c:3f:2a:29:75:b5:c0:16:71:33:2e:f5: 1a:76:f5:d6:09:bc:9a:e8:1b:41:89:92:69:e9:d5: 47:74:c5:8a:d6:ce:92:30:e6:77:79:51:c6:d5:1a: 94:26:eb:3d:ba:53:5d:18:43:3c:e5:3d:f7:4b:6e: 12:2b:0b:43:ff:b7:37:bd:33:70:b1:2a:1f:8c:31: d9:e1:47:4d:13:85:0e:63:16:41:ba:5d:ff:a0:7c: ac:37:79:32:58:e9:e2:cc:e3:99:ce:72:9a:c7:a9: a1:b6:14:35:e9:b9:89:73:66:4a:e1:d6:b8:10:07: b6:89:4b:6a:7d:ab:f5:bd:9a:2e:3d:6d:18:74:1e: 2d:94:a6:9d:c1:e2:4a:f2:4c:3c:4b:db:e5:af:6e: 9d:af:56:41:69:71:ef:a2:99:92:b5:37:0f:ca:07: 42:57:01:2b:02:cc:bf:83:49:78:fd:71:bd:b7:64: be:ab:5e:47:7f:30:12:6e:a3:33:47:d0:06:b0:ab: ce:a8:c6:b7:4d:44:bf:5a:78:0e:fc:fd:99:16:ee: ec:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:07:8A:62:00:94:80:C1:74:BD:63:C3:BD:8E:54:DA:A7:D0:8F:CA X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS211843.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e666::/47 Signature Algorithm: sha256WithRSAEncryption 54:1b:c6:25:66:7b:8c:39:f5:ab:c7:cb:56:6c:fe:97:ab:2e: bb:89:14:71:56:94:41:a5:71:cd:a9:fb:42:16:af:be:9e:36: a5:cb:b4:01:39:50:62:5c:75:47:0a:1f:d2:92:bd:68:29:29: b4:b0:be:80:78:b4:14:70:ff:7c:d1:e4:21:6f:58:2a:89:b6: cc:43:7e:ed:a6:54:96:9e:a5:25:2a:59:e8:61:c8:80:2d:ca: fb:01:1b:5e:ab:16:7d:83:84:3c:6a:ec:71:60:6d:ab:81:19: ae:6b:6d:d4:ed:e0:e6:42:b3:4e:b5:0b:df:4b:a2:4d:93:bd: c0:69:7d:49:b4:7a:75:f5:4f:9a:c6:d8:50:e2:e4:c0:a4:7d: 92:2b:89:83:9c:73:71:35:78:a6:1f:07:e5:56:56:4f:ea:d9: 36:7d:5f:35:0e:a6:96:e6:04:70:5a:c8:54:bf:9a:72:3e:ec: 6c:a2:31:65:d7:df:16:36:76:5c:35:2b:92:47:d5:1a:29:9a: b9:98:2b:b4:a0:40:7b:40:9b:76:92:ef:5b:38:dd:7f:1d:33: 67:10:92:a7:69:de:87:02:e1:19:b5:51:42:f8:87:50:8f:2d: 49:89:a3:e7:49:4e:35:bd:35:a8:bb:9c:d2:97:f1:58:c8:40: e8:19:a9:39 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUcXTj3sx62YC1LYkm+iYybujbNnMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczOVoX DTI3MDcyMDEzMzIzOVowMzExMC8GA1UEAxMoMDkwNzhBNjIwMDk0ODBDMTc0QkQ2 M0MzQkQ4RTU0REFBN0QwOEZDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKw5Rx8l87b93UxcikOLl53gbXVhhNJBFmz9kSrPj6KQVE4vfVmcADXOLj1N f62HHD8qKXW1wBZxMy71Gnb11gm8mugbQYmSaenVR3TFitbOkjDmd3lRxtUalCbr PbpTXRhDPOU990tuEisLQ/+3N70zcLEqH4wx2eFHTROFDmMWQbpd/6B8rDd5Mljp 4szjmc5ymsepobYUNem5iXNmSuHWuBAHtolLan2r9b2aLj1tGHQeLZSmncHiSvJM PEvb5a9una9WQWlx76KZkrU3D8oHQlcBKwLMv4NJeP1xvbdkvqteR38wEm6jM0fQ BrCrzqjGt01Ev1p4Dvz9mRbu7G8CAwEAAaOCAicwggIjMB0GA1UdDgQWBBQJB4pi AJSAwXS9Y8O9jlTap9CPyjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIxMTg0My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASQG CEDmZjANBgkqhkiG9w0BAQsFAAOCAQEAVBvGJWZ7jDn1q8fLVmz+l6suu4kUcVaU QaVxzan7Qhavvp42pcu0ATlQYlx1Rwof0pK9aCkptLC+gHi0FHD/fNHkIW9YKom2 zEN+7aZUlp6lJSpZ6GHIgC3K+wEbXqsWfYOEPGrscWBtq4EZrmtt1O3g5kKzTrUL 30uiTZO9wGl9SbR6dfVPmsbYUOLkwKR9kiuJg5xzcTV4ph8H5VZWT+rZNn1fNQ6m luYEcFrIVL+acj7sbKIxZdffFjZ2XDUrkkfVGimauZgrtKBAe0CbdpLvWzjdfx0z ZxCSp2nehwLhGbVRQviHUI8tSYmj50lONb01qLuc0pfxWMhA6BmpOQ== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:05 2026 by rpki-client