$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS39753.roa File: AS39753.roa (raw, json) Hash identifier: NSYT7uZHyjoMQTW6qwJ1+BLPKJlXMWaQPsHTv9BQjSE= Subject key identifier: 2E:26:F8:6C:D6:A7:3E:06:F1:B2:EC:55:CB:24:87:9A:86:9C:D2:66 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 5F5D625304EDC7B43C81B8D0FD0C1B62695A650B Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS39753.roa Signing time: Tue 21 Jul 2026 13:32:16 +0000 ROA not before: Tue 21 Jul 2026 13:27:16 +0000 ROA not after: Tue 20 Jul 2027 13:32:16 +0000 asID: 39753 IP address blocks: 2406:840:f100::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5d:62:53:04:ed:c7:b4:3c:81:b8:d0:fd:0c:1b:62:69:5a:65:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:16 2026 GMT Not After : Jul 20 13:32:16 2027 GMT Subject: CN=2E26F86CD6A73E06F1B2EC55CB24879A869CD266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:17:d8:18:e9:07:d3:6d:f5:86:99:35:51:04: 60:38:36:e0:44:e8:46:06:a9:32:0e:66:1d:79:34: da:80:6c:31:28:19:15:c8:79:89:25:ea:1b:a6:a5: 11:98:d4:74:df:5d:8b:f9:6e:08:79:e3:14:55:4a: e0:73:69:b4:e2:59:1c:7f:ab:75:a9:e3:02:20:f2: cd:52:4a:4b:12:f8:25:d8:a5:0d:d1:38:df:ab:56: bc:60:e0:ba:2f:71:5e:2e:4b:27:a1:90:c3:82:f7: c3:82:33:0e:1e:80:ef:70:c7:bb:a2:6d:d1:36:2f: d4:f3:6f:d3:33:f1:58:32:77:be:bc:6b:0d:3b:15: db:72:f2:94:05:ae:a9:27:db:68:87:7e:92:81:05: 36:5f:4e:5c:48:af:39:80:73:e7:2d:8b:b3:f5:de: dc:ed:99:1c:4d:6a:88:0b:c9:19:29:82:65:10:15: cb:28:38:e5:2c:1a:70:a9:3c:cc:01:ac:f1:85:da: 70:a8:59:08:d4:6b:15:b2:33:b9:cc:c8:db:a0:20: 84:de:53:0f:1c:64:0d:cf:bb:9d:b5:19:0d:31:69: 83:83:83:73:dd:b6:63:14:ec:ce:8a:8e:a4:f4:b4: 0d:11:9d:58:ce:d1:29:d8:13:8e:80:df:77:a8:1f: 43:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:26:F8:6C:D6:A7:3E:06:F1:B2:EC:55:CB:24:87:9A:86:9C:D2:66 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS39753.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:f100::/44 Signature Algorithm: sha256WithRSAEncryption 85:ff:ca:cd:f8:4d:65:56:e6:0f:6f:8e:8a:ff:36:9c:d0:5b: 1c:d8:d5:60:3a:0e:c2:b5:bb:db:9e:81:4a:e8:25:84:f1:e7: 85:0e:59:b4:2b:0f:cc:29:ef:f4:d4:04:d3:5d:3f:d2:42:62: 86:db:87:5c:0c:fd:17:eb:73:96:34:d5:6b:20:a8:5f:c1:bf: 44:19:35:ce:85:83:af:4f:b8:1a:b7:16:da:23:26:f5:f6:3a: b2:ab:1a:25:a0:55:e4:e0:f4:e4:46:77:18:fd:63:40:05:f0: 06:0f:9e:4d:af:c0:0d:db:b7:96:a8:2a:b7:e5:07:e8:f8:e7: 6f:f9:8f:61:f4:57:fd:79:76:d1:7b:d9:16:45:83:d9:03:e6: 27:2d:c1:d1:90:3a:64:66:15:2c:28:b8:d9:db:d0:df:7b:21: 14:a4:75:a1:20:4b:a6:e0:df:58:3b:ef:13:04:43:7c:9c:6f: 98:27:f3:b6:91:b2:e8:d3:33:47:8e:ae:93:54:35:cb:2f:12: c0:12:76:59:58:72:6a:1a:f2:29:54:96:4f:c9:e9:d7:c9:ca: 61:5d:0e:09:b7:af:17:3b:d0:c2:2e:31:f7:37:e8:a7:34:0b: 4a:f5:d1:1a:e6:39:f9:9b:fe:ee:63:92:41:48:f1:7c:97:af: fb:ba:35:9e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUX11iUwTtx7Q8gbjQ/QwbYmlaZQswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcxNloX DTI3MDcyMDEzMzIxNlowMzExMC8GA1UEAxMoMkUyNkY4NkNENkE3M0UwNkYxQjJF QzU1Q0IyNDg3OUE4NjlDRDI2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYX2BjpB9Nt9YaZNVEEYDg24EToRgapMg5mHXk02oBsMSgZFch5iSXqG6al EZjUdN9di/luCHnjFFVK4HNptOJZHH+rdanjAiDyzVJKSxL4JdilDdE436tWvGDg ui9xXi5LJ6GQw4L3w4IzDh6A73DHu6Jt0TYv1PNv0zPxWDJ3vrxrDTsV23LylAWu qSfbaId+koEFNl9OXEivOYBz5y2Ls/Xe3O2ZHE1qiAvJGSmCZRAVyyg45SwacKk8 zAGs8YXacKhZCNRrFbIzuczI26AghN5TDxxkDc+7nbUZDTFpg4ODc922YxTszoqO pPS0DRGdWM7RKdgTjoDfd6gfQ3kCAwEAAaOCAiYwggIiMB0GA1UdDgQWBBQuJvhs 1qc+BvGy7FXLJIeahpzSZjAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzM5NzUzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJAYI QPEAMA0GCSqGSIb3DQEBCwUAA4IBAQCF/8rN+E1lVuYPb46K/zac0Fsc2NVgOg7C tbvbnoFK6CWE8eeFDlm0Kw/MKe/01ATTXT/SQmKG24dcDP0X63OWNNVrIKhfwb9E GTXOhYOvT7gatxbaIyb19jqyqxoloFXk4PTkRncY/WNABfAGD55Nr8AN27eWqCq3 5Qfo+Odv+Y9h9Ff9eXbRe9kWRYPZA+YnLcHRkDpkZhUsKLjZ29DfeyEUpHWhIEum 4N9YO+8TBEN8nG+YJ/O2kbLo0zNHjq6TVDXLLxLAEnZZWHJqGvIpVJZPyenXycph XQ4Jt68XO9DCLjH3N+inNAtK9dEa5jn5m/7uY5JBSPF8l6/7ujWe -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:05 2026 by rpki-client