$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS215062.roa File: AS215062.roa (raw, json) Hash identifier: J5UDy03n3aM2cA1L1QHxzkTsJptxQnU2QiRpwx8sLxM= Subject key identifier: 91:A8:08:31:6B:66:76:F1:F4:8C:77:C6:11:8B:3D:6A:14:B3:92:A2 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 714E1F62B6FBFC73E09A7BC2E5A7DC7F890886A4 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS215062.roa Signing time: Tue 21 Jul 2026 13:32:34 +0000 ROA not before: Tue 21 Jul 2026 13:27:34 +0000 ROA not after: Tue 20 Jul 2027 13:32:34 +0000 asID: 215062 IP address blocks: 2406:840:9ab0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:4e:1f:62:b6:fb:fc:73:e0:9a:7b:c2:e5:a7:dc:7f:89:08:86:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:34 2026 GMT Not After : Jul 20 13:32:34 2027 GMT Subject: CN=91A808316B6676F1F48C77C6118B3D6A14B392A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:59:8d:6b:44:fd:5a:12:c2:ff:cb:4e:ca:cb: 11:2c:9d:0f:0e:c4:a8:32:f5:6f:5e:f4:e7:1d:d3: 13:8c:73:28:da:01:f6:28:dd:60:4b:3a:e0:36:1c: 67:29:e8:ff:56:37:4c:dd:19:85:78:5f:7c:33:a2: 87:6a:36:2d:24:86:ab:25:b8:58:de:06:cf:fc:a1: 1a:7d:55:48:61:e1:8e:f0:8e:05:42:9b:b8:9a:24: 17:39:3e:8c:23:9a:c3:1e:e7:17:5d:33:d0:b1:a9: d9:01:5e:f8:8b:4b:60:a2:6b:b1:cd:d8:39:2d:6c: d1:9e:e7:c2:a1:f8:bb:0b:a7:97:c2:a2:4b:41:8e: 72:1f:8a:9d:cf:f1:4b:d2:8e:92:d7:94:e4:50:3b: b8:40:db:78:f4:57:54:b0:8c:59:92:5a:1f:5b:2d: 3c:7b:b2:65:28:4f:9e:e1:52:e4:a8:cd:72:c4:f8: 2d:e0:27:64:3b:43:fe:1b:fe:ef:f7:87:50:0a:46: 12:36:78:12:6c:01:c5:89:c8:5c:3a:4f:fb:21:3f: ab:6a:31:da:ed:8e:1e:b5:44:69:67:8a:24:39:3c: 12:2a:68:c3:47:4b:3d:76:44:06:d0:0c:82:d3:cc: ad:4f:32:2a:ac:95:0c:fe:26:ec:6f:33:e1:0a:e8: 44:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A8:08:31:6B:66:76:F1:F4:8C:77:C6:11:8B:3D:6A:14:B3:92:A2 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS215062.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9ab0::/44 Signature Algorithm: sha256WithRSAEncryption 42:17:32:e6:00:af:19:4a:80:df:f2:43:ee:51:1d:56:20:1a: 37:14:c9:b9:2f:4f:9a:58:b4:02:c9:e6:33:01:ef:8c:1b:64: a6:a0:0f:d8:1d:af:f9:1f:9c:89:08:d9:00:b8:4a:7a:eb:a0: dd:93:f6:a3:5e:d0:fc:e4:9e:80:a4:0e:e0:65:1e:f5:0a:62: 6f:16:53:b8:16:63:97:82:41:b0:db:2b:6f:c2:b4:0b:01:ca: d5:b1:d4:e2:e4:8d:cd:2b:72:f2:40:a4:58:5f:cc:82:55:b6: 0b:02:ea:df:f4:5f:d0:9e:c5:dc:14:be:e8:5a:c0:df:1f:b3: ea:ee:7e:8a:b8:9a:70:84:e9:e4:27:3d:49:f2:2a:06:93:cc: 44:04:82:53:9c:08:12:81:78:ca:c9:76:45:52:55:11:d2:3d: c1:f6:c8:28:7b:53:f5:84:de:1f:f9:53:27:dd:18:b8:ba:76: 28:1c:85:e9:21:df:c6:43:4a:d8:df:a3:ee:ea:45:76:b0:bc: 5a:89:cf:1a:0c:98:30:ec:21:b8:81:c7:08:7c:de:70:e3:89: 93:a0:5e:3b:5d:41:42:bd:dc:de:ef:35:5f:bc:55:89:ea:60: 7f:51:81:eb:77:8f:30:93:b9:ad:fc:52:71:43:a6:81:96:6c: d7:f6:c7:9f -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUcU4fYrb7/HPgmnvC5afcf4kIhqQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczNFoX DTI3MDcyMDEzMzIzNFowMzExMC8GA1UEAxMoOTFBODA4MzE2QjY2NzZGMUY0OEM3 N0M2MTE4QjNENkExNEIzOTJBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJJZjWtE/VoSwv/LTsrLESydDw7EqDL1b1705x3TE4xzKNoB9ijdYEs64DYc Zyno/1Y3TN0ZhXhffDOih2o2LSSGqyW4WN4Gz/yhGn1VSGHhjvCOBUKbuJokFzk+ jCOawx7nF10z0LGp2QFe+ItLYKJrsc3YOS1s0Z7nwqH4uwunl8KiS0GOch+Knc/x S9KOkteU5FA7uEDbePRXVLCMWZJaH1stPHuyZShPnuFS5KjNcsT4LeAnZDtD/hv+ 7/eHUApGEjZ4EmwBxYnIXDpP+yE/q2ox2u2OHrVEaWeKJDk8Eipow0dLPXZEBtAM gtPMrU8yKqyVDP4m7G8z4QroRFMCAwEAAaOCAicwggIjMB0GA1UdDgQWBBSRqAgx a2Z28fSMd8YRiz1qFLOSojAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIxNTA2Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CECasDANBgkqhkiG9w0BAQsFAAOCAQEAQhcy5gCvGUqA3/JD7lEdViAaNxTJuS9P mli0AsnmMwHvjBtkpqAP2B2v+R+ciQjZALhKeuug3ZP2o17Q/OSegKQO4GUe9Qpi bxZTuBZjl4JBsNsrb8K0CwHK1bHU4uSNzSty8kCkWF/MglW2CwLq3/Rf0J7F3BS+ 6FrA3x+z6u5+iriacITp5Cc9SfIqBpPMRASCU5wIEoF4ysl2RVJVEdI9wfbIKHtT 9YTeH/lTJ90YuLp2KByF6SHfxkNK2N+j7upFdrC8WonPGgyYMOwhuIHHCHzecOOJ k6BeO11BQr3c3u81X7xViepgf1GB63ePMJO5rfxScUOmgZZs1/bHnw== -----END CERTIFICATE-----Generated at Tue Jul 21 20:16:54 2026 by rpki-client