$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS216452.roa File: AS216452.roa (raw, json) Hash identifier: Sij5TM2wKLyMUmzAIArdCEhwS763YqUNTOlc2LJTGgY= Subject key identifier: 7C:1F:DB:96:D9:84:D5:44:45:C4:51:99:4D:26:B4:12:0D:98:37:08 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 2919E3D46904ABF15EC5361F5FB0041F347A115E Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS216452.roa Signing time: Tue 21 Jul 2026 13:32:20 +0000 ROA not before: Tue 21 Jul 2026 13:27:20 +0000 ROA not after: Tue 20 Jul 2027 13:32:20 +0000 asID: 216452 IP address blocks: 2406:840:9ff0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:19:e3:d4:69:04:ab:f1:5e:c5:36:1f:5f:b0:04:1f:34:7a:11:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:20 2026 GMT Not After : Jul 20 13:32:20 2027 GMT Subject: CN=7C1FDB96D984D54445C451994D26B4120D983708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:99:af:55:d6:1a:ce:a9:d3:41:4b:64:46:59: 4f:ec:4d:86:9e:49:d8:76:65:8c:0f:a8:7d:26:ce: 24:d3:15:bf:8c:43:a3:d1:0a:bd:8e:2a:b4:47:62: 7e:e8:5d:50:41:d8:25:1e:de:4e:c1:31:d9:5c:a4: aa:ef:32:1b:24:01:ac:92:80:c0:d7:84:9e:c1:04: a7:a9:f3:1c:78:d3:10:0b:7a:0b:48:35:04:67:f1: 6e:0c:a0:27:6f:40:97:b0:b0:53:25:ec:28:87:2c: cf:7f:a9:48:8a:14:83:88:db:de:4e:68:63:28:ce: a7:20:7c:43:e0:2b:99:30:b4:e6:5c:57:1d:f7:c8: 47:06:a0:06:2d:20:4d:da:fc:75:17:07:43:06:5b: 0d:3e:6b:db:02:17:a8:b9:15:47:52:c6:8e:4c:32: cc:39:8c:d8:97:cc:46:ae:7c:e1:6e:8b:8d:b4:9d: d5:90:de:5b:b3:52:b9:ad:95:ca:c1:b5:2a:fe:18: 65:07:7b:97:9b:df:68:fb:e8:62:52:a2:18:37:b5: 59:8a:a0:9a:26:9d:71:36:df:ac:95:5e:6f:c7:61: 95:32:17:ec:d9:32:eb:5e:a7:a4:c0:16:09:67:68: fa:7a:29:50:40:d8:59:09:1e:09:94:67:78:8d:4f: 1a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1F:DB:96:D9:84:D5:44:45:C4:51:99:4D:26:B4:12:0D:98:37:08 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS216452.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9ff0::/44 Signature Algorithm: sha256WithRSAEncryption 20:03:85:1d:72:7a:9a:1a:71:a6:fb:ca:cf:73:2a:f5:7c:d7: a3:a0:bb:8b:f0:08:9b:86:8b:73:09:ba:ef:c6:0a:42:de:6b: 52:d9:67:87:89:3b:8e:3c:28:93:4f:d1:d1:95:1f:10:23:08: 37:e8:db:0a:fc:18:a1:c4:78:60:1d:ba:15:5e:60:4c:42:1b: 07:3a:c7:09:3c:af:32:95:21:21:0c:1f:18:c7:fb:8d:90:6f: 77:48:9b:73:ea:31:ce:d6:b5:79:72:33:58:ef:5a:83:4e:9f: 3e:0a:cd:99:17:2c:ed:32:2a:fa:28:43:e0:60:3f:49:52:44: 1c:46:82:af:a6:cc:5d:26:49:47:96:9e:b7:5e:c6:40:da:00: 5d:f5:60:97:02:5f:cc:98:07:f8:e5:27:76:c8:76:b7:2d:10: 7b:75:02:ad:5d:a2:02:cd:36:e9:cf:7c:af:aa:1a:f8:3a:44: 3d:ca:6a:e4:39:9d:c3:2e:bc:f0:a8:a7:3c:38:60:0c:20:c0: 4c:65:5f:0c:5c:e3:c1:e7:4d:74:e1:17:67:66:1e:10:bd:5c: 22:2e:9e:0b:8c:95:52:e6:75:0d:5d:0b:da:7f:95:96:56:28: ab:30:7c:0a:72:d5:51:06:cf:78:57:13:31:1e:68:e4:d1:28: 4d:05:72:43 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUKRnj1GkEq/FexTYfX7AEHzR6EV4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyMFoX DTI3MDcyMDEzMzIyMFowMzExMC8GA1UEAxMoN0MxRkRCOTZEOTg0RDU0NDQ1QzQ1 MTk5NEQyNkI0MTIwRDk4MzcwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALOZr1XWGs6p00FLZEZZT+xNhp5J2HZljA+ofSbOJNMVv4xDo9EKvY4qtEdi fuhdUEHYJR7eTsEx2Vykqu8yGyQBrJKAwNeEnsEEp6nzHHjTEAt6C0g1BGfxbgyg J29Al7CwUyXsKIcsz3+pSIoUg4jb3k5oYyjOpyB8Q+ArmTC05lxXHffIRwagBi0g Tdr8dRcHQwZbDT5r2wIXqLkVR1LGjkwyzDmM2JfMRq584W6LjbSd1ZDeW7NSua2V ysG1Kv4YZQd7l5vfaPvoYlKiGDe1WYqgmiadcTbfrJVeb8dhlTIX7Nky616npMAW CWdo+nopUEDYWQkeCZRneI1PGgsCAwEAAaOCAicwggIjMB0GA1UdDgQWBBR8H9uW 2YTVREXEUZlNJrQSDZg3CDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIxNjQ1Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CECf8DANBgkqhkiG9w0BAQsFAAOCAQEAIAOFHXJ6mhpxpvvKz3Mq9XzXo6C7i/AI m4aLcwm678YKQt5rUtlnh4k7jjwok0/R0ZUfECMIN+jbCvwYocR4YB26FV5gTEIb BzrHCTyvMpUhIQwfGMf7jZBvd0ibc+oxzta1eXIzWO9ag06fPgrNmRcs7TIq+ihD 4GA/SVJEHEaCr6bMXSZJR5aet17GQNoAXfVglwJfzJgH+OUndsh2ty0Qe3UCrV2i As026c98r6oa+DpEPcpq5Dmdwy688KinPDhgDCDATGVfDFzjwedNdOEXZ2YeEL1c Ii6eC4yVUuZ1DV0L2n+VllYoqzB8CnLVUQbPeFcTMR5o5NEoTQVyQw== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:51 2026 by rpki-client