$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS205960.roa File: AS205960.roa (raw, json) Hash identifier: klvh7s/US/WhOVbuOD6eQFxaQjYezAJK98w9Jqytce4= Subject key identifier: A7:C8:8B:F4:0F:F6:10:78:30:75:E0:B2:F1:AD:6C:42:CD:0C:1A:18 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 3BB4C2DB04275489098B50028B9EA79052672180 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS205960.roa Signing time: Fri 11 Sep 2026 08:13:10 +0000 ROA not before: Fri 11 Sep 2026 08:08:10 +0000 ROA not after: Fri 10 Sep 2027 08:13:10 +0000 asID: 205960 IP address blocks: 201.4.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b4:c2:db:04:27:54:89:09:8b:50:02:8b:9e:a7:90:52:67:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 11 08:08:10 2026 GMT Not After : Sep 10 08:13:10 2027 GMT Subject: CN=A7C88BF40FF610783075E0B2F1AD6C42CD0C1A18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:66:1f:53:28:bd:31:ae:7a:6d:45:80:71: 7e:b1:0d:08:cb:80:f6:11:80:79:01:52:ce:f2:a6: 3c:ee:40:10:f9:b0:40:ec:29:e9:b2:76:97:11:20: 77:86:cf:0b:23:79:bb:f1:dc:aa:8e:55:a4:54:84: 6e:67:53:b2:ef:e2:c4:50:e6:c8:e4:b9:e5:1e:7b: 3d:4a:64:89:a0:77:1d:76:2b:e8:19:56:73:22:b6: a7:f6:ad:06:03:60:b9:cf:5e:0e:39:5a:65:cd:60: ab:3b:6c:10:ca:0f:d5:44:56:82:79:85:4b:4d:4c: 63:16:17:8e:6d:c9:e7:e0:34:a6:e2:e3:74:7c:46: d8:17:75:cf:b9:a1:73:32:41:22:ec:43:51:9c:a4: 0a:c1:8d:8c:42:25:49:5c:e9:62:b3:2e:84:00:36: 83:df:62:38:56:e8:06:b1:e8:70:b5:4e:51:14:32: 2b:8a:ab:e8:99:96:dd:fe:65:99:85:3f:8b:0c:52: 04:fc:ec:8b:c6:32:fd:6d:57:6a:c9:f4:44:79:a9: 60:f6:b1:ec:f5:65:7f:c1:6a:9d:a3:f4:f9:aa:87: 51:18:7b:23:48:82:25:92:3a:2e:81:af:45:66:ec: 10:91:27:a9:d4:c9:55:71:df:7d:dd:6e:db:b4:6c: 36:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C8:8B:F4:0F:F6:10:78:30:75:E0:B2:F1:AD:6C:42:CD:0C:1A:18 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS205960.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.4.16.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:53:c8:ed:8a:a7:27:99:dd:70:39:88:e7:e9:41:6d:b8:b5: bc:c7:fe:2c:3c:7e:4d:b8:42:ed:e7:09:71:2c:06:44:6d:4a: 5c:8d:5a:c0:d2:47:eb:24:53:03:9b:54:07:92:a1:25:6f:40: 63:53:2c:2a:ae:8f:79:57:53:50:72:09:09:b7:74:34:de:14: 21:92:d9:88:92:b9:7d:1d:0d:ac:a8:cc:4b:96:11:18:6c:bf: 6a:d2:f9:f0:61:67:07:42:cc:f0:ce:17:66:53:a2:73:a9:b6: c9:d9:7b:01:9d:1c:bd:90:8c:3a:cc:8c:50:a6:fe:38:df:c7: 98:f0:97:51:0f:0a:e8:c8:85:5d:b7:80:99:43:db:20:b1:20: 91:4e:fd:2b:c2:c6:a3:17:5b:3d:34:27:8e:ed:e6:dd:1d:23: b0:f0:dd:14:86:d9:b8:12:b0:4f:ba:9c:01:e5:18:5a:1d:9b: 40:ff:b6:5d:eb:41:b3:43:c7:83:ff:16:bd:22:64:ff:66:e6: d6:91:22:e8:52:e4:c5:6a:f8:97:34:5c:1a:39:e1:c4:8f:ed: 9c:29:e5:8e:a6:d7:fa:7d:d0:86:18:e6:d3:4e:34:bb:7c:92: c8:fa:7d:ab:07:fd:30:3c:63:6c:76:19:80:b2:52:bc:68:36: 9f:fb:ba:f9 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUO7TC2wQnVIkJi1ACi56nkFJnIYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTEwODA4MTBaFw0yNzA5MTAwODEzMTBaMDMxMTAvBgNV BAMTKEE3Qzg4QkY0MEZGNjEwNzgzMDc1RTBCMkYxQUQ2QzQyQ0QwQzFBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZWYfUyi9Ma56bUWAcX6xDQjL gPYRgHkBUs7ypjzuQBD5sEDsKemydpcRIHeGzwsjebvx3KqOVaRUhG5nU7Lv4sRQ 5sjkueUeez1KZImgdx12K+gZVnMitqf2rQYDYLnPXg45WmXNYKs7bBDKD9VEVoJ5 hUtNTGMWF45tyefgNKbi43R8RtgXdc+5oXMyQSLsQ1GcpArBjYxCJUlc6WKzLoQA NoPfYjhW6Aax6HC1TlEUMiuKq+iZlt3+ZZmFP4sMUgT87IvGMv1tV2rJ9ER5qWD2 sez1ZX/Bap2j9Pmqh1EYeyNIgiWSOi6Br0Vm7BCRJ6nUyVVx333dbtu0bDafAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUp8iL9A/2EHgwdeCy8a1sQs0MGhgwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMyMDU5NjAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADJBBAwDQYJKoZIhvcNAQELBQADggEBAH5TyO2KpyeZ3XA5iOfpQW24 tbzH/iw8fk24Qu3nCXEsBkRtSlyNWsDSR+skUwObVAeSoSVvQGNTLCquj3lXU1By CQm3dDTeFCGS2YiSuX0dDayozEuWERhsv2rS+fBhZwdCzPDOF2ZTonOptsnZewGd HL2QjDrMjFCm/jjfx5jwl1EPCujIhV23gJlD2yCxIJFO/SvCxqMXWz00J47t5t0d I7Dw3RSG2bgSsE+6nAHlGFodm0D/tl3rQbNDx4P/Fr0iZP9m5taRIuhS5MVq+Jc0 XBo54cSP7Zwp5Y6m1/p90IYY5tNONLt8ksj6fasH/TA8Y2x2GYCyUrxoNp/7uvk= -----END CERTIFICATE-----Generated at Tue Sep 22 08:22:09 2026 by rpki-client