$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS32167.roa File: AS32167.roa (raw, json) Hash identifier: v5mFpkedfWrdnnSRM2ATobEc5UxsrxukqQ/avGFrqG0= Subject key identifier: 18:8B:CA:1D:9B:41:68:F3:C7:BE:B1:CE:18:C4:34:6A:30:DC:2E:64 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 3CB795DA45EB83D5CBAD3787D3AEDC219FAA2A63 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS32167.roa Signing time: Tue 21 Jul 2026 13:32:34 +0000 ROA not before: Tue 21 Jul 2026 13:27:34 +0000 ROA not after: Tue 20 Jul 2027 13:32:34 +0000 asID: 32167 IP address blocks: 2406:840:fa80::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b7:95:da:45:eb:83:d5:cb:ad:37:87:d3:ae:dc:21:9f:aa:2a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:34 2026 GMT Not After : Jul 20 13:32:34 2027 GMT Subject: CN=188BCA1D9B4168F3C7BEB1CE18C4346A30DC2E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fb:bf:bd:4c:29:a4:c0:82:05:d0:ad:db:45: 48:e9:0c:c4:5f:ed:37:64:4b:35:d1:86:97:67:83: 07:e4:4b:22:4e:59:8a:12:8b:fa:9f:a8:60:c3:f6: f3:6e:81:4c:fe:63:13:77:72:ab:08:ec:59:a3:af: 60:9b:4d:c1:98:3e:9e:52:0b:d6:9f:d1:36:04:9b: 90:84:65:ca:e9:e9:90:83:1e:8c:b1:df:52:1f:07: 9b:4f:a7:3e:5f:44:b6:6a:bd:2b:c1:a4:8a:74:f0: 4b:8a:ac:ac:20:50:a4:fa:dc:5b:02:c1:4b:79:ca: 06:5b:4e:a3:b9:e4:8b:73:19:9e:3d:84:b5:b5:d7: 66:13:7a:14:06:76:73:a9:61:e5:06:81:31:bc:1c: e5:06:a3:d1:51:a0:9b:61:49:7e:3d:db:4f:4a:85: e6:05:5e:e2:72:b5:a2:b6:10:fe:4b:a0:52:13:96: b6:94:68:7e:7d:db:87:9a:91:4e:3d:74:06:fb:48: ce:ab:93:37:f3:da:c7:8e:99:e4:cc:9f:26:7e:ac: 6a:9c:9a:2e:66:f7:ab:ff:43:b3:4f:e8:75:fa:51: ac:7b:b5:ef:62:1e:98:48:b0:a4:a8:f7:6d:43:a9: 8f:76:38:48:10:9b:43:fb:6b:d8:52:f4:09:7f:30: 10:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8B:CA:1D:9B:41:68:F3:C7:BE:B1:CE:18:C4:34:6A:30:DC:2E:64 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS32167.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:fa80::/44 Signature Algorithm: sha256WithRSAEncryption 0a:93:31:17:51:24:a6:0e:06:0f:7c:67:13:5e:ad:5f:13:23: d5:e7:54:00:bb:9d:59:5e:e1:e3:ae:9a:c3:b3:7e:51:78:f6: dc:88:bd:19:61:14:0d:af:04:cd:08:c7:61:1e:51:dd:15:85: 41:7d:fd:93:ed:99:80:12:8b:50:00:21:02:08:29:fd:68:2b: 02:75:4a:06:3b:c1:03:9d:83:75:9f:b1:31:fd:27:ab:f3:c9: 1d:e1:5f:63:37:15:2c:87:98:47:aa:2f:19:5f:19:dd:bc:aa: 50:ad:a2:3c:12:a5:dc:fe:b6:50:2a:aa:db:75:53:d7:b6:77: a4:63:60:17:8b:e9:28:99:83:0d:b9:37:df:16:9a:7c:d9:2a: 4c:26:9d:a8:b1:88:df:07:b7:a0:a5:3d:37:4a:39:e6:39:6f: 78:72:1a:c9:5d:74:eb:ce:90:eb:93:06:df:08:0d:30:c6:b3: be:7d:9e:be:87:05:8c:c6:32:d8:1a:a0:4a:9a:fc:49:d2:77: 73:db:b5:80:20:ab:d6:26:49:a1:b1:cd:42:4b:8a:ac:c3:77: 87:38:37:61:a3:6a:ad:6c:a3:56:b0:a3:d5:e1:93:d1:3b:39: 6e:b7:d1:41:79:38:be:a5:dc:92:71:06:4e:55:4c:86:a8:9f: b5:8c:e4:7d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUPLeV2kXrg9XLrTeH067cIZ+qKmMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczNFoX DTI3MDcyMDEzMzIzNFowMzExMC8GA1UEAxMoMTg4QkNBMUQ5QjQxNjhGM0M3QkVC MUNFMThDNDM0NkEzMERDMkU2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALz7v71MKaTAggXQrdtFSOkMxF/tN2RLNdGGl2eDB+RLIk5ZihKL+p+oYMP2 826BTP5jE3dyqwjsWaOvYJtNwZg+nlIL1p/RNgSbkIRlyunpkIMejLHfUh8Hm0+n Pl9Etmq9K8GkinTwS4qsrCBQpPrcWwLBS3nKBltOo7nki3MZnj2EtbXXZhN6FAZ2 c6lh5QaBMbwc5Qaj0VGgm2FJfj3bT0qF5gVe4nK1orYQ/kugUhOWtpRofn3bh5qR Tj10BvtIzquTN/Pax46Z5MyfJn6sapyaLmb3q/9Ds0/odfpRrHu172IemEiwpKj3 bUOpj3Y4SBCbQ/tr2FL0CX8wEMMCAwEAAaOCAiYwggIiMB0GA1UdDgQWBBQYi8od m0Fo88e+sc4YxDRqMNwuZDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzMyMTY3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJAYI QPqAMA0GCSqGSIb3DQEBCwUAA4IBAQAKkzEXUSSmDgYPfGcTXq1fEyPV51QAu51Z XuHjrprDs35RePbciL0ZYRQNrwTNCMdhHlHdFYVBff2T7ZmAEotQACECCCn9aCsC dUoGO8EDnYN1n7Ex/Ser88kd4V9jNxUsh5hHqi8ZXxndvKpQraI8EqXc/rZQKqrb dVPXtnekY2AXi+komYMNuTffFpp82SpMJp2osYjfB7egpT03SjnmOW94chrJXXTr zpDrkwbfCA0wxrO+fZ6+hwWMxjLYGqBKmvxJ0ndz27WAIKvWJkmhsc1CS4qsw3eH ODdho2qtbKNWsKPV4ZPROzlut9FBeTi+pdyScQZOVUyGqJ+1jOR9 -----END CERTIFICATE-----Generated at Tue Jul 21 17:43:33 2026 by rpki-client