$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS197537.roa File: AS197537.roa (raw, json) Hash identifier: RF2pchDBjJN9zUOu0vF0M2+Wgu8SnpmLNvNxWilLYoY= Subject key identifier: 45:FE:5A:DE:8E:A3:D5:55:74:2B:C6:60:84:4D:E1:ED:A8:EE:1E:9F Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 3EB4A2319A192041207EF1CC427BA334A23D5D0A Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS197537.roa Signing time: Fri 11 Sep 2026 08:13:10 +0000 ROA not before: Fri 11 Sep 2026 08:08:10 +0000 ROA not after: Fri 10 Sep 2027 08:13:10 +0000 asID: 197537 IP address blocks: 152.237.224.0/24 maxlen: 24 152.237.225.0/24 maxlen: 24 152.237.227.0/24 maxlen: 24 152.237.228.0/24 maxlen: 24 152.237.231.0/24 maxlen: 24 152.237.232.0/24 maxlen: 24 152.237.233.0/24 maxlen: 24 152.237.234.0/24 maxlen: 24 152.237.235.0/24 maxlen: 24 152.237.236.0/24 maxlen: 24 152.237.237.0/24 maxlen: 24 186.241.179.0/24 maxlen: 24 186.241.183.0/24 maxlen: 24 186.241.184.0/24 maxlen: 24 186.241.185.0/24 maxlen: 24 186.241.186.0/24 maxlen: 24 186.241.187.0/24 maxlen: 24 186.241.188.0/24 maxlen: 24 186.241.189.0/24 maxlen: 24 186.241.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 09:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b4:a2:31:9a:19:20:41:20:7e:f1:cc:42:7b:a3:34:a2:3d:5d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 11 08:08:10 2026 GMT Not After : Sep 10 08:13:10 2027 GMT Subject: CN=45FE5ADE8EA3D555742BC660844DE1EDA8EE1E9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fd:40:98:c1:6b:29:e1:3f:18:0d:77:08:ba: bf:3f:b2:8b:be:14:7f:28:d6:24:b1:a4:ba:fe:5f: 9a:33:53:38:16:df:ac:df:21:15:27:25:9e:00:c7: 09:61:f8:84:6c:f4:d7:10:ed:eb:83:03:6b:b4:6b: 90:dc:8f:9a:63:ec:50:8a:4e:9a:11:78:5f:5d:01: bb:18:42:94:9f:45:70:a1:bc:a7:32:02:f0:9f:47: c7:72:d9:88:ae:17:4e:8a:67:48:d5:07:d9:d9:00: 9e:d2:1b:01:89:85:c5:b9:f0:89:ac:36:9f:95:16: 43:23:0d:a3:4d:d1:1c:c8:b1:34:60:ff:9a:fd:40: a9:0a:af:74:5f:64:85:a3:68:1f:ac:88:b6:2d:4b: 7b:57:2e:f3:d9:ef:bf:cc:47:17:30:69:be:05:b5: 3f:6f:44:21:3b:23:bd:83:8a:db:cc:a8:d8:05:e0: d8:97:80:41:b1:ad:05:a6:96:9f:a7:9c:77:79:2d: df:a9:01:ab:68:7f:f5:da:c0:d1:50:23:66:0c:5b: 8a:64:e7:30:6d:06:8b:0a:26:34:2e:6d:6a:0e:34: f5:00:82:9b:e6:57:92:84:ad:7f:49:f3:90:58:2d: a6:5a:78:20:27:41:49:84:b9:80:2f:16:18:a0:42: 61:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FE:5A:DE:8E:A3:D5:55:74:2B:C6:60:84:4D:E1:ED:A8:EE:1E:9F X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS197537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.224.0/23 152.237.227.0-152.237.228.255 152.237.231.0-152.237.237.255 186.241.179.0/24 186.241.183.0-186.241.190.255 Signature Algorithm: sha256WithRSAEncryption 60:bb:70:c4:41:a0:45:b0:59:ae:d7:ae:69:e4:73:33:99:ed: 61:8b:4e:4b:fb:a7:13:aa:7c:73:97:f3:4c:2b:17:d8:c0:9c: d1:f0:9b:b3:3a:6b:d2:e4:2a:56:f4:58:de:ef:82:ce:c4:c8: 00:a0:2d:b2:54:97:82:c8:c8:ed:7d:89:5d:b6:7c:a6:bb:2e: e4:7a:4e:0e:2a:ee:58:ad:18:ee:26:81:ef:48:0d:70:af:7f: 68:d4:22:60:b8:1a:02:6b:af:3f:6d:54:8f:59:4d:e2:3b:09: 9a:fa:17:d3:1d:55:0b:4b:93:2a:2c:b5:df:0a:57:3a:5d:e1: fc:33:f2:02:34:ef:f2:e3:20:73:3b:50:75:7e:1e:ce:5e:44: 3d:3a:0c:b1:71:1b:fa:2b:d5:82:45:3b:74:22:5d:32:f9:65: 64:60:ac:ea:53:66:50:8c:e3:b0:84:c9:9e:2d:60:97:39:bc: f6:aa:77:d1:dc:c6:48:60:08:d2:ba:d1:e0:c1:eb:8a:8d:7e: 47:b3:06:12:ca:15:2b:49:48:24:00:cb:32:81:d1:24:23:0e: 1f:33:18:82:b9:01:15:9c:1f:74:7e:5c:59:9e:ea:1f:45:1b: c6:04:95:a0:2a:3a:8c:61:e6:e5:b0:c7:ea:95:b8:5d:a5:d7: 11:c2:d8:1a -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUPrSiMZoZIEEgfvHMQnujNKI9XQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTEwODA4MTBaFw0yNzA5MTAwODEzMTBaMDMxMTAvBgNV BAMTKDQ1RkU1QURFOEVBM0Q1NTU3NDJCQzY2MDg0NERFMUVEQThFRTFFOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/UCYwWsp4T8YDXcIur8/sou+ FH8o1iSxpLr+X5ozUzgW36zfIRUnJZ4Axwlh+IRs9NcQ7euDA2u0a5Dcj5pj7FCK TpoReF9dAbsYQpSfRXChvKcyAvCfR8dy2YiuF06KZ0jVB9nZAJ7SGwGJhcW58Ims Np+VFkMjDaNN0RzIsTRg/5r9QKkKr3RfZIWjaB+siLYtS3tXLvPZ77/MRxcwab4F tT9vRCE7I72DitvMqNgF4NiXgEGxrQWmlp+nnHd5Ld+pAatof/XawNFQI2YMW4pk 5zBtBosKJjQubWoONPUAgpvmV5KErX9J85BYLaZaeCAnQUmEuYAvFhigQmEFAgMB AAGjggJ1MIICcTAdBgNVHQ4EFgQURf5a3o6j1VV0K8ZghE3h7ajuHp8wHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxOTc1Mzcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTwYIKwYBBQUHAQcBAf8EQDA+MDwE AgABMDYDBAGY7eAwDAMEAJjt4wMEAJjt5DAMAwQAmO3nAwQBmO3sAwQAuvGzMAwD BAC68bcDBAC68b4wDQYJKoZIhvcNAQELBQADggEBAGC7cMRBoEWwWa7XrmnkczOZ 7WGLTkv7pxOqfHOX80wrF9jAnNHwm7M6a9LkKlb0WN7vgs7EyACgLbJUl4LIyO19 iV22fKa7LuR6Tg4q7litGO4mge9IDXCvf2jUImC4GgJrrz9tVI9ZTeI7CZr6F9Md VQtLkyostd8KVzpd4fwz8gI07/LjIHM7UHV+Hs5eRD06DLFxG/or1YJFO3QiXTL5 ZWRgrOpTZlCM47CEyZ4tYJc5vPaqd9HcxkhgCNK60eDB64qNfkezBhLKFStJSCQA yzKB0SQjDh8zGIK5ARWcH3R+XFme6h9FG8YElaAqOoxh5uWwx+qVuF2l1xHC2Bo= -----END CERTIFICATE-----Generated at Sun Sep 20 23:22:14 2026 by rpki-client