$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS140681.roa File: AS140681.roa (raw, json) Hash identifier: 4JCpOQrvL7qRzuxERggGyQ7ejQOtCYQW/neczGupCTw= Subject key identifier: FC:23:F0:CD:58:9D:08:62:13:02:44:70:D7:56:8C:4D:34:5A:80:7A Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 11428F979721694C0A5BA1423B2A14A698A2DA97 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS140681.roa Signing time: Fri 11 Sep 2026 08:13:10 +0000 ROA not before: Fri 11 Sep 2026 08:08:10 +0000 ROA not after: Fri 10 Sep 2027 08:13:10 +0000 asID: 140681 IP address blocks: 201.4.17.0/24 maxlen: 24 201.4.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 00:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:42:8f:97:97:21:69:4c:0a:5b:a1:42:3b:2a:14:a6:98:a2:da:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 11 08:08:10 2026 GMT Not After : Sep 10 08:13:10 2027 GMT Subject: CN=FC23F0CD589D086213024470D7568C4D345A807A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:97:99:51:c6:07:26:a3:e2:9c:e7:86:6a: d1:59:4a:c5:10:be:ad:e0:fd:26:45:76:7b:f4:06: da:d8:92:59:fa:6e:3e:5e:7d:2c:b5:1f:04:6b:5c: 98:c8:4f:d9:83:98:64:e4:f0:59:d3:7b:c3:52:85: a3:6d:5f:e4:d8:1f:a7:f9:d1:68:b3:31:d7:97:af: db:d0:0d:68:f2:27:e8:e5:1c:6a:94:cd:ba:a4:8e: ce:a2:c6:4b:1c:9c:ff:a9:87:a5:7a:54:88:11:e1: 30:a1:86:ce:29:de:c4:c5:90:bd:00:94:94:87:9f: 0d:b6:4c:7c:38:8e:72:bd:ca:53:89:fa:f6:9f:0f: db:19:08:be:72:c3:ba:be:7f:1a:12:aa:1b:2d:bc: 78:d6:33:72:a6:1b:f9:af:53:46:23:e5:35:f5:16: 25:06:20:49:32:6f:09:c1:0e:ed:eb:ca:fe:f3:fc: 11:21:0b:0b:26:7a:32:78:be:62:dd:c1:39:57:f6: 23:80:72:46:a1:ab:32:17:8a:37:e8:16:5f:e9:ac: 35:e2:65:4f:f0:b7:8f:8a:e6:0e:c6:81:36:f4:76: 3e:46:d8:14:64:c4:46:e4:54:b9:6c:89:e6:b9:c1: 07:d2:e7:b2:f5:be:b0:17:02:b8:68:ce:53:1f:a6: 58:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:23:F0:CD:58:9D:08:62:13:02:44:70:D7:56:8C:4D:34:5A:80:7A X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS140681.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.4.17.0-201.4.18.255 Signature Algorithm: sha256WithRSAEncryption 40:9c:94:85:f1:74:c9:bb:89:a9:de:b3:ed:1a:ed:c7:75:fc: ef:30:1b:78:c3:8b:f1:7a:5b:30:61:2e:dc:ce:89:00:32:2e: 87:56:6c:01:de:aa:43:d1:6f:ba:2a:25:49:2b:f2:70:07:38: 8a:d0:d4:31:66:23:fb:11:8c:54:83:ce:57:ec:81:fa:c1:d4: 60:8e:2d:8d:0a:af:b3:f1:70:54:55:00:36:98:b1:23:47:71: 12:b3:47:35:8c:de:5d:af:31:42:b9:24:ce:1c:73:5c:9e:56: eb:dc:1a:1f:4d:2d:ca:5a:9d:8f:1c:50:33:6b:46:89:96:1f: 5e:a8:6a:a9:55:f3:a3:53:8a:7b:6c:9e:45:8c:71:79:ae:54: 44:1d:fe:5c:c9:c2:96:8b:b4:6f:ed:17:88:1d:1a:a6:a2:ee: e7:f9:30:d5:12:5c:0b:c0:02:a8:4d:38:99:70:86:01:ff:c8: dd:d8:6a:e4:1d:d6:76:30:b0:27:84:b6:d0:0c:45:13:ca:2c: b9:e6:d1:84:1d:56:09:57:46:58:2d:60:01:05:c1:fe:26:0e: 4c:b4:ee:4f:c6:31:5f:9b:e2:b8:18:24:34:b6:db:2b:71:d6: 0f:78:b5:23:5f:98:8f:74:75:e0:5d:1f:4e:a4:92:6d:6d:a8: 4b:03:8f:78 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUEUKPl5chaUwKW6FCOyoUppii2pcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTEwODA4MTBaFw0yNzA5MTAwODEzMTBaMDMxMTAvBgNV BAMTKEZDMjNGMENENTg5RDA4NjIxMzAyNDQ3MEQ3NTY4QzREMzQ1QTgwN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/5eZUcYHJqPinOeGatFZSsUQ vq3g/SZFdnv0BtrYkln6bj5efSy1HwRrXJjIT9mDmGTk8FnTe8NShaNtX+TYH6f5 0WizMdeXr9vQDWjyJ+jlHGqUzbqkjs6ixkscnP+ph6V6VIgR4TChhs4p3sTFkL0A lJSHnw22THw4jnK9ylOJ+vafD9sZCL5yw7q+fxoSqhstvHjWM3KmG/mvU0Yj5TX1 FiUGIEkybwnBDu3ryv7z/BEhCwsmejJ4vmLdwTlX9iOAckahqzIXijfoFl/prDXi ZU/wt4+K5g7GgTb0dj5G2BRkxEbkVLlsiea5wQfS57L1vrAXArhozlMfplgNAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQU/CPwzVidCGITAkRw11aMTTRagHowHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxNDA2ODEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJwYIKwYBBQUHAQcBAf8EGDAWMBQE AgABMA4wDAMEAMkEEQMEAMkEEjANBgkqhkiG9w0BAQsFAAOCAQEAQJyUhfF0ybuJ qd6z7Rrtx3X87zAbeMOL8XpbMGEu3M6JADIuh1ZsAd6qQ9FvuiolSSvycAc4itDU MWYj+xGMVIPOV+yB+sHUYI4tjQqvs/FwVFUANpixI0dxErNHNYzeXa8xQrkkzhxz XJ5W69waH00tylqdjxxQM2tGiZYfXqhqqVXzo1OKe2yeRYxxea5URB3+XMnClou0 b+0XiB0apqLu5/kw1RJcC8ACqE04mXCGAf/I3dhq5B3WdjCwJ4S20AxFE8osuebR hB1WCVdGWC1gAQXB/iYOTLTuT8YxX5viuBgkNLbbK3HWD3i1I1+Yj3R14F0fTqSS bW2oSwOPeA== -----END CERTIFICATE-----Generated at Sun Sep 20 14:43:53 2026 by rpki-client