$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS218796.roa File: AS218796.roa (raw, json) Hash identifier: Bab13eea/CLtNdL7CHhCGOMxmwBcR9E1AXSzMGJVWUc= Subject key identifier: D8:D2:08:AA:CF:04:12:E6:E2:F2:06:2B:36:D4:CF:FA:F3:73:AF:B1 Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 092589721FADC6147307C8C39C85ED6F9DADD7B9 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS218796.roa Signing time: Mon 14 Sep 2026 13:39:53 +0000 ROA not before: Mon 14 Sep 2026 13:34:53 +0000 ROA not after: Mon 13 Sep 2027 13:39:53 +0000 asID: 218796 IP address blocks: 2406:840:9110::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 00:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:25:89:72:1f:ad:c6:14:73:07:c8:c3:9c:85:ed:6f:9d:ad:d7:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Sep 14 13:34:53 2026 GMT Not After : Sep 13 13:39:53 2027 GMT Subject: CN=D8D208AACF0412E6E2F2062B36D4CFFAF373AFB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f7:91:83:0f:56:77:2c:41:37:58:ef:e9:3e: 4c:61:37:1b:ec:25:7a:61:66:8a:f7:20:3a:a8:d6: d1:a6:1d:44:87:7a:81:64:70:f6:40:31:0e:29:a7: 56:3d:a1:ad:fc:a2:05:d4:27:29:5e:5a:49:03:bb: 39:a8:ca:3d:ce:ed:b9:20:7f:7b:a1:2b:7c:2d:ce: d3:5c:46:06:3a:2e:5b:84:5d:6d:76:60:4a:f8:b6: be:7f:80:79:d6:f9:a2:29:13:63:9e:8c:f2:5c:7b: 08:77:67:f9:90:1d:9e:16:69:69:95:75:87:ec:4d: 43:4c:83:c4:00:9f:c3:a3:18:7b:00:05:58:44:66: 59:ab:dd:46:03:bd:45:d1:fc:ab:82:58:b3:e0:2a: 43:7b:b0:75:85:67:ed:81:6c:80:9d:c4:d0:d5:16: 6b:36:b4:13:ec:67:ca:34:a2:c1:4a:4a:49:43:4b: 57:51:8a:a9:cf:f3:9c:ac:97:27:ec:47:25:48:50: ad:62:39:ca:25:9c:d9:e4:d9:68:fd:db:5f:cb:b8: 34:54:a4:b7:36:f5:3c:c9:e2:c3:ba:47:74:39:16: 34:b7:6e:fd:98:6b:b1:7c:91:72:55:81:35:44:02: 43:c4:fe:34:06:77:cd:72:ef:a5:99:11:0c:6e:17: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D2:08:AA:CF:04:12:E6:E2:F2:06:2B:36:D4:CF:FA:F3:73:AF:B1 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS218796.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:9110::/44 Signature Algorithm: sha256WithRSAEncryption 8e:06:2c:91:78:84:4d:06:5b:44:e5:b6:1d:64:46:ce:be:30: b7:43:b5:ff:06:ce:59:f6:15:d3:85:52:5e:a6:1d:58:af:9f: 81:f6:38:27:92:69:a8:a3:91:62:4a:89:42:86:de:2f:d9:10: a5:47:89:71:2c:ba:2f:50:3e:83:16:b1:33:b7:74:f7:23:71: 0a:e0:35:29:9d:d8:c8:c7:f0:5a:f7:18:92:58:78:9e:f0:f6: e8:2f:f1:22:12:2e:de:06:d0:50:f1:e2:ec:1d:df:f6:90:3b: 5e:3d:90:cb:80:3b:3d:90:27:e3:fb:db:e7:4d:48:06:0f:a5: 4f:77:f4:41:22:d2:46:c5:e4:0d:38:ea:a9:60:de:b7:b1:50: 4f:96:fc:1b:b9:1f:59:7a:31:5f:02:8e:f0:a2:f1:7c:f0:32: 30:12:be:41:39:6b:bd:87:29:1a:40:c2:17:a2:30:8a:fa:b1: 39:b3:2a:3b:5e:78:5e:52:07:ea:78:ec:6c:ba:cf:ef:95:f5: ff:ad:34:30:28:53:09:a9:b7:b1:59:5d:6c:f3:8c:55:ba:88: 18:dc:79:50:23:fb:b1:6f:1a:d0:ae:c9:ac:c2:c3:48:d0:88: 1f:14:90:20:31:24:7d:a9:38:59:a6:df:93:6b:63:2e:47:92: 51:ad:3f:c7 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUCSWJch+txhRzB8jDnIXtb52t17kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDkxNDEzMzQ1M1oX DTI3MDkxMzEzMzk1M1owMzExMC8GA1UEAxMoRDhEMjA4QUFDRjA0MTJFNkUyRjIw NjJCMzZENENGRkFGMzczQUZCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKX3kYMPVncsQTdY7+k+TGE3G+wlemFmivcgOqjW0aYdRId6gWRw9kAxDimn Vj2hrfyiBdQnKV5aSQO7OajKPc7tuSB/e6ErfC3O01xGBjouW4RdbXZgSvi2vn+A edb5oikTY56M8lx7CHdn+ZAdnhZpaZV1h+xNQ0yDxACfw6MYewAFWERmWavdRgO9 RdH8q4JYs+AqQ3uwdYVn7YFsgJ3E0NUWaza0E+xnyjSiwUpKSUNLV1GKqc/znKyX J+xHJUhQrWI5yiWc2eTZaP3bX8u4NFSktzb1PMniw7pHdDkWNLdu/ZhrsXyRclWB NUQCQ8T+NAZ3zXLvpZkRDG4X27sCAwEAAaOCAicwggIjMB0GA1UdDgQWBBTY0giq zwQS5uLyBis21M/683OvsTAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIxODc5Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CECREDANBgkqhkiG9w0BAQsFAAOCAQEAjgYskXiETQZbROW2HWRGzr4wt0O1/wbO WfYV04VSXqYdWK+fgfY4J5JpqKORYkqJQobeL9kQpUeJcSy6L1A+gxaxM7d09yNx CuA1KZ3YyMfwWvcYklh4nvD26C/xIhIu3gbQUPHi7B3f9pA7Xj2Qy4A7PZAn4/vb 501IBg+lT3f0QSLSRsXkDTjqqWDet7FQT5b8G7kfWXoxXwKO8KLxfPAyMBK+QTlr vYcpGkDCF6IwivqxObMqO154XlIH6njsbLrP75X1/600MChTCam3sVldbPOMVbqI GNx5UCP7sW8a0K7JrMLDSNCIHxSQIDEkfak4Wabfk2tjLkeSUa0/xw== -----END CERTIFICATE-----Generated at Sun Sep 20 09:21:25 2026 by rpki-client