$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/3136302e33302e32352e302f32342d3234203d3e20313533313736.roa File: 3136302e33302e32352e302f32342d3234203d3e20313533313736.roa (raw, json) Hash identifier: /kUIE99bCsbCmIiQPzpAlxDF+o+xvCZcWPfm8GnkM3k= Subject key identifier: 6A:A5:A3:F7:8A:40:CB:FA:AA:BB:C2:AA:C3:21:B4:2A:15:38:08:3C Certificate issuer: /CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Certificate serial: 63D061B70B79DA46669705530ABEE0454592E48B Authority key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/3136302e33302e32352e302f32342d3234203d3e20313533313736.roa Signing time: Sat 30 May 2026 18:36:27 +0000 ROA not before: Sat 30 May 2026 18:31:27 +0000 ROA not after: Sat 29 May 2027 18:36:27 +0000 asID: 153176 IP address blocks: 160.30.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 17:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:d0:61:b7:0b:79:da:46:66:97:05:53:0a:be:e0:45:45:92:e4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Validity Not Before: May 30 18:31:27 2026 GMT Not After : May 29 18:36:27 2027 GMT Subject: CN=6AA5A3F78A40CBFAAABBC2AAC321B42A1538083C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:06:76:46:cc:e1:81:89:90:13:46:b4:dc:82: 75:15:a7:c9:5a:57:33:01:a3:e0:23:19:c0:c2:e7: 9f:1e:76:76:f7:bb:ff:90:1d:be:af:9a:84:d8:8d: 47:93:06:9b:6e:a7:c2:8d:1c:78:27:d9:2a:a7:39: 09:d3:df:d2:be:f0:4c:ea:6b:86:ef:66:f5:56:d1: 82:33:ca:29:62:17:4d:b8:64:d3:c1:0c:a4:79:42: 24:b1:8a:d4:21:b1:e7:4e:f4:e9:a2:45:e2:6c:5b: 5d:8f:73:a9:77:cf:0a:2d:d1:05:1e:ba:dc:1a:88: f3:28:ba:d0:6a:0c:fb:70:91:68:aa:51:0a:f8:78: c0:92:fd:0f:19:50:a7:be:9a:91:93:62:ec:74:3f: 74:f7:c0:5a:52:e3:70:d1:03:31:0a:ea:78:1f:3d: fd:ed:6b:43:0d:e9:b8:cc:70:07:ff:f9:0c:cd:1a: 2f:db:2c:6d:40:1d:f3:06:98:44:3c:e2:5e:f7:e5: d2:f7:71:0f:fe:b1:40:5f:76:b4:43:d4:fa:24:74: d9:93:49:59:5f:e8:2f:a1:f4:a2:72:52:1c:28:cd: a4:73:ec:ef:04:a5:ca:bd:71:05:6e:65:a8:10:c6: 6f:dd:4a:90:41:a4:81:d2:7e:f8:2d:31:df:5a:6d: e4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A5:A3:F7:8A:40:CB:FA:AA:BB:C2:AA:C3:21:B4:2A:15:38:08:3C X509v3 Authority Key Identifier: keyid:C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/3136302e33302e32352e302f32342d3234203d3e20313533313736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.30.25.0/24 Signature Algorithm: sha256WithRSAEncryption 80:17:f1:1b:b1:0d:24:bd:f9:91:04:80:03:47:5b:8a:22:b0: 06:75:b6:02:43:fd:0e:24:e2:df:29:e5:49:f6:e7:18:f4:34: 23:b4:a5:fb:10:ce:94:69:9c:2d:5e:3f:7a:fd:ae:60:b6:59: ea:09:f3:5d:95:aa:bb:5e:58:65:d4:76:ba:02:95:70:ff:68: bf:55:85:4c:b4:30:9b:d3:5f:f7:91:7c:6a:6f:8b:78:28:72: 24:b1:6e:c6:bd:cb:dc:7d:1f:84:16:49:83:76:c6:89:81:fb: 94:50:23:7f:8f:58:36:29:28:06:f4:bc:dc:1f:fe:50:11:c0: 94:c5:c7:65:b6:f8:4c:a7:c2:05:c4:6d:a4:92:48:c8:4c:51: f6:ba:2d:b4:29:48:2c:9a:66:17:49:d7:c0:ec:f2:ea:01:95: 3e:b3:0b:4d:3e:d1:85:54:d7:ae:c8:9f:b2:f8:a8:da:a3:32: 05:f0:ce:0e:13:29:ce:be:1a:57:91:85:f9:d4:ee:68:38:10: bb:71:6d:2f:0c:23:6f:85:81:52:82:22:0e:58:55:78:09:34: ee:bf:e7:61:24:0d:9b:de:36:3e:3c:f6:60:21:c9:ab:b2:dc: 58:de:eb:64:82:b8:c1:43:b6:b7:61:75:4a:c4:11:ec:3f:a0: 46:d9:7d:fa -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIUY9Bhtwt52kZmlwVTCr7gRUWS5IswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyhDNEU2QzNEQUVC NzRCRTQ1MjA3RUI4MERFREYxRkZENTRCQzAwMTlFMB4XDTI2MDUzMDE4MzEyN1oX DTI3MDUyOTE4MzYyN1owMzExMC8GA1UEAxMoNkFBNUEzRjc4QTQwQ0JGQUFBQkJD MkFBQzMyMUI0MkExNTM4MDgzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQGdkbM4YGJkBNGtNyCdRWnyVpXMwGj4CMZwMLnnx52dve7/5Advq+ahNiN R5MGm26nwo0ceCfZKqc5CdPf0r7wTOprhu9m9VbRgjPKKWIXTbhk08EMpHlCJLGK 1CGx50706aJF4mxbXY9zqXfPCi3RBR663BqI8yi60GoM+3CRaKpRCvh4wJL9DxlQ p76akZNi7HQ/dPfAWlLjcNEDMQrqeB89/e1rQw3puMxwB//5DM0aL9ssbUAd8waY RDziXvfl0vdxD/6xQF92tEPU+iR02ZNJWV/oL6H0onJSHCjNpHPs7wSlyr1xBW5l qBDGb91KkEGkgdJ++C0x31pt5IcCAwEAAaOCAlcwggJTMB0GA1UdDgQWBBRqpaP3 ikDL+qq7wqrDIbQqFTgIPDAfBgNVHSMEGDAWgBTE5sPa63S+RSB+uA3t8f/VS8AB njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMi9DNEU2QzNEQUVCNzRCRTQ1MjA3 RUI4MERFREYxRkZENTRCQzAwMTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi94T2JEMnV0MHZrVWdmcmdON2ZIXzFV dkFBWjQuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUHMAuGgY1yc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhkNWNkMTRl LTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8yLzMxMzYzMDJlMzMzMDJlMzIz NTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMzMxMzczNi5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AKAeGTANBgkqhkiG9w0BAQsFAAOCAQEAgBfxG7ENJL35kQSAA0dbiiKwBnW2AkP9 DiTi3ynlSfbnGPQ0I7Sl+xDOlGmcLV4/ev2uYLZZ6gnzXZWqu15YZdR2ugKVcP9o v1WFTLQwm9Nf95F8am+LeChyJLFuxr3L3H0fhBZJg3bGiYH7lFAjf49YNikoBvS8 3B/+UBHAlMXHZbb4TKfCBcRtpJJIyExR9rottClILJpmF0nXwOzy6gGVPrMLTT7R hVTXrsifsvio2qMyBfDODhMpzr4aV5GF+dTuaDgQu3FtLwwjb4WBUoIiDlhVeAk0 7r/nYSQNm942Pjz2YCHJq7LcWN7rZIK4wUO2t2F1SsQR7D+gRtl9+g== -----END CERTIFICATE-----Generated at Sat Jun 13 10:33:38 2026 by rpki-client