$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS216056.roa File: AS216056.roa (raw, json) Hash identifier: pzq4wTCGuef5Cqc//R++CmPH5Qtltu29mBbv9y5ZsU0= Subject key identifier: 0F:2A:95:7F:05:90:21:FE:3B:4C:17:3A:59:3F:4D:B8:D1:ED:48:7B Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 41171E3C51CCA1F38AE692A842B7DA2F8E02C55A Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS216056.roa Signing time: Tue 21 Jul 2026 13:32:12 +0000 ROA not before: Tue 21 Jul 2026 13:27:12 +0000 ROA not after: Tue 20 Jul 2027 13:32:12 +0000 asID: 216056 IP address blocks: 2406:840:eef0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:17:1e:3c:51:cc:a1:f3:8a:e6:92:a8:42:b7:da:2f:8e:02:c5:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:12 2026 GMT Not After : Jul 20 13:32:12 2027 GMT Subject: CN=0F2A957F059021FE3B4C173A593F4DB8D1ED487B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:4e:fb:58:3e:30:c8:c0:8e:d9:77:3b:bb: 1b:4a:2f:c1:c0:20:84:91:21:89:54:d7:bf:4b:1d: 8b:50:a1:43:26:c3:40:9b:be:d2:47:fc:86:e8:27: 42:0f:a3:b9:b6:a8:13:dd:5f:01:cd:51:09:05:ea: 95:47:9a:c7:a9:6e:34:37:2c:81:93:a7:7b:f1:06: 2e:a8:ba:77:09:c9:54:40:08:03:76:19:7e:ee:7d: 47:87:7c:ed:bc:f1:10:b1:24:7c:ea:d8:91:da:7d: 3b:86:d4:87:d6:3f:5e:5c:02:6c:12:09:90:29:7c: f6:f4:8f:98:a3:0d:3d:63:8a:9f:19:b7:24:44:1c: 7c:16:9a:b2:85:27:f4:f6:10:cc:68:28:18:53:64: 3f:55:eb:9b:89:1d:e0:76:44:10:39:59:80:89:a2: 83:fd:03:37:c1:ed:f8:84:c8:9c:26:26:b9:80:2d: ad:cb:83:ca:49:19:e8:8f:c6:fc:35:c5:be:d0:2a: 2b:d9:21:81:0c:f6:57:dd:2b:b8:80:2e:38:77:dc: db:0e:12:f3:22:e8:3d:43:82:f4:59:86:ab:96:e5: 9e:20:90:2e:60:c8:82:f9:e9:67:b2:bc:28:03:2e: ca:68:0e:3f:bb:74:d4:f1:85:68:66:d5:32:7b:59: f2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2A:95:7F:05:90:21:FE:3B:4C:17:3A:59:3F:4D:B8:D1:ED:48:7B X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS216056.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:eef0::/44 Signature Algorithm: sha256WithRSAEncryption 2d:54:cf:d7:03:72:fe:76:aa:bd:74:8a:41:68:71:0b:f0:be: 98:3d:5f:a0:00:bc:7e:33:7a:35:f8:63:30:39:de:6c:01:06: e3:12:3c:43:cd:4e:da:9c:1f:b2:a4:25:8f:b0:71:bb:ee:35: c0:d3:07:a2:4d:ce:d7:40:27:50:95:d9:df:05:2d:cb:92:46: e6:bd:62:b0:27:16:8e:a8:9d:ad:60:a0:19:c5:6e:37:5b:bb: 1e:7d:da:a7:84:f2:9f:bf:32:90:17:77:9b:6f:04:ea:59:84: 0e:42:ab:bc:21:53:5a:a1:c2:71:e1:f5:e8:02:12:c7:7f:a7: f9:4b:a4:a6:74:c1:b5:1e:ea:f1:29:e2:14:f2:87:84:27:05: 36:49:d3:5a:8f:0d:3c:f6:8e:14:ba:bd:63:01:a7:4a:78:74: 81:84:55:16:ce:3d:13:04:1e:26:93:44:a9:65:e0:f0:71:1f: 0d:6e:b8:ca:66:b2:40:6e:c7:a7:1d:cf:f0:6d:a9:95:1c:06: c7:ce:c7:51:58:57:f9:5a:fb:b4:0a:66:74:07:2c:c6:a0:fd: 20:7a:33:ec:10:52:0b:9a:4c:8a:97:ba:b0:28:be:d9:76:79: 47:ed:66:ac:8c:0e:30:29:2b:d2:e1:c4:61:8b:4e:a1:0b:e9: af:f5:cf:7e -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUQRcePFHMofOK5pKoQrfaL44CxVowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxMloX DTI3MDcyMDEzMzIxMlowMzExMC8GA1UEAxMoMEYyQTk1N0YwNTkwMjFGRTNCNEMx NzNBNTkzRjREQjhEMUVENDg3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALN5TvtYPjDIwI7Zdzu7G0ovwcAghJEhiVTXv0sdi1ChQybDQJu+0kf8hugn Qg+jubaoE91fAc1RCQXqlUeax6luNDcsgZOne/EGLqi6dwnJVEAIA3YZfu59R4d8 7bzxELEkfOrYkdp9O4bUh9Y/XlwCbBIJkCl89vSPmKMNPWOKnxm3JEQcfBaasoUn 9PYQzGgoGFNkP1Xrm4kd4HZEEDlZgImig/0DN8Ht+ITInCYmuYAtrcuDykkZ6I/G /DXFvtAqK9khgQz2V90ruIAuOHfc2w4S8yLoPUOC9FmGq5blniCQLmDIgvnpZ7K8 KAMuymgOP7t01PGFaGbVMntZ8t8CAwEAAaOCAicwggIjMB0GA1UdDgQWBBQPKpV/ BZAh/jtMFzpZP0240e1IezAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIxNjA1Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CEDu8DANBgkqhkiG9w0BAQsFAAOCAQEALVTP1wNy/naqvXSKQWhxC/C+mD1foAC8 fjN6NfhjMDnebAEG4xI8Q81O2pwfsqQlj7Bxu+41wNMHok3O10AnUJXZ3wUty5JG 5r1isCcWjqidrWCgGcVuN1u7Hn3ap4Tyn78ykBd3m28E6lmEDkKrvCFTWqHCceH1 6AISx3+n+UukpnTBtR7q8SniFPKHhCcFNknTWo8NPPaOFLq9YwGnSnh0gYRVFs49 EwQeJpNEqWXg8HEfDW64ymayQG7Hpx3P8G2plRwGx87HUVhX+Vr7tApmdAcsxqD9 IHoz7BBSC5pMipe6sCi+2XZ5R+1mrIwOMCkr0uHEYYtOoQvpr/XPfg== -----END CERTIFICATE-----Generated at Tue Jul 21 21:42:17 2026 by rpki-client