$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS134494.roa File: AS134494.roa (raw, json) Hash identifier: OyXNKivll3CA/80nli3z07qzoyRaDe3fedtq7anjtMU= Subject key identifier: 42:1D:43:36:0F:15:7E:71:DD:B7:D8:E7:F3:13:D6:54:CD:FA:CD:35 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 09EA12887A9CBD27EE0C2176BFE4CCBB1FF6F854 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS134494.roa Signing time: Thu 05 Nov 2026 06:51:34 +0000 ROA not before: Thu 05 Nov 2026 06:46:34 +0000 ROA not after: Thu 04 Nov 2027 06:51:34 +0000 asID: 134494 IP address blocks: 177.177.231.0/24 maxlen: 24 177.177.234.0/24 maxlen: 24 186.241.185.0/24 maxlen: 24 201.4.20.0/24 maxlen: 24 201.4.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Nov 2026 05:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ea:12:88:7a:9c:bd:27:ee:0c:21:76:bf:e4:cc:bb:1f:f6:f8:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Nov 5 06:46:34 2026 GMT Not After : Nov 4 06:51:34 2027 GMT Subject: CN=421D43360F157E71DDB7D8E7F313D654CDFACD35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:26:c9:22:96:99:6f:79:63:26:1e:3b:e2: a2:11:51:9a:bb:3d:db:c3:62:0b:8c:14:2d:15:f3: 49:6e:f9:37:4e:76:d8:3a:2a:98:97:f2:37:a5:b9: d3:59:4a:52:0d:32:1d:8b:c7:a8:5a:63:f7:c6:a6: 97:b7:30:e8:69:b6:9d:99:d0:38:6c:d3:f1:d8:de: b7:0f:ee:2f:f7:e1:04:d2:27:bd:c5:85:e8:a2:1c: 9b:31:3d:a5:99:64:51:f7:6a:08:c8:db:d1:e7:9c: b2:9d:2f:95:75:44:f3:4d:8d:c9:96:db:49:ab:07: c8:0d:6b:bf:c2:4e:0d:90:09:6b:5f:41:3c:40:54: ce:9b:fb:85:89:30:d2:ef:7f:59:d3:6e:9c:69:e5: 46:6d:dd:b6:73:98:30:d0:fc:f1:56:27:97:11:d9: 36:33:78:ec:80:9b:37:25:fe:7e:0f:0a:48:f2:8f: d7:3c:63:a5:31:e5:2c:1a:a2:a3:01:24:53:c6:df: 3a:e9:f9:8c:54:cc:87:ad:cc:f0:63:2a:29:7f:36: 65:5e:b4:dd:c9:6a:f9:17:9c:be:4a:0f:07:16:23: 84:ef:71:70:a2:9b:cf:8d:58:70:2c:8a:46:ed:e5: 77:3d:f2:8a:fd:ed:51:69:35:1c:86:9d:e9:c1:8f: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1D:43:36:0F:15:7E:71:DD:B7:D8:E7:F3:13:D6:54:CD:FA:CD:35 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS134494.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.177.231.0/24 177.177.234.0/24 186.241.185.0/24 201.4.20.0/24 201.4.23.0/24 Signature Algorithm: sha256WithRSAEncryption a8:15:6a:cb:b8:3a:62:74:f2:be:52:15:93:87:39:39:c0:c8: 2c:ec:e9:13:7e:5f:58:f0:3a:7b:2a:38:b6:13:77:39:b8:f8: 25:fd:7d:41:f5:ae:ba:aa:11:75:2f:d5:0d:e9:81:df:3e:a8: a3:5d:89:34:f0:e4:2f:9e:4f:2a:92:c0:bf:d8:af:29:80:1f: bf:ea:ba:b5:bc:d5:83:4e:d9:59:dc:44:fc:e2:f9:00:c3:6e: a4:06:02:a6:29:aa:5d:d3:86:31:25:48:1c:4f:43:f4:ec:62: 4b:16:dc:8f:9b:7b:73:da:f5:bc:c6:77:3f:35:e9:c9:16:20: 32:40:c2:3b:fe:34:e2:f5:8a:d0:59:c0:15:e1:e9:c6:f7:a0: 3a:3b:0a:79:e8:34:23:67:70:17:ee:5b:d9:d6:30:5e:e4:58: 61:00:7a:fe:9f:28:06:75:67:ac:2b:a5:5a:10:29:b7:ba:9f: 70:6e:26:97:aa:6f:9f:e1:26:f7:0b:65:e9:85:0f:4d:85:39: 91:35:66:b3:d3:71:8b:3f:a2:ce:5b:04:05:87:7c:b2:01:f5: a1:1f:6a:23:7f:5a:9c:f9:43:2d:c1:3b:31:62:54:79:f2:d3: cf:61:c7:e0:ae:8e:96:e8:45:ab:db:8b:45:32:f0:34:00:d6: 8b:2e:3a:b8 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUCeoSiHqcvSfuDCF2v+TMux/2+FQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjExMDUwNjQ2MzRaFw0yNzExMDQwNjUxMzRaMDMxMTAvBgNV BAMTKDQyMUQ0MzM2MEYxNTdFNzFEREI3RDhFN0YzMTNENjU0Q0RGQUNEMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSybJIpaZb3ljJh474qIRUZq7 PdvDYguMFC0V80lu+TdOdtg6KpiX8jeludNZSlINMh2Lx6haY/fGppe3MOhptp2Z 0Dhs0/HY3rcP7i/34QTSJ73FheiiHJsxPaWZZFH3agjI29HnnLKdL5V1RPNNjcmW 20mrB8gNa7/CTg2QCWtfQTxAVM6b+4WJMNLvf1nTbpxp5UZt3bZzmDDQ/PFWJ5cR 2TYzeOyAmzcl/n4PCkjyj9c8Y6Ux5SwaoqMBJFPG3zrp+YxUzIetzPBjKil/NmVe tN3JavkXnL5KDwcWI4TvcXCim8+NWHAsikbt5Xc98or97VFpNRyGnenBj8k/AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUQh1DNg8VfnHdt9jn8xPWVM36zTUwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxMzQ0OTQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQE AgABMB4DBACxsecDBACxseoDBAC68bkDBADJBBQDBADJBBcwDQYJKoZIhvcNAQEL BQADggEBAKgVasu4OmJ08r5SFZOHOTnAyCzs6RN+X1jwOnsqOLYTdzm4+CX9fUH1 rrqqEXUv1Q3pgd8+qKNdiTTw5C+eTyqSwL/YrymAH7/qurW81YNO2VncRPzi+QDD bqQGAqYpql3ThjElSBxPQ/TsYksW3I+be3Pa9bzGdz816ckWIDJAwjv+NOL1itBZ wBXh6cb3oDo7CnnoNCNncBfuW9nWMF7kWGEAev6fKAZ1Z6wrpVoQKbe6n3BuJpeq b5/hJvcLZemFD02FOZE1ZrPTcYs/os5bBAWHfLIB9aEfaiN/Wpz5Qy3BOzFiVHny 089hx+CujpboRavbi0Uy8DQA1osuOrg= -----END CERTIFICATE-----Generated at Sat Nov 7 13:19:59 2026 by rpki-client