$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS219393.roa File: AS219393.roa (raw, json) Hash identifier: FRpsVXspbxo6y6if4zWnPXjaRoZlpeYy0MqZvoAoVNo= Subject key identifier: FA:48:8F:C5:3C:41:20:F9:B8:1A:6E:91:20:5A:11:43:07:40:0C:77 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 5B20540F558B6733BA4FB671AF311C11AE2F0146 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS219393.roa Signing time: Fri 11 Sep 2026 08:13:10 +0000 ROA not before: Fri 11 Sep 2026 08:08:10 +0000 ROA not after: Fri 10 Sep 2027 08:13:10 +0000 asID: 219393 IP address blocks: 152.237.238.0/24 maxlen: 24 152.237.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 00:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:20:54:0f:55:8b:67:33:ba:4f:b6:71:af:31:1c:11:ae:2f:01:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 11 08:08:10 2026 GMT Not After : Sep 10 08:13:10 2027 GMT Subject: CN=FA488FC53C4120F9B81A6E91205A114307400C77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:be:42:6d:a0:41:b9:39:0f:90:6d:38:39:36: c1:e0:f6:91:98:ff:82:00:9a:d0:54:49:c9:9c:96: 70:8e:9a:1b:b9:7f:2a:31:03:5e:5f:33:fd:a7:a8: 93:54:e2:9c:b7:90:55:c9:a5:d9:ae:8a:08:b9:29: 1b:23:54:27:82:21:3a:83:7a:9a:b8:e3:05:03:86: a8:69:61:3f:1a:d1:b2:e0:d4:ab:a6:9c:e7:00:05: c4:a0:2a:49:f0:85:73:c9:d1:1d:2e:8a:d2:a9:23: ef:e3:b5:79:a7:70:24:62:fa:4c:de:e0:c0:14:00: d9:e0:d7:66:a6:32:88:35:63:bf:17:7b:3f:ca:a9: d6:6e:58:8b:28:f8:23:fe:ee:8c:de:92:05:93:d3: a5:36:6e:e9:46:29:40:8e:ae:bb:45:5e:23:74:48: 7f:6e:e5:9c:93:2b:1e:ce:99:ad:87:f8:af:35:41: c9:ca:93:f5:c7:11:07:ff:4b:cf:98:5c:95:95:c4: a1:ae:50:99:cc:e2:ee:7a:c3:d8:84:af:80:7b:64: 94:b0:29:8b:e6:46:2f:75:27:a2:be:47:32:4a:8d: dc:33:9c:6f:89:7d:e9:9b:3d:3c:3f:1f:62:3e:34: bb:bd:d1:6f:d6:d2:3b:a3:85:9e:7f:f8:57:a1:ef: 9f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:48:8F:C5:3C:41:20:F9:B8:1A:6E:91:20:5A:11:43:07:40:0C:77 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS219393.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.238.0/24 152.237.240.0/24 Signature Algorithm: sha256WithRSAEncryption 24:ef:76:06:25:bd:44:e8:ef:78:d0:d3:a0:cb:5f:f0:27:70: 2d:4a:79:c8:24:b9:b8:e1:55:d0:a1:41:d4:cf:fc:b4:39:94: 93:a8:ad:66:ca:03:5e:1f:01:70:1f:3a:44:28:62:56:a9:b1: f9:6e:a4:9c:07:ee:61:b6:40:ac:02:65:82:cd:c2:a4:d6:f9: 57:1e:47:a1:57:95:12:7f:c2:a3:cf:b1:ff:6e:91:c6:d7:bb: eb:d0:a0:50:af:37:e4:2f:49:94:6a:44:3d:f3:e6:5b:09:9b: 2a:d3:30:48:83:13:fd:83:88:60:16:77:f3:25:9b:c4:3d:b7: 3f:98:15:2c:36:07:f8:ae:c5:95:d4:35:29:5a:14:8e:80:0e: 40:d9:10:29:24:97:d0:c7:32:70:1f:98:b7:cd:22:f4:29:9f: 6c:cd:2e:2a:f2:b5:4d:1c:d8:d2:20:65:a1:02:bc:70:25:8a: 4c:23:66:79:79:06:b5:52:d0:34:bf:0a:71:c8:d6:24:ab:46: 6a:f3:7d:74:84:9e:2b:44:0c:c2:fd:e3:d5:2e:20:7f:7e:14: 6d:cd:d5:35:ad:ee:a4:7f:f9:5b:d5:22:b3:4e:38:51:b9:a9: 0c:34:a5:c1:13:48:55:80:df:18:a8:88:82:88:67:fb:ff:e1: b8:8b:ac:48 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUWyBUD1WLZzO6T7ZxrzEcEa4vAUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTEwODA4MTBaFw0yNzA5MTAwODEzMTBaMDMxMTAvBgNV BAMTKEZBNDg4RkM1M0M0MTIwRjlCODFBNkU5MTIwNUExMTQzMDc0MDBDNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbvkJtoEG5OQ+QbTg5NsHg9pGY /4IAmtBUScmclnCOmhu5fyoxA15fM/2nqJNU4py3kFXJpdmuigi5KRsjVCeCITqD epq44wUDhqhpYT8a0bLg1KumnOcABcSgKknwhXPJ0R0uitKpI+/jtXmncCRi+kze 4MAUANng12amMog1Y78Xez/KqdZuWIso+CP+7ozekgWT06U2bulGKUCOrrtFXiN0 SH9u5ZyTKx7Oma2H+K81QcnKk/XHEQf/S8+YXJWVxKGuUJnM4u56w9iEr4B7ZJSw KYvmRi91J6K+RzJKjdwznG+JfembPTw/H2I+NLu90W/W0jujhZ5/+Feh75+RAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQU+kiPxTxBIPm4Gm6RIFoRQwdADHcwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMyMTkzOTMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBACY7e4DBACY7fAwDQYJKoZIhvcNAQELBQADggEBACTvdgYlvUTo73jQ 06DLX/AncC1KecgkubjhVdChQdTP/LQ5lJOorWbKA14fAXAfOkQoYlapsflupJwH 7mG2QKwCZYLNwqTW+VceR6FXlRJ/wqPPsf9ukcbXu+vQoFCvN+QvSZRqRD3z5lsJ myrTMEiDE/2DiGAWd/Mlm8Q9tz+YFSw2B/iuxZXUNSlaFI6ADkDZECkkl9DHMnAf mLfNIvQpn2zNLirytU0c2NIgZaECvHAlikwjZnl5BrVS0DS/CnHI1iSrRmrzfXSE nitEDML949UuIH9+FG3N1TWt7qR/+VvVIrNOOFG5qQw0pcETSFWA3xioiIKIZ/v/ 4biLrEg= -----END CERTIFICATE-----Generated at Sun Sep 20 15:44:19 2026 by rpki-client