$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS13537.roa File: AS13537.roa (raw, json) Hash identifier: B6bD0yeqYN8EGr/gyMJQve2bVkdaNlpuA148S9ZRj44= Subject key identifier: 60:EB:D5:54:3B:74:7C:71:05:5F:44:3F:96:B7:18:D7:55:51:95:3F Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 104D228E6EFEE5BA9697A7D5DDF6D7335C956B4E Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS13537.roa Signing time: Sun 20 Sep 2026 04:04:03 +0000 ROA not before: Sun 20 Sep 2026 03:59:03 +0000 ROA not after: Sun 19 Sep 2027 04:04:03 +0000 asID: 13537 IP address blocks: 186.241.161.0/24 maxlen: 24 201.50.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 09:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:4d:22:8e:6e:fe:e5:ba:96:97:a7:d5:dd:f6:d7:33:5c:95:6b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 20 03:59:03 2026 GMT Not After : Sep 19 04:04:03 2027 GMT Subject: CN=60EBD5543B747C71055F443F96B718D75551953F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:5e:41:94:1c:97:66:16:4d:b9:6c:7d:39: a1:d5:1e:07:47:f9:23:ea:c3:6f:8c:88:ca:53:b5: 0a:9a:cb:4a:28:ac:78:12:7c:30:2a:7a:27:da:bf: 0c:38:d2:2a:01:a2:d6:78:af:25:11:8c:a7:00:5b: d3:c1:a8:fc:a0:a5:56:6d:aa:3e:58:87:ca:c6:cc: f8:7c:a1:b8:a5:3a:30:63:2a:d9:38:8d:4d:cc:4c: c5:cd:1e:9e:c1:a7:62:38:64:b5:77:58:02:0c:75: 33:f4:cb:10:a4:70:bf:08:7a:92:43:04:18:b6:f4: af:fb:9b:51:da:d4:9c:f9:a8:6e:50:c5:e7:a5:b7: da:76:98:56:03:dd:17:3d:98:f6:9b:6c:e9:6f:e5: 8d:f6:e2:b1:a8:f9:c6:90:10:a5:1c:6e:31:47:0d: 63:48:ab:49:97:30:b2:5d:1b:b5:9e:1c:7e:43:6f: 92:7f:36:6e:bd:16:e0:8a:1a:5e:06:05:f8:9d:97: 42:2d:49:95:07:cb:6e:ea:58:bb:1a:98:e3:e1:be: 27:27:f4:71:19:da:2d:59:b3:06:28:61:d6:34:c8: 6a:49:00:ce:1f:08:7f:fa:3a:86:a5:aa:82:89:b6: 16:c3:13:b5:fe:88:0f:9f:85:ad:c8:ac:6f:df:ac: e6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EB:D5:54:3B:74:7C:71:05:5F:44:3F:96:B7:18:D7:55:51:95:3F X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS13537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.241.161.0/24 201.50.24.0/24 Signature Algorithm: sha256WithRSAEncryption 23:50:84:c8:a0:02:dd:82:a6:a2:21:67:2b:47:4a:ae:39:9a: fb:a8:72:2c:a1:ae:d4:71:9d:8d:01:12:59:08:89:b7:ae:1c: af:97:bd:12:ea:60:33:ad:96:f3:89:34:31:a5:29:5e:95:3e: 64:8f:d0:53:ec:bb:0d:0b:39:d5:4d:19:a3:32:96:94:85:7b: 1c:d3:1c:85:54:e7:cc:d2:2b:23:00:d4:6b:b1:75:c7:50:8d: 7b:22:0e:a9:d4:09:79:b7:ac:45:5b:6e:1b:2b:11:54:7e:ba: 69:68:72:f3:91:e5:38:13:f9:fd:f9:d7:52:c9:11:a7:08:60: 30:71:bb:ee:d2:15:a8:d2:eb:2f:2c:3b:c7:8f:50:e1:19:bc: be:90:c3:5b:7f:ef:7a:e3:0f:b6:89:fe:dc:d1:31:9a:8b:dc: 73:5b:cd:f9:76:b1:bd:a9:bb:a3:1c:f2:5f:5a:db:95:cc:3f: 96:26:63:c9:e4:eb:32:e3:0b:3a:7d:25:f1:11:87:31:8d:a4: b9:89:e5:9b:1b:13:11:4e:72:05:ce:e0:3e:79:72:b9:70:46: f1:2f:33:e6:bf:52:08:42:c2:d1:ef:a1:d4:5b:24:96:3b:d9: a7:6f:f5:8b:b6:63:ee:f6:b9:1b:ea:22:76:f9:99:a6:c4:98: f2:78:e9:35 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUEE0ijm7+5bqWl6fV3fbXM1yVa04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MjAwMzU5MDNaFw0yNzA5MTkwNDA0MDNaMDMxMTAvBgNV BAMTKDYwRUJENTU0M0I3NDdDNzEwNTVGNDQzRjk2QjcxOEQ3NTU1MTk1M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19V5BlByXZhZNuWx9OaHVHgdH +SPqw2+MiMpTtQqay0oorHgSfDAqeifavww40ioBotZ4ryURjKcAW9PBqPygpVZt qj5Yh8rGzPh8obilOjBjKtk4jU3MTMXNHp7Bp2I4ZLV3WAIMdTP0yxCkcL8IepJD BBi29K/7m1Ha1Jz5qG5Qxeelt9p2mFYD3Rc9mPabbOlv5Y324rGo+caQEKUcbjFH DWNIq0mXMLJdG7WeHH5Db5J/Nm69FuCKGl4GBfidl0ItSZUHy27qWLsamOPhvicn 9HEZ2i1ZswYoYdY0yGpJAM4fCH/6OoalqoKJthbDE7X+iA+fha3IrG/frObjAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUYOvVVDt0fHEFX0Q/lrcY11VRlT8wHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxMzUzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQC AAEwDAMEALrxoQMEAMkyGDANBgkqhkiG9w0BAQsFAAOCAQEAI1CEyKAC3YKmoiFn K0dKrjma+6hyLKGu1HGdjQESWQiJt64cr5e9EupgM62W84k0MaUpXpU+ZI/QU+y7 DQs51U0ZozKWlIV7HNMchVTnzNIrIwDUa7F1x1CNeyIOqdQJebesRVtuGysRVH66 aWhy85HlOBP5/fnXUskRpwhgMHG77tIVqNLrLyw7x49Q4Rm8vpDDW3/veuMPton+ 3NExmovcc1vN+Xaxvam7oxzyX1rblcw/liZjyeTrMuMLOn0l8RGHMY2kuYnlmxsT EU5yBc7gPnlyuXBG8S8z5r9SCELC0e+h1FskljvZp2/1i7Zj7va5G+oidvmZpsSY 8njpNQ== -----END CERTIFICATE-----Generated at Sun Sep 20 23:21:44 2026 by rpki-client