$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS205489.roa File: AS205489.roa (raw, json) Hash identifier: U+C2rFkwTm/sMDi/jkbSKH3hHSfK2dc2TV2ZRIjCgFg= Subject key identifier: E4:95:47:2A:DA:6F:64:C4:B5:B0:D8:BC:9C:4E:BF:EC:DB:0B:85:53 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 2DB06965D4856A30925B1DE59FFD961693804361 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS205489.roa Signing time: Fri 30 Oct 2026 15:07:22 +0000 ROA not before: Fri 30 Oct 2026 15:02:22 +0000 ROA not after: Fri 29 Oct 2027 15:07:22 +0000 asID: 205489 IP address blocks: 177.177.236.0/24 maxlen: 24 177.177.250.0/24 maxlen: 24 186.241.184.0/24 maxlen: 24 186.241.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 11:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b0:69:65:d4:85:6a:30:92:5b:1d:e5:9f:fd:96:16:93:80:43:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 30 15:02:22 2026 GMT Not After : Oct 29 15:07:22 2027 GMT Subject: CN=E495472ADA6F64C4B5B0D8BC9C4EBFECDB0B8553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ac:a6:0e:e6:15:cb:61:41:8a:98:c6:e3:f8: c3:35:be:5f:cf:83:96:51:39:3e:5e:35:9d:4c:0e: 16:e5:1a:3f:1f:98:29:e7:dd:a8:b1:b7:5e:9c:b2: 9c:64:db:31:ca:6e:f5:1c:49:60:69:ba:4d:7d:46: d3:46:95:89:dc:8b:71:76:1d:16:dc:e4:82:25:ab: 7a:32:cf:fd:a5:17:c2:cd:e3:e5:87:9e:97:3b:c9: a6:d4:9c:75:61:ec:df:29:1f:f7:53:29:08:99:69: 59:5b:4f:0d:59:ae:b0:06:c0:54:23:f1:87:0e:75: 16:9e:37:df:be:05:25:13:1d:68:4b:1f:8a:82:98: ec:ea:c3:45:fa:e1:45:27:7e:df:f0:d7:42:ba:2d: fd:29:57:6c:36:5d:f2:c8:3f:a8:96:f1:8c:5c:9c: 59:72:45:03:0f:58:f9:08:da:43:29:13:e1:57:67: d3:e3:b6:d2:b4:fb:a6:f5:62:47:b9:a0:c4:e2:d8: be:9d:5f:77:9b:21:c3:81:ea:b0:48:55:f2:1f:74: 90:7a:bd:e1:c2:9b:5a:89:74:26:1c:33:d1:f4:a9: ea:ce:9d:eb:2a:86:61:20:c0:29:c7:ed:f2:cd:55: 87:72:62:33:45:50:49:dd:b3:5d:19:71:45:72:ba: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:95:47:2A:DA:6F:64:C4:B5:B0:D8:BC:9C:4E:BF:EC:DB:0B:85:53 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS205489.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.177.236.0/24 177.177.250.0/24 186.241.184.0/24 186.241.189.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:ab:33:7f:c9:69:cf:77:3d:1b:06:2d:da:ed:e1:58:2b:42: ca:7c:01:3e:8a:fc:e7:6a:56:b5:0c:5c:17:4c:3e:08:21:86: f1:79:6c:8b:79:58:16:c7:75:39:d2:c2:d2:a6:66:21:ef:42: c6:86:b9:c6:99:73:02:60:8a:6c:8b:e4:00:aa:ae:41:8f:71: 90:92:11:78:c4:73:b7:68:93:a0:68:4a:dd:1b:b4:1b:e5:48: bd:1a:d1:e7:12:00:a2:81:56:78:86:f2:f6:0e:50:92:cf:38: 8d:3b:fd:6d:0d:75:5f:36:f9:a9:ad:17:a1:8b:65:27:3d:0f: 78:55:49:6b:e3:15:45:fd:9c:0a:32:27:f3:cc:20:46:f6:e6: 6a:6e:9b:a6:bc:46:33:81:2d:ab:ed:ca:7f:15:de:f4:8d:b3: cc:83:67:f8:ea:fb:9d:7d:58:96:0a:c0:c0:b2:a0:2c:e2:dc: 80:c1:74:28:0c:d8:cb:f9:d6:d2:1e:f1:88:d9:96:23:8a:3a: bd:b5:c2:e8:70:99:7d:9e:eb:9f:cb:50:67:6b:99:7d:37:44: 29:c5:01:72:46:6a:66:b1:88:9b:b1:6a:45:48:bd:32:87:3d: 52:56:66:26:8d:f4:5c:47:b2:04:86:79:79:60:63:03:2a:bb: 68:de:ef:ea -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIULbBpZdSFajCSWx3ln/2WFpOAQ2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMzAxNTAyMjJaFw0yNzEwMjkxNTA3MjJaMDMxMTAvBgNV BAMTKEU0OTU0NzJBREE2RjY0QzRCNUIwRDhCQzlDNEVCRkVDREIwQjg1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrKYO5hXLYUGKmMbj+MM1vl/P g5ZROT5eNZ1MDhblGj8fmCnn3aixt16cspxk2zHKbvUcSWBpuk19RtNGlYnci3F2 HRbc5IIlq3oyz/2lF8LN4+WHnpc7yabUnHVh7N8pH/dTKQiZaVlbTw1ZrrAGwFQj 8YcOdRaeN9++BSUTHWhLH4qCmOzqw0X64UUnft/w10K6Lf0pV2w2XfLIP6iW8Yxc nFlyRQMPWPkI2kMpE+FXZ9PjttK0+6b1Yke5oMTi2L6dX3ebIcOB6rBIVfIfdJB6 veHCm1qJdCYcM9H0qerOnesqhmEgwCnH7fLNVYdyYjNFUEnds10ZcUVyunKvAgMB AAGjggJXMIICUzAdBgNVHQ4EFgQU5JVHKtpvZMS1sNi8nE6/7NsLhVMwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMyMDU0ODkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4E AgABMBgDBACxsewDBACxsfoDBAC68bgDBAC68b0wDQYJKoZIhvcNAQELBQADggEB AF6rM3/Jac93PRsGLdrt4VgrQsp8AT6K/OdqVrUMXBdMPgghhvF5bIt5WBbHdTnS wtKmZiHvQsaGucaZcwJgimyL5ACqrkGPcZCSEXjEc7dok6BoSt0btBvlSL0a0ecS AKKBVniG8vYOUJLPOI07/W0NdV82+amtF6GLZSc9D3hVSWvjFUX9nAoyJ/PMIEb2 5mpum6a8RjOBLavtyn8V3vSNs8yDZ/jq+519WJYKwMCyoCzi3IDBdCgM2Mv51tIe 8YjZliOKOr21wuhwmX2e65/LUGdrmX03RCnFAXJGamaxiJuxakVIvTKHPVJWZiaN 9FxHsgSGeXlgYwMqu2je7+o= -----END CERTIFICATE-----Generated at Sun Nov 15 21:56:16 2026 by rpki-client