$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS218885.roa File: AS218885.roa (raw, json) Hash identifier: lmbftI7uPwX2re286SXzaYJgk2ze0TG0pJEe3MwdD44= Subject key identifier: 5D:2E:31:CB:80:97:BF:FE:6C:C0:6F:D6:D1:5B:BB:63:CB:D4:15:CA Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 51254631DCEEFAC53794F69D592427D38AC0B55F Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS218885.roa Signing time: Fri 11 Sep 2026 08:13:10 +0000 ROA not before: Fri 11 Sep 2026 08:08:10 +0000 ROA not after: Fri 10 Sep 2027 08:13:10 +0000 asID: 218885 IP address blocks: 177.177.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 04:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:25:46:31:dc:ee:fa:c5:37:94:f6:9d:59:24:27:d3:8a:c0:b5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 11 08:08:10 2026 GMT Not After : Sep 10 08:13:10 2027 GMT Subject: CN=5D2E31CB8097BFFE6CC06FD6D15BBB63CBD415CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:51:9a:8b:8f:1c:64:79:9e:2e:e3:e8:f1:86: 1c:19:68:2d:f5:5d:cd:a9:d3:96:a9:d2:60:d2:db: d2:d2:75:1e:80:45:5b:cf:ed:60:c3:b9:2e:34:6b: 27:5f:12:e9:77:94:41:2c:44:c0:c1:13:c7:b1:69: b2:8a:cb:15:73:a8:e3:c3:e3:61:f1:c7:1d:e0:67: 02:f7:51:fb:86:cd:1b:a9:57:91:6d:bf:ce:f8:fe: 0a:60:59:e3:5c:e6:9d:f6:9e:cc:5d:7b:89:7c:1a: 66:19:c8:a9:67:63:7e:70:9a:85:17:54:aa:11:c8: 01:5d:63:76:ed:dd:2b:20:26:a0:aa:3c:83:ad:9e: e7:9b:d3:5f:65:97:e2:1e:fd:01:31:8c:77:d2:ec: aa:05:4e:c1:bf:3a:1c:84:be:2b:cb:54:07:ed:0c: e0:d8:e8:53:01:00:f5:a1:a7:2e:da:d1:61:49:2a: 20:85:c3:ef:61:15:9e:26:a5:1a:3b:09:5f:9d:0b: 19:99:38:bc:cb:fc:2b:13:1b:1f:99:3a:2f:7f:73: cd:6f:e4:d2:13:31:d2:04:1b:57:ee:00:5e:a4:bf: 9b:f6:06:50:22:8b:13:cd:f5:73:8e:c5:c0:a3:33: 96:98:54:d0:5a:45:fa:e4:f7:5d:75:5d:cf:c0:41: cd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2E:31:CB:80:97:BF:FE:6C:C0:6F:D6:D1:5B:BB:63:CB:D4:15:CA X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS218885.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.177.255.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:8c:6c:fd:7a:ac:59:db:10:27:b6:ce:e2:12:ea:f2:27:b8: 63:24:25:e6:00:3c:78:fb:4a:86:d3:ac:d5:12:fb:a4:c4:32: cf:41:2c:7a:01:8d:88:55:44:3b:72:dc:4a:14:71:6d:d4:0c: d0:11:d9:9d:53:d9:28:e0:66:2a:db:98:ad:fc:75:83:29:dd: 61:18:b2:f0:3f:96:db:2f:9c:80:79:eb:87:c2:28:b0:b4:0d: 29:f5:55:db:15:c5:a8:a0:4f:b1:e4:e6:d9:b8:7e:02:62:db: 8d:fa:a9:96:2c:3e:98:81:e4:c1:40:14:57:3a:a3:ff:fd:7d: e6:72:da:db:eb:79:32:8b:5e:54:c0:14:27:37:84:ee:5b:27: 5a:c3:05:67:7c:a0:a3:68:32:e6:d0:30:f5:4c:39:27:0f:3a: 33:fc:b3:81:94:d1:15:d1:72:c3:7e:14:48:3a:8a:33:c2:0a: 98:65:f1:f3:06:07:b4:2f:1e:e2:60:96:c6:44:d1:80:74:67: c0:a7:47:15:1c:c4:9e:d5:c3:85:5b:18:f1:36:60:5f:0b:23: 8b:c3:41:79:f9:19:8c:73:95:d6:08:95:55:2f:75:57:58:62: e9:aa:ee:57:e3:4f:cc:39:39:8c:ea:0f:45:9a:b4:eb:74:f5: e2:82:43:2f -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUUSVGMdzu+sU3lPadWSQn04rAtV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTEwODA4MTBaFw0yNzA5MTAwODEzMTBaMDMxMTAvBgNV BAMTKDVEMkUzMUNCODA5N0JGRkU2Q0MwNkZENkQxNUJCQjYzQ0JENDE1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUZqLjxxkeZ4u4+jxhhwZaC31 Xc2p05ap0mDS29LSdR6ARVvP7WDDuS40aydfEul3lEEsRMDBE8exabKKyxVzqOPD 42Hxxx3gZwL3UfuGzRupV5Ftv874/gpgWeNc5p32nsxde4l8GmYZyKlnY35wmoUX VKoRyAFdY3bt3SsgJqCqPIOtnueb019ll+Ie/QExjHfS7KoFTsG/OhyEvivLVAft DODY6FMBAPWhpy7a0WFJKiCFw+9hFZ4mpRo7CV+dCxmZOLzL/CsTGx+ZOi9/c81v 5NITMdIEG1fuAF6kv5v2BlAiixPN9XOOxcCjM5aYVNBaRfrk9111Xc/AQc1tAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUXS4xy4CXv/5swG/W0Vu7Y8vUFcowHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMyMTg4ODUucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACxsf8wDQYJKoZIhvcNAQELBQADggEBADyMbP16rFnbECe2zuIS6vIn uGMkJeYAPHj7SobTrNUS+6TEMs9BLHoBjYhVRDty3EoUcW3UDNAR2Z1T2SjgZirb mK38dYMp3WEYsvA/ltsvnIB564fCKLC0DSn1VdsVxaigT7Hk5tm4fgJi2436qZYs PpiB5MFAFFc6o//9feZy2tvreTKLXlTAFCc3hO5bJ1rDBWd8oKNoMubQMPVMOScP OjP8s4GU0RXRcsN+FEg6ijPCCphl8fMGB7QvHuJglsZE0YB0Z8CnRxUcxJ7Vw4Vb GPE2YF8LI4vDQXn5GYxzldYIlVUvdVdYYumq7lfjT8w5OYzqD0WatOt09eKCQy8= -----END CERTIFICATE-----Generated at Tue Sep 22 18:34:27 2026 by rpki-client