
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS219075.roa
File: AS219075.roa (raw, json)
Hash identifier: SEH6ZZMSQrORyAc68/gHpB4jQOs2aITnbB2HEaGJSPg=
Subject key identifier: BD:92:AC:85:9A:FB:D3:BD:77:A8:9C:11:D4:BB:D4:34:AC:0F:7C:06
Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF
Certificate serial: 4129AEF0CA62F2D4CE32EFB347444AFC2C17DE21
Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS219075.roa
Signing time: Fri 23 Oct 2026 09:25:32 +0000
ROA not before: Fri 23 Oct 2026 09:20:32 +0000
ROA not after: Fri 22 Oct 2027 09:25:32 +0000
asID: 219075
IP address blocks: 177.177.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:29:ae:f0:ca:62:f2:d4:ce:32:ef:b3:47:44:4a:fc:2c:17:de:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF
Validity
Not Before: Oct 23 09:20:32 2026 GMT
Not After : Oct 22 09:25:32 2027 GMT
Subject: CN=BD92AC859AFBD3BD77A89C11D4BBD434AC0F7C06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:a4:37:0c:89:a1:18:60:3a:cb:12:d0:2a:
c4:54:9b:59:5d:6b:e6:f6:e1:e6:69:42:0e:93:fc:
97:42:db:99:80:18:84:fa:3a:0d:36:10:70:e4:ab:
09:1f:b2:8d:72:d1:b3:bb:be:21:a5:1e:81:43:92:
39:6f:61:76:3e:65:c8:4a:ac:79:94:07:0d:2d:18:
66:a2:06:c4:05:c3:7f:45:49:56:44:c0:b1:e2:06:
aa:ba:f9:86:bf:45:ef:0e:14:9b:17:95:67:f5:56:
f4:a0:ba:bb:71:0d:f8:51:f5:d1:ff:19:4d:ed:6d:
f6:31:bf:e7:1c:2f:b5:16:76:13:b4:e0:4e:e6:a6:
bd:eb:e7:7e:95:e7:c3:e8:92:29:40:cd:25:8e:57:
72:e0:88:61:b7:9b:93:6a:e0:24:82:24:ca:a4:63:
b8:e6:f3:8d:0c:a8:a6:97:fa:9e:a7:b3:4a:df:4e:
0b:e5:65:ff:d4:90:a5:62:b1:60:6a:ea:e3:41:53:
0b:c2:3d:c2:46:39:48:db:a7:d6:31:d4:a5:67:3f:
30:b4:87:27:ad:01:e7:c1:22:cb:ce:3e:f5:a2:91:
bc:1c:fd:6b:ba:d4:67:13:3a:d7:c8:c9:ea:e2:2c:
bd:d8:33:16:77:f7:d8:d7:e8:58:74:6c:35:43:54:
60:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:92:AC:85:9A:FB:D3:BD:77:A8:9C:11:D4:BB:D4:34:AC:0F:7C:06
X509v3 Authority Key Identifier:
keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS219075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.233.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b6:54:c5:6d:a5:99:00:c1:1b:86:54:da:20:cf:4b:99:43:
74:86:1e:07:00:a8:0f:1e:4e:25:4e:bf:e0:ae:6c:4a:01:2f:
c3:4e:ea:4c:33:07:2f:fd:a3:e4:9e:f7:c7:8d:41:70:e7:c5:
40:49:71:d9:f9:ba:f9:2a:70:60:e4:f7:ce:84:95:ed:f0:46:
7e:b9:e0:c6:bd:c9:4e:bf:69:c4:d4:48:bd:95:42:e2:47:2a:
f0:66:aa:fd:05:70:19:79:b8:60:27:1e:47:45:c9:38:d6:03:
ef:40:7b:af:88:28:89:c0:e9:93:e5:50:c6:7c:1f:18:da:af:
6a:0e:42:08:e1:1a:cb:e2:67:b9:65:a8:9a:d4:3f:7b:40:e7:
55:ee:93:08:be:0d:39:29:a0:93:39:a6:06:08:82:2f:9f:5c:
0c:3c:63:8e:9c:5a:cf:02:26:0c:b9:30:21:cd:02:7c:ea:5e:
51:bb:82:64:92:5b:e2:37:b0:d6:2c:47:cc:3b:4e:58:f1:88:
5d:8b:0d:34:8b:4d:53:18:fa:d8:c2:ea:f1:3a:87:2c:f4:8f:
22:c5:80:60:ea:04:26:cf:bf:e2:03:d4:22:15:6b:b4:1e:fb:
f5:f1:78:60:a8:e3:e0:4b:a5:5e:a7:15:0f:d0:78:4d:b0:fe:
ed:ff:df:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 8 04:18:04 2026 by rpki-client