$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS215172.roa File: AS215172.roa (raw, json) Hash identifier: m2bvoCVJWxsnXIxcizJOrvaybTGxj0ruhJCM24HvA2w= Subject key identifier: D5:24:D2:99:17:51:F2:FB:1C:B6:C8:B7:5C:F1:F8:17:27:07:DF:99 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 1A27C74CB24E3677030DC5B861623B7A5DAC998D Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS215172.roa Signing time: Tue 21 Jul 2026 13:32:23 +0000 ROA not before: Tue 21 Jul 2026 13:27:23 +0000 ROA not after: Tue 20 Jul 2027 13:32:23 +0000 asID: 215172 IP address blocks: 2406:840:e200::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:27:c7:4c:b2:4e:36:77:03:0d:c5:b8:61:62:3b:7a:5d:ac:99:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:23 2026 GMT Not After : Jul 20 13:32:23 2027 GMT Subject: CN=D524D2991751F2FB1CB6C8B75CF1F8172707DF99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:4d:87:db:27:bf:c2:0f:a9:20:68:80:34: e0:87:b8:c9:d2:86:cc:7a:f8:fe:b1:4a:df:d3:bc: 11:4e:3b:d9:42:31:eb:73:85:61:cd:5c:23:c7:79: dd:d2:df:f3:8c:68:01:07:e5:bd:25:3e:7e:3c:3c: 8e:4c:89:44:33:c9:7b:be:9a:17:3b:42:0c:b2:e9: cd:7f:ca:17:6d:60:61:36:38:a9:2d:16:ce:31:46: 19:82:e4:a5:f4:d6:ca:39:56:87:06:47:0a:ff:bc: 05:29:03:1e:d0:b9:2b:21:86:9e:bc:50:d1:30:00: 03:c6:b9:46:4a:0a:27:50:d8:85:e2:92:b9:9d:ad: 45:b2:44:cc:c0:56:28:65:31:c8:04:47:b6:fd:6d: 5e:60:31:1e:a7:59:d4:ff:57:89:1b:d5:35:07:fd: 25:c3:b6:a9:92:35:fb:a0:db:60:d8:b8:c2:5a:c6: d5:d2:9e:8d:8c:6d:8c:d1:d4:ed:92:3c:0f:e0:7e: ae:ee:44:c3:dc:2d:ff:c7:9f:7f:13:85:c0:f9:fd: d6:03:98:a9:a0:32:f9:8d:8e:da:8b:3e:b6:79:d9: 38:b2:09:8d:09:25:8e:0e:ac:d0:1d:72:64:11:0b: f4:de:3f:9c:7f:b3:3d:6b:ac:ff:fc:3c:5d:d9:cb: 00:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:24:D2:99:17:51:F2:FB:1C:B6:C8:B7:5C:F1:F8:17:27:07:DF:99 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS215172.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e200::/44 Signature Algorithm: sha256WithRSAEncryption 3a:7f:3d:6e:43:f3:cc:67:2d:d1:fb:ba:df:57:10:5f:34:f7: 71:fd:f3:3d:e1:57:64:66:66:f7:a7:d2:54:88:78:b8:0e:bf: 3a:41:94:c8:57:a3:48:35:09:38:f1:f7:e1:8b:64:9a:de:b5: af:f2:63:8b:84:73:e9:21:01:4a:e4:28:f5:c7:49:bb:f1:9a: 2e:96:ff:71:9f:5d:c2:17:58:1a:1e:0a:ab:ce:f1:94:b2:4d: 19:a5:85:17:6e:0d:ac:34:7d:0b:79:3e:5d:8b:0b:23:cf:c5: da:82:09:da:68:78:cc:2f:96:2f:56:7e:32:f3:0c:cc:a6:7f: 2a:39:b6:6f:16:41:e3:41:a4:a6:66:e2:cb:d3:00:72:8c:4c: e5:69:66:ac:dd:6a:37:b8:f1:2d:18:3f:f6:4e:e7:23:5b:f1: 03:d3:60:a5:5a:ac:f3:c9:4d:d0:de:86:1d:ab:ff:fa:f8:ea: e0:ca:a2:8b:71:5f:d2:b2:a9:a8:ae:33:4b:a3:5b:0f:7e:32: a3:13:dd:90:73:8c:c8:6f:ca:ec:4b:89:a1:a9:7c:ba:c3:26: cb:ed:cb:5d:2b:c0:74:90:b8:62:1b:59:fd:25:75:7c:53:a4: ca:a8:ae:e2:d2:4b:61:18:16:dd:b7:81:6e:44:4f:89:cc:cb: 02:48:0e:53 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUGifHTLJONncDDcW4YWI7el2smY0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyM1oX DTI3MDcyMDEzMzIyM1owMzExMC8GA1UEAxMoRDUyNEQyOTkxNzUxRjJGQjFDQjZD OEI3NUNGMUY4MTcyNzA3REY5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9hTYfbJ7/CD6kgaIA04Ie4ydKGzHr4/rFK39O8EU472UIx63OFYc1cI8d5 3dLf84xoAQflvSU+fjw8jkyJRDPJe76aFztCDLLpzX/KF21gYTY4qS0WzjFGGYLk pfTWyjlWhwZHCv+8BSkDHtC5KyGGnrxQ0TAAA8a5RkoKJ1DYheKSuZ2tRbJEzMBW KGUxyARHtv1tXmAxHqdZ1P9XiRvVNQf9JcO2qZI1+6DbYNi4wlrG1dKejYxtjNHU 7ZI8D+B+ru5Ew9wt/8effxOFwPn91gOYqaAy+Y2O2os+tnnZOLIJjQkljg6s0B1y ZBEL9N4/nH+zPWus//w8XdnLAHsCAwEAAaOCAicwggIjMB0GA1UdDgQWBBTVJNKZ F1Hy+xy2yLdc8fgXJwffmTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIxNTE3Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CEDiADANBgkqhkiG9w0BAQsFAAOCAQEAOn89bkPzzGct0fu631cQXzT3cf3zPeFX ZGZm96fSVIh4uA6/OkGUyFejSDUJOPH34Ytkmt61r/Jji4Rz6SEBSuQo9cdJu/Ga Lpb/cZ9dwhdYGh4Kq87xlLJNGaWFF24NrDR9C3k+XYsLI8/F2oIJ2mh4zC+WL1Z+ MvMMzKZ/Kjm2bxZB40Gkpmbiy9MAcoxM5WlmrN1qN7jxLRg/9k7nI1vxA9NgpVqs 88lN0N6GHav/+vjq4Mqii3Ff0rKpqK4zS6NbD34yoxPdkHOMyG/K7EuJoal8usMm y+3LXSvAdJC4YhtZ/SV1fFOkyqiu4tJLYRgW3beBbkRPiczLAkgOUw== -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:04 2026 by rpki-client