$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS214483.roa File: AS214483.roa (raw, json) Hash identifier: SjMGJQYsfrAdX8nexdV/WXI1vIG68gnKFqlG7Oqs1z0= Subject key identifier: 66:D8:FF:02:2B:45:BF:81:15:27:BE:DD:CD:F5:12:06:DC:23:E1:2A Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 4E60EA585D2013FC6EC54C44E2AF778F8C7805F7 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS214483.roa Signing time: Tue 13 Oct 2026 00:37:43 +0000 ROA not before: Tue 13 Oct 2026 00:32:43 +0000 ROA not after: Tue 12 Oct 2027 00:37:43 +0000 asID: 214483 IP address blocks: 177.177.226.0/24 maxlen: 24 177.177.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 20:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:60:ea:58:5d:20:13:fc:6e:c5:4c:44:e2:af:77:8f:8c:78:05:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 13 00:32:43 2026 GMT Not After : Oct 12 00:37:43 2027 GMT Subject: CN=66D8FF022B45BF811527BEDDCDF51206DC23E12A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:25:22:28:f0:b5:e7:0d:f2:bc:94:cd:54:fc: 55:d2:c2:9a:5a:5a:5c:98:8f:e6:24:d2:d3:2d:c8: 15:cc:c2:60:c1:69:74:10:f6:7f:e2:96:5a:ab:7b: f5:81:e6:4d:df:8c:59:08:22:b3:e1:89:65:1b:8a: f6:11:41:80:f4:bb:e2:17:36:ce:0e:68:47:b3:f2: 31:3e:a9:b8:d9:7b:c3:66:64:5b:ec:1b:ce:48:88: 45:a1:4e:f7:c4:cb:f4:13:c8:25:72:17:21:7d:b9: 8d:04:a9:e5:e0:64:7e:d0:1d:d9:39:de:79:ea:81: 90:6d:d2:59:81:89:71:fb:15:87:28:b0:48:e3:e2: 94:43:a0:2b:23:f9:92:ca:cf:b0:57:cc:22:25:bd: b5:a2:4e:e1:76:fb:57:83:0d:28:4a:55:b0:3b:8d: 18:1a:9a:ac:63:63:57:db:28:7a:d4:61:bb:ab:c3: 17:ef:60:6f:76:8a:2f:49:0c:c1:d9:84:35:b4:dc: 29:97:55:54:64:22:7e:93:b7:e6:92:01:e4:4f:6a: 41:c4:60:00:a5:0d:4d:11:ce:01:60:26:e3:e3:2d: 2b:75:d6:ec:62:df:13:e5:5b:51:3b:3e:c0:3e:fe: 7f:f7:d0:2c:52:de:92:8c:1f:ca:de:a6:cd:8f:46: 5a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D8:FF:02:2B:45:BF:81:15:27:BE:DD:CD:F5:12:06:DC:23:E1:2A X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS214483.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.177.226.0/24 177.177.232.0/24 Signature Algorithm: sha256WithRSAEncryption 94:b9:ba:db:e7:eb:fb:26:70:bf:90:38:6c:84:1d:1f:4f:08: 16:3d:e6:3f:43:c0:4f:04:0c:23:70:99:a0:03:2e:83:fb:9d: af:40:0a:fa:cb:bb:1d:6e:02:73:78:88:b5:15:15:a2:e4:d5: a5:af:8a:6a:e2:84:9d:8b:43:be:04:ea:d9:68:f0:7a:c4:6c: c7:38:d7:19:65:5f:b8:f1:34:31:0f:ec:ca:ff:30:d7:65:49: 3e:23:22:1e:9c:7a:04:55:01:83:8c:7d:52:55:b3:26:69:9f: cb:a6:d4:16:22:89:df:d2:bd:93:c8:9b:39:0f:44:9b:e2:53: 2a:59:3f:12:39:c6:37:e5:77:36:6b:39:7f:7b:3b:57:f7:75: f3:2c:4a:42:c5:a2:b3:b5:e0:68:11:9e:68:17:97:f8:17:76: 3e:54:72:0a:25:69:fc:ac:d3:4e:8e:34:cc:95:40:57:6c:34: 3f:43:d6:ed:04:c9:05:04:b2:15:92:67:b3:5c:ce:6c:8b:0a: 1e:55:35:c7:33:22:c5:e4:eb:f2:41:96:b0:60:35:3f:ad:73: ec:05:2f:ca:96:50:2a:b4:91:43:43:35:40:20:74:7e:41:ff: 9d:f9:32:49:46:ef:14:b8:15:d6:62:5b:a7:51:6c:52:6b:29: 62:f0:88:70 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUTmDqWF0gE/xuxUxE4q93j4x4BfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMTMwMDMyNDNaFw0yNzEwMTIwMDM3NDNaMDMxMTAvBgNV BAMTKDY2RDhGRjAyMkI0NUJGODExNTI3QkVERENERjUxMjA2REMyM0UxMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcJSIo8LXnDfK8lM1U/FXSwppa WlyYj+Yk0tMtyBXMwmDBaXQQ9n/illqre/WB5k3fjFkIIrPhiWUbivYRQYD0u+IX Ns4OaEez8jE+qbjZe8NmZFvsG85IiEWhTvfEy/QTyCVyFyF9uY0EqeXgZH7QHdk5 3nnqgZBt0lmBiXH7FYcosEjj4pRDoCsj+ZLKz7BXzCIlvbWiTuF2+1eDDShKVbA7 jRgamqxjY1fbKHrUYburwxfvYG92ii9JDMHZhDW03CmXVVRkIn6Tt+aSAeRPakHE YAClDU0RzgFgJuPjLSt11uxi3xPlW1E7PsA+/n/30CxS3pKMH8reps2PRlpxAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUZtj/AitFv4EVJ77dzfUSBtwj4SowHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMyMTQ0ODMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBACxseIDBACxsegwDQYJKoZIhvcNAQELBQADggEBAJS5utvn6/smcL+Q OGyEHR9PCBY95j9DwE8EDCNwmaADLoP7na9ACvrLux1uAnN4iLUVFaLk1aWvimri hJ2LQ74E6tlo8HrEbMc41xllX7jxNDEP7Mr/MNdlST4jIh6cegRVAYOMfVJVsyZp n8um1BYiid/SvZPImzkPRJviUypZPxI5xjfldzZrOX97O1f3dfMsSkLForO14GgR nmgXl/gXdj5Ucgolafys006ONMyVQFdsND9D1u0EyQUEshWSZ7NczmyLCh5VNccz IsXk6/JBlrBgNT+tc+wFL8qWUCq0kUNDNUAgdH5B/535MklG7xS4FdZiW6dRbFJr KWLwiHA= -----END CERTIFICATE-----Generated at Thu Nov 5 14:17:50 2026 by rpki-client