$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS63279.roa File: AS63279.roa (raw, json) Hash identifier: x8+8ds43U+Td/mNqHuI5ZfuEFb9zV3Q7AXRF4/ezN+w= Subject key identifier: 0D:CA:98:DB:FE:3C:E3:F0:D4:37:6C:06:E9:50:3C:DA:16:DE:07:94 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 589A5AD18DE43AEB9B518EA8778739A047B289BA Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS63279.roa Signing time: Tue 21 Jul 2026 13:32:20 +0000 ROA not before: Tue 21 Jul 2026 13:27:20 +0000 ROA not after: Tue 20 Jul 2027 13:32:20 +0000 asID: 63279 IP address blocks: 2406:840:ece0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:9a:5a:d1:8d:e4:3a:eb:9b:51:8e:a8:77:87:39:a0:47:b2:89:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:20 2026 GMT Not After : Jul 20 13:32:20 2027 GMT Subject: CN=0DCA98DBFE3CE3F0D4376C06E9503CDA16DE0794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:43:64:35:fc:60:d9:c0:e9:0b:84:8a:d1:1e: 17:eb:e6:75:09:75:3a:db:00:b3:8b:72:29:3d:09: 4c:ac:5e:fd:71:80:8a:b4:d7:4e:17:dc:be:1c:13: 2e:a2:77:45:d0:30:79:1b:e5:5a:86:08:fb:83:a6: 50:98:05:69:83:24:21:28:38:d6:85:53:5d:fb:a2: 9e:22:27:ed:11:63:7b:01:92:b9:5e:80:37:b2:79: dc:7e:61:21:c1:85:6e:70:5d:80:f9:b8:f0:8a:88: 62:33:a9:8b:12:5c:b1:cd:b0:86:9f:06:d0:9e:f4: 20:0c:04:a4:0d:35:33:69:d3:33:e4:08:eb:1e:51: 8c:60:c8:32:6f:25:ad:26:84:10:62:d7:94:4a:f7: 08:5b:28:e6:8e:a4:9d:c9:4e:c5:82:22:45:7d:ba: 74:c7:4d:5d:20:5b:a8:df:00:81:dd:1c:bd:8e:cd: 04:f3:1c:38:7b:f1:7c:fc:5e:28:56:ff:0c:f1:fc: 37:7c:1b:fa:56:73:70:07:b0:68:96:f1:92:54:37: fb:5b:3a:d2:43:43:6c:28:49:96:34:25:f6:e7:88: f9:60:ea:3e:37:01:b9:71:b2:3e:fd:3a:4d:eb:df: f1:1c:1f:2f:6c:cb:65:b9:55:56:07:8d:ca:ff:9f: bd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CA:98:DB:FE:3C:E3:F0:D4:37:6C:06:E9:50:3C:DA:16:DE:07:94 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS63279.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:ece0::/44 Signature Algorithm: sha256WithRSAEncryption 5b:c9:b0:ad:5d:e7:36:9d:b0:f8:b3:25:89:ca:e6:0e:1d:07: ec:60:b6:43:cf:de:fa:23:73:5f:3f:d7:7b:76:e0:94:c9:52: ee:8c:99:80:1d:c6:0d:6a:f6:67:92:11:48:38:73:44:40:aa: 25:4e:8a:42:83:8b:fa:94:f4:ce:da:67:76:1a:fe:c2:6c:61: e4:19:c1:63:27:ae:4f:ba:c4:bf:47:07:9c:01:13:15:a8:c6: 21:c2:93:cb:ad:7b:77:52:75:4b:f9:b4:ca:b5:7a:b5:7d:1b: b4:0d:f2:d0:69:6f:7f:6e:d8:0c:64:89:1e:be:02:c2:b2:da: d6:88:65:20:54:66:2b:2b:b9:f5:25:5e:1a:d8:7f:14:5e:cf: 98:e9:82:36:58:a1:6e:e3:8d:78:62:4a:65:76:77:c5:8a:27: 44:6d:58:1b:80:1f:3f:3e:9d:46:19:12:a9:c3:52:e3:08:15: e1:39:b6:91:09:41:66:05:9f:97:83:3a:b0:5d:9e:0e:94:06: dc:21:da:af:f2:26:fa:e5:05:45:f2:c7:53:13:68:aa:07:c0: e1:3f:bd:d5:06:2d:e1:05:4e:81:5a:90:af:f5:4b:bd:cd:56: 3f:57:87:8d:87:11:b5:93:5e:23:3b:f9:e8:d5:8d:f0:51:e2: 06:ec:9e:24 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUWJpa0Y3kOuubUY6od4c5oEeyibowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjcyMFoX DTI3MDcyMDEzMzIyMFowMzExMC8GA1UEAxMoMERDQTk4REJGRTNDRTNGMEQ0Mzc2 QzA2RTk1MDNDREExNkRFMDc5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNDZDX8YNnA6QuEitEeF+vmdQl1OtsAs4tyKT0JTKxe/XGAirTXThfcvhwT LqJ3RdAweRvlWoYI+4OmUJgFaYMkISg41oVTXfuiniIn7RFjewGSuV6AN7J53H5h IcGFbnBdgPm48IqIYjOpixJcsc2whp8G0J70IAwEpA01M2nTM+QI6x5RjGDIMm8l rSaEEGLXlEr3CFso5o6knclOxYIiRX26dMdNXSBbqN8Agd0cvY7NBPMcOHvxfPxe KFb/DPH8N3wb+lZzcAewaJbxklQ3+1s60kNDbChJljQl9ueI+WDqPjcBuXGyPv06 Tevf8RwfL2zLZblVVgeNyv+fvZ8CAwEAAaOCAiYwggIiMB0GA1UdDgQWBBQNypjb /jzj8NQ3bAbpUDzaFt4HlDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzYzMjc5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJAYI QOzgMA0GCSqGSIb3DQEBCwUAA4IBAQBbybCtXec2nbD4syWJyuYOHQfsYLZDz976 I3NfP9d7duCUyVLujJmAHcYNavZnkhFIOHNEQKolTopCg4v6lPTO2md2Gv7CbGHk GcFjJ65PusS/RwecARMVqMYhwpPLrXt3UnVL+bTKtXq1fRu0DfLQaW9/btgMZIke vgLCstrWiGUgVGYrK7n1JV4a2H8UXs+Y6YI2WKFu4414YkpldnfFiidEbVgbgB8/ Pp1GGRKpw1LjCBXhObaRCUFmBZ+XgzqwXZ4OlAbcIdqv8ib65QVF8sdTE2iqB8Dh P73VBi3hBU6BWpCv9Uu9zVY/V4eNhxG1k14jO/no1Y3wUeIG7J4k -----END CERTIFICATE-----Generated at Tue Jul 21 21:42:12 2026 by rpki-client