$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS21840.roa File: AS21840.roa (raw, json) Hash identifier: sUOfAiYdaM80gpangBMV6FhA0LpfgLts35SPQWzB0Cc= Subject key identifier: 70:15:B3:74:E6:7C:86:CC:E6:AD:9C:8C:3A:CA:C7:17:46:24:9D:A0 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 49D90B1E2ABCEBADE1A8B590FCF95DE9594C97F9 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS21840.roa Signing time: Sun 20 Sep 2026 09:42:51 +0000 ROA not before: Sun 20 Sep 2026 09:37:51 +0000 ROA not after: Sun 19 Sep 2027 09:42:51 +0000 asID: 21840 IP address blocks: 201.4.21.0/24 maxlen: 24 201.50.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 09:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d9:0b:1e:2a:bc:eb:ad:e1:a8:b5:90:fc:f9:5d:e9:59:4c:97:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 20 09:37:51 2026 GMT Not After : Sep 19 09:42:51 2027 GMT Subject: CN=7015B374E67C86CCE6AD9C8C3ACAC71746249DA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a0:15:c2:74:44:11:6f:67:2c:bc:27:fc:66: ac:08:fc:d8:3f:8c:a9:87:fb:4b:aa:e3:ab:a6:57: 13:2c:5b:1b:da:26:18:47:c9:d8:7c:4b:f8:05:63: 7d:49:8a:0e:73:ef:a1:c9:e2:fe:0c:e1:f9:a9:60: 3d:98:2b:90:f3:9a:8d:5b:ac:3d:cb:0d:31:c2:ab: d3:42:a7:d6:b6:e4:69:f8:3a:17:d7:d1:d4:e6:30: 30:59:d3:e2:ed:f5:bc:7f:7b:31:be:36:70:37:d4: ba:43:8b:ba:fd:aa:f0:d5:f3:e5:97:a9:a9:9e:8f: 4a:a0:fb:f5:a8:6c:86:b1:be:a0:10:e2:c2:0c:d3: 7a:cf:0c:b6:5f:59:aa:fe:88:4d:db:d5:c2:16:25: ac:fb:21:40:d1:47:26:df:a2:e2:ec:bc:39:96:13: f2:fd:04:e0:e4:a9:a8:34:43:e8:80:59:9f:12:5a: 66:21:39:26:b7:29:59:79:da:da:49:3a:46:d1:19: a5:45:5c:00:54:30:ec:68:5d:48:1d:2a:72:55:68: b3:4b:e2:f3:c1:d8:90:a3:8e:be:23:f2:50:e8:2a: 5d:de:35:0a:ab:de:be:22:72:25:80:b1:4f:6e:1b: 17:66:e5:1a:4b:4b:4a:55:08:65:25:51:52:06:29: ed:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:15:B3:74:E6:7C:86:CC:E6:AD:9C:8C:3A:CA:C7:17:46:24:9D:A0 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS21840.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.4.21.0/24 201.50.23.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:e5:53:47:f1:27:ae:8d:b0:73:d1:e5:ca:97:0b:07:16:de: 0f:d8:9e:66:1a:88:12:5b:be:b8:ed:8b:19:a1:d7:9d:e5:d7: 2d:a5:cb:c7:b4:ba:4c:11:5d:a2:ac:8d:46:4a:0f:53:44:e6: 0f:43:0e:b3:90:dc:73:58:55:17:db:6a:62:ff:2b:dc:e2:c0: b1:2b:af:79:16:d4:90:c2:07:a7:ad:8a:49:5a:54:06:9f:96: ae:64:9d:93:f0:8f:fd:4f:60:ff:e4:dc:60:ce:6f:de:8a:f5: 9a:88:53:b1:1a:8b:e5:59:d4:5f:75:5f:9b:47:36:22:2c:85: e5:9f:08:96:d3:45:2c:79:9b:72:60:c6:14:bb:a6:36:89:48: a1:bd:8b:30:c1:ec:29:1c:8e:c3:1b:e4:85:43:95:bd:83:ee: a2:f9:14:eb:f0:e2:ce:9d:8b:dc:5c:c3:a4:55:60:c6:c9:a9: 77:29:1b:ba:5e:76:9a:2b:38:04:c4:d7:43:dd:55:7a:6f:cf: 56:cb:c5:83:c0:d9:f6:1d:3a:dd:ad:f4:e0:52:bf:e7:c8:18: b9:fb:b6:8d:fe:7a:5e:63:5d:19:7c:76:f7:86:80:72:b8:2a: 87:2e:4c:7a:13:1d:e1:ab:b3:04:db:d5:1f:29:6b:65:2e:a3: 01:72:d5:a4 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUSdkLHiq8663hqLWQ/Pld6VlMl/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MjAwOTM3NTFaFw0yNzA5MTkwOTQyNTFaMDMxMTAvBgNV BAMTKDcwMTVCMzc0RTY3Qzg2Q0NFNkFEOUM4QzNBQ0FDNzE3NDYyNDlEQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9oBXCdEQRb2csvCf8ZqwI/Ng/ jKmH+0uq46umVxMsWxvaJhhHydh8S/gFY31Jig5z76HJ4v4M4fmpYD2YK5Dzmo1b rD3LDTHCq9NCp9a25Gn4OhfX0dTmMDBZ0+Lt9bx/ezG+NnA31LpDi7r9qvDV8+WX qamej0qg+/WobIaxvqAQ4sIM03rPDLZfWar+iE3b1cIWJaz7IUDRRybfouLsvDmW E/L9BODkqag0Q+iAWZ8SWmYhOSa3KVl52tpJOkbRGaVFXABUMOxoXUgdKnJVaLNL 4vPB2JCjjr4j8lDoKl3eNQqr3r4iciWAsU9uGxdm5RpLS0pVCGUlUVIGKe3xAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUcBWzdOZ8hszmrZyMOsrHF0YknaAwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMyMTg0MC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQC AAEwDAMEAMkEFQMEAMkyFzANBgkqhkiG9w0BAQsFAAOCAQEAjuVTR/Enro2wc9Hl ypcLBxbeD9ieZhqIElu+uO2LGaHXneXXLaXLx7S6TBFdoqyNRkoPU0TmD0MOs5Dc c1hVF9tqYv8r3OLAsSuveRbUkMIHp62KSVpUBp+WrmSdk/CP/U9g/+TcYM5v3or1 mohTsRqL5VnUX3Vfm0c2IiyF5Z8IltNFLHmbcmDGFLumNolIob2LMMHsKRyOwxvk hUOVvYPuovkU6/Dizp2L3FzDpFVgxsmpdykbul52mis4BMTXQ91Vem/PVsvFg8DZ 9h063a304FK/58gYufu2jf56XmNdGXx294aAcrgqhy5MehMd4auzBNvVHylrZS6j AXLVpA== -----END CERTIFICATE-----Generated at Sun Sep 20 23:21:38 2026 by rpki-client