$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS199707.roa File: AS199707.roa (raw, json) Hash identifier: cqZNdPYfBW0SBV3E6mqQe2fod34zOXw2HSoa1nDu2yY= Subject key identifier: B6:D9:71:41:AD:73:36:E3:D1:1D:75:4E:CF:FA:FD:91:C6:94:C3:DD Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 52DB6CDD5C013DD1B1B7DCC541C044753B9C18F5 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS199707.roa Signing time: Thu 17 Sep 2026 07:38:57 +0000 ROA not before: Thu 17 Sep 2026 07:33:57 +0000 ROA not after: Thu 16 Sep 2027 07:38:57 +0000 asID: 199707 IP address blocks: 186.241.177.0/24 maxlen: 24 186.241.181.0/24 maxlen: 24 201.50.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 09:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:db:6c:dd:5c:01:3d:d1:b1:b7:dc:c5:41:c0:44:75:3b:9c:18:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 17 07:33:57 2026 GMT Not After : Sep 16 07:38:57 2027 GMT Subject: CN=B6D97141AD7336E3D11D754ECFFAFD91C694C3DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:7e:f8:ef:12:d4:2a:a5:18:5c:79:c9:d2: c3:e6:0f:2a:82:c5:12:8b:02:a9:fc:bd:dc:fc:1a: 02:46:e1:f5:59:db:5c:6e:62:6b:a8:85:a4:07:fd: 59:12:74:91:14:82:fc:b9:3e:f8:d7:0e:fd:b0:07: 5e:c5:a0:f7:74:78:40:f7:34:fe:6b:c9:58:97:cc: 7c:48:42:2e:39:44:48:29:f0:b5:62:3e:2b:14:2c: 4d:2a:05:e4:35:9f:53:27:05:5d:a7:18:45:7f:78: 4e:69:97:8b:44:d8:b9:e4:8d:85:43:8f:de:38:e2: 43:d7:90:de:85:64:2d:49:d7:7b:6b:ed:59:00:b5: 74:1e:16:a8:3b:c7:2e:98:63:3e:bf:92:74:8c:cd: 9e:ee:9e:64:92:88:fd:a4:ff:84:58:e4:9f:2c:8a: 0d:d8:0e:6e:3b:50:86:8d:f9:8c:e6:5c:ed:24:e3: 84:84:97:6a:73:81:ae:54:0d:ed:08:38:c2:aa:b8: c6:69:21:8d:b1:5f:c4:83:e1:3e:8b:c4:c0:8f:46: 0d:ff:3d:fc:80:90:e9:c2:aa:7e:a1:e1:c3:c1:7e: 61:cf:3c:e9:71:66:5b:7e:c0:88:31:f9:25:a4:86: b6:69:41:5a:89:f3:0e:f7:73:8c:3d:4a:b4:01:4c: ca:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D9:71:41:AD:73:36:E3:D1:1D:75:4E:CF:FA:FD:91:C6:94:C3:DD X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS199707.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.241.177.0/24 186.241.181.0/24 201.50.30.0/24 Signature Algorithm: sha256WithRSAEncryption 71:7f:53:c8:1b:c1:94:90:9e:d5:0f:8c:63:33:e2:b4:73:54: 84:7e:3a:73:12:72:2e:37:85:f9:26:c8:7c:90:43:bd:c0:55: 0a:8c:5c:4f:27:68:31:95:cf:62:d4:4e:a3:0f:ae:af:dc:26: ca:17:a4:69:c0:13:4d:05:d4:b8:df:92:ad:5a:06:41:df:f5: 03:81:5e:9c:d7:e5:e9:10:a3:27:0c:df:63:f1:06:4a:fe:54: 6d:35:7f:5c:ac:d4:27:60:38:f5:fb:83:e8:aa:38:92:15:b0: e2:5e:8e:c4:f1:f1:63:2b:4c:f6:00:48:69:37:47:53:a5:b8: df:11:d9:a2:f6:e0:4d:c3:33:e5:af:3b:85:1e:81:f4:28:54: 1f:ba:61:d0:50:35:63:88:03:96:2c:ee:6a:63:59:c4:d7:23: d7:ac:59:8e:88:fa:d0:2b:a8:be:a1:dd:4f:2a:c4:28:be:11: b9:69:99:17:85:27:bb:02:73:77:7d:aa:40:9c:ff:ab:66:14: 15:d2:ed:9c:c2:4f:28:63:15:a3:e3:38:a7:3b:c3:c4:e0:da: 66:d9:1b:20:65:ff:76:8c:e1:01:63:82:45:48:71:ed:1e:47: cf:72:c7:c5:c3:93:c7:24:c9:29:2b:3b:6d:50:db:76:91:e3: e9:f7:28:b3 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUUtts3VwBPdGxt9zFQcBEdTucGPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTcwNzMzNTdaFw0yNzA5MTYwNzM4NTdaMDMxMTAvBgNV BAMTKEI2RDk3MTQxQUQ3MzM2RTNEMTFENzU0RUNGRkFGRDkxQzY5NEMzREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/on747xLUKqUYXHnJ0sPmDyqC xRKLAqn8vdz8GgJG4fVZ21xuYmuohaQH/VkSdJEUgvy5PvjXDv2wB17FoPd0eED3 NP5ryViXzHxIQi45REgp8LViPisULE0qBeQ1n1MnBV2nGEV/eE5pl4tE2LnkjYVD j9444kPXkN6FZC1J13tr7VkAtXQeFqg7xy6YYz6/knSMzZ7unmSSiP2k/4RY5J8s ig3YDm47UIaN+YzmXO0k44SEl2pzga5UDe0IOMKquMZpIY2xX8SD4T6LxMCPRg3/ PfyAkOnCqn6h4cPBfmHPPOlxZlt+wIgx+SWkhrZpQVqJ8w73c4w9SrQBTMrDAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUttlxQa1zNuPRHXVOz/r9kcaUw90wHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxOTk3MDcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBAC68bEDBAC68bUDBADJMh4wDQYJKoZIhvcNAQELBQADggEBAHF/U8gb wZSQntUPjGMz4rRzVIR+OnMSci43hfkmyHyQQ73AVQqMXE8naDGVz2LUTqMPrq/c JsoXpGnAE00F1Ljfkq1aBkHf9QOBXpzX5ekQoycM32PxBkr+VG01f1ys1CdgOPX7 g+iqOJIVsOJejsTx8WMrTPYASGk3R1OluN8R2aL24E3DM+WvO4UegfQoVB+6YdBQ NWOIA5Ys7mpjWcTXI9esWY6I+tArqL6h3U8qxCi+EblpmReFJ7sCc3d9qkCc/6tm FBXS7ZzCTyhjFaPjOKc7w8Tg2mbZGyBl/3aM4QFjgkVIce0eR89yx8XDk8ckySkr O21Q23aR4+n3KLM= -----END CERTIFICATE-----Generated at Sun Sep 20 23:21:50 2026 by rpki-client