$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS212034.roa File: AS212034.roa (raw, json) Hash identifier: U68gA6c0pb0WUpRWBGL1WuTt8Rf9YnmqsweHmq3aPmE= Subject key identifier: D1:7C:89:55:70:48:B0:42:D8:CB:24:2F:F8:BD:97:95:32:1E:24:E9 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 4A270A806F170EB4C970624F82D5BD286CFFBB18 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS212034.roa Signing time: Tue 21 Jul 2026 13:32:22 +0000 ROA not before: Tue 21 Jul 2026 13:27:22 +0000 ROA not after: Tue 20 Jul 2027 13:32:22 +0000 asID: 212034 IP address blocks: 2406:840:f890::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:27:0a:80:6f:17:0e:b4:c9:70:62:4f:82:d5:bd:28:6c:ff:bb:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:22 2026 GMT Not After : Jul 20 13:32:22 2027 GMT Subject: CN=D17C89557048B042D8CB242FF8BD9795321E24E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d1:e3:e6:0b:62:81:85:7e:4d:49:2d:b5:88: d2:a2:b3:08:f7:07:76:e7:21:09:c1:a5:88:50:27: 50:84:a4:dc:b5:4b:0d:c8:2c:f4:ec:ce:5c:95:c9: f2:64:c5:59:0e:2f:40:87:7c:60:a2:7b:c6:7e:85: 9f:a7:5f:44:71:62:7e:2b:f3:e2:a7:65:fd:9e:78: 56:10:ce:74:f2:02:f2:bd:f3:44:01:f4:34:eb:d8: 00:a7:66:62:7b:df:41:d7:a5:3e:45:8b:72:eb:46: c1:5a:e9:db:f6:4b:ea:6d:e2:5f:88:91:51:79:78: 91:c5:9b:bd:00:e2:50:51:83:34:f2:13:96:b6:26: 60:e0:69:48:b4:0a:dd:30:0e:b8:cb:f4:2f:e5:a9: a2:f0:4e:10:69:39:29:03:18:c4:24:ab:9c:9a:3f: 52:46:4d:7e:b5:be:7a:40:b6:e4:4a:c3:21:4e:94: e7:5e:39:14:e7:dc:96:2e:5c:68:b2:db:2d:7d:7a: e5:9d:26:a7:bb:60:d0:f8:79:59:95:93:7d:5a:9f: 31:39:fe:c4:ff:26:12:4f:9c:ec:67:f5:01:dc:ca: c6:4c:0b:f8:94:49:99:cf:2e:6e:02:b1:0c:02:04: 4d:dd:5a:b5:48:97:e1:b6:89:4a:a2:c6:b7:5c:79: 37:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7C:89:55:70:48:B0:42:D8:CB:24:2F:F8:BD:97:95:32:1E:24:E9 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS212034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:f890::/44 Signature Algorithm: sha256WithRSAEncryption 0d:94:c0:0c:9f:26:af:82:81:c2:d7:d4:c2:d2:c3:81:84:ea: 14:c1:94:6e:f1:e3:e3:bf:9c:e8:0b:32:e3:a4:a8:46:e7:17: af:e5:5a:a6:c8:d8:29:d5:71:08:61:31:ff:f7:07:7a:05:e6: 35:42:8d:81:5f:c3:d9:d5:81:a8:08:46:ab:30:00:bf:d8:31: 58:fc:17:99:18:41:31:c2:f0:73:5e:22:f5:02:c9:00:da:5f: 86:11:61:59:3c:69:9f:42:7d:6e:51:81:18:e6:d1:73:68:76: 5d:b2:58:80:92:79:31:ee:51:2b:e1:73:a0:11:2c:b3:84:91: 28:53:be:9c:f9:97:30:dc:bb:d9:16:d8:a0:95:4a:04:30:62: cd:8b:4d:82:7c:b2:85:78:4a:a6:9e:79:fb:23:84:37:ab:c0: fa:f5:42:73:a3:55:82:35:08:62:ae:2c:25:fa:99:54:ff:26: d0:05:47:8c:d2:02:63:fc:17:80:d9:18:70:c1:bd:f7:c4:ed: a0:e0:7f:04:c6:3f:fa:0d:a4:c4:bb:68:46:80:27:88:a8:bd: 3e:9e:71:7a:a7:72:1c:b9:32:96:a3:47:d9:e1:b8:be:da:ad: d4:e9:a6:8b:0c:9d:bb:72:80:11:80:fb:f7:40:ce:83:fa:60: 91:55:6c:53 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUSicKgG8XDrTJcGJPgtW9KGz/uxgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyMloX DTI3MDcyMDEzMzIyMlowMzExMC8GA1UEAxMoRDE3Qzg5NTU3MDQ4QjA0MkQ4Q0Iy NDJGRjhCRDk3OTUzMjFFMjRFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPR4+YLYoGFfk1JLbWI0qKzCPcHduchCcGliFAnUISk3LVLDcgs9OzOXJXJ 8mTFWQ4vQId8YKJ7xn6Fn6dfRHFifivz4qdl/Z54VhDOdPIC8r3zRAH0NOvYAKdm YnvfQdelPkWLcutGwVrp2/ZL6m3iX4iRUXl4kcWbvQDiUFGDNPITlrYmYOBpSLQK 3TAOuMv0L+WpovBOEGk5KQMYxCSrnJo/UkZNfrW+ekC25ErDIU6U5145FOfcli5c aLLbLX165Z0mp7tg0Ph5WZWTfVqfMTn+xP8mEk+c7Gf1AdzKxkwL+JRJmc8ubgKx DAIETd1atUiX4baJSqLGt1x5N2cCAwEAAaOCAicwggIjMB0GA1UdDgQWBBTRfIlV cEiwQtjLJC/4vZeVMh4k6TAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIxMjAzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CED4kDANBgkqhkiG9w0BAQsFAAOCAQEADZTADJ8mr4KBwtfUwtLDgYTqFMGUbvHj 47+c6Asy46SoRucXr+VapsjYKdVxCGEx//cHegXmNUKNgV/D2dWBqAhGqzAAv9gx WPwXmRhBMcLwc14i9QLJANpfhhFhWTxpn0J9blGBGObRc2h2XbJYgJJ5Me5RK+Fz oBEss4SRKFO+nPmXMNy72RbYoJVKBDBizYtNgnyyhXhKpp55+yOEN6vA+vVCc6NV gjUIYq4sJfqZVP8m0AVHjNICY/wXgNkYcMG998TtoOB/BMY/+g2kxLtoRoAniKi9 Pp5xeqdyHLkylqNH2eG4vtqt1Ommiwydu3KAEYD790DOg/pgkVVsUw== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:55 2026 by rpki-client