$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS147281.roa File: AS147281.roa (raw, json) Hash identifier: QLM33OGg93f4OOgs4IPkf1Z0vIS8g348dEl1FdKjo6g= Subject key identifier: 23:47:F0:33:94:E8:68:F5:56:1A:37:1B:2A:F8:F2:6F:DB:61:C5:D6 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 263D6B07ED9EB35789E561ABCDAAEBD99C49421A Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS147281.roa Signing time: Fri 11 Sep 2026 08:13:10 +0000 ROA not before: Fri 11 Sep 2026 08:08:10 +0000 ROA not after: Fri 10 Sep 2027 08:13:10 +0000 asID: 147281 IP address blocks: 152.237.226.0/24 maxlen: 24 186.241.180.0/24 maxlen: 24 201.4.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 09:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:3d:6b:07:ed:9e:b3:57:89:e5:61:ab:cd:aa:eb:d9:9c:49:42:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 11 08:08:10 2026 GMT Not After : Sep 10 08:13:10 2027 GMT Subject: CN=2347F03394E868F5561A371B2AF8F26FDB61C5D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:cb:79:71:24:90:d7:a7:ff:34:99:3e:b2: 4e:48:ce:c8:c6:6b:4c:21:0f:ff:8e:42:1c:06:df: 0b:64:f0:08:e8:fa:8c:b8:0a:44:b2:88:4e:c2:3f: 19:39:34:6a:8c:2b:f7:0f:28:cf:5e:84:e1:1a:d4: 89:88:90:94:fd:ad:c8:5b:bd:15:47:46:a9:c1:08: 3c:8f:f1:49:71:7a:ec:35:49:82:21:f6:78:9e:1e: 21:27:ef:2a:7e:86:e0:0f:cd:2c:d7:0b:26:ca:7d: 2a:e4:ec:78:c8:a7:87:82:6e:f8:f6:f0:59:c3:eb: 37:6d:09:28:5e:a8:a8:53:05:bb:14:82:7c:8f:88: e8:e8:8c:74:de:d6:7d:a3:0b:29:1b:95:b4:c2:8f: 9e:2f:be:08:49:2d:83:0d:d6:ce:14:6d:65:0b:7b: a4:ec:c3:13:72:0d:51:13:6f:e1:7f:3e:aa:04:36: 11:df:de:66:d2:50:2a:a2:44:b8:5a:66:bf:9b:b4: 5d:32:ca:ae:9e:98:19:e5:2d:b9:1b:90:d4:22:2b: 35:08:b1:1d:38:23:c6:2a:a2:89:dd:87:a6:0e:64: fc:dc:3a:e7:c6:b7:3a:16:ad:9e:ba:5e:e5:98:08: 59:eb:6e:07:4c:89:35:5c:a8:01:f6:b3:36:6b:e9: cb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:47:F0:33:94:E8:68:F5:56:1A:37:1B:2A:F8:F2:6F:DB:61:C5:D6 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS147281.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.226.0/24 186.241.180.0/24 201.4.22.0/24 Signature Algorithm: sha256WithRSAEncryption 78:6a:79:0f:0f:bc:c4:1a:f7:35:f2:36:41:cb:90:c2:50:7d: db:39:12:45:14:30:9f:1d:fa:e6:d7:e1:29:e3:9d:dc:cd:e6: 74:21:2e:3d:89:40:4e:1e:7b:81:ee:a0:f3:c7:76:40:e4:59: b8:13:98:c7:be:a9:76:5e:f4:e6:41:19:ba:20:93:b8:82:2f: fd:d6:0e:5b:d2:60:34:04:34:bc:75:87:f5:fc:20:e0:4f:8a: 48:40:1f:d4:c2:63:c0:9c:5f:fb:91:eb:56:57:10:75:36:4f: 2e:01:79:ac:f1:6c:16:60:42:f6:1c:eb:ca:c0:cf:09:01:f7: b8:3f:cf:d9:31:fa:f6:4a:e0:26:de:2c:22:1a:7a:b1:79:58: 53:a9:0f:69:61:66:bd:00:4f:df:4a:89:a8:28:a9:15:12:fa: af:24:39:a6:48:cf:56:97:49:3e:a9:9c:28:da:37:ef:d3:b4: 47:9d:f7:d4:7d:5e:68:af:09:00:5d:df:ee:20:fa:65:a6:89: 1e:a5:e0:84:e3:67:aa:32:ec:86:ef:6e:3e:cb:21:08:f8:11: 37:8d:b2:b6:aa:fd:00:7e:92:1d:90:7d:0d:5c:02:ed:c0:47: 71:1a:fd:c5:37:d3:e2:4a:db:d9:42:46:7b:e3:db:0e:67:35: 3f:5c:f8:b6 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUJj1rB+2es1eJ5WGrzarr2ZxJQhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTEwODA4MTBaFw0yNzA5MTAwODEzMTBaMDMxMTAvBgNV BAMTKDIzNDdGMDMzOTRFODY4RjU1NjFBMzcxQjJBRjhGMjZGREI2MUM1RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyi8t5cSSQ16f/NJk+sk5IzsjG a0whD/+OQhwG3wtk8Ajo+oy4CkSyiE7CPxk5NGqMK/cPKM9ehOEa1ImIkJT9rchb vRVHRqnBCDyP8Ulxeuw1SYIh9nieHiEn7yp+huAPzSzXCybKfSrk7HjIp4eCbvj2 8FnD6zdtCSheqKhTBbsUgnyPiOjojHTe1n2jCykblbTCj54vvghJLYMN1s4UbWUL e6TswxNyDVETb+F/PqoENhHf3mbSUCqiRLhaZr+btF0yyq6emBnlLbkbkNQiKzUI sR04I8Yqoondh6YOZPzcOufGtzoWrZ66XuWYCFnrbgdMiTVcqAH2szZr6csxAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUI0fwM5ToaPVWGjcbKvjyb9thxdYwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxNDcyODEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBACY7eIDBAC68bQDBADJBBYwDQYJKoZIhvcNAQELBQADggEBAHhqeQ8P vMQa9zXyNkHLkMJQfds5EkUUMJ8d+ubX4SnjndzN5nQhLj2JQE4ee4HuoPPHdkDk WbgTmMe+qXZe9OZBGbogk7iCL/3WDlvSYDQENLx1h/X8IOBPikhAH9TCY8CcX/uR 61ZXEHU2Ty4BeazxbBZgQvYc68rAzwkB97g/z9kx+vZK4CbeLCIaerF5WFOpD2lh Zr0AT99KiagoqRUS+q8kOaZIz1aXST6pnCjaN+/TtEed99R9XmivCQBd3+4g+mWm iR6l4ITjZ6oy7Ibvbj7LIQj4ETeNsraq/QB+kh2QfQ1cAu3AR3Ea/cU30+JK29lC Rnvj2w5nNT9c+LY= -----END CERTIFICATE-----Generated at Sun Sep 20 23:21:40 2026 by rpki-client