$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS201002.roa File: AS201002.roa (raw, json) Hash identifier: huydqOZd+bnHd5wDX7mgswdd59x+SkXfQn25yCENV60= Subject key identifier: F1:70:AF:1D:33:13:31:FD:D9:14:DA:5F:0C:6E:6D:01:7F:C9:7C:F6 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 430C22D9D9572C5EB93FC97C2577594D2B65165E Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS201002.roa Signing time: Mon 05 Oct 2026 10:50:50 +0000 ROA not before: Mon 05 Oct 2026 10:45:50 +0000 ROA not after: Mon 04 Oct 2027 10:50:50 +0000 asID: 201002 IP address blocks: 186.241.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 20:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:0c:22:d9:d9:57:2c:5e:b9:3f:c9:7c:25:77:59:4d:2b:65:16:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 5 10:45:50 2026 GMT Not After : Oct 4 10:50:50 2027 GMT Subject: CN=F170AF1D331331FDD914DA5F0C6E6D017FC97CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:5d:6e:da:7b:d4:2a:ee:a4:5d:ac:5b:25:bb: 79:86:b7:da:6d:ac:c7:44:50:b3:3d:21:1e:75:fe: 6e:50:11:aa:21:2e:6c:ba:d0:8c:1d:46:35:cf:49: ca:63:69:67:c7:34:b7:a3:bf:4f:6a:10:cc:62:29: b2:4a:2d:89:2e:38:19:e1:2d:6b:2f:e9:da:f9:2c: 8d:9b:38:93:c5:3e:ec:c4:47:e0:69:1c:1f:74:eb: db:06:37:de:59:6c:c8:f9:08:c1:5c:bb:0b:3f:7d: 94:7f:f3:53:e9:47:ad:bc:c5:c3:be:f0:c3:6c:e5: cc:b9:d6:a3:43:a6:e9:32:3e:91:34:42:86:f8:34: e9:7a:82:8c:43:2f:85:54:2f:ca:25:e5:1a:04:10: e9:92:1a:af:e4:f9:31:a0:ea:ef:5f:8d:a6:3d:da: 43:17:5e:85:c4:59:f4:67:8f:7b:30:a8:82:d0:b5: ce:78:d9:30:1b:be:28:6a:11:99:d1:1c:10:93:20: ae:b8:96:3d:aa:0b:ab:2e:44:39:af:7d:a0:ad:21: 4d:0a:21:1c:e8:cb:8f:3c:15:da:2c:b1:ef:d8:49: 8d:38:41:39:98:53:de:df:c7:43:cc:6f:9f:87:6e: ca:5d:7c:d6:12:25:65:1b:ee:7b:fe:be:9e:4d:74: 46:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:70:AF:1D:33:13:31:FD:D9:14:DA:5F:0C:6E:6D:01:7F:C9:7C:F6 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS201002.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.241.163.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:6e:d1:d0:87:d5:ce:72:39:4a:7b:5c:5e:a8:7f:d7:c3:ad: 69:f2:2e:36:2e:71:46:4f:2b:7a:80:f0:54:f8:44:b3:2c:cd: b2:a7:f9:5f:18:9e:47:6b:2f:10:a2:a4:9c:30:6b:c0:9a:c4: a4:95:1b:9f:24:86:e5:e1:4b:b0:bb:75:79:08:dc:4e:0c:ea: c0:81:68:6f:35:e5:42:c4:89:7a:e3:59:9f:69:98:31:a8:b3: 25:1b:26:8f:ea:f5:a5:bc:06:6b:dc:57:95:4b:e9:3e:6e:e7: 0d:20:37:13:f5:15:10:30:b9:44:b0:00:26:c2:73:e4:0c:04: 44:10:e7:7b:bf:f9:2b:42:63:27:31:71:5e:60:7e:fc:2e:41: 43:67:54:f4:c0:98:13:98:14:aa:ab:bd:b5:1b:98:e6:44:31: af:f3:e4:a5:21:bb:0c:3e:98:af:04:e1:6f:4a:ec:f4:d8:bc: d4:2f:d0:1c:0b:0a:ce:5c:46:0b:d9:ea:5c:5c:61:f8:d0:53: 3a:5e:bc:58:67:94:dc:6c:39:f2:23:70:b1:dd:49:e4:db:72: 54:96:b3:48:b9:65:4b:48:96:fa:9a:46:2d:93:81:c0:5a:4d: cd:03:93:f7:69:5d:c2:6c:d8:c6:1c:55:0b:b0:4e:08:16:90: 27:34:06:4b -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUQwwi2dlXLF65P8l8JXdZTStlFl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMDUxMDQ1NTBaFw0yNzEwMDQxMDUwNTBaMDMxMTAvBgNV BAMTKEYxNzBBRjFEMzMxMzMxRkREOTE0REE1RjBDNkU2RDAxN0ZDOTdDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3XW7ae9Qq7qRdrFslu3mGt9pt rMdEULM9IR51/m5QEaohLmy60IwdRjXPScpjaWfHNLejv09qEMxiKbJKLYkuOBnh LWsv6dr5LI2bOJPFPuzER+BpHB9069sGN95ZbMj5CMFcuws/fZR/81PpR628xcO+ 8MNs5cy51qNDpukyPpE0Qob4NOl6goxDL4VUL8ol5RoEEOmSGq/k+TGg6u9fjaY9 2kMXXoXEWfRnj3swqILQtc542TAbvihqEZnRHBCTIK64lj2qC6suRDmvfaCtIU0K IRzoy488Fdosse/YSY04QTmYU97fx0PMb5+HbspdfNYSJWUb7nv+vp5NdEbLAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU8XCvHTMTMf3ZFNpfDG5tAX/JfPYwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMyMDEwMDIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAC68aMwDQYJKoZIhvcNAQELBQADggEBAGtu0dCH1c5yOUp7XF6of9fD rWnyLjYucUZPK3qA8FT4RLMszbKn+V8YnkdrLxCipJwwa8CaxKSVG58khuXhS7C7 dXkI3E4M6sCBaG815ULEiXrjWZ9pmDGosyUbJo/q9aW8BmvcV5VL6T5u5w0gNxP1 FRAwuUSwACbCc+QMBEQQ53u/+StCYycxcV5gfvwuQUNnVPTAmBOYFKqrvbUbmOZE Ma/z5KUhuww+mK8E4W9K7PTYvNQv0BwLCs5cRgvZ6lxcYfjQUzpevFhnlNxsOfIj cLHdSeTbclSWs0i5ZUtIlvqaRi2TgcBaTc0Dk/dpXcJs2MYcVQuwTggWkCc0Bks= -----END CERTIFICATE-----Generated at Thu Nov 5 12:09:56 2026 by rpki-client