$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS213903.roa File: AS213903.roa (raw, json) Hash identifier: 5ud7TySaLfgNkcb3x8nmCIrvhBHYNoDmstoQGMRiBUQ= Subject key identifier: B3:B9:C1:FB:17:D7:8E:2C:A4:C1:4A:0E:5A:36:6C:D2:6E:B0:34:85 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 43A4C85E30F58A5CFF43032BE8E8223FE315EFE0 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS213903.roa Signing time: Tue 21 Jul 2026 13:32:16 +0000 ROA not before: Tue 21 Jul 2026 13:27:16 +0000 ROA not after: Tue 20 Jul 2027 13:32:16 +0000 asID: 213903 IP address blocks: 2406:840:fdea::/48 maxlen: 48 2406:840:fdeb::/48 maxlen: 48 2406:840:fdec::/48 maxlen: 48 2406:840:fded::/48 maxlen: 48 2406:840:fdee::/48 maxlen: 48 2406:840:fdef::/48 maxlen: 48 2406:840:fdf0::/48 maxlen: 48 2406:840:fdf1::/48 maxlen: 48 2406:840:fdf2::/48 maxlen: 48 2406:840:fdf3::/48 maxlen: 48 2406:840:fdf4::/48 maxlen: 48 2406:840:fdf5::/48 maxlen: 48 2406:840:fdf6::/48 maxlen: 48 2406:840:fdf7::/48 maxlen: 48 2406:840:fdf8::/48 maxlen: 48 2406:840:fdf9::/48 maxlen: 48 2406:840:fdfa::/48 maxlen: 48 2406:840:fec1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a4:c8:5e:30:f5:8a:5c:ff:43:03:2b:e8:e8:22:3f:e3:15:ef:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:16 2026 GMT Not After : Jul 20 13:32:16 2027 GMT Subject: CN=B3B9C1FB17D78E2CA4C14A0E5A366CD26EB03485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:42:90:cb:d5:cd:f7:92:f5:f4:69:45:05: d3:53:5a:7f:c4:48:9a:b4:48:56:2e:21:fa:3a:64: bd:65:89:69:20:59:ce:87:b8:2b:01:be:0b:9e:58: 73:59:ab:b1:a7:c3:f7:1b:37:75:7c:91:a5:b6:d0: 23:90:79:8c:c7:87:fe:67:50:86:b7:d1:aa:79:b4: 22:86:e7:ed:80:4e:75:88:d3:a0:22:cb:55:b1:d9: 30:c2:53:42:5b:db:c8:f5:94:95:29:b1:54:51:ea: 36:f7:0f:ce:e1:cb:45:fb:2e:08:df:55:2a:07:1c: 42:8b:d3:94:1a:5a:aa:46:15:e0:bc:50:4c:47:35: a7:d4:92:64:3c:85:84:9b:ae:de:41:b6:80:a0:3c: 9c:b2:fb:c6:5f:96:2c:43:24:26:3a:17:31:73:4d: ca:bf:ba:a5:ff:03:12:f9:b6:84:39:62:52:66:c8: f0:27:3f:fc:4f:ee:a6:0c:84:a4:95:00:49:e4:75: c3:f7:ba:fd:f3:72:62:fc:f2:1a:f8:ac:d1:73:39: ff:79:a0:27:b7:56:b0:5c:3b:cd:be:09:24:9a:d5: f7:80:b6:c3:37:3e:e0:92:5e:e4:36:b2:89:d6:ff: 92:b2:79:d6:60:eb:80:7b:4e:1e:61:e4:f3:65:ce: 8c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B9:C1:FB:17:D7:8E:2C:A4:C1:4A:0E:5A:36:6C:D2:6E:B0:34:85 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS213903.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fdea::-2406:840:fdfa:ffff:ffff:ffff:ffff:ffff 2406:840:fec1::/48 Signature Algorithm: sha256WithRSAEncryption 8d:78:e1:db:14:d1:d1:02:08:d2:8e:a3:f0:93:63:68:f1:3e: 0a:a5:63:07:08:8a:09:33:a0:ce:58:0b:b2:c4:73:13:e2:b7: 3e:ba:af:0a:75:59:99:cd:f8:73:72:7b:14:ca:89:c5:09:0c: ab:49:d0:5d:63:9c:7b:a2:8e:83:f6:e6:81:20:10:d8:28:49: 8e:c1:93:d2:a3:f1:b0:08:b0:05:45:7f:ae:be:bd:5b:ad:ea: 48:fd:94:8d:9b:c9:69:ea:8c:3c:73:ab:2d:35:e0:2e:32:10: 9e:e2:d6:94:bb:04:ea:5b:dd:80:96:81:0c:5c:19:52:38:3c: b2:e6:88:9f:f5:09:20:7b:24:0f:d3:d7:63:4f:3e:49:c4:14: 51:f1:84:2f:51:a4:dc:73:eb:ac:c3:7e:04:88:76:be:5e:53: 67:e0:e6:0b:b2:e0:11:66:5c:c9:7f:a3:c6:98:89:f2:5f:97: 2c:15:26:b9:a8:52:00:3a:50:e0:40:8e:2a:96:08:c5:ba:04: b8:68:35:17:5b:ea:e3:85:fc:1c:8d:90:37:6d:fb:a4:e5:69: d1:60:2c:a2:85:91:2a:b5:5a:bf:6c:f8:3f:9c:0d:fe:46:94: fc:0d:78:2a:4b:66:0c:a8:12:68:2e:4b:e8:c4:6b:00:86:0d: 9a:cc:b2:cb -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUQ6TIXjD1ilz/QwMr6OgiP+MV7+AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxNloX DTI3MDcyMDEzMzIxNlowMzExMC8GA1UEAxMoQjNCOUMxRkIxN0Q3OEUyQ0E0QzE0 QTBFNUEzNjZDRDI2RUIwMzQ4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKumQpDL1c33kvX0aUUF01Naf8RImrRIVi4h+jpkvWWJaSBZzoe4KwG+C55Y c1mrsafD9xs3dXyRpbbQI5B5jMeH/mdQhrfRqnm0Iobn7YBOdYjToCLLVbHZMMJT QlvbyPWUlSmxVFHqNvcPzuHLRfsuCN9VKgccQovTlBpaqkYV4LxQTEc1p9SSZDyF hJuu3kG2gKA8nLL7xl+WLEMkJjoXMXNNyr+6pf8DEvm2hDliUmbI8Cc//E/upgyE pJUASeR1w/e6/fNyYvzyGvis0XM5/3mgJ7dWsFw7zb4JJJrV94C2wzc+4JJe5Day idb/krJ51mDrgHtOHmHk82XOjEUCAwEAAaOCAjswggI3MB0GA1UdDgQWBBSzucH7 F9eOLKTBSg5aNmzSbrA0hTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIxMzkwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQnMCUwIwQCAAIwHTASAwcB JAYIQP3qAwcAJAYIQP36AwcAJAYIQP7BMA0GCSqGSIb3DQEBCwUAA4IBAQCNeOHb FNHRAgjSjqPwk2No8T4KpWMHCIoJM6DOWAuyxHMT4rc+uq8KdVmZzfhzcnsUyonF CQyrSdBdY5x7oo6D9uaBIBDYKEmOwZPSo/GwCLAFRX+uvr1brepI/ZSNm8lp6ow8 c6stNeAuMhCe4taUuwTqW92AloEMXBlSODyy5oif9QkgeyQP09djTz5JxBRR8YQv UaTcc+usw34EiHa+XlNn4OYLsuARZlzJf6PGmInyX5csFSa5qFIAOlDgQI4qlgjF ugS4aDUXW+rjhfwcjZA3bfuk5WnRYCyihZEqtVq/bPg/nA3+RpT8DXgqS2YMqBJo LkvoxGsAhg2azLLL -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:09 2026 by rpki-client