$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS197537.roa File: AS197537.roa (raw, json) Hash identifier: 4yMkdf0W6u3XoZ+ovsnWgnQ7klgw4eOSpQjICRgDCEY= Subject key identifier: 36:B3:C5:A6:5B:99:46:04:87:A9:B3:2E:AF:EE:C6:06:DD:BD:43:ED Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 3932ED4C7EBDBF3816D7010AE0D7E05332EC71D8 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS197537.roa Signing time: Thu 08 Oct 2026 07:10:39 +0000 ROA not before: Thu 08 Oct 2026 07:05:39 +0000 ROA not after: Thu 07 Oct 2027 07:10:39 +0000 asID: 197537 IP address blocks: 152.237.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 20:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:32:ed:4c:7e:bd:bf:38:16:d7:01:0a:e0:d7:e0:53:32:ec:71:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 8 07:05:39 2026 GMT Not After : Oct 7 07:10:39 2027 GMT Subject: CN=36B3C5A65B99460487A9B32EAFEEC606DDBD43ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:7e:b2:09:fc:88:dd:31:4a:3c:7d:b7:8b: 24:74:82:e3:5c:86:31:32:cd:5a:7a:c1:9a:ef:68: 46:21:71:78:31:31:ec:33:82:e2:32:72:69:6f:08: c7:2f:d7:16:49:db:08:5d:a4:b5:a0:25:4e:81:eb: 47:ff:03:9b:49:5c:39:01:42:84:20:85:92:a3:58: 73:a2:0c:6c:f8:00:6e:07:67:05:b7:e9:1a:45:09: 91:13:2e:4b:f1:aa:88:76:73:72:0d:b5:4d:9f:18: 87:2b:28:74:7a:aa:1c:61:44:00:af:d2:e2:4f:39: 6b:96:86:33:a1:dd:c2:88:3d:11:47:c7:00:9c:14: 76:b0:5a:a3:4b:71:1f:78:74:a4:aa:b4:66:86:50: 4b:3f:ad:91:a8:9e:10:66:4b:e8:45:e0:a6:61:df: 2a:c7:7d:1c:c2:fb:46:17:5d:b0:f5:c2:21:91:6b: 8d:dc:b1:6d:46:eb:86:6f:b5:09:64:25:ea:10:56: c6:3c:f2:b6:37:c6:ac:68:9f:9d:00:bd:b5:62:44: 29:32:90:7b:38:92:6b:8c:46:87:24:2b:ff:f2:b9: ad:85:7b:fd:20:88:d7:62:c2:d1:f5:2c:af:f8:d0: 26:39:40:a1:8b:dd:99:08:cc:7a:39:5a:5c:be:3b: f6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B3:C5:A6:5B:99:46:04:87:A9:B3:2E:AF:EE:C6:06:DD:BD:43:ED X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS197537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.236.0/24 Signature Algorithm: sha256WithRSAEncryption b1:af:3c:fa:8b:12:9d:bd:7d:69:4f:a0:12:59:a1:e2:32:0d: 77:d6:e9:a7:fd:60:be:fb:9d:a0:67:7b:81:5b:e1:d2:a5:9f: 7c:e6:a8:fe:2c:82:b3:a7:58:e8:af:b3:bd:0f:84:f3:04:9a: 6f:f3:8c:e4:0a:4d:df:d6:d6:69:35:6c:59:57:ec:08:ab:bd: 4c:23:d5:72:ef:c1:1b:a0:b6:f5:7b:fc:d8:15:75:d6:fd:0b: 94:e5:5c:8c:d5:c5:39:26:3f:fb:aa:31:e8:9d:8e:b3:ed:f2: 24:fd:df:ed:b7:25:4b:aa:ce:6c:40:5f:29:38:62:18:50:a6: 8c:eb:9b:41:3e:f6:14:f6:d1:d6:42:b5:20:66:14:1d:bc:e5: a3:91:2a:08:62:5c:7a:bf:db:94:f5:56:17:3b:e4:22:3b:9a: 61:ae:f9:de:fc:19:8c:e2:4d:c3:cb:ba:8c:4f:20:1c:bd:16: ca:7b:14:97:40:28:b7:88:a7:e9:6d:0f:39:35:82:c1:f5:c5: 79:4f:3d:26:19:7c:16:13:fc:b6:47:28:97:22:df:ea:ea:74: 1e:be:02:60:d1:a6:58:f8:3a:c4:f0:66:8a:2b:a8:c4:d7:47: 9b:c7:2b:c5:4d:e7:6b:0b:06:10:7f:8e:0e:42:34:14:f3:35: da:87:78:3a -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUOTLtTH69vzgW1wEK4NfgUzLscdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMDgwNzA1MzlaFw0yNzEwMDcwNzEwMzlaMDMxMTAvBgNV BAMTKDM2QjNDNUE2NUI5OTQ2MDQ4N0E5QjMyRUFGRUVDNjA2RERCRDQzRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKzH6yCfyI3TFKPH23iyR0guNc hjEyzVp6wZrvaEYhcXgxMewzguIycmlvCMcv1xZJ2whdpLWgJU6B60f/A5tJXDkB QoQghZKjWHOiDGz4AG4HZwW36RpFCZETLkvxqoh2c3INtU2fGIcrKHR6qhxhRACv 0uJPOWuWhjOh3cKIPRFHxwCcFHawWqNLcR94dKSqtGaGUEs/rZGonhBmS+hF4KZh 3yrHfRzC+0YXXbD1wiGRa43csW1G64ZvtQlkJeoQVsY88rY3xqxon50AvbViRCky kHs4kmuMRockK//yua2Fe/0giNdiwtH1LK/40CY5QKGL3ZkIzHo5Wly+O/YtAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUNrPFpluZRgSHqbMur+7GBt29Q+0wHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxOTc1Mzcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACY7ewwDQYJKoZIhvcNAQELBQADggEBALGvPPqLEp29fWlPoBJZoeIy DXfW6af9YL77naBne4Fb4dKln3zmqP4sgrOnWOivs70PhPMEmm/zjOQKTd/W1mk1 bFlX7AirvUwj1XLvwRugtvV7/NgVddb9C5TlXIzVxTkmP/uqMeidjrPt8iT93+23 JUuqzmxAXyk4YhhQpozrm0E+9hT20dZCtSBmFB285aORKghiXHq/25T1Vhc75CI7 mmGu+d78GYziTcPLuoxPIBy9Fsp7FJdAKLeIp+ltDzk1gsH1xXlPPSYZfBYT/LZH KJci3+rqdB6+AmDRplj4OsTwZoorqMTXR5vHK8VN52sLBhB/jg5CNBTzNdqHeDo= -----END CERTIFICATE-----Generated at Thu Nov 5 11:19:15 2026 by rpki-client