$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS198566.roa File: AS198566.roa (raw, json) Hash identifier: CecTmqHdK/Q6uXFUXECLJ/SanptA/5i2BsUyiV9v2LE= Subject key identifier: 31:77:43:72:B1:FE:F5:3B:94:01:46:58:E9:DF:33:A1:7A:60:EC:D9 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 4C55951A9141DE3FC086C66C09ED8B1FDDA25433 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS198566.roa Signing time: Wed 04 Nov 2026 20:11:57 +0000 ROA not before: Wed 04 Nov 2026 20:06:57 +0000 ROA not after: Wed 03 Nov 2027 20:11:57 +0000 asID: 198566 IP address blocks: 152.237.248.0/24 maxlen: 24 186.241.180.0/24 maxlen: 24 201.4.17.0/24 maxlen: 24 201.4.31.0/24 maxlen: 24 201.50.25.0/24 maxlen: 24 201.50.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Nov 2026 23:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:55:95:1a:91:41:de:3f:c0:86:c6:6c:09:ed:8b:1f:dd:a2:54:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Nov 4 20:06:57 2026 GMT Not After : Nov 3 20:11:57 2027 GMT Subject: CN=31774372B1FEF53B94014658E9DF33A17A60ECD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:74:54:7e:64:61:1d:7a:f3:bf:d1:31:af: 2b:a8:cd:06:8c:33:08:44:69:36:8e:d3:c0:b4:d8: 11:1c:33:1b:75:bb:05:78:b8:7a:a3:c4:85:58:45: 09:55:36:7c:b4:67:82:5e:e6:90:46:ef:52:a9:6c: a6:08:fc:58:f0:6b:89:e9:27:29:13:11:76:12:9f: 20:47:7d:27:41:d6:43:5d:64:b6:aa:03:6a:f6:62: be:51:16:3e:96:65:ac:bb:77:03:bf:32:da:db:d8: 46:03:fa:ff:83:8a:31:d3:6e:25:b5:ee:2d:5e:c7: 99:cf:50:a7:e3:09:cb:5e:88:59:b8:65:71:0c:2a: 6c:6d:ee:05:d2:08:1a:d0:af:c9:34:b5:4e:3b:ec: e7:7e:92:29:34:7c:95:c8:87:48:de:5f:6f:96:d3: 64:b1:cd:4b:9c:da:5d:76:9e:e9:a9:a0:15:cf:f1: 60:ee:4f:80:90:2d:de:eb:e7:ad:37:50:9d:ca:92: d4:73:c6:a0:4a:08:f4:75:4f:e0:84:0d:8b:b3:f3: d6:90:0b:21:eb:72:65:c8:14:bb:00:0f:64:70:e8: d7:bf:59:84:57:ee:73:ed:f2:08:65:4b:25:75:bd: 91:a4:19:c1:c8:84:be:69:77:09:99:c0:53:c8:a3: ac:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:77:43:72:B1:FE:F5:3B:94:01:46:58:E9:DF:33:A1:7A:60:EC:D9 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS198566.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.248.0/24 186.241.180.0/24 201.4.17.0/24 201.4.31.0/24 201.50.25.0/24 201.50.28.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:25:17:b3:1a:66:b6:26:a9:af:bc:29:44:32:cc:78:e5:c0: 30:6c:7b:8d:9c:2f:cc:8f:ce:0b:b2:01:d5:16:f1:d2:43:78: 7b:f9:8b:22:ba:a5:3f:0e:78:04:30:63:3c:c7:23:79:4b:04: 83:6b:2c:7f:54:e6:4d:3a:55:b6:0f:7b:fa:c9:3b:85:04:0e: 83:0e:5f:ba:36:19:18:89:d1:fe:a9:76:b6:de:e8:3b:ac:d8: 74:83:57:62:f8:8d:0a:ae:7c:0d:97:67:68:5c:66:68:3d:30: 34:ac:86:7b:91:df:f2:ef:02:c4:0a:8d:90:4c:20:ac:a7:24: 03:2c:bc:d0:37:50:4e:c7:04:0c:92:0c:85:28:68:56:ce:a2: de:e1:df:29:c1:c2:c1:49:8b:1c:86:72:16:2f:e9:35:bc:c8: d1:1f:07:dc:3b:e1:ea:b6:73:9f:75:2d:8d:3e:03:aa:16:20: 80:43:bb:7a:fd:8f:3e:7c:0b:7e:f9:89:44:08:79:95:8f:29: 70:9e:f2:75:85:f2:18:06:a6:b9:66:61:2a:79:58:3d:90:ac: 59:78:71:24:07:14:0b:4b:3b:3f:63:86:26:85:19:61:00:bb: 12:3d:28:3a:08:1a:a4:67:4a:c2:85:b6:e4:4f:49:7a:fb:22: 46:f8:b0:2f -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUTFWVGpFB3j/AhsZsCe2LH92iVDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjExMDQyMDA2NTdaFw0yNzExMDMyMDExNTdaMDMxMTAvBgNV BAMTKDMxNzc0MzcyQjFGRUY1M0I5NDAxNDY1OEU5REYzM0ExN0E2MEVDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw6XRUfmRhHXrzv9ExryuozQaM MwhEaTaO08C02BEcMxt1uwV4uHqjxIVYRQlVNny0Z4Je5pBG71KpbKYI/Fjwa4np JykTEXYSnyBHfSdB1kNdZLaqA2r2Yr5RFj6WZay7dwO/Mtrb2EYD+v+DijHTbiW1 7i1ex5nPUKfjCcteiFm4ZXEMKmxt7gXSCBrQr8k0tU477Od+kik0fJXIh0jeX2+W 02SxzUuc2l12numpoBXP8WDuT4CQLd7r5603UJ3KktRzxqBKCPR1T+CEDYuz89aQ CyHrcmXIFLsAD2Rw6Ne/WYRX7nPt8ghlSyV1vZGkGcHIhL5pdwmZwFPIo6z7AgMB AAGjggJjMIICXzAdBgNVHQ4EFgQUMXdDcrH+9TuUAUZY6d8zoXpg7NkwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxOTg1NjYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoE AgABMCQDBACY7fgDBAC68bQDBADJBBEDBADJBB8DBADJMhkDBADJMhwwDQYJKoZI hvcNAQELBQADggEBAFolF7MaZrYmqa+8KUQyzHjlwDBse42cL8yPzguyAdUW8dJD eHv5iyK6pT8OeAQwYzzHI3lLBINrLH9U5k06VbYPe/rJO4UEDoMOX7o2GRiJ0f6p drbe6Dus2HSDV2L4jQqufA2XZ2hcZmg9MDSshnuR3/LvAsQKjZBMIKynJAMsvNA3 UE7HBAySDIUoaFbOot7h3ynBwsFJixyGchYv6TW8yNEfB9w74eq2c591LY0+A6oW IIBDu3r9jz58C375iUQIeZWPKXCe8nWF8hgGprlmYSp5WD2QrFl4cSQHFAtLOz9j hiaFGWEAuxI9KDoIGqRnSsKFtuRPSXr7Ikb4sC8= -----END CERTIFICATE-----Generated at Sun Nov 8 06:07:54 2026 by rpki-client