$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS214483.roa File: AS214483.roa (raw, json) Hash identifier: SPUe9FhPSX3hGSxN9xvgPo8hyrTOCSHNQfthlMB7BGY= Subject key identifier: 54:35:FF:F6:55:64:54:7D:24:08:5D:0B:D6:1F:4B:40:49:32:50:42 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 42E88763D94F37AB2BE856C700BEE6EB88CD1149 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS214483.roa Signing time: Sun 13 Sep 2026 00:37:51 +0000 ROA not before: Sun 13 Sep 2026 00:32:51 +0000 ROA not after: Sun 12 Sep 2027 00:37:51 +0000 asID: 214483 IP address blocks: 177.177.226.0/24 maxlen: 24 177.177.230.0/24 maxlen: 24 177.177.232.0/24 maxlen: 24 177.177.233.0/24 maxlen: 24 177.177.234.0/24 maxlen: 24 177.177.238.0/24 maxlen: 24 177.177.240.0/24 maxlen: 24 177.177.245.0/24 maxlen: 24 177.177.248.0/24 maxlen: 24 177.177.250.0/24 maxlen: 24 177.177.252.0/24 maxlen: 24 177.177.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 00:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e8:87:63:d9:4f:37:ab:2b:e8:56:c7:00:be:e6:eb:88:cd:11:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 13 00:32:51 2026 GMT Not After : Sep 12 00:37:51 2027 GMT Subject: CN=5435FFF65564547D24085D0BD61F4B4049325042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6d:8d:25:0d:fc:5f:c4:50:02:8f:82:01:85: 0d:a8:80:cb:3d:1a:7b:f3:41:27:b2:be:c7:91:43: 83:fb:b5:73:23:19:1f:9e:35:7b:62:85:38:bb:f8: 64:9d:63:d2:e5:f1:da:57:b5:43:cf:d0:ff:8f:2e: f8:4e:53:13:3f:17:67:70:73:53:a8:ec:9b:a4:7b: 25:ea:a1:a0:44:53:01:93:4d:62:c2:4f:7c:f2:55: cc:74:ea:d9:ae:5f:4a:fc:2f:2f:50:55:99:b6:3a: 42:be:7c:79:ec:d1:ef:18:c8:4a:05:84:a3:0f:ea: db:cc:fb:51:25:dd:94:ea:87:11:e7:42:f6:2c:f6: b9:8b:fb:a3:dc:09:6e:32:89:16:99:63:e5:c6:36: f0:b2:61:ef:45:05:13:f5:a2:22:92:c1:07:7b:f7: b0:e1:6f:57:d5:06:0a:d2:a2:68:80:b5:f7:8c:f5: d9:21:2f:03:8d:c1:51:5e:fc:33:61:bd:5d:ab:53: 72:49:16:a9:9a:16:f4:ab:fc:cd:2b:8b:17:57:9c: d3:da:4a:9a:87:d4:8e:6f:06:50:3b:ca:e9:eb:15: fa:94:d4:95:a0:b3:7c:86:2c:27:8e:0d:98:d2:d1: 3c:0d:44:4b:94:bf:ca:41:5f:12:fc:7a:78:a4:95: 7f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:35:FF:F6:55:64:54:7D:24:08:5D:0B:D6:1F:4B:40:49:32:50:42 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS214483.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.177.226.0/24 177.177.230.0/24 177.177.232.0-177.177.234.255 177.177.238.0/24 177.177.240.0/24 177.177.245.0/24 177.177.248.0/24 177.177.250.0/24 177.177.252.0/24 177.177.254.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:96:51:1f:48:a3:00:ad:ea:13:28:0b:65:8f:02:97:34:0a: 7a:27:48:b6:ed:b3:ec:f1:3c:46:53:a1:0d:14:9f:7e:b7:8b: f8:03:4d:8d:bd:d6:8f:10:db:14:14:50:b2:aa:a3:ea:30:ef: ea:57:e4:ff:16:8a:69:03:c8:6a:e9:02:72:4a:a1:26:4c:84: 0b:6d:84:3a:c8:25:d4:ce:c4:22:ea:96:6e:29:0b:e8:94:ea: 6f:66:82:93:e0:25:1f:f8:c5:dc:e2:6f:70:ee:c1:99:88:0f: 3c:bf:c0:2a:60:26:7f:f3:04:4f:07:b0:11:1b:6a:1b:5e:f1: 4f:fd:8d:7f:36:b5:01:9b:48:35:66:13:2e:b4:bb:db:1e:f2: f4:c6:8c:44:01:08:6a:30:5a:b4:5c:8b:87:22:4b:5f:59:d1: 1e:01:f8:c5:57:d6:98:a3:77:d3:8d:83:ee:c7:ee:b5:d5:77: fb:d0:5a:54:f2:f8:ee:46:54:58:d2:f2:c6:b9:cb:a5:3e:67: c6:5c:f9:59:87:95:b5:fd:f0:3f:ec:93:e7:77:9f:a5:b1:65: 7f:14:63:6f:1a:8d:f7:95:fd:d2:91:1f:47:75:50:c9:f7:49: 1c:29:60:ef:0a:c4:ba:37:98:cd:4c:da:b4:8c:b2:7b:27:6b: 9f:e6:e0:29 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUQuiHY9lPN6sr6FbHAL7m64jNEUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTMwMDMyNTFaFw0yNzA5MTIwMDM3NTFaMDMxMTAvBgNV BAMTKDU0MzVGRkY2NTU2NDU0N0QyNDA4NUQwQkQ2MUY0QjQwNDkzMjUwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTbY0lDfxfxFACj4IBhQ2ogMs9 GnvzQSeyvseRQ4P7tXMjGR+eNXtihTi7+GSdY9Ll8dpXtUPP0P+PLvhOUxM/F2dw c1Oo7JukeyXqoaBEUwGTTWLCT3zyVcx06tmuX0r8Ly9QVZm2OkK+fHns0e8YyEoF hKMP6tvM+1El3ZTqhxHnQvYs9rmL+6PcCW4yiRaZY+XGNvCyYe9FBRP1oiKSwQd7 97Dhb1fVBgrSomiAtfeM9dkhLwONwVFe/DNhvV2rU3JJFqmaFvSr/M0rixdXnNPa SpqH1I5vBlA7yunrFfqU1JWgs3yGLCeODZjS0TwNREuUv8pBXxL8eniklX+/AgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUVDX/9lVkVH0kCF0L1h9LQEkyUEIwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMyMTQ0ODMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYIKwYBBQUHAQcBAf8ETjBMMEoE AgABMEQDBACxseIDBACxseYwDAMEA7Gx6AMEALGx6gMEALGx7gMEALGx8AMEALGx 9QMEALGx+AMEALGx+gMEALGx/AMEALGx/jANBgkqhkiG9w0BAQsFAAOCAQEAm5ZR H0ijAK3qEygLZY8ClzQKeidItu2z7PE8RlOhDRSffreL+ANNjb3WjxDbFBRQsqqj 6jDv6lfk/xaKaQPIaukCckqhJkyEC22EOsgl1M7EIuqWbikL6JTqb2aCk+AlH/jF 3OJvcO7BmYgPPL/AKmAmf/METwewERtqG17xT/2Nfza1AZtINWYTLrS72x7y9MaM RAEIajBatFyLhyJLX1nRHgH4xVfWmKN3042D7sfutdV3+9BaVPL47kZUWNLyxrnL pT5nxlz5WYeVtf3wP+yT53efpbFlfxRjbxqN95X90pEfR3VQyfdJHClg7wrEujeY zUzatIyyeydrn+bgKQ== -----END CERTIFICATE-----Generated at Sun Sep 20 14:28:51 2026 by rpki-client