$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152698.roa File: AS152698.roa (raw, json) Hash identifier: bFVhkaUjQpSE2LMSWn8jJ4/uGcOzPSD6/gOfreXyQmw= Subject key identifier: 69:8A:A6:AA:B6:06:DB:32:D8:47:2C:9D:A0:F5:0F:60:8F:0C:0A:CF Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 5D4F4FD3C07927043C234C42FC3FDAD98C54ED6C Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152698.roa Signing time: Fri 11 Sep 2026 08:13:10 +0000 ROA not before: Fri 11 Sep 2026 08:08:10 +0000 ROA not after: Fri 10 Sep 2027 08:13:10 +0000 asID: 152698 IP address blocks: 186.241.182.0/24 maxlen: 24 201.4.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 00:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4f:4f:d3:c0:79:27:04:3c:23:4c:42:fc:3f:da:d9:8c:54:ed:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 11 08:08:10 2026 GMT Not After : Sep 10 08:13:10 2027 GMT Subject: CN=698AA6AAB606DB32D8472C9DA0F50F608F0C0ACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3c:72:84:bf:cf:b3:88:0f:e9:e2:5d:4b:6e: 7d:2e:f8:09:71:2e:c3:b9:6d:5f:25:fb:1c:8c:67: b0:62:18:f3:45:ce:46:6b:a4:b8:a5:8a:d7:3d:45: b1:cc:48:7e:80:17:d0:ff:34:22:9d:63:bd:90:1d: af:81:76:a4:8c:60:13:ec:cf:d9:de:5b:d8:6e:49: fa:b2:71:87:51:26:19:e5:47:8f:2d:ea:1b:1a:e4: 08:94:1b:22:4f:68:98:45:15:24:21:89:df:3d:16: a9:c9:30:a7:ef:e9:9a:13:24:3f:64:89:4d:fa:ce: ca:44:c5:8e:3b:7b:b7:51:93:fe:12:49:ed:39:ee: 51:7d:59:b8:06:2c:fb:3b:e9:5a:2c:72:c0:6b:cf: 2a:d6:5d:cf:2a:bb:39:71:4b:07:03:ba:12:0e:cf: 31:56:d0:c6:96:0e:65:75:30:34:f7:05:e4:03:2d: 5e:54:2c:4a:2b:32:0f:f1:60:46:ba:0d:11:23:c3: 6a:32:d7:27:d0:37:ee:8a:44:b7:6f:96:56:e2:d8: 88:25:96:6e:ea:8b:30:94:a7:4a:17:62:ac:c9:0f: fe:a5:13:a1:8d:8d:25:15:57:84:37:44:52:51:6e: 0b:98:2b:91:6f:cf:32:75:12:af:4e:62:52:dd:ab: 25:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8A:A6:AA:B6:06:DB:32:D8:47:2C:9D:A0:F5:0F:60:8F:0C:0A:CF X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152698.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.241.182.0/24 201.4.31.0/24 Signature Algorithm: sha256WithRSAEncryption ac:7a:bd:5c:44:d3:64:bb:f2:b0:38:d6:31:cb:37:07:33:83: 1c:4a:48:d0:c2:00:3d:30:96:a7:75:0f:3f:36:44:7e:1c:b7: ae:c7:b6:a0:b7:21:21:29:9d:c4:3b:76:9a:3e:35:6f:2e:a6: 99:69:4e:b9:d1:01:77:57:de:ed:4f:54:c2:ad:b8:9f:b9:6d: b5:64:16:f3:b8:5d:29:8d:97:ac:24:df:be:7f:0f:ad:71:f3: 6c:0c:8d:14:bd:4a:ad:2a:3f:e2:4b:85:e4:8b:80:ca:8d:b2: de:97:36:db:d7:c2:3b:22:3a:4d:df:8d:5c:bb:8b:e8:b8:ce: c1:56:0f:b8:06:4f:71:9a:ef:bb:1b:69:a8:02:bd:b3:2d:66: e1:86:ed:14:b7:0d:c8:b0:37:fb:45:8e:ed:2e:73:f1:d5:81: c6:c4:92:70:b6:7b:3b:bf:2f:d7:2e:e8:13:29:b2:82:2a:49: 07:bd:e3:ce:1d:3b:64:67:83:b6:4f:70:21:3a:92:6e:f6:9f: 51:cf:77:91:5e:3e:14:db:fd:03:71:77:b0:a8:a4:68:56:81: 8f:25:50:c2:2f:55:ee:8f:f4:0d:4f:d9:25:6b:5c:09:eb:e8: 8e:74:5f:2b:ee:70:ea:73:84:9b:1d:ba:01:62:e9:36:c9:1e: af:42:aa:e5 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUXU9P08B5JwQ8I0xC/D/a2YxU7WwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTEwODA4MTBaFw0yNzA5MTAwODEzMTBaMDMxMTAvBgNV BAMTKDY5OEFBNkFBQjYwNkRCMzJEODQ3MkM5REEwRjUwRjYwOEYwQzBBQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhPHKEv8+ziA/p4l1Lbn0u+Alx LsO5bV8l+xyMZ7BiGPNFzkZrpLilitc9RbHMSH6AF9D/NCKdY72QHa+BdqSMYBPs z9neW9huSfqycYdRJhnlR48t6hsa5AiUGyJPaJhFFSQhid89FqnJMKfv6ZoTJD9k iU36zspExY47e7dRk/4SSe057lF9WbgGLPs76VoscsBrzyrWXc8quzlxSwcDuhIO zzFW0MaWDmV1MDT3BeQDLV5ULEorMg/xYEa6DREjw2oy1yfQN+6KRLdvllbi2Igl lm7qizCUp0oXYqzJD/6lE6GNjSUVV4Q3RFJRbguYK5FvzzJ1Eq9OYlLdqyVjAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUaYqmqrYG2zLYRyydoPUPYI8MCs8wHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxNTI2OTgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAC68bYDBADJBB8wDQYJKoZIhvcNAQELBQADggEBAKx6vVxE02S78rA4 1jHLNwczgxxKSNDCAD0wlqd1Dz82RH4ct67HtqC3ISEpncQ7dpo+NW8upplpTrnR AXdX3u1PVMKtuJ+5bbVkFvO4XSmNl6wk375/D61x82wMjRS9Sq0qP+JLheSLgMqN st6XNtvXwjsiOk3fjVy7i+i4zsFWD7gGT3Ga77sbaagCvbMtZuGG7RS3DciwN/tF ju0uc/HVgcbEknC2ezu/L9cu6BMpsoIqSQe9484dO2Rng7ZPcCE6km72n1HPd5Fe PhTb/QNxd7CopGhWgY8lUMIvVe6P9A1P2SVrXAnr6I50XyvucOpzhJsdugFi6TbJ Hq9CquU= -----END CERTIFICATE-----Generated at Sun Sep 20 14:43:52 2026 by rpki-client