$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS142240.roa File: AS142240.roa (raw, json) Hash identifier: WIfw/GycD6AYTvy/c/z8oyKQQNk3X4SaS3jBM2WLPUg= Subject key identifier: F9:D3:3F:5C:5B:36:67:52:9C:5C:2E:75:4B:1A:C4:EF:9D:C2:5B:04 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 457E0E0CAE3E9A184A8B54ED2DEF2CA949D3EC8C Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS142240.roa Signing time: Fri 18 Sep 2026 06:45:15 +0000 ROA not before: Fri 18 Sep 2026 06:40:15 +0000 ROA not after: Fri 17 Sep 2027 06:45:15 +0000 asID: 142240 IP address blocks: 201.50.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 16:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:7e:0e:0c:ae:3e:9a:18:4a:8b:54:ed:2d:ef:2c:a9:49:d3:ec:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 18 06:40:15 2026 GMT Not After : Sep 17 06:45:15 2027 GMT Subject: CN=F9D33F5C5B3667529C5C2E754B1AC4EF9DC25B04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:89:d9:e8:18:f2:b9:f4:5d:7c:59:4b:08:ad: 1a:a0:fd:33:50:0e:24:a6:fb:e9:8f:64:c1:9b:bf: d9:b2:9a:07:f8:bd:68:f0:46:98:ff:4f:b8:3d:bf: 48:a2:fc:f3:d5:75:b2:01:36:5f:fe:72:eb:ec:6c: 92:5e:06:7d:d4:57:43:0e:36:89:9e:3f:ee:74:8a: ab:14:b3:27:03:6b:00:cf:1c:08:0a:9c:91:e1:83: ea:37:46:90:72:c2:95:51:86:69:ee:4d:4a:8b:bd: 29:8e:31:cb:83:fa:15:21:4d:5e:e7:5f:5d:36:3a: 6c:83:12:b8:e8:25:be:d1:ca:d0:fd:63:c8:68:76: c6:18:8e:68:eb:43:d2:0b:76:bb:68:b6:d1:77:ca: e6:ef:03:eb:60:0f:7a:b3:54:69:9d:a4:7a:dd:b1: bb:56:87:d9:2e:df:a8:3b:cb:09:2b:49:f4:96:39: 5c:18:35:53:88:02:51:62:40:a0:91:20:23:d1:5d: f6:51:05:04:1e:28:59:c2:bb:10:fe:60:cf:2f:80: 2f:a1:19:b4:de:d0:7e:3c:f9:e1:8f:78:39:f4:e5: 27:e2:90:79:fa:5c:fd:e0:65:0f:29:39:a1:3e:6c: a1:8b:c6:df:01:4f:4f:a3:b7:d6:a2:9a:d1:68:c1: d1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D3:3F:5C:5B:36:67:52:9C:5C:2E:75:4B:1A:C4:EF:9D:C2:5B:04 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS142240.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.50.22.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:e3:5b:6a:3a:be:01:9a:5d:be:f1:61:1b:81:bc:b2:43:88: 96:62:d1:b9:fa:a5:0f:90:d9:68:46:b2:e6:92:6d:a6:de:4d: 04:f6:eb:82:e1:44:38:16:c8:a0:1d:72:6b:28:3b:c9:a6:7d: 83:d1:c7:c3:4b:d3:ce:45:23:2a:5f:c1:e0:52:65:e2:01:67: d8:f2:71:7e:e4:fa:32:b6:56:85:3a:b6:4e:e3:d3:65:e7:55: ae:45:fe:51:34:dc:c6:83:f6:3c:42:61:d2:1e:75:2a:cc:aa: d3:73:a0:0d:f2:fa:78:7d:35:5d:5a:5f:59:ad:25:ed:0c:73: a2:f9:8e:a1:28:a2:70:47:c8:2b:ad:84:6b:16:df:cc:79:b2: 2b:b4:bc:1c:69:56:58:38:98:79:3a:55:8b:87:01:71:85:fe: ce:3d:ee:b2:99:b7:7a:17:ce:8d:7b:b2:92:b5:42:ea:71:10: 15:5c:e6:7d:48:b2:e2:a4:ae:06:3f:e1:22:87:00:0f:4c:cb: cf:2d:54:db:44:19:62:7c:17:dd:8e:6d:7f:5e:30:47:71:98: 4b:fe:cb:df:d7:eb:78:eb:f5:5a:12:ec:dd:fe:99:7d:2f:e5: 30:d9:45:e1:9e:a2:a6:23:00:a5:57:54:22:b7:4c:bf:e1:c0: 7a:2a:79:0f -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIURX4ODK4+mhhKi1TtLe8sqUnT7IwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTgwNjQwMTVaFw0yNzA5MTcwNjQ1MTVaMDMxMTAvBgNV BAMTKEY5RDMzRjVDNUIzNjY3NTI5QzVDMkU3NTRCMUFDNEVGOURDMjVCMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9idnoGPK59F18WUsIrRqg/TNQ DiSm++mPZMGbv9mymgf4vWjwRpj/T7g9v0ii/PPVdbIBNl/+cuvsbJJeBn3UV0MO NomeP+50iqsUsycDawDPHAgKnJHhg+o3RpBywpVRhmnuTUqLvSmOMcuD+hUhTV7n X102OmyDErjoJb7RytD9Y8hodsYYjmjrQ9ILdrtottF3yubvA+tgD3qzVGmdpHrd sbtWh9ku36g7ywkrSfSWOVwYNVOIAlFiQKCRICPRXfZRBQQeKFnCuxD+YM8vgC+h GbTe0H48+eGPeDn05SfikHn6XP3gZQ8pOaE+bKGLxt8BT0+jt9aimtFowdFTAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU+dM/XFs2Z1KcXC51SxrE753CWwQwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxNDIyNDAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADJMhYwDQYJKoZIhvcNAQELBQADggEBABvjW2o6vgGaXb7xYRuBvLJD iJZi0bn6pQ+Q2WhGsuaSbabeTQT264LhRDgWyKAdcmsoO8mmfYPRx8NL085FIypf weBSZeIBZ9jycX7k+jK2VoU6tk7j02XnVa5F/lE03MaD9jxCYdIedSrMqtNzoA3y +nh9NV1aX1mtJe0Mc6L5jqEoonBHyCuthGsW38x5siu0vBxpVlg4mHk6VYuHAXGF /s497rKZt3oXzo17spK1QupxEBVc5n1IsuKkrgY/4SKHAA9My88tVNtEGWJ8F92O bX9eMEdxmEv+y9/X63jr9VoS7N3+mX0v5TDZReGeoqYjAKVXVCK3TL/hwHoqeQ8= -----END CERTIFICATE-----Generated at Mon Sep 21 08:14:27 2026 by rpki-client