$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS60539.roa File: AS60539.roa (raw, json) Hash identifier: ILGW+/jMAlIpVZ+fcVRBTrZ7RGM0vXnMcrJygyhuR+8= Subject key identifier: 2C:71:9A:BE:36:2F:B9:C0:2F:06:00:65:25:FC:FE:8F:37:B8:DC:2C Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 687E26DC52FCA9CE3C510BF5F172017BC31D8C26 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS60539.roa Signing time: Tue 21 Jul 2026 13:32:28 +0000 ROA not before: Tue 21 Jul 2026 13:27:28 +0000 ROA not after: Tue 20 Jul 2027 13:32:28 +0000 asID: 60539 IP address blocks: 2406:840:e240::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7e:26:dc:52:fc:a9:ce:3c:51:0b:f5:f1:72:01:7b:c3:1d:8c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:28 2026 GMT Not After : Jul 20 13:32:28 2027 GMT Subject: CN=2C719ABE362FB9C02F06006525FCFE8F37B8DC2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:20:f4:47:2d:78:f8:72:07:d3:0c:9c:dc: f4:d2:88:ee:c4:f5:b9:ba:0d:45:59:32:6d:2e:66: ad:27:18:4e:96:62:17:cb:be:ce:89:86:5a:d2:77: 32:39:ad:8c:f5:85:e5:3a:92:57:20:34:e8:81:ab: d0:04:32:47:94:4b:6b:70:b7:99:22:80:06:c5:3e: b7:7a:82:a7:56:70:53:95:a6:ed:ac:de:df:c4:3a: a7:32:55:7a:42:e6:d7:ca:0e:7a:c8:43:62:46:5a: 6c:24:ac:83:f8:ee:2e:f7:3d:50:7d:34:60:a0:3c: 02:7d:3a:ca:63:8b:f8:78:ac:01:10:9d:09:e3:48: 61:8a:6e:f8:17:25:ce:8c:02:c0:c7:02:a4:50:08: 9a:45:35:07:bd:1b:62:66:8d:cb:52:39:d8:5b:5c: db:fd:2f:45:71:ae:aa:4b:90:23:fa:76:df:42:53: 06:b9:5c:f9:a4:12:b7:de:29:6e:83:26:29:1c:5a: ab:8d:f9:3d:a3:4c:92:cb:27:48:b4:58:22:bf:1b: 0a:b6:c9:47:32:a0:99:26:d0:a7:66:75:19:d8:c4: f1:fa:7e:b9:5b:c2:e2:99:5d:5a:e2:1b:50:8e:4f: 38:f4:ff:91:c1:75:08:cb:2b:b5:51:d1:80:90:61: 6a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:71:9A:BE:36:2F:B9:C0:2F:06:00:65:25:FC:FE:8F:37:B8:DC:2C X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS60539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e240::/44 Signature Algorithm: sha256WithRSAEncryption 6a:2e:7e:e8:a2:0a:6a:9c:25:fe:29:0c:93:14:5b:c7:13:09: 88:fa:bd:e3:51:8d:4c:c5:1c:09:74:de:95:43:90:ff:3a:56: 71:a0:91:b4:46:a0:38:dc:cf:52:d7:85:98:63:0a:b3:0b:15: b1:0f:f9:0b:ff:97:49:6b:b5:22:9b:93:c3:72:3f:d3:bd:ee: 06:bf:8a:25:11:cd:80:87:17:33:1e:50:39:79:78:f8:0f:97: 1e:7e:e9:40:66:ba:33:d8:ee:37:9c:44:64:d8:ad:b8:0f:69: 42:a7:a2:ab:71:03:13:13:45:f4:11:0f:28:25:d0:3e:43:8e: 5c:be:e8:73:94:55:fe:52:56:35:01:60:fd:61:8d:4f:c7:ec: 58:0c:84:11:48:63:a9:24:7b:17:30:9e:26:b2:a1:10:3c:70: 7f:8d:b0:cb:ce:b5:b6:04:cf:02:04:b5:69:43:28:ea:ba:13: e7:4e:06:fd:05:39:05:7a:22:d5:ed:f5:70:e3:0e:f3:f7:c2: 7a:d2:3e:86:2c:4a:29:a6:8e:34:64:19:07:17:6c:15:c9:70: e5:46:42:a3:21:ba:5e:cb:ab:6a:0d:4e:4a:3b:65:ee:22:0b: 46:3f:48:de:56:41:d0:89:7c:d0:29:c3:d2:a3:72:19:e2:2a: a8:a6:2a:32 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUaH4m3FL8qc48UQv18XIBe8MdjCYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyOFoX DTI3MDcyMDEzMzIyOFowMzExMC8GA1UEAxMoMkM3MTlBQkUzNjJGQjlDMDJGMDYw MDY1MjVGQ0ZFOEYzN0I4REMyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK89IPRHLXj4cgfTDJzc9NKI7sT1uboNRVkybS5mrScYTpZiF8u+zomGWtJ3 MjmtjPWF5TqSVyA06IGr0AQyR5RLa3C3mSKABsU+t3qCp1ZwU5Wm7aze38Q6pzJV ekLm18oOeshDYkZabCSsg/juLvc9UH00YKA8An06ymOL+HisARCdCeNIYYpu+Bcl zowCwMcCpFAImkU1B70bYmaNy1I52Ftc2/0vRXGuqkuQI/p230JTBrlc+aQSt94p boMmKRxaq435PaNMkssnSLRYIr8bCrbJRzKgmSbQp2Z1GdjE8fp+uVvC4pldWuIb UI5POPT/kcF1CMsrtVHRgJBhau8CAwEAAaOCAiYwggIiMB0GA1UdDgQWBBQscZq+ Ni+5wC8GAGUl/P6PN7jcLDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzYwNTM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJAYI QOJAMA0GCSqGSIb3DQEBCwUAA4IBAQBqLn7oogpqnCX+KQyTFFvHEwmI+r3jUY1M xRwJdN6VQ5D/OlZxoJG0RqA43M9S14WYYwqzCxWxD/kL/5dJa7Uim5PDcj/Tve4G v4olEc2AhxczHlA5eXj4D5cefulAZroz2O43nERk2K24D2lCp6KrcQMTE0X0EQ8o JdA+Q45cvuhzlFX+UlY1AWD9YY1Px+xYDIQRSGOpJHsXMJ4msqEQPHB/jbDLzrW2 BM8CBLVpQyjquhPnTgb9BTkFeiLV7fVw4w7z98J60j6GLEoppo40ZBkHF2wVyXDl RkKjIbpey6tqDU5KO2XuIgtGP0jeVkHQiXzQKcPSo3IZ4iqopioy -----END CERTIFICATE-----Generated at Tue Jul 21 21:42:16 2026 by rpki-client