$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS215750.roa File: AS215750.roa (raw, json) Hash identifier: 7qSrUJAIG+mTYNDiXRhu78lEY/Woi/vQVgDlwti34Pw= Subject key identifier: 12:44:70:38:4B:E9:5B:32:47:0A:3C:50:BE:40:23:5C:A5:31:3C:8B Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 421E09CD41D8ED47342296F05B7A048E295AE469 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS215750.roa Signing time: Tue 21 Jul 2026 13:32:33 +0000 ROA not before: Tue 21 Jul 2026 13:27:33 +0000 ROA not after: Tue 20 Jul 2027 13:32:33 +0000 asID: 215750 IP address blocks: 2406:840:9600::/44 maxlen: 48 2406:840:9610::/44 maxlen: 48 2406:840:9620::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:1e:09:cd:41:d8:ed:47:34:22:96:f0:5b:7a:04:8e:29:5a:e4:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:33 2026 GMT Not After : Jul 20 13:32:33 2027 GMT Subject: CN=124470384BE95B32470A3C50BE40235CA5313C8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:26:94:11:70:87:73:36:96:7a:cf:1c:ab:9a: 62:61:d3:63:70:e0:2e:53:4f:3e:16:ad:bb:d1:ab: 98:61:ff:67:af:12:ad:20:b8:95:0d:b4:02:80:8f: 76:cb:ff:e7:09:d2:4a:eb:09:a4:7c:6d:25:82:c8: 35:09:aa:2c:39:db:fa:8d:1c:cc:68:81:ba:a3:14: ab:f7:c0:58:46:c8:e0:91:3e:e4:14:a8:a2:bb:3d: 6b:89:98:f7:e2:5a:f9:a6:88:33:8e:83:58:f4:0a: e9:f1:1a:f7:e1:3b:fb:57:6c:cf:3b:18:7c:a6:8b: d3:50:59:f1:21:d0:d6:73:f5:75:2b:5d:17:80:57: b4:59:18:dc:d8:91:3f:0b:77:51:06:d1:83:bd:b0: 78:19:75:60:28:7c:d9:52:7b:70:91:03:d7:f5:ea: 3e:2a:36:2a:12:75:bd:94:87:31:87:37:3c:e6:67: b5:02:f6:7b:2c:68:01:d4:70:47:53:cc:f3:1c:d4: 64:f1:5a:dd:b8:24:3c:03:6d:bb:34:b2:02:f9:d8: 3c:fd:ac:fe:3f:52:11:b1:f5:4c:47:a7:fb:2a:4e: 41:a4:a0:99:a7:25:16:3b:4b:81:0c:44:90:94:52: 2e:96:6b:dc:81:c6:34:5e:4e:ef:14:33:c2:5a:04: 4d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:44:70:38:4B:E9:5B:32:47:0A:3C:50:BE:40:23:5C:A5:31:3C:8B X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS215750.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9600::-2406:840:962f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 54:cc:dd:fd:54:8f:1f:97:84:4a:b8:21:0b:50:a6:e2:a8:cd: b1:c7:de:37:e1:5a:91:8d:d2:03:81:14:a5:26:b8:9d:f8:02: f2:5e:8e:63:0e:a5:87:db:c9:ee:71:77:ac:9e:14:b1:ef:85: 90:62:b3:cd:ec:c6:db:e3:ee:c3:9b:37:40:71:3a:4f:ff:55: 4a:a6:66:4b:be:b7:8b:13:79:3a:ed:54:04:56:5e:83:67:c7: eb:9a:0f:19:b1:06:4b:92:34:59:e5:62:c6:72:db:9e:4a:46: f5:e1:17:47:e0:51:2b:5d:c2:22:24:1f:5d:0f:36:a0:dd:78: 57:ea:f2:7f:00:99:33:42:49:09:2e:95:e2:ff:73:d9:2a:08: 2e:61:c6:9d:1b:81:06:81:34:91:a0:d5:89:eb:d5:0f:e2:b0: 70:24:0d:d4:34:fa:f9:9e:d7:dd:b9:c9:26:9f:4a:87:3f:10: 52:3a:17:92:eb:19:92:64:b3:d1:13:33:53:6d:6c:94:b9:08: cd:92:15:5f:ee:93:8e:8d:18:d8:71:5f:cd:fa:d1:80:49:f9: f0:a5:f1:ba:67:4f:d7:83:86:57:09:70:d3:26:2c:e5:c8:fc: c7:35:12:85:bf:4b:49:da:43:01:96:ee:e9:c8:3b:57:8d:16: 20:c0:00:70 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUQh4JzUHY7Uc0IpbwW3oEjila5GkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczM1oX DTI3MDcyMDEzMzIzM1owMzExMC8GA1UEAxMoMTI0NDcwMzg0QkU5NUIzMjQ3MEEz QzUwQkU0MDIzNUNBNTMxM0M4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANwmlBFwh3M2lnrPHKuaYmHTY3DgLlNPPhatu9GrmGH/Z68SrSC4lQ20AoCP dsv/5wnSSusJpHxtJYLINQmqLDnb+o0czGiBuqMUq/fAWEbI4JE+5BSoors9a4mY 9+Ja+aaIM46DWPQK6fEa9+E7+1dszzsYfKaL01BZ8SHQ1nP1dStdF4BXtFkY3NiR Pwt3UQbRg72weBl1YCh82VJ7cJED1/XqPio2KhJ1vZSHMYc3POZntQL2eyxoAdRw R1PM8xzUZPFa3bgkPANtuzSyAvnYPP2s/j9SEbH1TEen+ypOQaSgmaclFjtLgQxE kJRSLpZr3IHGNF5O7xQzwloETRECAwEAAaOCAjEwggItMB0GA1UdDgQWBBQSRHA4 S+lbMkcKPFC+QCNcpTE8izAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIxNTc1MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAsBggrBgEFBQcBBwEB/wQdMBswGQQCAAIwEzARAwYB JAYIQJYDBwQkBghAliAwDQYJKoZIhvcNAQELBQADggEBAFTM3f1Ujx+XhEq4IQtQ puKozbHH3jfhWpGN0gOBFKUmuJ34AvJejmMOpYfbye5xd6yeFLHvhZBis83sxtvj 7sObN0BxOk//VUqmZku+t4sTeTrtVARWXoNnx+uaDxmxBkuSNFnlYsZy255KRvXh F0fgUStdwiIkH10PNqDdeFfq8n8AmTNCSQkuleL/c9kqCC5hxp0bgQaBNJGg1Ynr 1Q/isHAkDdQ0+vme1925ySafSoc/EFI6F5LrGZJks9ETM1NtbJS5CM2SFV/uk46N GNhxX8360YBJ+fCl8bpnT9eDhlcJcNMmLOXI/Mc1EoW/S0naQwGW7unIO1eNFiDA AHA= -----END CERTIFICATE-----Generated at Tue Jul 21 21:42:17 2026 by rpki-client