$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS40115.roa File: AS40115.roa (raw, json) Hash identifier: jf+PwWJWyansMjHBVTLNAXe35Fqa0ouGKg0SZ/WD7Z8= Subject key identifier: 20:CF:18:CE:92:46:33:D9:ED:22:E3:9D:9D:64:E7:BC:1E:3D:5E:2C Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 198538F39D43519D2AF5864024C383FA8F5F956C Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS40115.roa Signing time: Tue 21 Jul 2026 13:32:25 +0000 ROA not before: Tue 21 Jul 2026 13:27:25 +0000 ROA not after: Tue 20 Jul 2027 13:32:25 +0000 asID: 40115 IP address blocks: 2406:840:9170::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:85:38:f3:9d:43:51:9d:2a:f5:86:40:24:c3:83:fa:8f:5f:95:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:25 2026 GMT Not After : Jul 20 13:32:25 2027 GMT Subject: CN=20CF18CE924633D9ED22E39D9D64E7BC1E3D5E2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cc:fa:a4:05:9f:f7:e5:a5:46:55:b0:d0:8c: 19:76:b5:52:b5:2a:bb:8e:58:cf:81:e0:a3:3d:55: a0:26:bf:79:29:9c:a4:7f:45:9d:5c:04:76:b4:f4: d6:b1:b1:97:2a:d6:f7:b8:93:83:47:cb:9c:88:00: 60:26:c9:a9:f5:34:60:3e:a0:ef:f3:b2:70:9c:7a: 20:7a:e0:2f:f6:d5:c9:ed:f0:0b:c5:05:51:5d:cd: ec:72:23:03:6b:19:aa:0f:db:92:17:e1:48:b6:78: 69:39:c8:d3:e8:9e:df:8a:a4:cb:e5:7a:31:5d:06: 9d:c6:6a:e7:f8:35:6d:29:fd:e3:32:4c:9e:ef:f9: ea:16:a9:02:fa:b7:45:fb:ba:c1:42:92:38:35:63: 3c:4a:74:f9:13:02:ae:c0:dc:67:bb:ca:2c:82:f8: 10:86:64:a9:59:cf:79:f7:c7:52:02:bf:82:5f:63: c7:58:bd:07:b7:e4:6b:79:ad:3d:f4:27:db:36:f2: 1d:67:a0:3e:de:9c:d9:ab:47:96:af:fe:9e:ed:b3: da:15:bb:45:0e:49:81:7b:91:68:8f:3e:06:3c:a2: 9f:6f:9a:0a:59:32:89:6f:52:64:0c:9e:81:37:74: 09:f0:1b:7e:93:95:24:34:55:97:d3:80:9d:ce:e5: df:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CF:18:CE:92:46:33:D9:ED:22:E3:9D:9D:64:E7:BC:1E:3D:5E:2C X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS40115.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9170::/44 Signature Algorithm: sha256WithRSAEncryption 24:76:ce:85:f6:a5:73:60:7b:61:e1:55:95:2a:0c:b5:92:1d: c0:49:24:82:e5:dc:71:be:47:8f:7b:c9:11:fc:b3:dc:d3:9e: 9e:8a:4b:18:75:66:00:61:e7:8f:33:7f:28:30:9c:bd:74:91: 52:6e:f6:6e:24:4a:47:0d:8c:fc:5d:2f:97:b7:f8:ad:c8:1c: 02:3e:47:4a:01:d8:3b:1b:fc:d4:d8:25:1a:4c:4d:41:08:c6: f6:80:e3:24:64:1e:ef:79:88:c7:be:04:0e:32:17:21:7e:bc: 66:c7:c4:a4:76:f7:14:c4:b0:cc:fc:75:33:5a:28:a4:5e:7c: a0:30:f1:fa:2b:74:f0:ed:4f:e6:d1:47:d5:f7:b6:57:81:bb: 34:44:94:be:b9:07:85:6f:e0:5a:70:df:99:6f:bc:60:98:24: 0a:b7:e3:cc:61:f6:fc:17:b3:f4:c8:bc:93:b1:2c:cf:51:a2: e5:2f:d9:b7:1f:12:3a:a8:37:b4:f7:54:d7:dd:d5:94:08:bc: 95:c8:eb:2a:04:c5:d4:6b:5a:b4:0c:be:57:16:7a:13:20:7e: 1a:de:d3:0e:4e:3c:95:c6:73:e7:ec:a6:9c:2e:d8:a2:f0:6a: 8a:5e:c0:48:72:eb:38:00:8f:c2:73:6b:b9:7b:c3:72:4d:f0: 26:70:d1:c7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGYU4851DUZ0q9YZAJMOD+o9flWwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyNVoX DTI3MDcyMDEzMzIyNVowMzExMC8GA1UEAxMoMjBDRjE4Q0U5MjQ2MzNEOUVEMjJF MzlEOUQ2NEU3QkMxRTNENUUyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAObM+qQFn/flpUZVsNCMGXa1UrUqu45Yz4Hgoz1VoCa/eSmcpH9FnVwEdrT0 1rGxlyrW97iTg0fLnIgAYCbJqfU0YD6g7/OycJx6IHrgL/bVye3wC8UFUV3N7HIj A2sZqg/bkhfhSLZ4aTnI0+ie34qky+V6MV0GncZq5/g1bSn94zJMnu/56hapAvq3 Rfu6wUKSODVjPEp0+RMCrsDcZ7vKLIL4EIZkqVnPeffHUgK/gl9jx1i9B7fka3mt PfQn2zbyHWegPt6c2atHlq/+nu2z2hW7RQ5JgXuRaI8+Bjyin2+aClkyiW9SZAye gTd0CfAbfpOVJDRVl9OAnc7l3/8CAwEAAaOCAiYwggIiMB0GA1UdDgQWBBQgzxjO kkYz2e0i452dZOe8Hj1eLDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzQwMTE1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJAYI QJFwMA0GCSqGSIb3DQEBCwUAA4IBAQAkds6F9qVzYHth4VWVKgy1kh3ASSSC5dxx vkePe8kR/LPc056eiksYdWYAYeePM38oMJy9dJFSbvZuJEpHDYz8XS+Xt/ityBwC PkdKAdg7G/zU2CUaTE1BCMb2gOMkZB7veYjHvgQOMhchfrxmx8SkdvcUxLDM/HUz WiikXnygMPH6K3Tw7U/m0UfV97ZXgbs0RJS+uQeFb+BacN+Zb7xgmCQKt+PMYfb8 F7P0yLyTsSzPUaLlL9m3HxI6qDe091TX3dWUCLyVyOsqBMXUa1q0DL5XFnoTIH4a 3tMOTjyVxnPn7KacLtii8GqKXsBIcus4AI/Cc2u5e8NyTfAmcNHH -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:06 2026 by rpki-client