$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS214848.roa File: AS214848.roa (raw, json) Hash identifier: a1/eVukFszcLnKSncPNzAm/5ipPTaZwKuuYZCuqh9BU= Subject key identifier: 5B:50:30:2C:B4:83:2C:E7:57:1A:7A:C1:A2:22:10:1B:34:06:65:3C Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 54714943F456FD9EC7BA6F7C6C0FBA10365CC29A Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS214848.roa Signing time: Tue 21 Jul 2026 13:32:37 +0000 ROA not before: Tue 21 Jul 2026 13:27:37 +0000 ROA not after: Tue 20 Jul 2027 13:32:37 +0000 asID: 214848 IP address blocks: 2406:840:e380::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:71:49:43:f4:56:fd:9e:c7:ba:6f:7c:6c:0f:ba:10:36:5c:c2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:37 2026 GMT Not After : Jul 20 13:32:37 2027 GMT Subject: CN=5B50302CB4832CE7571A7AC1A222101B3406653C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:da:e2:0e:ec:90:f5:5a:0b:a3:21:85:30: fb:28:34:28:fa:a6:74:81:30:85:1e:4a:ca:8d:20: 7e:11:8a:71:fc:e0:58:ee:52:e0:b9:09:98:83:33: c4:30:c2:79:ca:8b:cf:07:ff:75:53:d0:b6:6e:db: b2:3b:74:0a:08:69:22:38:c9:a9:96:e5:3e:78:05: 79:20:1a:aa:8b:d0:cd:21:d3:61:79:b2:a1:37:24: 35:56:7e:a6:4b:de:d1:f0:35:1d:04:97:be:0d:0b: cd:b5:4a:86:36:fe:ca:23:ca:d1:90:27:f0:fa:5e: db:ef:6b:d5:68:5d:72:97:1c:6c:30:e7:54:e0:81: 5f:11:82:a4:6d:3c:63:a9:06:45:4b:77:ac:3f:81: 70:e5:35:e4:3c:ad:0f:09:8b:15:13:a2:be:e6:b0: 27:24:19:27:62:84:2e:72:f9:49:03:b3:ee:e7:59: 3a:81:d8:29:ba:60:df:68:a5:5e:72:60:7f:9a:d5: 46:7a:05:37:c6:c8:22:90:da:4a:b0:69:69:c0:1e: a2:38:3f:40:8d:9c:5d:4e:c4:47:f1:b0:15:33:a2: 41:f8:eb:9a:21:43:5f:18:d7:8c:dc:a6:f3:17:35: 50:83:1e:29:2f:da:8a:9c:d7:78:e4:0f:2a:3e:37: e2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:50:30:2C:B4:83:2C:E7:57:1A:7A:C1:A2:22:10:1B:34:06:65:3C X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS214848.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e380::/44 Signature Algorithm: sha256WithRSAEncryption 36:4c:53:26:b9:cb:16:ff:62:e2:5e:3d:ac:74:8e:6c:4d:f4: 6f:20:d8:5d:26:a5:51:f8:50:bd:2e:51:a4:f0:8a:0c:33:da: b6:78:ad:4e:62:a5:37:e3:d2:72:24:2e:1b:51:44:3a:8d:a6: be:f2:41:55:80:7c:ef:05:b4:84:e1:35:e5:4b:ee:48:65:05: 86:a4:2f:0f:98:c8:45:46:95:17:40:a1:03:8c:ce:62:13:8a: 40:76:39:94:64:bb:9c:6f:3b:d7:bc:92:42:49:73:ae:08:68: ac:00:75:25:1c:bc:1c:f3:fd:65:b5:40:eb:36:8c:6d:10:e3: 31:11:86:ad:54:05:2a:34:97:35:1e:a8:25:40:ae:af:21:71: 75:a4:69:09:26:63:14:7e:46:73:6c:fd:29:f3:49:75:55:8a: 6a:24:c9:91:85:7c:02:08:84:ac:49:36:a2:87:cd:96:07:17: 28:5d:64:a6:39:62:1b:db:52:04:a5:38:80:57:37:c5:d9:43: ef:f9:4a:4d:51:be:07:64:c4:1e:86:44:96:96:d7:55:63:f7: 8a:b7:8e:c0:f0:35:45:c2:92:d4:98:a1:3a:ac:8f:96:57:09: fc:0f:b2:b3:d1:78:d9:b7:99:f2:3e:d6:d2:9c:fd:b4:11:11: 24:f1:fc:fd -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUVHFJQ/RW/Z7Hum98bA+6EDZcwpowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczN1oX DTI3MDcyMDEzMzIzN1owMzExMC8GA1UEAxMoNUI1MDMwMkNCNDgzMkNFNzU3MUE3 QUMxQTIyMjEwMUIzNDA2NjUzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALB72uIO7JD1WgujIYUw+yg0KPqmdIEwhR5Kyo0gfhGKcfzgWO5S4LkJmIMz xDDCecqLzwf/dVPQtm7bsjt0CghpIjjJqZblPngFeSAaqovQzSHTYXmyoTckNVZ+ pkve0fA1HQSXvg0LzbVKhjb+yiPK0ZAn8Ppe2+9r1WhdcpccbDDnVOCBXxGCpG08 Y6kGRUt3rD+BcOU15DytDwmLFROivuawJyQZJ2KELnL5SQOz7udZOoHYKbpg32il XnJgf5rVRnoFN8bIIpDaSrBpacAeojg/QI2cXU7ER/GwFTOiQfjrmiFDXxjXjNym 8xc1UIMeKS/aipzXeOQPKj434gkCAwEAAaOCAicwggIjMB0GA1UdDgQWBBRbUDAs tIMs51caesGiIhAbNAZlPDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIxNDg0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CEDjgDANBgkqhkiG9w0BAQsFAAOCAQEANkxTJrnLFv9i4l49rHSObE30byDYXSal UfhQvS5RpPCKDDPatnitTmKlN+PSciQuG1FEOo2mvvJBVYB87wW0hOE15UvuSGUF hqQvD5jIRUaVF0ChA4zOYhOKQHY5lGS7nG8717ySQklzrghorAB1JRy8HPP9ZbVA 6zaMbRDjMRGGrVQFKjSXNR6oJUCuryFxdaRpCSZjFH5Gc2z9KfNJdVWKaiTJkYV8 AgiErEk2oofNlgcXKF1kpjliG9tSBKU4gFc3xdlD7/lKTVG+B2TEHoZElpbXVWP3 ireOwPA1RcKS1JihOqyPllcJ/A+ys9F42beZ8j7W0pz9tBERJPH8/Q== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:08 2026 by rpki-client